Skip to content

Bump the maven-dependencies group across 1 directory with 31 updates#449

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-dependencies-1a13e59d2c
Open

Bump the maven-dependencies group across 1 directory with 31 updates#449
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-dependencies-1a13e59d2c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-dependencies group with 30 updates in the / directory:

Package From To
org.axonframework:axon-bom 4.12.1 4.13.1
io.axoniq:axonserver-connector-java 2025.2.0-EAP 2026.0.0
org.axonframework:axon-server-connector 4.12.1 5.0.5
org.axonframework:axon-messaging 4.12.1 5.1.1
org.axonframework:axon-spring-boot-autoconfigure 4.12.1 4.13.1
org.springframework.boot:spring-boot-starter-parent 3.5.6 4.1.0
org.springframework.boot:spring-boot-starter-webflux 3.5.6 4.1.0
org.springframework.boot:spring-boot-maven-plugin 3.5.6 4.1.0
org.springframework.boot:spring-boot-starter 3.5.6 4.1.0
org.springframework.boot:spring-boot-starter-data-jpa 3.5.6 4.1.0
org.springframework.boot:spring-boot-docker-compose 3.5.6 4.1.0
io.projectreactor:reactor-core 3.7.11 3.8.6
org.hibernate:hibernate-core 6.2.6.Final 7.4.1.Final
org.junit.jupiter:junit-jupiter 6.0.0 6.1.0
org.testcontainers:junit-jupiter 1.21.3 1.21.4
org.mockito:mockito-core 5.20.0 5.23.0
org.apache.maven.plugins:maven-surefire-plugin 3.5.4 3.5.6
org.apache.maven.plugins:maven-compiler-plugin 3.14.1 3.15.0
org.jetbrains.kotlin:kotlin-stdlib-jdk8 2.2.20 2.4.0
org.jetbrains.kotlin:kotlin-reflect 2.2.20 2.4.0
org.jetbrains.kotlin:kotlin-maven-allopen 2.2.20 2.4.0
org.jetbrains.kotlin:kotlin-maven-plugin 2.2.20 2.4.0
com.vaadin:vaadin-bom 24.9.2 25.1.7
com.vaadin:vaadin-maven-plugin 24.9.2 25.1.7
org.flywaydb:flyway-core 11.13.2 12.8.1
org.axonframework:axon-framework-bom 5.1.0 5.1.1
io.axoniq.framework:axoniq-framework-bom 5.1.0 5.1.1
org.apache.maven.plugins:maven-failsafe-plugin 3.5.4 3.5.6
com.fasterxml.jackson.core:jackson-annotations 2.20 2.22
org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.13 3.0.3

Updates org.axonframework:axon-bom from 4.12.1 to 4.13.1

Release notes

Sourced from org.axonframework:axon-bom's releases.

Axon Bill of Materials v4.13.1

🛠️ Dependency Upgrade

  • Upgrade Axon Framework version to 4.13.1 #213

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

Axon Bill of Materials v4.13.0

🛠️ Dependency Upgrade

  • Upgrade Axon Framework to 4.13.0 and Axon Server Connector for Java to 2025.2.1 #212

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

Axon Bill of Materials v4.12.3

🛠️ Dependency Upgrade

  • Upgrade AF to 4.12.3 and Connector to 2024.2.5 #210

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

Axon Bill of Materials v4.12.2

🛠️ Dependency Upgrade

  • Upgrade AF to 4.12.2 #209

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

Commits
  • cba8bd0 [maven-release-plugin] prepare release axon-4.13.1
  • a96f50a Merge pull request #213 from AxonFramework/dependency-upgrade/af-4.13.1
  • 4de9abb Upgrade framework version to 4.13.1
  • e6f5d50 [maven-release-plugin] prepare for next development iteration
  • 4e8dfc4 [maven-release-plugin] prepare release axon-4.13.0
  • d9de2ad Merge pull request #212 from AxonFramework/dependency-upgrade/af4.13.0-connec...
  • 74900c2 Upgrade framework version to 4.13.0
  • 906fe34 Upgrade connector version to 4.13.0
  • 297ce5d Merge pull request #211 from jangalinski/patch-2
  • 8745351 Update Maven Central badge in README.md
  • Additional commits viewable in compare view

Updates io.axoniq:axonserver-connector-java from 2025.2.0-EAP to 2026.0.0

Release notes

Sourced from io.axoniq:axonserver-connector-java's releases.

Axon Server Connector for Java version 2026.0.0

⭐ Features

  • Upgrade axonserver API usage to 2026.0.0-snapshot #483

📈 Enhancements

  • Port 2025.2.2 to 2026.0.0 #485
  • Add clientId header to all GRPC calls #477

🛠️ Dependency Upgrade

  • Upgrade the Axon Server API version to 2026.0.0 #486
  • Bump the maven-dependencies group with 3 updates #484
  • Bump org.apache.maven.plugins:maven-resources-plugin from 3.4.0 to 3.5.0 in the maven-dependencies group #482
  • Bump the maven-dependencies group with 3 updates #480
  • Bump the maven-dependencies group across 1 directory with 6 updates #479
  • Bump the maven-dependencies group across 1 directory with 5 updates #478
  • Bump actions/setup-java from 5.1.0 to 5.2.0 in the github-dependencies group #475
  • Bump the maven-dependencies group with 3 updates #471
  • Bump the maven-dependencies group with 4 updates #470
  • Bump org.apache.logging.log4j:log4j-core from 2.25.2 to 2.25.3 #469
  • Bump the maven-dependencies group with 4 updates #468
  • Bump the maven-dependencies group with 2 updates #467
  • Bump actions/setup-java from 5.0.0 to 5.1.0 in the github-dependencies group #466
  • Bump the maven-dependencies group with 3 updates #465
  • Bump actions/checkout from 5 to 6 in the github-dependencies group #457

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

Axon Server Connector for Java version 2025.2.2

📈 Enhancements

  • Update the issue templates #464

🪲 Bug Fixes

  • #461 Fix logging on channel registration #462

🛠️ Dependency Upgrade

... (truncated)

Commits
  • 82ffc42 [maven-release-plugin] prepare release 2026.0.0
  • 5554b3d Merge pull request #486 from AxonIQ/dependency-upgrade/api-version-2026.0.0
  • b6385fb Upgrade the Axon Server API version to 2026.0.0
  • 5333a56 Merge pull request #485 from AxonIQ/enhancement/port-2025.2.2
  • 4e6a150 Fix incorrect auto merge resolution
  • fbc5a95 Merge branch 'connector-2025.2.x' into enhancement/port-2025.2.2
  • 613179c [maven-release-plugin] prepare for next development iteration
  • b6a395f [maven-release-plugin] prepare release 2025.2.2
  • c44a938 Merge pull request #484 from AxonIQ/dependabot/maven/maven-dependencies-fda89...
  • 8d38243 Bump the maven-dependencies group with 3 updates
  • Additional commits viewable in compare view

Updates org.axonframework:axon-server-connector from 4.12.1 to 5.0.5

Updates org.axonframework:axon-messaging from 4.12.1 to 5.1.1

Updates org.axonframework:axon-spring-boot-autoconfigure from 4.12.1 to 4.13.1

Updates org.springframework.boot:spring-boot-starter-parent from 3.5.6 to 4.1.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.1.0

Full release notes for Spring Boot 4.1 are available on the wiki.

⭐ New Features

  • Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #50211
  • Reduce memory consumption when repeatedly calling WritableJson.toByteArray #49428

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50747
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50745
  • Embedded LDAP SSL should not be enabled when its bundle is empty #50700
  • InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 #50668
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50645
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50635
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50633
  • Configuration property metadata includes incorrect class references #50632
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50618
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50612
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50610
  • SpringJtaPlatform should have been deprecated since 4.1.0-M3 #50592
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50510
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50417
  • Created StackTracePrinter instances have no access to the Environment #50414
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50412
  • Buildpack module does not validate long-to-int casts #50410
  • Gradle gRPC support fails if protobuf-java dependency is used instead of protobuf-java-util #50405
  • GraphQL WebSocket support does not configure allowed origins #50394
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50298
  • Meter registries are not removed from the global registry when the context is closed #50287
  • DataSourceBuilder cannot derive a DataSource from a lazy connection proxy #50271
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50266
  • Bean definitions can be added with an initializer before setAllowBeanDefinitionOverriding is called #50264
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50261
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50258
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50234
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50228
  • Missing dependency management for spring-boot-web-server-test #50224
  • Spring Batch support for MongoDB modules are not included in dependency management #50223
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50216
  • GrpcServerHealthScheduler is not started in servlet environments #50209
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50204

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50647
  • Document SSL reloading with Let's Encrypt #50630
  • Remove the use of Optional from Data Neo4j repository examples #50622
  • Fix typos in documentation #50620

... (truncated)

Commits

Updates org.springframework.boot:spring-boot-starter-webflux from 3.5.6 to 4.1.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-webflux's releases.

v4.1.0

Full release notes for Spring Boot 4.1 are available on the wiki.

⭐ New Features

  • Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #50211
  • Reduce memory consumption when repeatedly calling WritableJson.toByteArray #49428

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50747
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50745
  • Embedded LDAP SSL should not be enabled when its bundle is empty #50700
  • InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 #50668
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50645
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50635
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50633
  • Configuration property metadata includes incorrect class references #50632
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50618
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50612
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50610
  • SpringJtaPlatform should have been deprecated since 4.1.0-M3 #50592
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50510
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50417
  • Created StackTracePrinter instances have no access to the Environment #50414
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50412
  • Buildpack module does not validate long-to-int casts #50410
  • Gradle gRPC support fails if protobuf-java dependency is used instead of protobuf-java-util #50405
  • GraphQL WebSocket support does not configure allowed origins #50394
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50298
  • Meter registries are not removed from the global registry when the context is closed #50287
  • DataSourceBuilder cannot derive a DataSource from a lazy connection proxy #50271
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50266
  • Bean definitions can be added with an initializer before setAllowBeanDefinitionOverriding is called #50264
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50261
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50258
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50234
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50228
  • Missing dependency management for spring-boot-web-server-test #50224
  • Spring Batch support for MongoDB modules are not included in dependency management #50223
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50216
  • GrpcServerHealthScheduler is not started in servlet environments #50209
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50204

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50647
  • Document SSL reloading with Let's Encrypt #50630
  • Remove the use of Optional from Data Neo4j repository examples #50622
  • Fix typos in documentation #50620

... (truncated)

Commits

Updates org.springframework.boot:spring-boot-maven-plugin from 3.5.6 to 4.1.0

Release notes

Sourced from org.springframework.boot:spring-boot-maven-plugin's releases.

v4.1.0

Full release notes for Spring Boot 4.1 are available on the wiki.

⭐ New Features

  • Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #50211
  • Reduce memory consumption when repeatedly calling WritableJson.toByteArray #49428

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50747
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50745
  • Embedded LDAP SSL should not be enabled when its bundle is empty #50700
  • InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 #50668
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50645
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50635
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50633
  • Configuration property metadata includes incorrect class references #50632
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50618
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50612
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50610
  • SpringJtaPlatform should have been deprecated since 4.1.0-M3 #50592
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50510
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50417
  • Created StackTracePrinter instances have no access to the Environment #50414
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50412
  • Buildpack module does not validate long-to-int casts #50410
  • Gradle gRPC support fails if protobuf-java dependency is used instead of protobuf-java-util #50405
  • GraphQL WebSocket support does not configure allowed origins #50394
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50298
  • Meter registries are not removed from the global registry when the context is closed #50287
  • DataSourceBuilder cannot derive a DataSource from a lazy connection proxy #50271
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50266
  • Bean definitions can be added with an initializer before setAllowBeanDefinitionOverriding is called #50264
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50261
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50258
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50234
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50228
  • Missing dependency management for spring-boot-web-server-test #50224
  • Spring Batch support for MongoDB modules are not included in dependency management #50223
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50216
  • GrpcServerHealthScheduler is not started in servlet environments #50209
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50204

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50647
  • Document SSL reloading with Let's Encrypt #50630
  • Remove the use of Optional from Data Neo4j repository examples #50622
  • Fix typos in documentation #50620

... (truncated)

Commits

Updates org.springframework.boot:spring-boot-starter from 3.5.6 to 4.1.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter's releases.

v4.1.0

Full release notes for Spring Boot 4.1 are available on the wiki.

⭐ New Features

  • Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #50211
  • Reduce memory consumption when repeatedly calling WritableJson.toByteArray #49428

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50747
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50745
  • Embedded LDAP SSL should not be enabled when its bundle is empty #50700
  • InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 #50668
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50645
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50635
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50633
  • Configuration property metadata includes incorrect class references #50632
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50618
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50612
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50610
  • SpringJtaPlatform should have been deprecated since 4.1.0-M3 #50592
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50510
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50417
  • Created StackTracePrinter instances have no access to the Environment #50414
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50412
  • Buildpack module does not validate long-to-int casts #50410
  • Gradle gRPC support fails if protobuf-java dependency is used instead of protobuf-java-util #50405
  • GraphQL WebSocket support does not configure allowed origins #50394
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50298
  • Meter registries are not removed from the global registry when the context is closed #50287
  • DataSourceBuilder cannot derive a DataSource from a lazy connection proxy #50271
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50266
  • Bean definitions can be added with an initializer before setAllowBeanDefinitionOverriding is called #50264
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50261
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50258
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50234
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50228
  • Missing dependency management for spring-boot-web-server-test #50224
  • Spring Batch support for MongoDB modules are not included in dependency management #50223
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50216
  • GrpcServerHealthScheduler is not started in servlet environments #50209
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50204

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50647
  • Document SSL reloading with Let's Encrypt #50630
  • Remove the use of Optional from Data Neo4j repository examples #50622
  • Fix typos in documentation #50620

... (truncated)

Commits

Updates org.springframework.boot:spring-boot-starter-data-jpa from 3.5.6 to 4.1.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-data-jpa's releases.

v4.1.0

Full release notes for Spring Boot 4.1 are available on the wiki.

⭐ New Features

  • Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #50211
  • Reduce memory consumption when repeatedly calling WritableJson.toByteArray #49428

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50747
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50745
  • Embedded LDAP SSL should not be enabled when its bundle is empty #50700
  • InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 #50668
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50645
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50635
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50633
  • Configuration property metadata includes incorrect class references #50632
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50618
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50612
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50610
  • SpringJtaPlatform should have been deprecated since 4.1.0-M3 #50592
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50510
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50417
  • Created StackTracePrinter instances have no access to the Environment #50414
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50412
  • Buildpack module does not validate long-to-int casts #50410
  • Gradle gRPC support fails if protobuf-java dependency is used instead of protobuf-java-util #50405
  • GraphQL WebSocket support does not configure allowed origins #50394
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50298
  • Meter registries are not removed from the global registry when the context is closed #50287
  • DataSourceBuilder cannot derive a DataSource from a lazy connection proxy #50271
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50266
  • Bean definitions can be added with an initializer before setAllowBeanDefinitionOverriding is called #50264
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50261
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50258
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50234
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50228
  • Missing dependency management for spring-boot-web-server-test #50224
  • Spring Batch support for MongoDB modules are not included in dependency management #50223
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50216
  • GrpcServerHealthScheduler is not started in servlet environments #50209
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50204

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50647
  • Document SSL reloading with Let's Encrypt #50630
  • Remove the use of Optional from Data Neo4j repository examples #50622
  • Fix typos in documentation #50620

... (truncated)

Commits

Updates org.springframework.boot:spring-boot-docker-compose from 3.5.6 to 4.1.0

Release notes

Sourced from org.springframework.boot:spring-boot-docker-compose's releases.

v4.1.0

Full release notes for Spring Boot 4.1 are available on the wiki.

⭐ New Features

  • Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #50211
  • Reduce memory consumption when repeatedly calling WritableJson.toByteArray #49428

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50747
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50745
  • Embedded LDAP SSL should not be enabled when its bundle is empty #50700
  • InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 #50668
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50645
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50635
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50633
  • Configuration property metadata includes incorrect class references #50632
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50618
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50612
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50610<...

    Description has been truncated

@dependabot
Bump the maven-dependencies group across 1 directory with 31 updates
f833d2f 
Bumps the maven-dependencies group with 30 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.axonframework:axon-bom](https://github.com/AxonFramework/axon-bom) | `4.12.1` | `4.13.1` |
| [io.axoniq:axonserver-connector-java](https://github.com/AxonIQ/axonserver-connector-java) | `2025.2.0-EAP` | `2026.0.0` |
| org.axonframework:axon-server-connector | `4.12.1` | `5.0.5` |
| org.axonframework:axon-messaging | `4.12.1` | `5.1.1` |
| org.axonframework:axon-spring-boot-autoconfigure | `4.12.1` | `4.13.1` |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `3.5.6` | `4.1.0` |
| [org.springframework.boot:spring-boot-starter-webflux](https://github.com/spring-projects/spring-boot) | `3.5.6` | `4.1.0` |
| [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) | `3.5.6` | `4.1.0` |
| [org.springframework.boot:spring-boot-starter](https://github.com/spring-projects/spring-boot) | `3.5.6` | `4.1.0` |
| [org.springframework.boot:spring-boot-starter-data-jpa](https://github.com/spring-projects/spring-boot) | `3.5.6` | `4.1.0` |
| [org.springframework.boot:spring-boot-docker-compose](https://github.com/spring-projects/spring-boot) | `3.5.6` | `4.1.0` |
| [io.projectreactor:reactor-core](https://github.com/reactor/reactor-core) | `3.7.11` | `3.8.6` |
| [org.hibernate:hibernate-core](https://github.com/hibernate/hibernate-orm) | `6.2.6.Final` | `7.4.1.Final` |
| [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `6.0.0` | `6.1.0` |
| [org.testcontainers:junit-jupiter](https://github.com/testcontainers/testcontainers-java) | `1.21.3` | `1.21.4` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.20.0` | `5.23.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.4` | `3.5.6` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.1` | `3.15.0` |
| [org.jetbrains.kotlin:kotlin-stdlib-jdk8](https://github.com/JetBrains/kotlin) | `2.2.20` | `2.4.0` |
| [org.jetbrains.kotlin:kotlin-reflect](https://github.com/JetBrains/kotlin) | `2.2.20` | `2.4.0` |
| org.jetbrains.kotlin:kotlin-maven-allopen | `2.2.20` | `2.4.0` |
| org.jetbrains.kotlin:kotlin-maven-plugin | `2.2.20` | `2.4.0` |
| com.vaadin:vaadin-bom | `24.9.2` | `25.1.7` |
| [com.vaadin:vaadin-maven-plugin](https://github.com/vaadin/platform) | `24.9.2` | `25.1.7` |
| org.flywaydb:flyway-core | `11.13.2` | `12.8.1` |
| [org.axonframework:axon-framework-bom](https://github.com/AxonFramework/AxonFramework) | `5.1.0` | `5.1.1` |
| io.axoniq.framework:axoniq-framework-bom | `5.1.0` | `5.1.1` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.4` | `3.5.6` |
| [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson) | `2.20` | `2.22` |
| [org.springdoc:springdoc-openapi-starter-webmvc-ui](https://github.com/springdoc/springdoc-openapi) | `2.8.13` | `3.0.3` |



Updates `org.axonframework:axon-bom` from 4.12.1 to 4.13.1
- [Release notes](https://github.com/AxonFramework/axon-bom/releases)
- [Commits](AxonFramework/axon-bom@axon-4.12.1...axon-4.13.1)

Updates `io.axoniq:axonserver-connector-java` from 2025.2.0-EAP to 2026.0.0
- [Release notes](https://github.com/AxonIQ/axonserver-connector-java/releases)
- [Commits](AxonIQ/axonserver-connector-java@2025.2.0-EAP...2026.0.0)

Updates `org.axonframework:axon-server-connector` from 4.12.1 to 5.0.5

Updates `org.axonframework:axon-messaging` from 4.12.1 to 5.1.1

Updates `org.axonframework:axon-spring-boot-autoconfigure` from 4.12.1 to 4.13.1

Updates `org.springframework.boot:spring-boot-starter-parent` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `org.springframework.boot:spring-boot-starter-webflux` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `org.springframework.boot:spring-boot-starter` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `org.springframework.boot:spring-boot-starter-data-jpa` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `org.springframework.boot:spring-boot-docker-compose` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `org.springframework.boot:spring-boot-starter-webflux` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `io.projectreactor:reactor-core` from 3.7.11 to 3.8.6
- [Release notes](https://github.com/reactor/reactor-core/releases)
- [Commits](reactor/reactor-core@v3.7.11...v3.8.6)

Updates `org.hibernate:hibernate-core` from 6.2.6.Final to 7.4.1.Final
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.1/changelog.txt)
- [Commits](hibernate/hibernate-orm@6.2.6...7.4.1)

Updates `org.junit.jupiter:junit-jupiter` from 6.0.0 to 6.1.0
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.0...r6.1.0)

Updates `org.testcontainers:junit-jupiter` from 1.21.3 to 1.21.4
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.21.3...1.21.4)

Updates `org.mockito:mockito-core` from 5.20.0 to 5.23.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.20.0...v5.23.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.4 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.4...surefire-3.5.6)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.1 to 3.15.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.1...maven-compiler-plugin-3.15.0)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `org.springframework.boot:spring-boot-starter` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `org.jetbrains.kotlin:kotlin-stdlib-jdk8` from 2.2.20 to 2.4.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.20...v2.4.0)

Updates `org.jetbrains.kotlin:kotlin-reflect` from 2.2.20 to 2.4.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.20...v2.4.0)

Updates `org.jetbrains.kotlin:kotlin-maven-allopen` from 2.2.20 to 2.4.0

Updates `org.jetbrains.kotlin:kotlin-reflect` from 2.2.20 to 2.4.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.20...v2.4.0)

Updates `org.jetbrains.kotlin:kotlin-maven-allopen` from 2.2.20 to 2.4.0

Updates `org.jetbrains.kotlin:kotlin-maven-plugin` from 2.2.20 to 2.4.0

Updates `com.vaadin:vaadin-bom` from 24.9.2 to 25.1.7

Updates `com.vaadin:vaadin-maven-plugin` from 24.9.2 to 25.1.7
- [Release notes](https://github.com/vaadin/platform/releases)
- [Commits](vaadin/platform@24.9.2...25.1.7)

Updates `org.springframework.boot:spring-boot-starter-data-jpa` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `org.flywaydb:flyway-core` from 11.13.2 to 12.8.1

Updates `com.vaadin:vaadin-maven-plugin` from 24.9.2 to 25.1.7
- [Release notes](https://github.com/vaadin/platform/releases)
- [Commits](vaadin/platform@24.9.2...25.1.7)

Updates `org.springframework.boot:spring-boot-dependencies` from 4.0.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.6...v4.1.0)

Updates `org.axonframework:axon-framework-bom` from 5.1.0 to 5.1.1
- [Release notes](https://github.com/AxonFramework/AxonFramework/releases)
- [Changelog](https://github.com/AxonIQ/AxonFramework/blob/main/docs/changes-to-process.md)
- [Commits](AxonIQ/AxonFramework@axon-5.1.0...axon-5.1.1)

Updates `io.axoniq.framework:axoniq-framework-bom` from 5.1.0 to 5.1.1

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.4 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.4...surefire-3.5.6)

Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.20 to 2.22
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `org.springframework.boot:spring-boot-docker-compose` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `org.springdoc:springdoc-openapi-starter-webmvc-ui` from 2.8.13 to 3.0.3
- [Release notes](https://github.com/springdoc/springdoc-openapi/releases)
- [Changelog](https://github.com/springdoc/springdoc-openapi/blob/v3.0.3/CHANGELOG.md)
- [Commits](springdoc/springdoc-openapi@v2.8.13...v3.0.3)

---
updated-dependencies:
- dependency-name: org.axonframework:axon-bom
  dependency-version: 4.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: io.axoniq:axonserver-connector-java
  dependency-version: 2026.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.axonframework:axon-server-connector
  dependency-version: 5.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.axonframework:axon-messaging
  dependency-version: 5.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.axonframework:axon-spring-boot-autoconfigure
  dependency-version: 4.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-webflux
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-data-jpa
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-docker-compose
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-webflux
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: io.projectreactor:reactor-core
  dependency-version: 3.8.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.hibernate:hibernate-core
  dependency-version: 7.4.1.Final
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.testcontainers:junit-jupiter
  dependency-version: 1.21.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-stdlib-jdk8
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-reflect
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-maven-allopen
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-reflect
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-maven-allopen
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-maven-plugin
  dependency-version: 2.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.vaadin:vaadin-bom
  dependency-version: 25.1.7
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: com.vaadin:vaadin-maven-plugin
  dependency-version: 25.1.7
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-data-jpa
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.flywaydb:flyway-core
  dependency-version: 12.8.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: com.vaadin:vaadin-maven-plugin
  dependency-version: 25.1.7
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.axonframework:axon-framework-bom
  dependency-version: 5.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: io.axoniq.framework:axoniq-framework-bom
  dependency-version: 5.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-annotations
  dependency-version: '2.22'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-docker-compose
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springdoc:springdoc-openapi-starter-webmvc-ui
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot requested a review from smcvb as a code owner June 14, 2026 05:04
@smcvb

smcvb commented Jun 15, 2026

Copy link
Copy Markdown
Collaborator

We need to upgrade the samples to AF5 before this can be merged.

@smcvb smcvb self-assigned this Jun 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

@smcvb smcvb Awaiting requested review from smcvb smcvb is a code owner

Assignees

@smcvb smcvb

Labels

Priority 1: Must Status: On Hold Type: Dependency Upgrade

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@smcvb