From 2fb437717a1985732a4e4ef154a24323cbd1c425 Mon Sep 17 00:00:00 2001
From: MaxSiominDev <maxsiomindev@gmail.com>
Date: Fri, 3 Jul 2026 02:38:34 +0300
Subject: [PATCH] chore: update spring 3.5 version to avoid security issue

---
 CHANGELOG.md                                           |  6 ++++++
 tarantool-spring-data/tarantool-spring-data-35/pom.xml | 10 +++++++++-
 2 files changed, 15 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3c03621b..175b67d3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 ## [Unreleased]
 
+### Dependencies
+
+- Pin `spring-data-keyvalue` to 3.5.13 in `tarantool-spring-data-35` (parent defaults
+  it to `${spring.boot.version}` = 3.5.16, which does not exist on Maven Central)
+- Bump spring-boot version from 3.5.13 to 3.5.16 in tarantool-spring-data-35
+
 ## [1.7.0] - 2026-06-29
 
 ### Spring-data
diff --git a/tarantool-spring-data/tarantool-spring-data-35/pom.xml b/tarantool-spring-data/tarantool-spring-data-35/pom.xml
index 5f31f3db..e9f3af46 100644
--- a/tarantool-spring-data/tarantool-spring-data-35/pom.xml
+++ b/tarantool-spring-data/tarantool-spring-data-35/pom.xml
@@ -18,7 +18,10 @@
   <properties>
     <maven.compiler.source>17</maven.compiler.source>
     <maven.compiler.target>17</maven.compiler.target>
-    <spring.boot.version>3.5.13</spring.boot.version>
+    <spring.boot.version>3.5.16</spring.boot.version>
+    <!--spring-data-keyvalue has not published a 3.5.14+ release; pin to 3.5.13,
+        the latest matching artifact on Maven Central-->
+    <spring-data-keyvalue.version>3.5.13</spring-data-keyvalue.version>
     <shared.dir>${project.parent.parent.basedir}/tarantool-shared-resources/</shared.dir>
     <license.header.file>${project.parent.parent.basedir}/LICENSE_HEADER.txt</license.header.file>
   </properties>
@@ -28,5 +31,10 @@
       <groupId>io.tarantool</groupId>
       <artifactId>tarantool-spring-data-core</artifactId>
     </dependency>
+    <dependency>
+      <groupId>org.springframework.data</groupId>
+      <artifactId>spring-data-keyvalue</artifactId>
+      <version>${spring-data-keyvalue.version}</version>
+    </dependency>
   </dependencies>
 </project>