build(deps): bump the maven-all group across 1 directory with 7 updates by dependabot[bot] · Pull Request #25 · simran1002/CipherChat_Messenger

dependabot · 2026-11-01T03:27:26Z

Bumps the maven-all group with 7 updates in the /backend directory:

Package	From	To
org.springframework.boot:spring-boot-starter-parent	`4.1.1`	`4.1.2`
org.springdoc:springdoc-openapi-starter-webmvc-ui	`3.1.0`	`3.2.0`
software.amazon.awssdk:bom	`2.31.30`	`2.57.6`
org.springframework.modulith:spring-modulith-bom	`2.1.1`	`2.1.2`
org.jacoco:jacoco-maven-plugin	`0.8.13`	`0.8.16`
com.diffplug.spotless:spotless-maven-plugin	`2.44.5`	`2.46.1`
org.apache.maven:apache-maven	`3.9.16`	`3.10.0`

Updates org.springframework.boot:spring-boot-starter-parent from 4.1.1 to 4.1.2

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.1.2

⭐ New Features

Add TWENTY_SEVEN to JavaVersion enum #51426

🐞 Bug Fixes

OriginTrackedResource does not implement equals correctly #52267

OriginTrackedPropertiesLoader drops properties whose name starts with # or ! #52265

JWTs are rejected when issuer-uri is empty and jwk-set-uri is set #52260

Package manifest attributes are missing for nested jars without directory entries #52258

Logback ColorConverter unnecessarily parses its options for every log event #52228

Empty system property in TestPropertyValues is cleared instead of being restored to its empty value #52208

Graceful shutdown of Tomcat or Jetty may call back with REQUESTS_ACTIVE when stop is called immediately after shutDownGracefully on an idle server #52197

NettyWebServer stop may hang when called immediately after shutDownGracefully #52196

gRPC client 'grpc' load balancing fails to bind with a NullPointerException when no child policies are configured #52193

Prevent gRPC client properties from overriding user customizations #52175

MongoDB fails to connect when credentials contain a space #52168

Authentication fails when password configured in spring.elasticsearch.uris contains a colon #52166

Logging can be lost when a context is paused by the test context framework #52088

Docker Compose support for MongoDB fails to connect when credentials contain a character that requires URL encoding #52084

Jersey does not use the endpoint ObjectMapper when Actuator is running on a separate port #51982

Fractions of a second are handled incorrectly when configuring gRPC service config durations #51957

Configuration property descriptions may be lost when building incrementally with Gradle #51925

BasicJsonParser mishandles escaped characters in nested lists and maps #51908

Zero week value conversion fails with 'intValue cannot be extracted from WEEKS' exception #51894

App fails to start when using DevTools and manually configuring JDBC or R2DBC without spring-boot-jdbc or spring-boot-r2dbc #51890

Docker Compose support incorrectly recognizes MARIADB_ALLOW_EMPTY_PASSWORD instead of MARIADB_ALLOW_EMPTY_ROOT_PASSWORD #51888

Auto-configured Kotlinx Serialization JSON codec customization is not applied #51877

NullPointerException can be thrown when using uber jars due to a race condition in NestedJarFileResources #51745

DevTools does not detect a reactive web environment #51730

spring.http.clients.cookie-handling has no effect when using a reactive client backed by an HttpComponents connector #51724

Connection fails when rabbitmq Docker Compose service is configured to use SSL #51667

SBOM-related manifest attributes are missing from Maven-packaged wars #51651

When server.reactive.session.cookie.same-site is not set, session cookies have no SameSite attribute #51639

OAuth2 resource server ignores authorities-claim-delimiter when set on its own #51630

developmentOnly and testAndDevelopmentOnly configurations do not specify any attributes causing potential resolution problems #51623

In a reactive web application, Cloud Foundry security integration returns a 500 rather than a 503 when the cloud controller URL is unavailable #51614

Layer temp file is not deleted when layer creation fails #51581

Docker Compose integration for RabbitMQ skips credential fallbacks when an environment variable has no value #51578

Some assertion messages name the wrong parameter #51574

OAuth2ResourceServerProperties.Jwt has a setter that does not match its getter #51562

jarmode tools commands print stacktrace instead of an error message #51547

Docker Compose ProcessRunner can hang or leave orphan processes #51538

NestedByteChannel.read(ByteBuffer) incorrectly returns 0 when buffer could not be filled #51520

Customizer null checks in HTTP client builders assert the wrong attribute #51513

SSL host config customizations may be lost during Tomcat initialization #51511

SQL Server Docker Compose integration may duplicate the JDBC URL's encrypt parameter #51481

WritableJson.toByteArray() may corrupt supplementary characters #51464

SSL host config customizations are lost when reloading SSL bundles #51457

... (truncated)

Commits

634e6fd Release 4.1.2
6b43cf1 Upgrade to Spring WS 5.0.3
a73dfad Upgrade to Spring Security 7.1.2
0485f1e Upgrade to Spring RESTDocs 4.0.2
de2c11a Upgrade to Spring Pulsar 2.0.8
8d0359e Upgrade to Spring LDAP 4.1.2
f22c6e6 Upgrade to Spring Kafka 4.1.2
ed55709 Upgrade to Spring Integration 7.1.2
2e88a38 Upgrade to Spring HATEOAS 3.1.3
0d69ce5 Upgrade to Spring gRPC 1.1.2
Additional commits viewable in compare view

Updates org.springdoc:springdoc-openapi-starter-webmvc-ui from 3.1.0 to 3.2.0

Release notes

Sourced from org.springdoc:springdoc-openapi-starter-webmvc-ui's releases.

springdoc-openapi v3.2.0 released!

Spring Boot 4.1.x line (built on Spring Boot 4.1.2).

⚠️ Changes you may notice

Default API version (#3354): the default API version is now only listed in the version header or query parameter of the operations that actually serve it (a handler mapped to it, or one without a version). Operations mapped only to other versions no longer show it as an allowed value or as their default. This also fixes the HTTP 500 raised when the version parameter declared @Schema(allowableValues).

Newly required properties (#3360, #3361): the PagedModel / PageMetadata properties and the amount / currency properties of MonetaryAmount are now marked as required, as they are always serialized. Generated clients will see them as non-nullable.

Scalar 0.6 (#3359): upgraded to 0.6.83. The first tag is now open by default, and model links changed from #model/name to #models/Name.

Scalar's standalone integration (#3387): with the Swagger UI or API-only starters, Scalar's own auto-configuration is no longer disabled by springdoc. If you have com.scalar.maven on the classpath and don't want it, set scalar.enabled=false.

New

Opt-in nullability for Java models (#3382): springdoc.model-converters.java-nullable-property-customizer.enabled=true marks properties annotated with @Nullable (JSpecify, Spring, JSR-305) as nullable, including $ref and oneOf properties, without changing shared components.

Polymorphic oneOf as reusable components (#3390): springdoc.model-converters.polymorphic-converter.one-of-as-ref=true, with the name suffix set by springdoc.model-converters.polymorphic-converter.one-of-ref-suffix (Variant by default).

ParameterCustomizer can read type-use annotations, including inside Optional<@MyAnnotation Foo> (#3370).

MCP tools are registered with a McpStatelessSyncServer, for the Spring AI STATELESS protocol (#3388).

Fixed

@ResponseStatus on a controller class is applied to its operations (#3352).

An injected WebSession is no longer documented as a query parameter in WebFlux (#3355).

The application no longer fails to start with Spring HATEOAS on the classpath but no LinkRelationProvider bean (#3364).

WebAsyncTask return types are unwrapped (#3368).

A JSpecify @Nullable on a controller parameter makes its schema nullable (#3377).

Nullable Kotlin properties described by a oneOf (e.g. sealed classes) are documented as nullable (#3381).

Gradle builds no longer lift Jackson 2 above the version managed by Spring Boot (#3373).

Security

The MCP dashboard no longer pre-fills the OAuth2 token endpoint, client id and client secret, and warns when the token endpoint is not HTTPS.

Dependencies

Spring Boot 4.1.2 · swagger-ui 5.34.0 · Scalar 0.6.83 · Spring AI 2.0.1 · Spring Cloud Function 5.0.5 · spring-security-oauth2-authorization-server managed by Spring Boot (7.1.2)

Thanks to all the contributors of this release: @MaxFreedomPollard, @kdelay, @arimu1, @dpkass, @anupamchaubey, @Mattias-Sehlstedt, @Naresh7175, @ys0v9, @sharanggupta, @itd-sw, @gwr0-0, @Tework123, @awinishere.

springdoc-openapi v3.1.1 released!

Security

GHSA-6f5m-mhjg-qwxq – MCP tool callbacks do not encode path parameters, allowing request retargeting

GHSA-4v2q-56v7-2cpw – MCP transport, admin and dashboard endpoints are exposed by default

GHSA-m4cg-mhpg-rh2r – MCP audit events record credentials and request/response bodies without redaction

GHSA-5f9r-4mc4-qh3c – Unbounded MCP pending-confirmation store allows memory exhaustion

GHSA-jcgg-59c8-w4wh – MCP request context in a ThreadLocal can leak headers between concurrent WebFlux requests

GHSA-rhhx-6j8h-8cvw – Unbounded per-locale OpenAPI cache allows memory exhaustion via Accept-Language

GHSA-c925-vm88-mpp9 – Scalar starters trust client-supplied forwarded headers and render from a shared mutable bean

CVE-2026-75838 – Cross-site scripting in the DOMPurify bundled with swagger-ui, addressed by upgrading swagger-ui to 5.32.14

Added

... (truncated)

Changelog

Sourced from org.springdoc:springdoc-openapi-starter-webmvc-ui's changelog.

[3.2.0] - 2026-10-24

Added

#3370 – A ParameterCustomizer can read the type-use annotations of a parameter, including the ones declared on the value wrapped in an Optional, such as Optional<@MyAnnotation Foo>

#3382 – Mark the Java properties annotated with @Nullable (JSpecify, Spring, JSR-305) as nullable in their schema, including $ref and oneOf properties. Opt-in with springdoc.model-converters.java-nullable-property-customizer.enabled=true

#3390 – Add springdoc.model-converters.polymorphic-converter.one-of-as-ref to emit the polymorphic oneOf unions as reusable component schemas, named after the parent schema with the suffix set by springdoc.model-converters.polymorphic-converter.one-of-ref-suffix (Variant by default)

#3388 – Register the MCP tools with a McpStatelessSyncServer, for the STATELESS protocol

Changed

The MCP dashboard no longer pre-fills the OAuth2 token endpoint, client id and client secret. The form shows hints instead, and warns when the token endpoint is not HTTPS

#3354 – The default API version is only listed in the header or query parameter of the operations that serve it: a handler method mapped to it, or one without a version

#3360 – The properties of Spring Data PagedModel and its PageMetadata are now marked as required, as they are always serialized

#3361 – The amount and currency properties of MonetaryAmount are now marked as required

#3359 – Upgrade Scalar to version 0.6.83. The first tag is now open by default, and the links to models changed from #model/name to #models/Name

#3383 – Upgrade Spring AI to version 2.0.1. The MCP SDK version is now the one required by Spring AI

Upgrade spring-boot to version 4.1.2

Upgrade swagger-ui to version 5.34.0

Upgrade spring-cloud-function to version 5.0.5

Use the spring-security-oauth2-authorization-server version managed by Spring Boot (7.1.2) instead of 2.0.0-M2

Fixed

#3352 – A @ResponseStatus on a controller class is now applied to the responses of its operations

#3355 – An injected WebSession parameter is no longer documented as a query parameter in WebFlux applications

#3354 – /v3/api-docs no longer fails when an API version parameter declares @Schema(allowableValues)

#3364 – The application no longer fails to start when Spring HATEOAS is on the classpath without a LinkRelationProvider bean

#3368 – A WebAsyncTask return type is now unwrapped, so its response is described by its result type

#3377 – A JSpecify @Nullable on a controller method parameter now makes its schema nullable

#3381 – A nullable Kotlin property described by a oneOf schema, such as a sealed class, is now documented as nullable

#3387 – Scalar's own integration works again with the Swagger UI and API-only starters: only the Springdoc Scalar starters replace it

#3373 – springdoc no longer lifts Jackson 2 above the version managed by Spring Boot in Gradle builds

[3.1.1] - 2026-09-06

Security

GHSA-6f5m-mhjg-qwxq – MCP tool callbacks do not encode path parameters, allowing request retargeting

GHSA-4v2q-56v7-2cpw – MCP transport, admin and dashboard endpoints are exposed by default

GHSA-m4cg-mhpg-rh2r – MCP audit events record credentials and request/response bodies without redaction

GHSA-5f9r-4mc4-qh3c – Unbounded MCP pending-confirmation store allows memory exhaustion

GHSA-jcgg-59c8-w4wh – MCP request context in a ThreadLocal can leak headers between concurrent WebFlux requests

GHSA-rhhx-6j8h-8cvw – Unbounded per-locale OpenAPI cache allows memory exhaustion via Accept-Language

GHSA-c925-vm88-mpp9 – Scalar starters trust client-supplied forwarded headers and render from a shared mutable bean

CVE-2026-75838 – Cross-site scripting in the DOMPurify bundled with swagger-ui, addressed by upgrading swagger-ui to 5.32.14

Added

#3340 – Describe JsonNullable values without their Java wrapper

... (truncated)

Commits

6b79ced [maven-release-plugin] prepare release v3.2.0
689fc13 Describe the nullable property customizer flags in the configuration metadata
7a1b506 Correct the LocalTime format in the changelog entry of gh-3351
96245a2 Upgrade Scalar to 0.6.83
c494456 Build against the GA versions of the optional Spring dependencies
2d4595f Restore the changelog entries lost in the unreleased fixed section
dd807bd Upgrade swagger-ui to version 5.34.0
e649960 Upgrade spring-boot to 4.1.2
b170ca8 Use the Jackson 2 managed by Spring Boot
ae52fe7 Register the MCP tools with a McpStatelessSyncServer
Additional commits viewable in compare view

Updates software.amazon.awssdk:bom from 2.31.30 to 2.57.6

Updates org.springframework.modulith:spring-modulith-bom from 2.1.1 to 2.1.2

Release notes

Sourced from org.springframework.modulith:spring-modulith-bom's releases.

2.1.2

💡 Improvements

A shared module unnecessarily lists itself as an allowed target #1932

ModuleTestExecution fails to resolve @ApplicationModuleTest on @Nested test classes under Spring Boot 4.2 #1891

Polish reference documentation #1846

Superfluous “the” in the Javadoc of JavaPackages #1842

References to new observability artifacts missing from reference documentation appendix #1840

🪲 Bugs

Minimum age of failed event publications to resubmit is ignored by the JDBC and JPA repositories #1942

MongoDB event publication repository not working properly with archive completion mode #1937

Completed event publications can be claimed for resubmission and marked as failed again #1935

Staleness monitor treats zero per-state timeouts as immediately expired #1918

Non-serializable event still crashes despite listener being excluded via registry-trigger-annotation #1915

FormattableType.of(ResolvableType) renders array types using their JVM binary names #1914

Store the original domain event in the Namastack outbox #1913

Implementations of ApplicationEvent wrongly rewrapped into PayloadApplicationEvent #1893

@DomainEvent not detected on parent types #1877

Methods declared in a module's API but implemented in non-exposed types are not properly intercepted for observability #1874

Documentation generation fails when extracted Javadoc contains quotes or unbalanced braces #1871

AOT-generated application-modules.json lacks initializers, so precomputed initializer ordering is lost #1869

Routing key not properly resolved for Namastack integration #1868

Unable to mark events as FAILED in MongoDB event registry via the staleness monitor #1866

WorkingDirectoryChangesDetector fails in git submodule work trees #1852

Staleness check marks retries as stale prematurely #1837

🔨 Dependency Upgrades

Upgrade to Spring Boot 4.1.2 #1956

Upgrade to Micrometer Tracing 1.7.2 #1955

Upgrade to NullAway 0.13.8 #1950

Commits

5d7515d GH-1910 - Release version 2.1.2 (2.1.2).
b8c1cc5 GH-1956 - Upgrade to Spring Boot 4.1.2.
9c56bf1 GH-1955 - Upgrade to Micrometer Tracing 1.7.2.
c483d58 GH-1956 - Build against Spring Boot 4.1.2 snapshots.
7079bd6 GH-1955 - Build against Micrometer Tracing 1.7.2 snapshots.
b79b7a1 GH-1910 - Enter rampdown phase for 2.1.2.
3f1e16a GH-1910 - Update release workflows.
89606ae GH-1950 - Upgrade to NullAway 0.13.8.
db6283c GH-1910 - Update CI builds for release preparation builds.
2eebc0a GH-1910 - Remove Flapdoodle version property.
Additional commits viewable in compare view

Updates org.jacoco:jacoco-maven-plugin from 0.8.13 to 0.8.16

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.16

New Features

JaCoCo now officially supports Java 27 (GitHub #2287).

Experimental support for Java 28 class files (GitHub #2170, #2189).

To instrument classes loaded by the platform class loader, introduced in JDK 9 by JEP 261, the agent option inclbootstrapclasses=true is required (GitHub #2155).

Non-functional Changes

JaCoCo now depends on ASM 9.11.1 (GitHub #2299, #2304).

0.8.15

New Features

JaCoCo now officially supports Java 26 (GitHub #2076).

Experimental support for Java 27 class files (GitHub #2004).

Compatibility methods generated by Kotlin compiler for functions defined in interfaces are filtered out during generation of report (GitHub #1905).

Compatibility methods generated by Kotlin compiler for exposed boxed inline value classes (JvmExposeBoxed annotation) are filtered out during generation of report (GitHub #1944).

Methods generated by the Kotlin compiler for functions with JvmStatic annotation are filtered out during generation of report (GitHub #2097).

Improved filtering of bytecode generated by Kotlin compiler for when expressions and statements with kotlin.String subject where first branch condition contains string with largest hash (GitHub #2098).

Part of bytecode that javac versions from 24 to 26 generate for switch statements and expressions with selector expression of type java.lang.String inside lambdas is filtered out during generation of report (GitHub #2023).

Improved performance of Kotlin files analysis by parsing SMAPs only once per class (GitHub #2114).

For better performance agent output methods tcpclient and tcpserver use BufferedOutputStream to write execution data to socket. Maven plugin, Ant tasks, CLI, API usage examples, and ExecDumpClient API use BufferedInputStream to read execution data from socket. Third-party integrations should do the same to benefit from this change in agent (GitHub #2089).

Fixed bugs

Fixed processing of Kotlin SMAP in synthetic classes (GitHub #1985).

Multiple JaCoCo runtimes within one JVM writing to the same output file should not cause data corruption when running on JDK versions from 6 to 10 affected by JDK-8166253 (GitHub #2065, #2074).

For better performance agent writes to output file via BufferedOutputStream, this fixes regression introduced in version 0.6.2 (GitHub #2073).

Fixed NullPointerException when JaCoCo agent is loaded by non system class loader, for example when loaded by JBoss Modules (GitHub #1651).

Non-functional Changes

JaCoCo now depends on ASM 9.10.1 (GitHub #2134).

0.8.14

New Features

JaCoCo now officially supports Java 25 (GitHub #1950).

Experimental support for Java 26 class files (GitHub #1870).

Branches added by the Kotlin compiler for default argument number 33 or higher are filtered out during generation of report (GitHub #1655).

Part of bytecode generated by the Kotlin compiler for elvis operator that follows safe call operator is filtered out during generation of report (GitHub #1814, #1954).

Part of bytecode generated by the Kotlin compiler for more cases of chained safe call operators is filtered out during generation of report (GitHub #1956).

Part of bytecode generated by the Kotlin compiler for invocations of suspendCoroutineUninterceptedOrReturn intrinsic is filtered out during generation of report (GitHub #1929).

Part of bytecode generated by the Kotlin compiler for suspending lambdas with parameters is filtered out during generation of report (GitHub #1945).

Part of bytecode generated by the Kotlin compiler for suspending functions and lambdas with suspension points that return inline value class is filtered out during generation of report (GitHub #1871).

Part of bytecode generated by the Kotlin Compose compiler plugin for pausable composition is filtered out during generation of report (GitHub #1911).

Methods generated by the Kotlin serialization compiler plugin are filtered out (GitHub #1885, #1970, #1971).

Fixed bugs

Fixed handling of implicit else clause of when with String subject in Kotlin (GitHub #1813, #1940).

Fixed handling of implicit default clause of switch by String in Java when compiled by ECJ (GitHub #1813, #1940). Fixed handling of exceptions in chains of safe call operators in Kotlin (GitHub #1819).

Non-functional Changes

JaCoCo now depends on ASM 9.9 (GitHub #1965).

Commits

466838a Prepare release 0.8.16
64d0ef7 Upgrade ASM to 9.11.1 (#2304)
fdaaab7 Upgrade ASM to 9.11 (#2299)
d2571ae Upgrade Kotlin to 2.4.21 (#2302)
2f76394 Improve Renovate commit messages and PR titles (#2301)
e9f2936 Use Ubuntu 26.04 (#2291)
4ffe9f0 Upgrade actions/upload-artifact to 7.0.2 (#2295)
aaede90 Upgrade Maven to 3.10.0 (#2292)
f638499 Enable comment-based updates in pom.xml and html files (#2294)
2e115bb Happy birthday Java 27! (#2287)
Additional commits viewable in compare view

Updates com.diffplug.spotless:spotless-maven-plugin from 2.44.5 to 2.46.1

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Maven Plugin v2.46.1

Fixed

spotless:install-git-pre-push-hook didn't work on windows, now fixed. (#2562)

Maven Plugin v2.46.0

Added

Allow specifying path to Biome JSON config file directly in biome step. Requires biome 2.x. (#2548)

spotless:install-git-pre-push-hook goal, which installs a Git pre-push hook to run spotless:check and spotless:apply. (#2553)

Changed

Bump default gson version to latest 2.11.0 -> 2.13.1. (#2414)

Bump default jackson version to latest 2.18.1 -> 2.19.2. (#2558)

Bump default gherkin-utils version to latest 9.0.0 -> 9.2.0. (#2408)

Bump default cleanthat version to latest 2.22 -> 2.23. (#2556)

Maven Plugin v2.45.0

Added

Support for idea (#2020, #2535)

Add support for removing wildcard imports via removeWildcardImports step. (#2517)

Fixed

SortPom disable expandEmptyElements, to avoid empty body warnings. (#2520)

Fix biome formatter for new major release 2.x of biome (#2537)

Make sure npm-based formatters use the correct node_modules directory when running in parallel. (#2542)

Changed

Bump internal dependencies for npm-based formatters (#2542)

Changed

scalafmt: enforce version consistency between the version configured in Spotless and the version declared in Scalafmt config file (#2460)

Commits

0572107 Published maven/2.46.1
9e11c9d Published gradle/7.2.1
314418c Published lib/3.3.1
5e9df11 Windows Compatibility Fix for Git Pre-push Hook (#2562)
24ca3bc We should run CI for PRs against release also.
222085b Update changelogs.
776f7d1 execute pre-push hook
b8e80bc tests fix
1042742 spotlessApply
4cf8137 git pre push hook windows fix
Additional commits viewable in compare view

Updates org.apache.maven:apache-maven from 3.9.16 to 3.10.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven-all group with 7 updates in the /backend directory: | Package | From | To | | --- | --- | --- | | [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` | | [org.springdoc:springdoc-openapi-starter-webmvc-ui](https://github.com/springdoc/springdoc-openapi) | `3.1.0` | `3.2.0` | | software.amazon.awssdk:bom | `2.31.30` | `2.57.6` | | [org.springframework.modulith:spring-modulith-bom](https://github.com/spring-projects/spring-modulith) | `2.1.1` | `2.1.2` | | [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.13` | `0.8.16` | | [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `2.44.5` | `2.46.1` | | org.apache.maven:apache-maven | `3.9.16` | `3.10.0` | Updates `org.springframework.boot:spring-boot-starter-parent` from 4.1.1 to 4.1.2 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2) Updates `org.springdoc:springdoc-openapi-starter-webmvc-ui` from 3.1.0 to 3.2.0 - [Release notes](https://github.com/springdoc/springdoc-openapi/releases) - [Changelog](https://github.com/springdoc/springdoc-openapi/blob/main/CHANGELOG.md) - [Commits](springdoc/springdoc-openapi@v3.1.0...v3.2.0) Updates `software.amazon.awssdk:bom` from 2.31.30 to 2.57.6 Updates `org.springframework.modulith:spring-modulith-bom` from 2.1.1 to 2.1.2 - [Release notes](https://github.com/spring-projects/spring-modulith/releases) - [Changelog](https://github.com/spring-projects/spring-modulith/blob/main/release-train-settings.xml) - [Commits](spring-projects/spring-modulith@2.1.1...2.1.2) Updates `org.jacoco:jacoco-maven-plugin` from 0.8.13 to 0.8.16 - [Release notes](https://github.com/jacoco/jacoco/releases) - [Commits](jacoco/jacoco@v0.8.13...v0.8.16) Updates `com.diffplug.spotless:spotless-maven-plugin` from 2.44.5 to 2.46.1 - [Release notes](https://github.com/diffplug/spotless/releases) - [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md) - [Commits](diffplug/spotless@maven/2.44.5...maven/2.46.1) Updates `org.apache.maven:apache-maven` from 3.9.16 to 3.10.0 --- updated-dependencies: - dependency-name: org.springframework.boot:spring-boot-starter-parent dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-all - dependency-name: org.springdoc:springdoc-openapi-starter-webmvc-ui dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-all - dependency-name: software.amazon.awssdk:bom dependency-version: 2.57.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-all - dependency-name: org.springframework.modulith:spring-modulith-bom dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-all - dependency-name: org.jacoco:jacoco-maven-plugin dependency-version: 0.8.16 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: maven-all - dependency-name: com.diffplug.spotless:spotless-maven-plugin dependency-version: 2.46.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: maven-all - dependency-name: org.apache.maven:apache-maven dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-11-01T03:27:29Z

Labels

The following labels could not be found: backend, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Navigation Menu

Repository navigation

build(deps): bump the maven-all group across 1 directory with 7 updates - #25

build(deps): bump the maven-all group across 1 directory with 7 updates#25
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/backend/maven-all-c7542b0663

dependabot Bot commented on behalf of github Nov 1, 2026

Uh oh!

dependabot Bot commented on behalf of github Nov 1, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 1, 2026

v4.1.2

⭐ New Features

🐞 Bug Fixes

springdoc-openapi v3.2.0 released!

⚠️ Changes you may notice

New

Fixed

Security

Dependencies

springdoc-openapi v3.1.1 released!

Security

Added

[3.2.0] - 2026-10-24

Added

Changed

Fixed

[3.1.1] - 2026-09-06

Security

Added

2.1.2

💡 Improvements

🪲 Bugs

🔨 Dependency Upgrades

0.8.16

New Features

Non-functional Changes

0.8.15

New Features

Fixed bugs

Non-functional Changes

0.8.14

New Features

Fixed bugs

Non-functional Changes

Maven Plugin v2.46.1

Fixed

Maven Plugin v2.46.0

Added

Changed

Maven Plugin v2.45.0

Added

Fixed

Changed

Changed

Uh oh!

dependabot Bot commented on behalf of github Nov 1, 2026

Labels

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants