Skip to content

Bump the maven-dependencies group across 1 directory with 9 updates - #3

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-dependencies-15fca492f8
Open

Bump the maven-dependencies group across 1 directory with 9 updates#3
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-dependencies-15fca492f8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 15, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the maven-dependencies group with 9 updates in the / directory:

Package From To
org.springframework.boot:spring-boot-starter-parent 2.3.12.RELEASE 4.1.0
org.springframework.cloud:spring-cloud-dependencies Hoxton.SR11 Hoxton.SR12
org.projectlombok:lombok 1.18.30 1.18.46
com.alibaba:fastjson 1.2.31 2.0.62
com.github.tomakehurst:wiremock-jre8 2.27.2 3.0.1
org.apache.maven.plugins:maven-surefire-plugin 3.0.0-M5 3.6.0-M1
org.jacoco:jacoco-maven-plugin 0.8.7 0.8.15
org.testcontainers:testcontainers 1.19.8 2.0.5
io.jsonwebtoken:jjwt 0.8.0 0.13.0

Updates org.springframework.boot:spring-boot-starter-parent from 2.3.12.RELEASE to 4.1.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.1.0

Full release notes for Spring Boot 4.1 are available on the wiki.

⭐ New Features

  • Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #50211
  • Reduce memory consumption when repeatedly calling WritableJson.toByteArray #49428

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50747
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50745
  • Embedded LDAP SSL should not be enabled when its bundle is empty #50700
  • InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 #50668
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50645
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50635
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50633
  • Configuration property metadata includes incorrect class references #50632
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50618
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50612
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50610
  • SpringJtaPlatform should have been deprecated since 4.1.0-M3 #50592
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50510
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50417
  • Created StackTracePrinter instances have no access to the Environment #50414
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50412
  • Buildpack module does not validate long-to-int casts #50410
  • Gradle gRPC support fails if protobuf-java dependency is used instead of protobuf-java-util #50405
  • GraphQL WebSocket support does not configure allowed origins #50394
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50298
  • Meter registries are not removed from the global registry when the context is closed #50287
  • DataSourceBuilder cannot derive a DataSource from a lazy connection proxy #50271
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50266
  • Bean definitions can be added with an initializer before setAllowBeanDefinitionOverriding is called #50264
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50261
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50258
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50234
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50228
  • Missing dependency management for spring-boot-web-server-test #50224
  • Spring Batch support for MongoDB modules are not included in dependency management #50223
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50216
  • GrpcServerHealthScheduler is not started in servlet environments #50209
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50204

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50647
  • Document SSL reloading with Let's Encrypt #50630
  • Remove the use of Optional from Data Neo4j repository examples #50622
  • Fix typos in documentation #50620

... (truncated)

Commits

Updates org.springframework.cloud:spring-cloud-dependencies from Hoxton.SR11 to Hoxton.SR12

Commits

Updates org.projectlombok:lombok from 1.18.30 to 1.18.46

Changelog

Sourced from org.projectlombok:lombok's changelog.

v1.18.46 (April 22nd, 2026)

  • PLATFORM: JDK26 support added #4019.
  • PLATFORM: Spring Tools Suite 5 supported #3985.
  • BUGFIX: @Jacksonized no longer stops generating @JsonProperty once an explicit @JsonIgnore annotations is encountered #4022.
  • BUGFIX: In eclipse, mixing @Jacksonized and fluent = true no longer causes the error com.fasterxml.jackson.annotation.JsonProperty is not a repeatable annotation interface. #3934.
  • BUGFIX: Some finishing touches for v1.18.44's support of Jackson3 #4004.

v1.18.44 (March 11th, 2026)

  • FEATURE: @Jacksonized now supports both Jackson2 and Jackson3; you'll get a warning until you configure which one (or even both!) you want lombok to generate. #3950.
  • BUGFIX: On JDK25, val and @ExtensionMethod could sometimes cause erroneous errors (in that you see errors but compilation succeeds anyway) using javac. #3947.
  • BUGFIX: @Jacksonized + fields marked transient would result in those transient fields being serialised which is surprising (and thus undesired) behaviour. #3936.

v1.18.42 (September 18th, 2025)

  • FEATURE: All the various @Log annotations now allow you to change their access level (they still default to private). #2280. Thanks to new contributor Liam Pace!
  • BUGFIX: Javadoc parsing was broken in Netbeans and ErrorProne for JDK25 #3940.

v1.18.40 (September 4th, 2025)

  • PLATFORM: JDK25 support added #3859.
  • BUGFIX: Recent versions of eclipse (or the eclipse-based java lang server for VSCode) caused java.lang.IllegalArgumentException: Document does not match the AST. [Issue #3886](projectlombok/lombok#3886).
  • PERFORMANCE: @ExtensionMethod is now significantly faster [Issue #3866](projectlombok/lombok#3866).
  • BUGFIX: the command line config tool would emit incorrect output for nullity annotations. [Issue #3931](projectlombok/lombok#3931).
  • FEATURE: @Jacksonized @Accessors(fluent=true) automatically creates the relevant annotations such that Jackson correctly identifies fluent accessors. [Issue #3265](projectlombok/lombok#3265), [Issue #3270](projectlombok/lombok#3270).
  • IMPROBABLE BREAKING CHANGE: From versions 1.18.16 to 1.18.38, lombok automatically copies certain Jackson annotations (e.g., @JsonProperty) from fields to the corresponding accessors (getters/setters). However, it turned out to be harmful in certain situations. Thus, Lombok does not automatically copy those annotations any more. You can restore the old behavior using the config key lombok.copyJacksonAnnotationsToAccessors = true.

v1.18.38 (March 31st, 2025)

  • PLATFORM: JDK24 support added.
  • FEATURE: Lombok's nullity annotation now supports JSpecify out of the box, using config key jspecify.
  • BUGFIX: Recent eclipse releases would get you 'negative length' error. The bug had always been in lombok but didn't matter until recent releases. [Issue #3823](projectlombok/lombok#3823).
  • BUGFIX: The 'extract local variable' refactor script of VSCode wouldn't replace all occurrences if run on a method call to a lombok generated method. [Issue #3783](projectlombok/lombok#3783).

v1.18.36 (November 15th, 2024)

  • PLATFORM: JDK23 support added.
  • BUGFIX: Eclipse projects using the com.pro-crafting.tools:jasperreports-maven-plugin will now compile.

v1.18.34 (June 28th, 2024)

  • PLATFORM: Added support for Eclipse 2024-06; you'd get some NoSuchMethodError traces in your logs if using @Builder or @Singular prior to this fix. [Issue #3638](projectlombok/lombok#3638).
  • IMPROBABLE BREAKING CHANGE: Lombok now adds @lombok.Generated by default to methods and types it generates. This may result in accidentally increasing your test coverage percentage. [Issue #3667](projectlombok/lombok#3667).
  • IMPROBABLE BREAKING CHANGE: When lombok.config contains lombok.onX.flagUsage = WARNING, from now on warnings will actually be generated if onX is used.[Issue #2848](projectlombok/lombok#2848)
  • BUGFIX: When @SuperBuilder was used on a type with an generic array type, it would error wrong number of type arguments. [Issue #3694](projectlombok/lombok#3694).
  • FEATURE: Lombok generates javadoc for you for most of the methods it adds; with this release, javadoc is also added to generated constructors. [Issue #933](projectlombok/lombok#933).

v1.18.32 (March 20th, 2024)

  • PLATFORM: Initial JDK22 support added.
  • PLAFTORM Added support for Eclipse 2024-03. [Issue #3620](projectlombok/lombok#3620).
  • PLATFORM: Added support for recent versions of eclipse (released Q4 2023 or later or so) which would cause failures in the eclipse logs such as java.lang.NoSuchMethodError: 'java.lang.StringBuffer org.eclipse.jdt…. [Issue #3564](projectlombok/lombok#3564).
  • FEATURE: @Locked has been introduced. Like @Synchronized but with java.util.concurrent.locks locks instead of the synchronized primitive. Thanks, Pim van der Loos for the PR! [Issue #3506](projectlombok/lombok#3506).
  • NECROMANCY: Inlining a generated getter in eclipse would result in eclipse incorrectly replacing calls with @Getter instead of the actual field's name. [Issue #562](projectlombok/lombok#562). This issue is almost old enough to drink. Points for dedication go to Rawi for fixing this one.
  • BUGFIX: When @SuperBuilder was used on a type with an annotated generic type, it would error wrong number of type arguments. [Issue #3592](projectlombok/lombok#3592).
  • BUGFIX: It was possible to create an infinite build loop using @ExtensionMethod. [Issue #3225](projectlombok/lombok#3225).
  • BUGFIX: Using @Getter(lazy=true) would fail if the expression contained a variable called value. [Issue #2917](projectlombok/lombok#2917).

... (truncated)

Commits
  • 936ca59 [build] lombok's launcher is still intended to be 1.4 compatible, or at least...
  • fcdab3f [version] pre-release version bump
  • 1cb7d49 [changelog]#4004 Mention Jackson3 final touches in changelog.
  • 12a15b0 Fix: Bump EA_JDK to 27 (25 and 26 have been released)
  • 2be766c Merge branch 'jackson3-final-touches'
  • 290fa4c [trivial] constantize the warning we spit out for ambiguous jackson2/3, and m...
  • e6567b6 test: Add Jackson 3 test cases and version ambiguity warnings
  • 45e72e2 feat: Add Jackson 3 databind/dataformat annotations to HandlerUtil copy lists
  • 184d423 feat: Add Jackson 3 support to @​Jacksonized handlers
  • e027ad0 refactored to ShadowClassLoader use Collections::enumeration instead of Vector
  • Additional commits viewable in compare view

Updates com.alibaba:fastjson from 1.2.31 to 2.0.62

Release notes

Sourced from com.alibaba:fastjson's releases.

fastjson 2.0.61版本发布

FASTJSON 2.0.61 Release Notes

Release Date: 07 Feb 2026 Tag: 2.0.61 (170f71f)

Overview

This is a regularly scheduled maintenance release with feature enhancements, performance improvements, and bug fixes. Users should upgrade as needed.

Changes & Bug Fixes

  1. Fixed issue where Jackson's @JsonProperty on methods was being ignored in record types #3893
  2. Fixed multiple ArrayIndexOutOfBoundsException issues in JSONReaderUTF8, JSONReaderASCII, and JSONReader #3883
  3. Improved performance when parsing JSON with numerous escape characters #3889
  4. Fixed conflict where global Date writer overrides @JSONField format #3864
  5. Fixed TypeUtils.castToTimestamp compatibility issues when upgrading from 1.2.83 #3906 #3907
  6. Added support for serializing non-finite numbers (NaN, Infinity) as strings #3911
  7. Added default value support for getString and other getXXX methods #3880
  8. Fixed double quotes issue in TypeUtils.cast with Long global converter #3932
  9. Added Java 8 TimeModule support including improved YearMonth support #3934 #3935
  10. Fixed scientific notation floating point deserialization errors #3917 #3939 #3955
  11. Added serialization support for org.w3c.dom.Node #3960
  12. Fixed exception when parsing object keys with emoji and escape characters #3928
  13. Fixed generic type inference for List subclasses during deserialization #3926
  14. Added support for custom error messages in JSON Schema validation #1559
  15. Added parse(InputStream) overload with default context #3946
  16. Fixed DirectByteBuffer UnsupportedOperationException for java.nio.ByteBuffer#array #3894
  17. Added support for composing multiple filters (PropertyFilter, PropertyPreFilter, etc.) #3877
  18. Fixed incorrect overflow check when parsing BigInteger as Double
  19. Enhanced security checks in hex digit processing
  20. Improved readString performance in JSONReaderUTF8/JSONReaderUTF16
  21. Fixed various issues with WriteNulls, ErrorOnNullForPrimitives, NotWriteDefaultValue, and other features
  22. Added ProGuard rules for fields affected by reflection operations
  23. Fixed cast error when using -Dfastjson2.creator=reflect #1563

Maven Dependency Configuration

Standard Version

<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.61</version>
</dependency>

Android 5 Optimized Version

</tr></table>

... (truncated)

Commits

Updates com.github.tomakehurst:wiremock-jre8 from 2.27.2 to 3.0.1

Release notes

Sourced from com.github.tomakehurst:wiremock-jre8's releases.

3.0.1

🐛 Bug fixes

  • Stop returning 500s for unmatched path patterns (#2339) @​Mahoney
  • Ensure that the shadow JAR is always built last to ensure webhooks fat JAR wins (#2344) @​tomakehurst
  • Added validation of UUIDs in path parameters in the admin API so that clearer errors are reported when non UUIDs are provided or item isn't found rather than throwing a 500 error (#2347) @​tomakehurst
  • Respect StopAction in V1 Filter (#2335) @​Mahoney

Thanks to the regression reporters: @​defnngj , @​oleg-nenashev , @​Mahoney

WireMock 3.0.0

A new major release that introduces a lot of new features, enhancements and also some breaking changes. The key changes include support for Java 17, dropping Java 8 support, new matchers and dynamic response macros, new API endpoints, etc. We’ve made a small number of breaking changes to the Java API plus some behavioural changes, but the JSON (REST and file) API remains fully compatible with 2.x.

NOTE: A blog post with the user-friendly summary and migration guidelines is coming soon!

Thanks to all contributors! The changelog below represents key changes between 2.35.0 and 3.0.0. The full list of changes is available below in the collapsed section.

WARNING: There are known issues in the WireMock 3.0.0 release. Please be careful when updating, and see the Errata below

Upgrade guide

This guide assumes you would be upgrading from WireMock 2.35.0 to 3.1.0

  1. If you aren’t using WireMock 2.35.0, upgrade to this version first
  2. If you use WireMock Standalone, backup your configurations, logs and other information you might need in the future, just in case the - upgrade goes wrong
  3. If you use the WireMock Webhooks Extension, delete the dependency on it and the downloads. Now the extension is a part of the WireMock core
  4. If you use any WireMock extensions, private source or open source ones, ensure they are compatible with WireMock 3 by checking this GitHub Issue, documentation and the integration tests. If you discover any incompatible extension, please raise a bug in [wiremock/wiremock/issues (https://github.com/wiremock/wiremock/issues) or comment in [wiremock/wiremock #2323](wiremock/wiremock#2323), We will triage and route it accordingly
  5. If you use Java 8 on the instance, update to Java 11 or Java 17
  6. Update WireMock to the most recent release of WireMock 3

🚀 New features and improvements

Proxy mode:

... (truncated)

Commits
  • 34d4930 Bump patch version to 3.0.1
  • ae6ed02 Stopped updating package-lock.json when bumping versions
  • a302419 Fixed bump patch and minor versions logic
  • ae525f9 Fixed get patch version function in build
  • 0d4ccca Merge pull request #2347 from wiremock/better-stub-id-validation-in-admin-api
  • c5e8230 Added validation of UUIDs in path parameters in the admin API so that clearer...
  • 5273a43 Merge pull request #2339 from wiremock/fix-exception-in-diff
  • ab05ee9 Ensured that the shadow JAR is always built last. Relocated dependencies in w...
  • 9eaaa69 Merge pull request #2337 from wiremock/dependabot/gradle/com.diffplug.spotles...
  • 36f04c7 Merge pull request #2343 from wiremock/semver-release-drafter
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.0.0-M5 to 3.6.0-M1

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.0-M1

🚀 New features and improvements

  • Use junit platform runner to run junit 3, junit 4 and TestNG tests via vintage engine and testng engine (#3179) @​olamy
  • Introduce reportTestTimestamp option and include timestamp for test sets and test cases (#3261) @​kevinnammour

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.5.6

🚀 New features and improvements

... (truncated)

Commits
  • e107a93 [maven-release-plugin] prepare release surefire-3.6.0-M1
  • 7281f6b Use version 3.6.0-M1-SNAPSHOT
  • d60b78a restore feature to be able to override arguments from command line execution
  • 47b7450 [Issue-3309] Clarify forkNode default communication docs (#3361)
  • 161229b [Issue-3315] Restore console output fallback report name (#3360)
  • 478c7e6 Avoid producing a trailing colon in java.class.path. (#3365)
  • 39bb6f2 Use embeded mermaid and fix a typo (#3362)
  • fbff927 [Issue-3226] JUnit5Xml30StatelessReporter does not change class name in repor...
  • 3c175c8 Use Maven site plugin 3.22.0 and setup mermaid diagrams (#3358)
  • 762a791 Bump org.junit:junit-bom from 5.14.1 to 5.14.4 (#3357)
  • Additional commits viewable in compare view

Updates org.jacoco:jacoco-maven-plugin from 0.8.7 to 0.8.15

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.15

New Features

  • JaCoCo now officially supports Java 26 (GitHub #2076).
  • Experimental support for Java 27 class files (GitHub #2004).
  • Compatibility methods generated by Kotlin compiler for functions defined in interfaces are filtered out during generation of report (GitHub #1905).
  • Compatibility methods generated by Kotlin compiler for exposed boxed inline value classes (JvmExposeBoxed annotation) are filtered out during generation of report (GitHub #1944).
  • Methods generated by the Kotlin compiler for functions with JvmStatic annotation are filtered out during generation of report (GitHub #2097).
  • Improved filtering of bytecode generated by Kotlin compiler for when expressions and statements with kotlin.String subject where first branch condition contains string with largest hash (GitHub #2098).
  • Part of bytecode that javac versions from 24 to 26 generate for switch statements and expressions with selector expression of type java.lang.String inside lambdas is filtered out during generation of report (GitHub #2023).
  • Improved performance of Kotlin files analysis by parsing SMAPs only once per class (GitHub #2114).
  • For better performance agent output methods tcpclient and tcpserver use BufferedOutputStream to write execution data to socket. Maven plugin, Ant tasks, CLI, API usage examples, and ExecDumpClient API use BufferedInputStream to read execution data from socket. Third-party integrations should do the same to benefit from this change in agent (GitHub #2089).

Fixed bugs

  • Fixed processing of Kotlin SMAP in synthetic classes (GitHub #1985).
  • Multiple JaCoCo runtimes within one JVM writing to the same output file should not cause data corruption when running on JDK versions from 6 to 10 affected by JDK-8166253 (GitHub #2065, #2074).
  • For better performance agent writes to output file via BufferedOutputStream, this fixes regression introduced in version 0.6.2 (GitHub #2073).
  • Fixed NullPointerException when JaCoCo agent is loaded by non system class loader, for example when loaded by JBoss Modules (GitHub #1651).

Non-functional Changes

  • JaCoCo now depends on ASM 9.10.1 (GitHub #2134).

0.8.14

New Features

  • JaCoCo now officially supports Java 25 (GitHub #1950).
  • Experimental support for Java 26 class files (GitHub #1870).
  • Branches added by the Kotlin compiler for default argument number 33 or higher are filtered out during generation of report (GitHub #1655).
  • Part of bytecode generated by the Kotlin compiler for elvis operator that follows safe call operator is filtered out during generation of report (GitHub #1814, #1954).
  • Part of bytecode generated by the Kotlin compiler for more cases of chained safe call operators is filtered out during generation of report (GitHub #1956).
  • Part of bytecode generated by the Kotlin compiler for invocations of suspendCoroutineUninterceptedOrReturn intrinsic is filtered out during generation of report (GitHub #1929).
  • Part of bytecode generated by the Kotlin compiler for suspending lambdas with parameters is filtered out during generation of report (GitHub #1945).
  • Part of bytecode generated by the Kotlin compiler for suspending functions and lambdas with suspension points that return inline value class is filtered out during generation of report (GitHub #1871).
  • Part of bytecode generated by the Kotlin Compose compiler plugin for pausable composition is filtered out during generation of report (GitHub #1911).
  • Methods generated by the Kotlin serialization compiler plugin are filtered out (GitHub #1885, #1970, #1971).

Fixed bugs

  • Fixed handling of implicit else clause of when with String subject in Kotlin (GitHub #1813, #1940).
  • Fixed handling of implicit default clause of switch by String in Java when compiled by ECJ (GitHub #1813, #1940). Fixed handling of exceptions in chains of safe call operators in Kotlin (GitHub #1819).

Non-functional Changes

  • JaCoCo now depends on ASM 9.9 (GitHub #1965).

0.8.13

New Features

  • JaCoCo now officially supports Java 23 and Java 24 (GitHub #1757, #1631, #1867).
  • Experimental support for Java 25 class files (GitHub #1807).
  • Calculation of line coverage for Kotlin inline functions (GitHub #1670).
  • Calculation of line coverage for Kotlin inline functions with reified type parameter (GitHub #1670, #1700).
  • Calculation of coverage for Kotlin JvmSynthetic functions (GitHub #1700).
  • Part of bytecode generated by the Kotlin Compose compiler plugin is filtered out during generation of report (GitHub #1616).

... (truncated)

Commits
  • 6c5260a Prepare release v0.8.15
  • 5c05141 Transfer of execution data through socket should use buffered stream (#2089)
  • ab5efa9 Remove from Azure Pipelines all builds except with JDK 5 and JDK EA (#2148)
  • 5f6ea38 Use Windows 2025 image in GitHub Actions (#2130)
  • 35a8af2 Use Renovate instead of Dependabot for updates of ASM (#2137)
  • 85b8ddf Upgrade ASM to 9.10.1 (#2134)
  • 2988647 AgentModule should use ClassLoader of agent instead of SystemClassLoader (#1651)
  • 75a4e31 Add filter for Kotlin @JvmExposeBoxed (#1944)
  • 691fa1d Use Renovate instead of Dependabot for updates of GitHub Actions (#2132)
  • 3e18f17 Require at least JDK 21 for build (#2128)
  • Additional commits viewable in compare view

Updates org.testcontainers:testcontainers from 1.19.8 to 2.0.5

Release notes

Sourced from org.testcontainers:testcontainers's releases.

2.0.5

What's Changed

🚀 Features & Enhancements

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

📦 Dependency updates

2.0.4

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels May 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/maven-dependencies-15fca492f8 branch from 72c238c to f17a512 Compare June 1, 2026 11:35
@dependabot
Bump the maven-dependencies group across 1 directory with 9 updates
d307579 
Bumps the maven-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `2.3.12.RELEASE` | `4.1.0` |
| [org.springframework.cloud:spring-cloud-dependencies](https://github.com/spring-cloud/spring-cloud-build) | `Hoxton.SR11` | `Hoxton.SR12` |
| [org.projectlombok:lombok](https://github.com/projectlombok/lombok) | `1.18.30` | `1.18.46` |
| [com.alibaba:fastjson](https://github.com/alibaba/fastjson2) | `1.2.31` | `2.0.62` |
| [com.github.tomakehurst:wiremock-jre8](https://github.com/wiremock/wiremock) | `2.27.2` | `3.0.1` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.0.0-M5` | `3.6.0-M1` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.7` | `0.8.15` |
| [org.testcontainers:testcontainers](https://github.com/testcontainers/testcontainers-java) | `1.19.8` | `2.0.5` |
| [io.jsonwebtoken:jjwt](https://github.com/jwtk/jjwt) | `0.8.0` | `0.13.0` |



Updates `org.springframework.boot:spring-boot-starter-parent` from 2.3.12.RELEASE to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.3.12.RELEASE...v4.1.0)

Updates `org.springframework.cloud:spring-cloud-dependencies` from Hoxton.SR11 to Hoxton.SR12
- [Release notes](https://github.com/spring-cloud/spring-cloud-build/releases)
- [Commits](https://github.com/spring-cloud/spring-cloud-build/commits)

Updates `org.projectlombok:lombok` from 1.18.30 to 1.18.46
- [Changelog](https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown)
- [Commits](projectlombok/lombok@v1.18.30...v1.18.46)

Updates `com.alibaba:fastjson` from 1.2.31 to 2.0.62
- [Release notes](https://github.com/alibaba/fastjson2/releases)
- [Commits](https://github.com/alibaba/fastjson2/commits/2.0.62)

Updates `com.github.tomakehurst:wiremock-jre8` from 2.27.2 to 3.0.1
- [Release notes](https://github.com/wiremock/wiremock/releases)
- [Commits](wiremock/wiremock@2.27.2...3.0.1)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.0.0-M5 to 3.6.0-M1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.0.0-M5...surefire-3.6.0-M1)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.7 to 0.8.15
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.7...v0.8.15)

Updates `org.testcontainers:testcontainers` from 1.19.8 to 2.0.5
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.19.8...2.0.5)

Updates `io.jsonwebtoken:jjwt` from 0.8.0 to 0.13.0
- [Release notes](https://github.com/jwtk/jjwt/releases)
- [Changelog](https://github.com/jwtk/jjwt/blob/main/CHANGELOG.md)
- [Commits](jwtk/jjwt@0.8.0...0.13.0)

---
updated-dependencies:
- dependency-name: com.alibaba:fastjson
  dependency-version: 2.0.62
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: com.github.tomakehurst:wiremock-jre8
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: io.jsonwebtoken:jjwt
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.projectlombok:lombok
  dependency-version: 1.18.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 4.0.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.cloud:spring-cloud-dependencies
  dependency-version: Hoxton.SR12
  dependency-type: direct:production
  dependency-group: maven-dependencies
- dependency-name: org.testcontainers:testcontainers
  dependency-version: 2.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/maven-dependencies-15fca492f8 branch from f17a512 to d307579 Compare July 1, 2026 04:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants