build(deps): bump the minor-and-patch group across 1 directory with 10 updates

[dependabot]

Bumps the minor-and-patch group with 9 updates in the / directory:

Package	From	To
org.springframework.boot	4.1.0	4.1.1
org.springframework.modulith:spring-modulith-bom	2.1.0	2.1.1
net.bytebuddy:byte-buddy	1.18.11	1.18.12
com.github.oshi:oshi-core	7.4.2	7.6.0
org.springdoc:springdoc-openapi-starter-webmvc-ui	3.0.3	3.1.0
com.azure:azure-data-tables	12.5.11	12.5.12
org.jsoup:jsoup	1.22.2	1.23.2
org.springframework.boot:spring-boot-dependencies	4.1.0	4.1.1
gradle-wrapper	9.6.1	9.7.1

Updates org.springframework.boot from 4.1.0 to 4.1.1

Release notes

Sourced from org.springframework.boot's releases.

v4.1.1

⚠️ Attention Required

• Spring Boot's Gradle plugin no longer automatically configures gRPC when the Protobuf plugin is applied. This behavior caused problems for those using Protobuf without gRPC. To opt in to the configuration of gRPC, configure the protobuf extension with the grpc plugin using an empty block. The Spring Boot Gradle plugin will then automatically configure the use of protoc-gen-grpc-java as before. #50822

🐞 Bug Fixes

• Kafka consumer-specific security protocol is not taken into account #51369
• Structured logging: a failed JSON encode corrupts the next log event written on the same thread #51156
• Micrometer registries pin the application context #51135
• Temporary file is not deleted when ExportedImageTar construction fails #51132
• Metadata annotation processor ignores getter-level @NestedConfigurationProperty for records #51098
• spring-boot-h2-console pulls servlet-api as transitive dependency #51095
• PropertiesLauncher does not log nested archive paths #51089
• Methods that return the result of Map#remove are not declared with a @Nullable return type #51087
• NativeImageResourceProvider flattens Flyway migration paths in subdirectories #50964
• Fix ordering of Kotlinx Serialization CodecCustomizer #50961
• JarFile is not closed when finding main class from archive #50959
• Application-managed JUL bridge handler should only be removed if installed #50950
• CloudFoundry reactive auto-configuration should not require a WebClient.Builder bean to be defined #50944
• Context refresh fails on reactive Cloud Foundry when using Actuator without spring-boot-health #50942
• Resources are not cleaned up when resolving an image that is not yet present in the builder #50941
• GraphQlWebMvcAutoConfiguration should apply customizers in order #50914
• Auto-configured RedisMessageListenerContainer does not use virtual threads when spring.threads.virtual.enabled is true #50884
• Context refresh fails when using Actuator on Jersey without spring-boot-health #50872
• Context refresh fails on Cloud Foundry when using Actuator without spring-boot-health #50871
• IllegalStateException when binding properties to a @Validated class that contains a map whose value type is a wildcard #50856
• High number of connections due to Mongo health indicator #50852
• Inconsistent handling of empty string values of spring.security.oauth2.resourceserver.jwt issuer-uri and jwk-set-uri #50849
• Return type nullability of ApplicationContextAssert's getBean methods does not indicate that bean may be null #50845
• PropertiesWebClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #50843
• Exposing gRPC test server port should backoff if gRPC is not present #50825
• JpaBaseConfiguration#entityManagerConfiguration can cause a dependency loop on beans declaring AsyncTaskExecutor #50801
• spring.grpc.server.health.include-overall-health is not taken into account #50799
• Setting 'server.servlet.session.cookie.partitioned' to false still emits the 'Partitioned' cookie attribute #50790
• Managed version of Prometheus Client is not aligned with Micrometer's micrometer-registry-prometheus #50780
• Map properties bound from empty strings fail with ConverterNotFoundException #50773
• Protobuf Common Protos should not be a managed dependency #50772
• An application that depends on spring-boot-security-oauth2-resource-server may fail to start with a ClassNotFoundException when Reactor is on the classpath but WebFlux is not #50764
• W3CHeaderParser's decoding is not compliant with RFC 3986 #50650

📔 Documentation

• Description of spring.graphql.websocket.connection-init-timeout does not render correctly in the reference guide #51348
• spring.profiles.group should have a 'spring-profile-name' hint provider #51284
• Remove reference to removed InfluxDB auto-configuration #51176
• Use JacksonJsonSerde in Kafka Streams documentation #51161
• Document alternatives to HttpMessageConverters #51129
• Fix stale type reference for OTLP logging transport metadata #51119
• Metadata for spring.test.mockmvc.htmlunit.url declares the wrong type #51115

... (truncated)

Commits

• 6fdf67e Release 4.1.1
• fde599b Upgrade to Spring Pulsar 2.0.7
• 9daa58f Upgrade to Spring HATEOAS 3.1.2
• 353993e Upgrade to Spring Data Bom 2026.0.1
• 24ba596 Upgrade to Spring Session 4.1.1
• 5cb5c29 Upgrade to Spring Security 7.1.1
• 4adc8eb Upgrade to Spring LDAP 4.1.1
• 4d9c19c Upgrade to Spring Kafka 4.1.1
• f30f612 Upgrade to Spring Integration 7.1.1
• b930283 Upgrade to Spring gRPC 1.1.1
• Additional commits viewable in compare view

Updates org.springframework.modulith:spring-modulith-bom from 2.1.0 to 2.1.1

Release notes

Sourced from org.springframework.modulith:spring-modulith-bom's releases.

2.1.1

💡 Improvements

• Use Namastack version property in spring-modulith-events-core #1807

🪲 Bugs

• Event externalization throws ClassCastException with event listener using ApplicationListener.forPayload(…) #1832
• RabbitJackson2Configuration and RabbitJacksonConfiguration conflict when Jackson 2.x is on classpath (e.g. Eureka Client) #1830
• Ambiguous violation message when referring to a non-exposed type in a module generally available for access #1827
• ConcurrentModificationException in TestExecutionCondition when running tests with JUnit parallel class execution #1824
• Typo in spring.modulith.events.staleness.check-interval configuration property #1822
• Potential NullPointerException in FormattableType.of(…) for wildcard types #1806
• Fix Testcontainers setup to ensure fresh containers for SQL databases #1802
• MongoDB event publication tests use default localhost connection instead of Testcontainers #1755
• Unbounded wildcard / type-variable generic parameters break FormattableType (NPE in DefaultObservedModule.render) #1754
• Root module Flyway migrations are not executed during a test #1753

🔨 Dependency Upgrades

• Upgrade to Spring Boot 4.1.1 #1820
• Upgrade to Namastack Outbox 1.7.3 #1796, #1814
• Upgrade to Spring Framework 7.0.9 #1813
• Upgrade to Micrometer Tracing 1.7.1 #1812
• Upgrade to jGit 7.7.1.202607240634-r #1797

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​arendomoda, @​arimu1, @​char-yb, @​DragonFSKY, @​Hashim1999164, @​kalayciburak, @​seonwooj0810

Commits

• 83ce54c GH-1833 - Release version 2.1.1.
• ef8d256 GH-1832 - Polishing.
• 51e2cc4 GH-1832 - Invoke listeners through SimpleApplicationEventMulticaster.
• 3066000 GH-1830 - Polishing.
• 8127446 GH-1830 - Resolve Rabbit Jackson configuration conflict.
• 2bdcdc3 GH-1827 - Polishing.
• f93a928 GH-1827 - Clarify violation for non-exposed types in allowed modules.
• dacf640 GH-1824 - Use ConcurrentHashMap for the module dependency cache.
• 6827fd5 GH-1822 - Polishing.
• ccd78da GH-1822 - Fix typo in staleness check-interval property
• Additional commits viewable in compare view

Updates net.bytebuddy:byte-buddy from 1.18.11 to 1.18.12

Release notes

Sourced from net.bytebuddy:byte-buddy's releases.

Byte Buddy 1.18.12

• Automatically support Kotlin in Gradle plugin.
• Add support for native attach on Windows for ARM64.
• Correct JNA injector which accidentally created on based on Unsafe.

Changelog

Sourced from net.bytebuddy:byte-buddy's changelog.

17. July 2026: version 1.18.12

• Automatically support Kotlin in Gradle plugin.
• Correct JNA injector which accidentally created on based on Unsafe.
• Support dynamic attach on Windows ARM64 by shipping a native attach_hotspot_windows library for win32-aarch64.

Commits

• 706d4a4 [publish] Releasing Byte Buddy 1.18.12
• b567461 [release] Release new version
• bcb5d26 Avoid compilation issue on older JVMs.
• e42d726 Remove unused import.
• 942efc4 [release] Release new version
• 7cff8e9 [release] Release new version
• 6d6cd85 feat(gradle/plugin): native kotlin support (#1925)
• fe2f8d0 Add reproducible builds badge to readme.
• 440fa0a Add native attach library for Windows ARM64 to support dynamic attach.
• 373c52f Update internal Byte Buddy and release notes.
• Additional commits viewable in compare view

Updates net.bytebuddy:byte-buddy-agent from 1.18.11 to 1.18.12

Release notes

Sourced from net.bytebuddy:byte-buddy-agent's releases.

Byte Buddy 1.18.12

• Automatically support Kotlin in Gradle plugin.
• Add support for native attach on Windows for ARM64.
• Correct JNA injector which accidentally created on based on Unsafe.

Changelog

Sourced from net.bytebuddy:byte-buddy-agent's changelog.

17. July 2026: version 1.18.12

• Automatically support Kotlin in Gradle plugin.
• Correct JNA injector which accidentally created on based on Unsafe.
• Support dynamic attach on Windows ARM64 by shipping a native attach_hotspot_windows library for win32-aarch64.

Commits

• 706d4a4 [publish] Releasing Byte Buddy 1.18.12
• b567461 [release] Release new version
• bcb5d26 Avoid compilation issue on older JVMs.
• e42d726 Remove unused import.
• 942efc4 [release] Release new version
• 7cff8e9 [release] Release new version
• 6d6cd85 feat(gradle/plugin): native kotlin support (#1925)
• fe2f8d0 Add reproducible builds badge to readme.
• 440fa0a Add native attach library for Windows ARM64 to support dynamic attach.
• 373c52f Update internal Byte Buddy and release notes.
• Additional commits viewable in compare view

Updates com.github.oshi:oshi-core from 7.4.2 to 7.6.0

Release notes

Sourced from com.github.oshi:oshi-core's releases.

Release 7.6.0

Maven Central Publication Change

The oshi-dist zip is no longer published to Maven Central; download it from the GitHub release instead.

New Features

• #3652: oshi-metrics reports the OpenTelemetry reserved state for system.filesystem.usage and system.filesystem.utilization, alongside the existing used and free. The three states partition the filesystem, so the usage gauges sum to system.filesystem.limit and the utilization gauges sum to 1.0 - @​dbwiddis.
• #3660, #3678: Display.getDevicePort() reports the port a display is attached to, and on systems with X RandR, Display.getOutputName() gives the name xrandr --output accepts for it - @​ayonization, @​dbwiddis.

Behavior Changes

• #3705: OSDesktopWindow.getLocAndSize() returns a copy of the window's Rectangle and the constructor copies the one it is given, so the class honors the immutability its documentation promises. ApplicationInfo.getAdditionalInfo() returns an unmodifiable map. Code that wrote through either return value silently mutated OSHI's own state; it now has no effect, or throws UnsupportedOperationException for the map - @​dbwiddis.
• #3705: UsbDevice.compareTo() breaks ties on the unique device ID, vendor ID, product ID and serial number after comparing names, and AbstractUsbDevice implements equals() and hashCode() over the same fields. Two distinct devices sharing a name previously compared equal, so a TreeSet or SortedSet of them kept only one. The ordering is now a default method on UsbDevice, so every implementation shares it - @​dbwiddis.

Bug Fixes and Improvements

• #3651: OSFileStore now guarantees 0 <= getUsableSpace() <= getFreeSpace() <= getTotalSpace() on every platform. The three values are read by separate queries, so on a ZFS dataset or a swap-backed tmpfs they could previously contradict each other; they are now clamped downward to restore the ordering - @​dbwiddis.
• #3657: Fix the TcpState for the FFM implementation of InternetProtocolStats.getConnections() on macOS and set the process cap from the kernel - @​dbwiddis.
• #3661: Setting oshi.os.windows.hkeyperfdata to false now also skips the registry when fetching thread counters, matching its documented behavior and the existing handling for processes - @​dbwiddis.
• #3662: Reading the processor description from the registry no longer throws when a value is missing. CentralProcessor.getFeatureFlags() on Windows now reports every processor feature IsProcessorFeaturePresent() accepts, matching the PF_ defines in winnt.h - @​dbwiddis.
• #3665: NetworkParams.getRoutes() reads the routing table from the kernel through a NET_RT_DUMP sysctl on macOS, FreeBSD, DragonFly BSD and OpenBSD, rather than by running netstat twice - @​dbwiddis.
• #3670: NetworkParams.getHostName() on Linux reads the kernel host name from /proc/sys/kernel/hostname in every backend, fixing the native-free implementation, which truncated a fully qualified name at the first dot and reported localhost when the name did not resolve - @​dbwiddis.
• #3671: NetworkParams.getHostName() and getDomainName() report the empty-string sentinel when the local host name does not resolve, rather than the loopback address's localhost. NetBSD is the most affected platform, having no native host name query of its own - @​dbwiddis.
• #3672, #3674: CentralProcessor frequencies and PhysicalProcessor.getEfficiency() on Apple Silicon are correct regardless of call order and on the M4 and M5 generations. Frequencies previously fell back to a 2.4 GHz placeholder unless getProcessorIdentifier() happened to be called first, were reported a thousand times too low on the M4 and later, and a chip with more or fewer than two kinds of core was misclassified - @​dbwiddis.
• #3675: CentralProcessor.getCurrentFreq() on Apple Silicon can report the frequency the hardware actually ran at, rather than a nominal maximum that never changes. Set oshi.os.mac.cpu.frequency.ioreport to true; it is opt-in because it holds a subscription to a private framework for the lifetime of the process - @​dbwiddis.
• #3680: oshi-metrics reads a disk or network interface once per memoizer expiration window rather than once per meter, so a scrape makes one query where it previously made five or seven, and the meters of one device report the same reading. A rate computed across two of them, such as errors per packet, is now comparable - @​dbwiddis.
• #3681: GpuStats.getGpuUtilization() on Linux reads NVIDIA GPU utilization from NVML. It previously read only the amdgpu/i915/xe sysfs paths, none of which the NVIDIA driver exposes, so an NVIDIA card always returned the -1 sentinel - @​Krillsson.
• #3686: GpuStats.getGpuUtilization() on Windows reads NVIDIA utilization from NVML and AMD utilization from ADL, matching the source order of every other metric on the class. It previously ran only LibreHardwareMonitor and a PDH engine-tick delta, which needs two samples, so the first call returned the -1 sentinel - @​dbwiddis.
• #3687: GpuStats.getSharedMemoryUsed() on Linux reports the amdgpu GTT memory in use rather than always returning -1, and GraphicsCard.getVRam() on an amdgpu card reports the driver's own figure rather than the memory BAR size parsed from lspci or lshw. Several GpuStats metrics on Linux also now return the -1 sentinel when the sysfs file behind them is absent; they previously reported 0, so a card whose hwmon directory omits power1_average read as drawing 0.0 W - @​dbwiddis.
• #3698: OSProcess.getCurrentWorkingDirectory() on macOS returns the directory rather than an empty string in the FFM implementation, and NetworkParams.getDomainName() on macOS and the BSDs returns the canonical name rather than an empty string in both implementations - @​dbwiddis.
• #3705: An AIX process or thread that exits between enumeration and the /proc read is now reported as invalid rather than as a live process owned by root - @​dbwiddis.
• #3705: A failure of kstat_open() on Solaris throws rather than releasing no lock and passing a null control structure to the kernel. The chain lock is static, so a failed open previously blocked every later kstat query on any thread - @​dbwiddis.

Full change log

Release 7.5.0

New Features

• #3614 - #3636: Adopt JSpecify nullability annotations project-wide and enforce them in continuous integration with NullAway, so every type in a signature is non-null unless it is annotated @Nullable. A method not annotated @Nullable is now a checked guarantee rather than an aspiration, and a null check against one is dead code you can delete. The public API packages and the oshi.util tree carry the marking in their package-info.java, where every consumer sees it, including on a Java 8 or classpath build; the implementation packages are marked on their module descriptors; the native mapping packages under oshi.jna and oshi.ffm.platform opt out, because nullability there is the operating system's to state rather than OSHI's. The org.jspecify:jspecify dependency is optional and compile-time only, so it does not reach your runtime classpath. See the FAQ for what this does and does not promise - @​dbwiddis.
• #3615: Add ParseUtil.getStringValueOrEmpty, which normalizes a nullable string to "", alongside the existing getStringValueOrUnknown - @​dbwiddis.
• #3641: Add HardwareAbstractionLayer.getVirtualization(), which identifies the hypervisor, container runtime or cloud platform hosting the system, promoting the long-standing DetectVM demo into the library. It returns an Optional<String> naming the platform, or an empty Optional when no signature matched - which means undetermined, not confirmed bare metal. Detection reads the processor's CPUID vendor string, the computer system's manufacturer and model, and network interface MAC address OUIs, in that order. The signature tables ship as the oshi.vm.properties and oshi.vmmacaddr.properties resources; placing a file of either name earlier on the classpath replaces that table, so you can teach OSHI about a platform it does not know - @​dbwiddis.
• #3646, #3647: Add NetworkParams.getRoutes(), which returns the operating system's routing table as a list of IPRoute objects covering both address families - @​dbwiddis.

Behavior Changes

• #3646: NetworkParams.getIpv6DefaultGateway() on OpenBSD returns the IPv6 gateway. It previously omitted the -inet6 flag and returned the IPv4 gateway. NetworkParams default gateways on AIX return an empty string when no default route is configured, matching the documented contract. They previously returned Constants.UNKNOWN.
• #3614 - #3636: Stating each nullability contract explicitly during the JSpecify sweep surfaced implementations that did not honor it. Values that were documented as unreadable but returned null now return the sentinel the rest of the API uses. The following user-facing behavior changed:

... (truncated)

Changelog

Sourced from com.github.oshi:oshi-core's changelog.

7.6.0 (2026-08-23)

The oshi-dist zip is no longer published to Maven Central; download it from the GitHub release instead.

New Features

• #3652: oshi-metrics reports the OpenTelemetry reserved state for system.filesystem.usage and system.filesystem.utilization, alongside the existing used and free. The three states partition the filesystem, so the usage gauges sum to system.filesystem.limit and the utilization gauges sum to 1.0 - @​dbwiddis.
• #3660, #3678: Display.getDevicePort() reports the port a display is attached to, and on systems with X RandR, Display.getOutputName() gives the name xrandr --output accepts for it - @​ayonization, @​dbwiddis.

Behavior Changes

• #3705: OSDesktopWindow.getLocAndSize() returns a copy of the window's Rectangle and the constructor copies the one it is given, so the class honors the immutability its documentation promises. ApplicationInfo.getAdditionalInfo() returns an unmodifiable map. Code that wrote through either return value silently mutated OSHI's own state; it now has no effect, or throws UnsupportedOperationException for the map - @​dbwiddis.
• #3705: UsbDevice.compareTo() breaks ties on the unique device ID, vendor ID, product ID and serial number after comparing names, and AbstractUsbDevice implements equals() and hashCode() over the same fields. Two distinct devices sharing a name previously compared equal, so a TreeSet or SortedSet of them kept only one. The ordering is now a default method on UsbDevice, so every implementation shares it - @​dbwiddis.

Bug Fixes and Improvements

• #3651: OSFileStore now guarantees 0 <= getUsableSpace() <= getFreeSpace() <= getTotalSpace() on every platform. The three values are read by separate queries, so on a ZFS dataset or a swap-backed tmpfs they could previously contradict each other; they are now clamped downward to restore the ordering - @​dbwiddis.
• #3657: Fix the TcpState for the FFM implementation of InternetProtocolStats.getConnections() on macOS and set the process cap from the kernel - @​dbwiddis.
• #3661: Setting oshi.os.windows.hkeyperfdata to false now also skips the registry when fetching thread counters, matching its documented behavior and the existing handling for processes - @​dbwiddis.
• #3662: Reading the processor description from the registry no longer throws when a value is missing. CentralProcessor.getFeatureFlags() on Windows now reports every processor feature IsProcessorFeaturePresent() accepts, matching the PF_ defines in winnt.h - @​dbwiddis.
• #3665: NetworkParams.getRoutes() reads the routing table from the kernel through a NET_RT_DUMP sysctl on macOS, FreeBSD, DragonFly BSD and OpenBSD, rather than by running netstat twice - @​dbwiddis.
• #3670: NetworkParams.getHostName() on Linux reads the kernel host name from /proc/sys/kernel/hostname in every backend, fixing the native-free implementation, which truncated a fully qualified name at the first dot and reported localhost when the name did not resolve - @​dbwiddis.
• #3671: NetworkParams.getHostName() and getDomainName() report the empty-string sentinel when the local host name does not resolve, rather than the loopback address's localhost. NetBSD is the most affected platform, having no native host name query of its own - @​dbwiddis.
• #3672, #3674: CentralProcessor frequencies and PhysicalProcessor.getEfficiency() on Apple Silicon are correct regardless of call order and on the M4 and M5 generations. Frequencies previously fell back to a 2.4 GHz placeholder unless getProcessorIdentifier() happened to be called first, were reported a thousand times too low on the M4 and later, and a chip with more or fewer than two kinds of core was misclassified - @​dbwiddis.
• #3675: CentralProcessor.getCurrentFreq() on Apple Silicon can report the frequency the hardware actually ran at, rather than a nominal maximum that never changes. Set oshi.os.mac.cpu.frequency.ioreport to true; it is opt-in because it holds a subscription to a private framework for the lifetime of the process - @​dbwiddis.
• #3680: oshi-metrics reads a disk or network interface once per memoizer expiration window rather than once per meter, so a scrape makes one query where it previously made five or seven, and the meters of one device report the same reading. A rate computed across two of them, such as errors per packet, is now comparable - @​dbwiddis.
• #3681: GpuStats.getGpuUtilization() on Linux reads NVIDIA GPU utilization from NVML. It previously read only the amdgpu/i915/xe sysfs paths, none of which the NVIDIA driver exposes, so an NVIDIA card always returned the -1 sentinel - @​Krillsson.
• #3686: GpuStats.getGpuUtilization() on Windows reads NVIDIA utilization from NVML and AMD utilization from ADL, matching the source order of every other metric on the class. It previously ran only LibreHardwareMonitor and a PDH engine-tick delta, which needs two samples, so the first call returned the -1 sentinel - @​dbwiddis.
• #3687: GpuStats.getSharedMemoryUsed() on Linux reports the amdgpu GTT memory in use rather than always returning -1, and GraphicsCard.getVRam() on an amdgpu card reports the driver's own figure rather than the memory BAR size parsed from lspci or lshw. Several GpuStats metrics on Linux also now return the -1 sentinel when the sysfs file behind them is absent; they previously reported 0, so a card whose hwmon directory omits power1_average read as drawing 0.0 W - @​dbwiddis.
• #3698: OSProcess.getCurrentWorkingDirectory() on macOS returns the directory rather than an empty string in the FFM implementation, and NetworkParams.getDomainName() on macOS and the BSDs returns the canonical name rather than an empty string in both implementations - @​dbwiddis.
• #3705: An AIX process or thread that exits between enumeration and the /proc read is now reported as invalid rather than as a live process owned by root - @​dbwiddis.
• #3705: A failure of kstat_open() on Solaris throws rather than releasing no lock and passing a null control structure to the kernel. The chain lock is static, so a failed open previously blocked every later kstat query on any thread - @​dbwiddis.

7.5.0 (2026-08-16)

New Features

• #3614, #3615, #3618, #3619, #3620, #3621, #3622, #3623, #3624, #3625, #3626,

... (truncated)

Commits

• 430f530 [maven-release-plugin] prepare release oshi-parent-7.6.0
• ae8b7bb 7.6.0 Release
• d7e05aa Report an absent SMC once instead of on every sensor query, and quiet the stu...
• 2382a05 Fix what SpotBugs and Sonar found (#3705)
• 1534790 Update vmactions/freebsd-vm digest to d0518f9 (#3702)
• 161dbee Run AppVeyor on JDK 25, and correct what pins testRelease
• a93b66e Bring the new audit jobs onto upload-artifact v7
• 8dde9a9 Extend the FFM layout audit to the Unix platforms, and fix what it found (#3701)
• 3141850 Update vmactions/freebsd-vm digest to d0518f9 (#3699)
• 75aabd0 Update actions/upload-artifact action to v7 (#3700)
• Additional commits viewable in compare view

Updates org.springdoc:springdoc-openapi-starter-webmvc-ui from 3.0.3 to 3.1.0

Release notes

Sourced from org.springdoc:springdoc-openapi-starter-webmvc-ui's releases.

springdoc-openapi v3,1,0 released!

What's Changed

• Fix request-specific Swagger UI index transformations by @​limehee in springdoc/springdoc-openapi#3279
• Fix #3282: preserve nest() version predicate across all routes in nest by @​seonwooj0810 in springdoc/springdoc-openapi#3296
• Upgrade Spring Boot to version 4.1.0
• Upgrade Spring AI to version 2.0.0
• Upgrade swagger-core to version 2.2.52
• Upgrade swagger-ui to version 5.32.11
• #3307 – Act upon SonarQube warnings
• #3306 – Act upon SonarQube warnings

Added

• #3269 – Add mechanism to disable nullable for Kotlin properties
• Allow request-specific Swagger UI index transformation

Fixed

• #3304 – Kotlin parent class's field is not properly marked as nullable
• #3294 – Duplicated path getting swagger-config
• #3293 – Inconsistent OpenAPI schema naming with SNAKE_CASE: some Java record fields remain camelCase
• #3292 – Make WebProperties and WebMvcProperties optional in SwaggerConfig
• #3284 – Upgrade swagger-core from version 2.2.48 to 2.2.49
• #3282 – Preserve version from nest() predicate across all routes in nest
• #3281 – Stabilize Spring Data Page schema property order
• #3274 – Description disappears from the generated json after upgrade to 3.0.3
• #3270 – Validation annotation of ParameterObject property applied to PathVariable with the same name, even in unrelated endpoints
• #3266 – Upgrade swagger-core from version 2.2.47 to 2.2.48
• #3263 – Null key for a Map not allowed in JSON

Full Changelog: springdoc/springdoc-openapi@v3.0.3...v3.1.0

Changelog

Sourced from org.springdoc:springdoc-openapi-starter-webmvc-ui's changelog.

[3.1.0] - 2026-07-31

Added

• #3269 – Add mechanism to disable nullable for Kotlin properties
• Allow request-specific Swagger UI index transformation

Changed

• Upgrade Spring Boot to version 4.1.0
• Upgrade Spring AI to version 2.0.0
• Upgrade swagger-core to version 2.2.52
• Upgrade swagger-ui to version 5.32.11
• #3307 – Act upon SonarQube warnings
• #3306 – Act upon SonarQube warnings

Fixed

• #3304 – Kotlin parent class's field is not properly marked as nullable
• #3294 – Duplicated path getting swagger-config
• #3293 – Inconsistent OpenAPI schema naming with SNAKE_CASE: some Java record fields remain camelCase
• #3292 – Make WebProperties and WebMvcProperties optional in SwaggerConfig
• #3284 – Upgrade swagger-core from version 2.2.48 to 2.2.49
• #3282 – Preserve version from nest() predicate across all routes in nest
• #3281 – Stabilize Spring Data Page schema property order
• #3274 – Description disappears from the generated json after upgrade to 3.0.3
• #3270 – Validation annotation of ParameterObject property applied to PathVariable with the same name, even in unrelated endpoints
• #3266 – Upgrade swagger-core from version 2.2.47 to 2.2.48
• #3263 – Null key for a Map not allowed in JSON

Commits

• e04f91f [maven-release-plugin] prepare release v3.1.0
• 83551ce CHANGELOG.md update
• 4a2b5bd CHANGELOG.md update
• ad0a5a5 swagger-ui upgrade to version 5.32.11
• 6e14cb4 Fix sonarqube errors
• eae2056 Fix sonarqube errors
• b09a77b chore: act upon SonarQube warnings
• cc3d86d upgrade spring-ai to version 2.0.0
• df1c2ba spring-boot upgrade to 4.1.0
• b6e5212 Kotlin parent class's field is not properly marked as nullable. Fixes #3304
• Additional commits viewable in compare view

Updates com.azure:azure-data-tables from 12.5.11 to 12.5.12

Release notes

Sourced from com.azure:azure-data-tables's releases.

com.azure+azure-data-tables_12.5.12

12.5.12 (2026-08-18)

Other Changes

Dependency Updates

• Upgraded azure-core-http-netty from 1.16.5 to version 1.16.6.
• Upgraded azure-core from 1.58.1 to version 1.59.0.

Commits

• c923efa Prepare patch release 20260818 (#50173)
• c6b40a1 Add WireMock dependency version 2.35.2 to external dependencies
• 8c93dca Increment package versions for commvaultcontentstore releases (#50171)
• f3e1875 Configurations: 'specification/compute/resource-manager/Microsoft.Compute/Co...
• d39ffca Prepare OTel AutoConfigure release v1.6.0 (#50167)
• ac5a002 [AzureMonitorAutoConfigure] Validate ingestion and Live Metrics redirect targ...
• 53e6420 Increment versions for core releases (#50152)
• 168277b Update resources TypeSpec commit (#50164)
• 6cc7989 Migrate resource manager resources generation to TypeSpec (#50111)
• 645e30c Increment package versions for network auto-releases (#50162)
• Additional commits viewable in compare view

Updates org.jsoup:jsoup from 1.22.2 to 1.23.2

Release notes

Sourced from org.jsoup:jsoup's releases.

jsoup 1.23.2

jsoup 1.23.2 is out now. This release focuses largely on bug fixes, specification correctness, and performance improvements.

It brings closer alignment with the HTML, XML, URL, and form submission specifications; improves XML and W3C DOM conversion; and makes HTTP workloads more efficient through streamed request bodies and broader JDK HttpClient reuse.

This version also includes new node insertion methods for Elements, and DOM mutations now reject operations that would create a cycle.

jsoup is a Java library for working with real-world HTML and XML. It provides a very convenient API for extracting and manipulating data, using the best of HTML5 DOM methods and CSS selectors.

Download jsoup now.

Improvements

• Improved consecutive StreamParser.selectFirst() calls during progressive parsing, so later matches are returned with their parsed contents when earlier selections had left them as parser lookahead. E.g., given <title>One</title><p id=hit>Full</p><p>Next</p>, selecting title and then #hit now advances ...

  Description has been truncated