Skip to content

chore(deps): bump the maven-dependencies group with 22 updates - #2872

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-dependencies-c298e6215d
Open

chore(deps): bump the maven-dependencies group with 22 updates#2872
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-dependencies-c298e6215d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-dependencies group with 22 updates:

Package From To
biz.aQute.bnd:biz.aQute.bndlib 7.3.0 7.4.0
com.puppycrawl.tools:checkstyle 13.10.0 14.0.0
org.easymock:easymock 5.6.0 5.7.0
net.bytebuddy:byte-buddy 1.18.11 1.18.12
net.bytebuddy:byte-buddy-agent 1.18.11 1.18.12
org.springframework:spring-context 7.0.8 7.0.9
org.springframework:spring-web 7.0.8 7.0.9
org.springframework:spring-jdbc 7.0.8 7.0.9
org.springframework:spring-orm 7.0.8 7.0.9
org.springframework:spring-webmvc 7.0.8 7.0.9
org.springframework:spring-test 7.0.8 7.0.9
com.mycila:license-maven-plugin 5.1.1 5.1.2
org.omnifaces:omnifaces 5.4.5 5.5
org.springframework.boot:spring-boot-dependencies 4.1.0 4.1.1
org.springframework.boot:spring-boot-autoconfigure 4.1.0 4.1.1
org.springframework.boot:spring-boot-configuration-processor 4.1.0 4.1.1
org.springframework.boot:spring-boot-maven-plugin 4.1.0 4.1.1
org.springframework.boot:spring-boot-starter-thymeleaf 4.1.0 4.1.1
org.apache.meecrowave:meecrowave-core 2.0.0 2.1.1
org.apache.meecrowave:meecrowave-junit 2.0.0 2.1.1
com.flowlogix:flowlogix-jee 11.4.1 11.4.2
fish.payara.extras:payara-micro 7.2026.7 7.2026.8

Updates biz.aQute.bnd:biz.aQute.bndlib from 7.3.0 to 7.4.0

Release notes

Sourced from biz.aQute.bnd:biz.aQute.bndlib's releases.

Bnd/Bndtools 7.4.0

See Release Notes

What's Changed

... (truncated)

Commits
  • 2046c36 build: Build Release 7.4.0
  • aab8519 build: Build Release 7.4.0.RC3
  • 606a199 build: Build Release 7.4.0.RC2
  • afdf547 missing files
  • 9074a7a build: Build Release 7.4.0.RC1
  • b5c4c58 Revert "Eclipse feature support for buildpath"
  • 4fd8e4a Eclipse feature support for buildpath
  • a6ba530 Merge pull request #7336 from chrisrueger/7214-fix-deadlock-junit-tee
  • 0fda33a Fix thread-safety in Tee class
  • 061b7fd Merge pull request #7325 from bndtools/dependabot/github_actions/actions/chec...
  • Additional commits viewable in compare view

Updates com.puppycrawl.tools:checkstyle from 13.10.0 to 14.0.0

Release notes

Sourced from com.puppycrawl.tools:checkstyle's releases.

checkstyle-14.0.0

Checkstyle 14.0.0 - https://checkstyle.org/releasenotes.html#Release_14.0.0

New:

#8240 - Java Grammar: module-info.java support.

Bug fixes:

#21112 - InvalidJavadocPosition: false positive on module-info.java Javadoc. #21110 - PackageDeclaration: false positive "Missing package declaration" on module-info.java.

checkstyle-13.11.0

Checkstyle 13.11.0 - https://checkstyle.org/releasenotes.html#Release_13.11.0

Breaking backward compatibility:

#21080 - WriteTag: remove tagSeverity property and make Check to work only for violation of tag absence.

New:

#20984 - new Check: PreferLiteralJavadocInlineTag.

Bug fixes:

#13426 - Xdoc file generation should be separate project that executes in maven build as just another phase; remove doxia dependency. #21222 - Add PreferLiteralJavadocInlineTag in openjdk_checks.xml. #21101 - google_checks.xml: LocalVariableName/LocalFinalVariableName false positive for identifier example "guava33_4_6" from Google Java Style Guide. #20973 - Javadoc parse error on quoted HTML attribute value containing '<'. #19913 - Documentation Comments Style Guide - Avoid Latin. #17728 - Google style: False negative missing spacing between type and variable.

... (truncated)

Commits
  • 2feea2e [maven-release-plugin] prepare release checkstyle-14.0.0
  • 9b5b44f doc: release notes for 14.0.0
  • 9c5344b Issue #21112: Fix InvalidJavadocPosition false positive on module Javadoc
  • 21cdce9 Issue #21245: Resolve Commons Logging incompatibility with XWiki validation
  • f1cdd26 Issue #21110: Fix PackageDeclaration false positive on module-info.java
  • 48b0316 infra: use pull_request_target for site workflow
  • e7d79f5 doc: mention 14.x in JRE matrix and Java 25 language support on index page
  • 86c9dae minor: Bump version to 14.0.0-SNAPSHOT
  • 74d612a Issue #8240: Add grammar support for module-info.java
  • 0a64d24 Issue #21207: Make LocalFinalVariableName default-config example Example1
  • Additional commits viewable in compare view

Updates org.easymock:easymock from 5.6.0 to 5.7.0

Release notes

Sourced from org.easymock:easymock's releases.

5.7.0

Add Java 26 support where bytebuddy isn't using unsafe anymore.

Change log

  • Add mock() methods without parameters using varargs reification (#933)
  • Mock creation fails with JDK 26 and ByteBuddy 1.18.10 (#908)git log --oneline
  • Use new Maven central plugin
  • Use a github_token instead
  • Add the missing REST calls to fully automated the release
  • Move to .mvn style version
  • Use assertThrows all over the place
  • Optimize imports and finish updating to JUnit 5
  • Update eclipse configuration
  • Move all to UTF-8 like it should already be
  • Use https for xsd
  • Update objenesis to 3.6
  • Update copyrights to 2026
  • Remove Hamcrest usage
  • Add Maven cache
  • Bump actions/checkout from 7.0.0 to 7.0.1 (#917)
  • Bump actions/github-script from 8 to 9 (#887)
  • Bump actions/setup-java from 5.6.0 to 5.7.0 (#918)
  • Bump activesupport from 8.1.2 to 8.1.2.1 in /website (#882)
  • Bump addressable from 2.8.8 to 2.9.0 in /website (#886)
  • Bump ch.qos.logback:logback-classic from 1.3.14 to 1.6.3 (#930)
  • Bump com.github.spotbugs:spotbugs from 4.8.6 to 4.10.3 (#921)
  • Bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.6.6 to 4.10.3.0 (#922)
  • Bump com.mycila:license-maven-plugin from 4.6 to 5.1.1 (#919)
  • Bump com.puppycrawl.tools:checkstyle from 13.9.0 to 13.11.0 (#931)
  • Bump concurrent-ruby from 1.3.6 to 1.3.7 in /website (#913)
  • Bump faraday from 2.14.2 to 2.14.3 in /website (#912)
  • Bump json from 2.20.0 to 2.21.2 in /website (#924)
  • Bump junit.jupiter.version from 5.14.1 to 6.1.3 (#926)
  • Bump net.bytebuddy:byte-buddy from 1.18.8 to 1.18.12 (#932)
  • Bump nokogiri from 1.19.3 to 1.19.4 in /website (#911)
  • Bump org.apache.felix:maven-bundle-plugin from 5.1.9 to 6.1.0 (#929)
  • Bump org.apache.maven.plugins:maven-assembly-plugin from 3.7.1 to 3.8.0 (#832)
  • Bump org.apache.maven.plugins:maven-compiler-plugin from 3.14.1 to 3.15.0 (#863)
  • Bump org.apache.maven.plugins:maven-dependency-plugin from 3.10.0 to 3.11.0 (#899)
  • Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 (#894)
  • Bump org.apache.maven.plugins:maven-jar-plugin from 3.4.2 to 3.5.0 (#833)
  • Bump org.apache.maven.plugins:maven-resources-plugin from 3.4.0 to 3.5.0 (#879)
  • Bump org.apache.maven.plugins:maven-shade-plugin from 3.6.1 to 3.6.2 (#880)
  • Bump org.apache.maven.plugins:maven-source-plugin from 3.3.1 to 3.4.0 (#837)
  • Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 (#900)
  • Bump org.apache.maven.plugins:maven-toolchains-plugin from 3.2.0 to 3.3.0 (#928)
  • Bump org.apache.maven.surefire:surefire-testng from 3.5.5 to 3.5.6 (#897)
  • Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.26 to 1.27 (#852)
  • Bump org.codehaus.mojo:exec-maven-plugin from 3.6.2 to 3.6.3 (#844)

... (truncated)

Changelog

Sourced from org.easymock:easymock's changelog.

Add Java 26 support where bytebuddy isn't using unsafe anymore.

Change log

  • Add mock() methods without parameters using varargs reification (#933)
  • Mock creation fails with JDK 26 and ByteBuddy 1.18.10 (#908)git log --oneline
  • Use new Maven central plugin
  • Use a github_token instead
  • Add the missing REST calls to fully automated the release
  • Move to .mvn style version
  • Use assertThrows all over the place
  • Optimize imports and finish updating to JUnit 5
  • Update eclipse configuration
  • Move all to UTF-8 like it should already be
  • Use https for xsd
  • Update objenesis to 3.6
  • Update copyrights to 2026
  • Remove Hamcrest usage
  • Add Maven cache
  • Bump actions/checkout from 7.0.0 to 7.0.1 (#917)
  • Bump actions/github-script from 8 to 9 (#887)
  • Bump actions/setup-java from 5.6.0 to 5.7.0 (#918)
  • Bump activesupport from 8.1.2 to 8.1.2.1 in /website (#882)
  • Bump addressable from 2.8.8 to 2.9.0 in /website (#886)
  • Bump ch.qos.logback:logback-classic from 1.3.14 to 1.6.3 (#930)
  • Bump com.github.spotbugs:spotbugs from 4.8.6 to 4.10.3 (#921)
  • Bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.6.6 to 4.10.3.0 (#922)
  • Bump com.mycila:license-maven-plugin from 4.6 to 5.1.1 (#919)
  • Bump com.puppycrawl.tools:checkstyle from 13.9.0 to 13.11.0 (#931)
  • Bump concurrent-ruby from 1.3.6 to 1.3.7 in /website (#913)
  • Bump faraday from 2.14.2 to 2.14.3 in /website (#912)
  • Bump json from 2.20.0 to 2.21.2 in /website (#924)
  • Bump junit.jupiter.version from 5.14.1 to 6.1.3 (#926)
  • Bump net.bytebuddy:byte-buddy from 1.18.8 to 1.18.12 (#932)
  • Bump nokogiri from 1.19.3 to 1.19.4 in /website (#911)
  • Bump org.apache.felix:maven-bundle-plugin from 5.1.9 to 6.1.0 (#929)
  • Bump org.apache.maven.plugins:maven-assembly-plugin from 3.7.1 to 3.8.0 (#832)
  • Bump org.apache.maven.plugins:maven-compiler-plugin from 3.14.1 to 3.15.0 (#863)
  • Bump org.apache.maven.plugins:maven-dependency-plugin from 3.10.0 to 3.11.0 (#899)
  • Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 (#894)
  • Bump org.apache.maven.plugins:maven-jar-plugin from 3.4.2 to 3.5.0 (#833)
  • Bump org.apache.maven.plugins:maven-resources-plugin from 3.4.0 to 3.5.0 (#879)
  • Bump org.apache.maven.plugins:maven-shade-plugin from 3.6.1 to 3.6.2 (#880)
  • Bump org.apache.maven.plugins:maven-source-plugin from 3.3.1 to 3.4.0 (#837)
  • Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 (#900)
  • Bump org.apache.maven.plugins:maven-toolchains-plugin from 3.2.0 to 3.3.0 (#928)
  • Bump org.apache.maven.surefire:surefire-testng from 3.5.5 to 3.5.6 (#897)
  • Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.26 to 1.27 (#852)
  • Bump org.codehaus.mojo:exec-maven-plugin from 3.6.2 to 3.6.3 (#844)
  • Bump org.codehaus.mojo:jdepend-maven-plugin from 2.1 to 2.2.0 (#855)

... (truncated)

Commits
  • a8422b9 Move to version 5.7.0
  • c0ffdcc Flatten for oss
  • dc07999 Add missing headers
  • 6047a3c Class can be static
  • e208b61 Upgrade samples to JUnit 5 and reified calls
  • f833ee7 Add reified methods (close #933)
  • ffaa64b Add flatten-maven-plugin
  • 02e038e Bump com.puppycrawl.tools:checkstyle from 13.10.0 to 13.11.0
  • dd4dcf8 Bump net.bytebuddy:byte-buddy from 1.18.11 to 1.18.12
  • 4d66c46 CI has been github actions for years now
  • Additional commits viewable in compare view

Updates net.bytebuddy:byte-buddy from 1.18.11 to 1.18.12

Release notes

Sourced from net.bytebuddy:byte-buddy's releases.

Byte Buddy 1.18.12

  • Automatically support Kotlin in Gradle plugin.
  • Add support for native attach on Windows for ARM64.
  • Correct JNA injector which accidentally created on based on Unsafe.
Changelog

Sourced from net.bytebuddy:byte-buddy's changelog.

17. July 2026: version 1.18.12

  • Automatically support Kotlin in Gradle plugin.
  • Correct JNA injector which accidentally created on based on Unsafe.
  • Support dynamic attach on Windows ARM64 by shipping a native attach_hotspot_windows library for win32-aarch64.
Commits
  • 706d4a4 [publish] Releasing Byte Buddy 1.18.12
  • b567461 [release] Release new version
  • bcb5d26 Avoid compilation issue on older JVMs.
  • e42d726 Remove unused import.
  • 942efc4 [release] Release new version
  • 7cff8e9 [release] Release new version
  • 6d6cd85 feat(gradle/plugin): native kotlin support (#1925)
  • fe2f8d0 Add reproducible builds badge to readme.
  • 440fa0a Add native attach library for Windows ARM64 to support dynamic attach.
  • 373c52f Update internal Byte Buddy and release notes.
  • Additional commits viewable in compare view

Updates net.bytebuddy:byte-buddy-agent from 1.18.11 to 1.18.12

Release notes

Sourced from net.bytebuddy:byte-buddy-agent's releases.

Byte Buddy 1.18.12

  • Automatically support Kotlin in Gradle plugin.
  • Add support for native attach on Windows for ARM64.
  • Correct JNA injector which accidentally created on based on Unsafe.
Changelog

Sourced from net.bytebuddy:byte-buddy-agent's changelog.

17. July 2026: version 1.18.12

  • Automatically support Kotlin in Gradle plugin.
  • Correct JNA injector which accidentally created on based on Unsafe.
  • Support dynamic attach on Windows ARM64 by shipping a native attach_hotspot_windows library for win32-aarch64.
Commits
  • 706d4a4 [publish] Releasing Byte Buddy 1.18.12
  • b567461 [release] Release new version
  • bcb5d26 Avoid compilation issue on older JVMs.
  • e42d726 Remove unused import.
  • 942efc4 [release] Release new version
  • 7cff8e9 [release] Release new version
  • 6d6cd85 feat(gradle/plugin): native kotlin support (#1925)
  • fe2f8d0 Add reproducible builds badge to readme.
  • 440fa0a Add native attach library for Windows ARM64 to support dynamic attach.
  • 373c52f Update internal Byte Buddy and release notes.
  • Additional commits viewable in compare view

Updates net.bytebuddy:byte-buddy-agent from 1.18.11 to 1.18.12

Release notes

Sourced from net.bytebuddy:byte-buddy-agent's releases.

Byte Buddy 1.18.12

  • Automatically support Kotlin in Gradle plugin.
  • Add support for native attach on Windows for ARM64.
  • Correct JNA injector which accidentally created on based on Unsafe.
Changelog

Sourced from net.bytebuddy:byte-buddy-agent's changelog.

17. July 2026: version 1.18.12

  • Automatically support Kotlin in Gradle plugin.
  • Correct JNA injector which accidentally created on based on Unsafe.
  • Support dynamic attach on Windows ARM64 by shipping a native attach_hotspot_windows library for win32-aarch64.
Commits
  • 706d4a4 [publish] Releasing Byte Buddy 1.18.12
  • b567461 [release] Release new version
  • bcb5d26 Avoid compilation issue on older JVMs.
  • e42d726 Remove unused import.
  • 942efc4 [release] Release new version
  • 7cff8e9 [release] Release new version
  • 6d6cd85 feat(gradle/plugin): native kotlin support (#1925)
  • fe2f8d0 Add reproducible builds badge to readme.
  • 440fa0a Add native attach library for Windows ARM64 to support dynamic attach.
  • 373c52f Update internal Byte Buddy and release notes.
  • Additional commits viewable in compare view

Updates org.springframework:spring-context from 7.0.8 to 7.0.9

Release notes

Sourced from org.springframework:spring-context's releases.

v7.0.9

⚠️ Attention Required

  • In Spring Framework 7.0.9, ForwardedHeaderFilter (Spring MVC) and ForwardedHeaderTransformer (WebFlux) each provide a boolean constructor argument whether to use the standard "Forwarded" header or the "X-Forwarded" alternative headers. A separate property turns on and off use of "X-Forwarded-Prefix". While the default constructor preserves the existing behavior, we recommend to use the new constructor to explicitly specify which forwarded headers to use to make the processing more deterministic and aligned with what is expected from the proxy. Please, see the updated Security Considerations section for details. In 7.1 with #37072 the default constructor is deprecated and marked for removal. #37090
  • In Spring Framework 7.0.9, SimpleEvaluationContext no longer supports expression compilation by default, regardless of the compiler mode configured via SpelParserConfiguration or the spring.expression.compiler.mode system property or Spring property. Applications that intentionally use SimpleEvaluationContext with trusted expressions and require compilation for performance reasons can opt in by calling withCompilationSupported() on the SimpleEvaluationContext builder. Care should be taken when opting in to compilation, as doing so removes the safety guards applied during interpreted evaluation. #37035

⭐ New Features

  • Ignore an empty port value in URI parsing #37117
  • Avoid retaining class files in annotation metadata #37112
  • Add @Nullable annotations when treating Map.remove() as returning @Nullable #37067
  • Revisit SSE view fragments handling #37061
  • Check list index after auto-grow in AbstractNestablePropertyAccessor #37036
  • Disable SpEL expression compilation by default in SimpleEvaluationContext #37035
  • Limit result size of BigDecimal/BigInteger power operations in SpEL #37034
  • Refactor redirect handling in UrlHandlerFilter #37030
  • Revise stylesheet source handling in XsltView #37029
  • Revise view name handling in UrlFilenameViewController #37027
  • Handle pre-flight requests in functional endpoint setup without DispatcherHandler #37024
  • Improve WebSocket handshake error logging #37023
  • Fix missing nullability in JdbcTemplate.batchUpdate #37012
  • Timeout property in RetryPolicy does not have a default constant #36983
  • Write native configuration files as UTF-8 #36972
  • DefaultServerRequest.ServletParametersMap.entrySet() does not retain HttpServletRequest.getParameterMap() order #36966
  • Perform nextKey within synchronization for SQLite as well #36959
  • Add support for custom ObjectInputFilter on DefaultDeserializer #36958
  • Revise resource bundle caching for common locales #36957
  • Improve nullability for getSession(*) in MockHttpServletRequest #36926
  • Improve fallback logic in ParameterContentNegotiationStrategy and ParameterContentTypeResolver #36925
  • Improve ambiguous match check on preflight request #36903
  • Improve Groovy markup template loading #36902
  • Improve request path handling on a Reactor Netty server #36893
  • Improve JettyWebSocketSession error handling #36891

🐞 Bug Fixes

  • EclipseLinkJpaDialect singleton lock in EclipseLinkConnectionHandle.getConnection() serializes all JDBC connection acquisitions under load #37085
  • MetadataReader fails to read byte[] array from annotation #37083
  • Ensure parsing/tostring symmetry in ContentDisposition #37064
  • Character outside of permitted range in Content Disposition #37062
  • Release Jackson BufferRecycler to its pool in encoders #37059
  • Ensure consistent error escaping #37055
  • Refine template name processing #37054
  • Reset TwoByteMatcher partial match on mismatching byte #37053
  • Refactor async XML parsing limit checks #37031
  • Fix part constraint checks in PartEventHttpMessageReader #37028
  • Fix buffer leak in RSocket SETUP frame handling #37026
  • Ensure correct Jetty core response cookie handling #37025
  • Align domainToAscii with current WhatWG spec #37018
  • Ensure consistent ButtonTag value attribute processing #37017

... (truncated)

Commits
  • 82a6b40 Release Spring Framework 7.0.9
  • a7b1b59 Upgrade to Reactor 2025.0.7
  • 996e3d3 Upgrade to Micrometer 1.16.7
  • 73f5ddd Refactor maxInMemory limit handling for async XML parsing
  • 675f25d Leading slash handling in UrlHandlerFilter
  • 692dbc9 Apply ResourceHandlerUtils checks in XsltView
  • 8647e90 Consistent maxPartSize check in PartEventHttpMessageReader
  • b9379e3 Check viewName for special prefixes in UrlFilenameViewController
  • a784dbe Ensure Payload release on early error in createHeaders
  • 3b492f3 Return sameSite cookie value in Jetty response
  • Additional commits viewable in compare view

Updates org.springframework:spring-web from 7.0.8 to 7.0.9

Release notes

Sourced from org.springframework:spring-web's releases.

v7.0.9

⚠️ Attention Required

  • In Spring Framework 7.0.9, ForwardedHeaderFilter (Spring MVC) and ForwardedHeaderTransformer (WebFlux) each provide a boolean constructor argument whether to use the standard "Forwarded" header or the "X-Forwarded" alternative headers. A separate property turns on and off use of "X-Forwarded-Prefix". While the default constructor preserves the existing behavior, we recommend to use the new constructor to explicitly specify which forwarded headers to use to make the processing more deterministic and aligned with what is expected from the proxy. Please, see the updated Security Considerations section for details. In 7.1 with #37072 the default constructor is deprecated and marked for removal. #37090
  • In Spring Framework 7.0.9, SimpleEvaluationContext no longer supports expression compilation by default, regardless of the compiler mode configured via SpelParserConfiguration or the spring.expression.compiler.mode system property or Spring property. Applications that intentionally use SimpleEvaluationContext with trusted expressions and require compilation for performance reasons can opt in by calling withCompilationSupported() on the SimpleEvaluationContext builder. Care should be taken when opting in to compilation, as doing so removes the safety guards applied during interpreted evaluation. #37035

⭐ New Features

  • Ignore an empty port value in URI parsing #37117
  • Avoid retaining class files in annotation metadata #37112
  • Add @Nullable annotations when treating Map.remove() as returning @Nullable #37067
  • Revisit SSE view fragments handling #37061
  • Check list index after auto-grow in AbstractNestablePropertyAccessor #37036
  • Disable SpEL expression compilation by default in SimpleEvaluationContext #37035
  • Limit result size of BigDecimal/BigInteger power operations in SpEL #37034
  • Refactor redirect handling in UrlHandlerFilter #37030
  • Revise stylesheet source handling in XsltView #37029
  • Revise view name handling in UrlFilenameViewController #37027
  • Handle pre-flight requests in functional endpoint setup without DispatcherHandler #37024
  • Improve WebSocket handshake error logging #37023
  • Fix missing nullability in JdbcTemplate.batchUpdate #37012
  • Timeout property in RetryPolicy does not have a default constant #36983
  • Write native configuration files as UTF-8 #36972
  • DefaultServerRequest.ServletParametersMap.entrySet() does not retain HttpServletRequest.getParameterMap() order #36966
  • Perform nextKey within synchronization for SQLite as well #36959
  • Add support for custom ObjectInputFilter on DefaultDeserializer #36958
  • Revise resource bundle caching for common locales #36957
  • Improve nullability for getSession(*) in MockHttpServletRequest #36926
  • Improve fallback logic in ParameterContentNegotiationStrategy and ParameterContentTypeResolver #36925
  • Improve ambiguous match check on preflight request #36903
  • Improve Groovy markup template loading #36902
  • Improve request path handling on a Reactor Netty server #36893
  • Improve JettyWebSocketSession error handling #36891

🐞 Bug Fixes

  • EclipseLinkJpaDialect singleton lock in EclipseLinkConnectionHandle.getConnection() serializes all JDBC connection acquisitions under load #37085
  • MetadataReader fails to read byte[] array from annotation #37083
  • Ensure parsing/tostring symmetry in ContentDisposition #37064
  • Character outside of permitted range in Content Disposition #37062
  • Release Jackson BufferRecycler to its pool in encoders #37059
  • Ensure consistent error escaping #37055
  • Refine template name processing #37054
  • Reset TwoByteMatcher partial match on mismatching byte #37053
  • Refactor async XML parsing limit checks #37031
  • Fix part constraint checks in PartEventHttpMessageReader #37028
  • Fix buffer leak in RSocket SETUP frame handling #37026
  • Ensure correct Jetty core response cookie handling #37025
  • Align domainToAscii with current WhatWG spec #37018
  • Ensure consistent ButtonTag value attribute processing #37017

... (truncated)

Commits
  • 82a6b40 Release Spring Framework 7.0.9
  • a7b1b59 Upgrade to Reactor 2025.0.7
  • 996e3d3 Upgrade to Micrometer 1.16.7
  • 73f5ddd Refactor maxInMemory limit handling for async XML parsing
  • 675f25d Leading slash handling in UrlHandlerFilter
  • 692dbc9 Apply ResourceHandlerUtils checks in XsltView
  • 8647e90 Consistent maxPartSize check in PartEventHttpMessageReader
  • b9379e3 Check viewName for special prefixes in UrlFilenameViewController
  • a784dbe Ensure Payload release on early error in createHeaders
  • 3b492f3 Return sameSite cookie value in Jetty response
  • Additional commits viewable in compare view

Updates org.springframework:spring-jdbc from 7.0.8 to 7.0.9

Release notes

Sourced from org.springframework:spring-jdbc's releases.

v7.0.9

⚠️ Attention Required

  • In Spring Framework 7....

    Description has been truncated

@dependabot
chore(deps): bump the maven-dependencies group with 22 updates
3946e43 
Bumps the maven-dependencies group with 22 updates:

| Package | From | To |
| --- | --- | --- |
| [biz.aQute.bnd:biz.aQute.bndlib](https://github.com/bndtools/bnd) | `7.3.0` | `7.4.0` |
| [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `13.10.0` | `14.0.0` |
| [org.easymock:easymock](https://github.com/easymock/easymock) | `5.6.0` | `5.7.0` |
| [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.18.11` | `1.18.12` |
| [net.bytebuddy:byte-buddy-agent](https://github.com/raphw/byte-buddy) | `1.18.11` | `1.18.12` |
| [org.springframework:spring-context](https://github.com/spring-projects/spring-framework) | `7.0.8` | `7.0.9` |
| [org.springframework:spring-web](https://github.com/spring-projects/spring-framework) | `7.0.8` | `7.0.9` |
| [org.springframework:spring-jdbc](https://github.com/spring-projects/spring-framework) | `7.0.8` | `7.0.9` |
| [org.springframework:spring-orm](https://github.com/spring-projects/spring-framework) | `7.0.8` | `7.0.9` |
| [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) | `7.0.8` | `7.0.9` |
| [org.springframework:spring-test](https://github.com/spring-projects/spring-framework) | `7.0.8` | `7.0.9` |
| [com.mycila:license-maven-plugin](https://github.com/mathieucarbou/license-maven-plugin) | `5.1.1` | `5.1.2` |
| [org.omnifaces:omnifaces](https://github.com/omnifaces/omnifaces) | `5.4.5` | `5.5` |
| [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) | `4.1.0` | `4.1.1` |
| [org.springframework.boot:spring-boot-autoconfigure](https://github.com/spring-projects/spring-boot) | `4.1.0` | `4.1.1` |
| [org.springframework.boot:spring-boot-configuration-processor](https://github.com/spring-projects/spring-boot) | `4.1.0` | `4.1.1` |
| [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) | `4.1.0` | `4.1.1` |
| [org.springframework.boot:spring-boot-starter-thymeleaf](https://github.com/spring-projects/spring-boot) | `4.1.0` | `4.1.1` |
| [org.apache.meecrowave:meecrowave-core](https://github.com/apache/openwebbeans-meecrowave) | `2.0.0` | `2.1.1` |
| [org.apache.meecrowave:meecrowave-junit](https://github.com/apache/openwebbeans-meecrowave) | `2.0.0` | `2.1.1` |
| [com.flowlogix:flowlogix-jee](https://github.com/flowlogix/flowlogix) | `11.4.1` | `11.4.2` |
| [fish.payara.extras:payara-micro](https://github.com/payara/payara) | `7.2026.7` | `7.2026.8` |


Updates `biz.aQute.bnd:biz.aQute.bndlib` from 7.3.0 to 7.4.0
- [Release notes](https://github.com/bndtools/bnd/releases)
- [Commits](bndtools/bnd@7.3.0...7.4.0)

Updates `com.puppycrawl.tools:checkstyle` from 13.10.0 to 14.0.0
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-13.10.0...checkstyle-14.0.0)

Updates `org.easymock:easymock` from 5.6.0 to 5.7.0
- [Release notes](https://github.com/easymock/easymock/releases)
- [Changelog](https://github.com/easymock/easymock/blob/master/ReleaseNotes.md)
- [Commits](easymock/easymock@easymock-5.6.0...easymock-5.7.0)

Updates `net.bytebuddy:byte-buddy` from 1.18.11 to 1.18.12
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.18.11...byte-buddy-1.18.12)

Updates `net.bytebuddy:byte-buddy-agent` from 1.18.11 to 1.18.12
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.18.11...byte-buddy-1.18.12)

Updates `net.bytebuddy:byte-buddy-agent` from 1.18.11 to 1.18.12
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.18.11...byte-buddy-1.18.12)

Updates `org.springframework:spring-context` from 7.0.8 to 7.0.9
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v7.0.8...v7.0.9)

Updates `org.springframework:spring-web` from 7.0.8 to 7.0.9
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v7.0.8...v7.0.9)

Updates `org.springframework:spring-jdbc` from 7.0.8 to 7.0.9
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v7.0.8...v7.0.9)

Updates `org.springframework:spring-orm` from 7.0.8 to 7.0.9
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v7.0.8...v7.0.9)

Updates `org.springframework:spring-webmvc` from 7.0.8 to 7.0.9
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v7.0.8...v7.0.9)

Updates `org.springframework:spring-test` from 7.0.8 to 7.0.9
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v7.0.8...v7.0.9)

Updates `org.springframework:spring-web` from 7.0.8 to 7.0.9
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v7.0.8...v7.0.9)

Updates `org.springframework:spring-jdbc` from 7.0.8 to 7.0.9
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v7.0.8...v7.0.9)

Updates `org.springframework:spring-orm` from 7.0.8 to 7.0.9
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v7.0.8...v7.0.9)

Updates `org.springframework:spring-webmvc` from 7.0.8 to 7.0.9
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v7.0.8...v7.0.9)

Updates `org.springframework:spring-test` from 7.0.8 to 7.0.9
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v7.0.8...v7.0.9)

Updates `com.mycila:license-maven-plugin` from 5.1.1 to 5.1.2
- [Release notes](https://github.com/mathieucarbou/license-maven-plugin/releases)
- [Changelog](https://github.com/mathieucarbou/license-maven-plugin/blob/master/docs/releases.md)
- [Commits](mathieucarbou/license-maven-plugin@v5.1.1...v5.1.2)

Updates `org.omnifaces:omnifaces` from 5.4.5 to 5.5
- [Commits](omnifaces/omnifaces@5.4.5...5.5)

Updates `org.springframework.boot:spring-boot-dependencies` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.0...v4.1.1)

Updates `org.springframework.boot:spring-boot-autoconfigure` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.0...v4.1.1)

Updates `org.springframework.boot:spring-boot-configuration-processor` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.0...v4.1.1)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.0...v4.1.1)

Updates `org.springframework.boot:spring-boot-starter-thymeleaf` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.0...v4.1.1)

Updates `org.springframework.boot:spring-boot-autoconfigure` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.0...v4.1.1)

Updates `org.springframework.boot:spring-boot-configuration-processor` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.0...v4.1.1)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.0...v4.1.1)

Updates `org.apache.meecrowave:meecrowave-core` from 2.0.0 to 2.1.1
- [Commits](apache/openwebbeans-meecrowave@meecrowave-2.0.0...meecrowave-2.1.1)

Updates `org.apache.meecrowave:meecrowave-junit` from 2.0.0 to 2.1.1
- [Commits](apache/openwebbeans-meecrowave@meecrowave-2.0.0...meecrowave-2.1.1)

Updates `org.apache.meecrowave:meecrowave-junit` from 2.0.0 to 2.1.1
- [Commits](apache/openwebbeans-meecrowave@meecrowave-2.0.0...meecrowave-2.1.1)

Updates `com.flowlogix:flowlogix-jee` from 11.4.1 to 11.4.2
- [Release notes](https://github.com/flowlogix/flowlogix/releases)
- [Commits](flowlogix/flowlogix@Version-11.4.1...Version-11.4.2)

Updates `fish.payara.extras:payara-micro` from 7.2026.7 to 7.2026.8
- [Release notes](https://github.com/payara/payara/releases)
- [Commits](payara/Payara@payara-server-7.2026.7...payara-server-7.2026.8)

Updates `org.springframework.boot:spring-boot-starter-thymeleaf` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.0...v4.1.1)

---
updated-dependencies:
- dependency-name: biz.aQute.bnd:biz.aQute.bndlib
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 14.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.easymock:easymock
  dependency-version: 5.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.18.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: net.bytebuddy:byte-buddy-agent
  dependency-version: 1.18.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: net.bytebuddy:byte-buddy-agent
  dependency-version: 1.18.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework:spring-context
  dependency-version: 7.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework:spring-web
  dependency-version: 7.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework:spring-jdbc
  dependency-version: 7.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework:spring-orm
  dependency-version: 7.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework:spring-webmvc
  dependency-version: 7.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework:spring-test
  dependency-version: 7.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework:spring-web
  dependency-version: 7.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework:spring-jdbc
  dependency-version: 7.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework:spring-orm
  dependency-version: 7.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework:spring-webmvc
  dependency-version: 7.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework:spring-test
  dependency-version: 7.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.mycila:license-maven-plugin
  dependency-version: 5.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.omnifaces:omnifaces
  dependency-version: '5.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-autoconfigure
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-configuration-processor
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-thymeleaf
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-autoconfigure
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-configuration-processor
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.meecrowave:meecrowave-core
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.meecrowave:meecrowave-junit
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.meecrowave:meecrowave-junit
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.flowlogix:flowlogix-jee
  dependency-version: 11.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: fish.payara.extras:payara-micro
  dependency-version: 7.2026.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-thymeleaf
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 25, 2026
@github-actions github-actions Bot added xml and removed java Pull requests that update Java code labels Aug 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@lprimak lprimak lprimak approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file xml

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@lprimak