Update all dependencies #21

renovate · 2023-03-14T07:05:47Z

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
org.postgresql:postgresql (source)	`42.7.7` -> `42.7.8`
org.mockito:mockito-core	`5.17.0` -> `5.21.0`
org.wiremock:wiremock-standalone (source)	`3.12.1` -> `3.13.2`
org.springdoc:springdoc-openapi-starter-webmvc-ui (source)	`2.6.0` -> `3.0.0`
io.jsonwebtoken:jjwt	`0.12.6` -> `0.13.0`
com.nimbusds:oauth2-oidc-sdk	`11.23.1` -> `11.30.1`
com.squareup.retrofit2:retrofit	`2.11.0` -> `3.0.0`
org.flywaydb:flyway-maven-plugin (source)	`10.10.0` -> `11.19.0`
org.apache.maven.plugins:maven-enforcer-plugin (source)	`3.5.0` -> `3.6.2`
org.codehaus.mojo:build-helper-maven-plugin (source)	`3.6.0` -> `3.6.1`
org.openapitools:openapi-generator-maven-plugin	`7.12.0` -> `7.17.0`
org.springframework.boot:spring-boot-starter-parent (source)	`3.3.0` -> `4.0.0`

Release Notes

pgjdbc/pgjdbc (org.postgresql:postgresql)

`v42.7.8`

Added

feat: Add configurable boolean-to-numeric conversion for ResultSet getters PR #3796

Changed

perf: remove QUERY_ONESHOT flag when calling getMetaData PR #3783
perf: use BufferedInputStream with FileInputStream PR #3750
perf: enable server-prepared statements for DatabaseMetaData

Fixed

fix: avoid NullPointerException when cancelling a query if cancel key is not known yet
fix: Change "PST" timezone in TimestampTest to "Pacific Standard Time" PR #3774
fix: traverse the current dimension to get the correct pos in PgArray#calcRemainingDataLength PR #3746
fix: make sure getImportedExportedKeys returns columns in consistent order
fix: Add "SELF_REFERENCING_COL_NAME" field to getTables' ResultSetMetaData to fix NullPointerException PR #3660
fix: unable to open replication connection to servers < 12
fix: avoid closing statement caused by driver's internal ResultSet#close()
fix: return empty metadata for empty catalog names as it was before
fix: Incorrect class comparison in PGXmlFactoryFactory validation

mockito/mockito (org.mockito:mockito-core)

`v5.21.0`

Compare Source

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.21.0

2025-12-09 - 17 commit(s) by Giulio Longfils, Joshua Selbo, Woongi9, Zylox, dependabot[bot]
Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 (#3768)
Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 (#3767)
Bump actions/checkout from 5 to 6 (#3765)
Adds output of matchers to potential mismatch; Fixes #2468 (#3760)
Forbid mocking WeakReference with inline mock maker (#3759)
StackOverflowError when mocking WeakReference (#3758)
Bump actions/upload-artifact from 4 to 5 (#3756)
Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 (#3755)
Support primitives in GenericArrayReturnType. (#3753)
ClassNotFoundException when stubbing array of primitive type on Android (#3752)
Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 (#3744)
Bump gradle/actions from 4 to 5 (#3743)
Bump org.graalvm.buildtools.native from 0.11.0 to 0.11.1 (#3738)
Bump com.diffplug.spotless:spotless-plugin-gradle from 7.2.1 to 8.0.0 (#3735)
Bump graalvm/setup-graalvm from 1.3.7 to 1.4.0 (#3734)
Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 (#3733)
Bump errorprone from 2.41.0 to 2.42.0 (#3732)
Feat: automatically detect class to mock in mockStatic and mockConstruction (#3731)
Return completed futures for unstubbed Future/CompletionStage in ReturnsEmptyValues (#3727)
automatically detect class to mock (#2779)
Incorrect "has following stubbing(s) with different arguments" message when using Argument Matchers (#2468)

`v5.20.0`

Compare Source

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.20.0

2025-09-20 - 11 commit(s) by Adrian-Kim, Giulio Longfils, Rafael Winterhalter, dependabot[bot]
Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 (#3730)
Introducing the Ability to Mock Construction of Generic Types (#2401) (#3729)
Bump com.gradle.develocity from 4.1.1 to 4.2 (#3726)
Bump graalvm/setup-graalvm from 1.3.6 to 1.3.7 (#3725)
Bump org.eclipse.platform:org.eclipse.osgi from 3.23.100 to 3.23.200 (#3720)
Bump graalvm/setup-graalvm from 1.3.5 to 1.3.6 (#3719)
Bump actions/setup-java from 4 to 5 (#3715)
Bump com.gradle.develocity from 4.1 to 4.1.1 (#3713)
Bump bytebuddy from 1.17.6 to 1.17.7 (#3712)
test: Use Assume.assumeThat for SequencedCollection tests (#3711)
Fix #3709 (#3710)
feat: Add support for JDK21 Sequenced Collections. (#3708)
Introducing the Ability to Mock Construction of Generic Types (#2401)

`v5.19.0`

Compare Source

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.19.0

2025-08-15 - 37 commit(s) by Adrian-Kim, Tim van der Lippe, Tran Ngoc Nhan, dependabot[bot], juyeop
feat: Add support for JDK21 Sequenced Collections. (#3708)
Bump actions/checkout from 4 to 5 (#3707)
build: Allow overriding 'Created-By' for reproducible builds (#3704)
Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3703)
Bump androidx.test:runner from 1.6.2 to 1.7.0 (#3697)
Bump org.junit.platform:junit-platform-launcher from 1.13.3 to 1.13.4 (#3694)
Bump com.diffplug.spotless:spotless-plugin-gradle from 7.1.0 to 7.2.1 (#3693)
Bump junit-jupiter from 5.13.3 to 5.13.4 (#3691)
Bump com.gradle.develocity from 4.0.2 to 4.1 (#3689)
Bump com.google.googlejavaformat:google-java-format from 1.27.0 to 1.28.0 (#3688)
Bump com.google.googlejavaformat:google-java-format from 1.25.2 to 1.27.0 (#3686)
Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.4 to 7.1.0 (#3685)
Bump junit-jupiter from 5.13.2 to 5.13.3 (#3684)
Bump org.shipkit:shipkit-auto-version from 2.1.0 to 2.1.2 (#3683)
Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.2 to 7.0.4 (#3682)
Only run release after both Java and Android tests have finished
(#3681)
Bump org.junit.platform:junit-platform-launcher from 1.12.2 to 1.13.3 (#3680)
Bump org.codehaus.groovy:groovy from 3.0.24 to 3.0.25 (#3679)
Bump org.eclipse.platform:org.eclipse.osgi from 3.23.0 to 3.23.100 (#3678)
Can no longer publish snapshot releases (#3677)
Update Gradle to 8.14.2 (#3676)
Bump errorprone from 2.23.0 to 2.39.0 (#3674)
Correct Junit docs link (#3672)
Bump net.ltgt.gradle:gradle-errorprone-plugin from 4.1.0 to 4.3.0 (#3670)
Bump junit-jupiter from 5.13.1 to 5.13.2 (#3669)
Bump bytebuddy from 1.17.5 to 1.17.6 (#3668)
Bump junit-jupiter from 5.12.2 to 5.13.1 (#3666)
Bump org.jetbrains.kotlin:kotlin-stdlib from 2.0.21 to 2.2.0 (#3665)
Bump org.gradle.toolchains.foojay-resolver-convention from 0.9.0 to 1.0.0 (#3661)
Bump org.junit.platform:junit-platform-launcher from 1.11.4 to 1.12.2 (#3660)
Add JDK21 sequenced collections for ReturnsEmptyValues (#3659)
Bump com.gradle.develocity from 3.19.1 to 4.0.2 (#3658)
Bump ru.vyarus:gradle-animalsniffer-plugin from 1.7.2 to 2.0.1 (#3657)
Bump org.eclipse.platform:org.eclipse.osgi from 3.22.0 to 3.23.0 (#3656)
Bump org.codehaus.groovy:groovy from 3.0.23 to 3.0.24 (#3655)
Bump junit-jupiter from 5.11.4 to 5.12.2 (#3653)
Reproducible Build: need to inject JDK distribution details to rebuild (#3563)

`v5.18.0`

Compare Source

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.18.0

2025-05-20 - 5 commit(s) by Eugene Platonov, Patrick Doyle, Tim van der Lippe, dependabot[bot]
Make vararg checks Scala friendly (for mockito-scala) (#3651)
For UnfinishedStubbingException, suggest the possibility of another thread (#3636)
UnfinishedStubbingException ought to suggest the possibility of another thread (#3635)

wiremock/wiremock (org.wiremock:wiremock-standalone)

`v3.13.2`

Compare Source

What's Changed

Bump minor / bugfix versions of dependencies to latest by @Mahoney in #3222
Bump ui versions by @Mahoney in #3224
Remove unnecessary file by @Mahoney in #3227
Remove standalone only by @Mahoney in #3225

Full Changelog: wiremock/wiremock@3.13.1...3.13.2

`v3.13.1`

Compare Source

📦 Dependency updates

chore(deps): bump redoc and @redocly/cli in /ui (#3015) @dependabot
chore(deps-dev): bump undici from 6.19.8 to 6.21.3 in /ui (#3046) @dependabot
Bump prismjs from 1.29.0 to 1.30.0 in /ui (#2989) @dependabot
Bump dompurify from 3.1.6 to 3.2.4 in /ui (#2980) @dependabot
chore(deps): bump org.sonarqube from 6.1.0.5360 to 6.2.0.5505 (#3047) @dependabot
chore(deps): bump org.mockito:mockito-junit-jupiter from 5.17.0 to 5.18.0 (#3054) @dependabot
chore(deps): bump org.mockito:mockito-core from 5.17.0 to 5.18.0 (#3055) @dependabot
chore(deps): bump versions.junitJupiter from 5.12.2 to 5.13.0 (#3059) @dependabot
chore(deps): bump versions.xmlUnit from 2.10.0 to 2.10.2 (#3057) @dependabot
chore(deps): bump commons-fileupload:commons-fileupload from 1.5 to 1.6.0 (#3062) @dependabot
chore(deps): bump com.networknt:json-schema-validator from 1.5.6 to 1.5.7 (#3058) @dependabot
chore(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.4.3 to 5.5 (#3056) @dependabot
chore(deps): bump com.fasterxml.jackson:jackson-bom from 2.18.3 to 2.19.0 (#3032) @dependabot
chore(deps): bump com.tngtech.archunit:archunit-junit5 from 1.4.0 to 1.4.1 (#3037) @dependabot

✍ Other changes

Add gradle script to merge and bundle schemas (#3061) @picimako
Add the 'x-intellij-language-injection' property to schemas (#3060) @picimako
Mark APIs that will stop being public in v4.x as deprecated (#3041) @RafeArnold
Mark Recording API that does not need to be public deprecated (#3039) @Mahoney

`v3.13.0`

Compare Source

🚀 New Features

Allow the WireMockExtension to not reset in beforeEach (#3010) @leeturner
Allow the webhook scheduler thread pool size to be configured (#3009) @leeturner
Add method to MappingBuilder to add multiple form params (#2927) @wernerblanck
Expose native matcher for client ip address (#3014) @lhcopetti
Extend LogNormal to add an optional maxValue (#3026) @paul-poulain-vodafone
feat: admin API endpoints to find/remove unmatched stub mappings (#2991) @MasonM
feat: record query param matchers. (#3008) @RafeArnold
allow admin calls when standalone instance is behind haproxy/loadbala… (#2990) @vggeorgas

🐞 Bug fixes

fix: matched stub name header value encoding. (#3027) @RafeArnold
fix: run chunked dribble delay asynchronously (#3012) @lhcopetti
Fixed matches-json-schema-pattern.yaml so that it correctly takes the schema as a string (#3020) @tomakehurst
Fix OpenAPI 3.0 schemas (#2953) @ascopes
fix: handle null key in RequestPartTemplateModel for RFC 2387 compliance (#3022) @ns-amosc
fix: check casing when matching basic credentials. (#2997) @RafeArnold
Always use the system default DocumentBuilderFactory, TransformerFactory and XPathFactory (#2975) @vkuzel

✍ Other changes

fix: publishing branch snapshots to github. (#3005 #3003 #3002) @RafeArnold
feat: allow publishing branch snapshots to github. (#3001) @RafeArnold
chore: remove json-smart dependency constraint. (#2965) @RafeArnold

📦 Dependency updates

16 changes

chore(deps): bump versions.junitJupiter from 5.12.1 to 5.12.2 (#3023) @dependabot
chore(deps): bump commons-io:commons-io from 2.18.0 to 2.19.0 (#3024) @dependabot
chore(deps): bump org.mockito:mockito-junit-jupiter from 5.16.1 to 5.17.0 (#3017) @dependabot
chore(deps): bump org.mockito:mockito-core from 5.16.1 to 5.17.0 (#3016) @dependabot
chore(deps): bump com.google.guava:guava from 33.4.6-jre to 33.4.8-jre (#3025) @dependabot
chore(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.4.2 to 5.4.3 (#3007) @dependabot
Bump com.dorongold.task-tree from 4.0.0 to 4.0.1 (#2986) @dependabot
Bump org.sonarqube from 6.0.1.5171 to 6.1.0.5360 (#2999) @dependabot
Bump com.google.guava:guava from 33.4.5-jre to 33.4.6-jre (#3000) @dependabot
Bump com.google.guava:guava from 33.4.0-jre to 33.4.5-jre (#2996) @dependabot
Bump org.mockito:mockito-core from 5.16.0 to 5.16.1 (#2994) @dependabot
Bump org.mockito:mockito-junit-jupiter from 5.16.0 to 5.16.1 (#2993) @dependabot
Bump versions.junitJupiter from 5.12.0 to 5.12.1 (#2992) @dependabot
Bump com.tngtech.archunit:archunit-junit5 from 0.23.1 to 1.4.0 (#2960) @dependabot
Bump org.mockito:mockito-junit-jupiter from 5.15.2 to 5.16.0 (#2983) @dependabot
Bump org.mockito:mockito-core from 5.15.2 to 5.16.0 (#2984) @dependabot

springdoc/springdoc-openapi (org.springdoc:springdoc-openapi-starter-webmvc-ui)

`v3.0.0`

`v2.8.14`

Compare Source

Added

#3090 - Add logs to notify when SpringDocs/Scalar is enabled because SpringDocs/Scalar is enabled by default

Changed

Upgrade swagger-ui to v5.30.1
Upgrade swagger-core to v2.2.38
Upgrade spring-boot to v3.5.7
Upgrade commons-lang3 to v3.18.0
Upgrade scalar to v0.3.12

Fixed

#3107 - Fix:compatible with lower version of getOpenApi().
#3121 - NPE in KotlinDeprecatedPropertyCustomizer - resolvedSchema is null

`v2.8.13`

Compare Source

Added

#3084 - Add Scalar Support

Changed

Upgrade swagger-ui to v5.28.1

Fixed

#3076 - With oneOf the response schema contains an extra type: string

`v2.8.12`

Compare Source

Changed

Upgrade swagger-ui to v5.28.0

Fixed

#3073 - Duplicate key class Parameter when documenting two GET methods with same path and PathVariable.
#3071 - @io.swagger.v3.oas.annotations.parameters.RequestBody does not work well with @RequestPart
#3066 - Parameter is now required after upgrading to springdoc-openapi 2.8.10

`v2.8.11`

Compare Source

Added

#3065 - javadoc and overall performance optimization

Changed

Upgrade spring-boot to v3.5.5

Fixed

#3064 -ClassNotFoundException: kotlin.reflect.full.KClasses

`v2.8.10`

Compare Source

Added

#3046 - Feature Request: Support @jakarta.annotation.Nonnull.
#3042 - Support externalDocs configure on SpecPropertiesCustomizer
#3057 - Refactor webhook discovery and scanning mechanism

Changed

Upgrade spring-boot to v3.5.4
Upgrade swagger-ui to v5.27.1
Upgrade swagger-core to 2.2.36

Fixed

#3050 - @RequestPart JSON parameters missing Content-Type in generated curl commands, causing 415 errors.
#2978 - Parameter is no longer optional after upgrade to 2.8.8
#3022 - NullPointerException thrown in SchemaUtils.
#3026 - Fix unexpected merging of media types
#3036 - Fixed "desciption"
#3039 - Fix: Property resolution for extensions within @OpenAPIDefinition Info object
#3051 - Fixes so that a RequestPart with a Map is added to the RequestBody
#3060 - Use adaptFromForwardedHeaders instead of deprecated fromHttpRequest

`v2.8.9`

Compare Source

Added

#2944 - Support for @Positive
#3011 - type-use for method parameters

Changed

Upgrade spring-boot to version 3.5.0

Fixed

#2982 - application/problem+json content type is not set for ProblemDetails
#2990 - Issues with POST Request, application/x-www-form-urlencoded and only one parameter
#2998 - io.swagger.v3.oas.annotations.Webhook does not work when defined on the method level
#3012 - Order of examples is (sometimes) not preserved

`v2.8.8`

Compare Source

Fixed

#2977 - Handle projects not using kotlin-reflect #2977

`v2.8.7`

Compare Source

Added

#2944 - Introducing springdoc-openapi-bom project
#2948 - Customize Servers via application.yml
#2963 - Set default content type for problem details object to application/problem+jso
#2971 - List of value classes in Kotlin

Changed

Upgrade swagger-ui to v5.21.0
Upgrade swagger-core to 2.2.30
Upgrade spring-boot to version 3.4.5
Upgrade spring-security-oauth2-authorization-server to version 1.4.3

Fixed

#2947 - Unexpected warning "Appended trailing slash to static resource location"
#2960 - NPE when customizing group's open-api without specifying any schema
#2969 - fix path to register resource handler to work SwaggerIndexPageTransformer
considering /webjar path prefix
#2964 - Cannot add custom description and example for java.time.Duration since v2.8.6
#2972 - @Header(schema = @Schema(type = "string")) generates empty or broken schema in
OpenAPI output since 2.8.0
#2976, #2967 - Build Failure due to Private Inner Class.

`v2.8.6`

Compare Source

Added

#2909 - Check both SerDe BeanPropertyDefinition for @JsonUnwrapped/@Schema
#2927 - Bail sealed class subtype introspection on Schema
#2917 - Add Future to ignored response wrappers
#2938 - Add out of the box support for LocalTime, YearMonth, MonthDay

Changed

Upgrade swagger-ui to v5.20.1
Upgrade swagger-core to 2.2.29
Upgrade spring-cloud-function to 4.2.2
Upgrade spring-boot to version 3.4.4

Fixed

#2928 - Add missing builder methods in SchemaBuilder
#2905 - ModelResolver.enumAsRef = true result in invalid openapi with actuator using
enum param
#2939 - Duplicate ModelConverter registration with Spring Boot DevTools
#2941 - SpringBoot native fails /v3/api-docs when using a Map as an http entity field

`v2.8.5`

Compare Source

Added

#2696 - Do not require JsonSubType annotation for sealed classes
#2898 - add needed runtime reflection hints for native image
#2891 - Refactor trimIndent Method
#2931 - OpenAPIService serverBaseUrl is not thread safe
#2933 - Wrong schema generation with PagedModel generated VIA_DTO and wrapped in
ResponseEntity

Changed

Upgrade swagger-ui to v5.18.3

Fixed

#2902 - Schema replaced by String when using @ApiResponse with RepresentationModel (
Hateoas links)
#2876 - Restentpoints with same name get mix up
#2895 - Only filter out actuator endpoints with double asterisks.
#2894 - respect @JsonUnwrapped & @Schema on props not fields only
#2881 - fix defaultValue when using @PageableDefault together with
one-indexed-parameters
#2888 - Provide a better consistency for parameters and responses order.

`v2.8.4`

Compare Source

Added

#2873 - Improve performance of getGenericMapResponse
#2836 - Provide option to set allowed locales
2862 - Align Swagger-UI Prefix Path with Swagger-WebMvc Behavior

Changed

Upgrade spring-boot to 3.4.2
Upgrade spring-cloud-function to 4.2.1
Upgrade swagger-core to 2.2.28

Fixed

#2870 - Springdoc 2.8.x + Spring Boot 3.4.1 breaks native image support
#2869 - Exception logged when generating schema for delete method of Spring Data
repository.
#2856 - @JsonUnwrapped is ignored in new version of lib.
#2852 - @Schema(types = "xxx") does not work for multipart param with enabled
springdoc.default-support-form-data config option.

`v2.8.3`

Compare Source

Added

#2851 - Refine condition, for ignoring types when using PolymorphicModelConverter

`v2.8.2`

Compare Source

Added

#2849 - Provide better compatibility for projects migrating from OAS 3.0 to OAS 3.1

Fixed

#2846 - ClassCastException with spring-data-rest and openapi version 3.1 bug
#2844 - PageableObject and SortObject are called Pageablenull and Sortnull

`v2.8.1`

Compare Source

Added

#3090 - Add logs to notify when SpringDocs/Scalar is enabled because SpringDocs/Scalar is enabled by default

Changed

Upgrade swagger-ui to v5.30.1
Upgrade swagger-core to v2.2.38
Upgrade spring-boot to v3.5.7
Upgrade commons-lang3 to v3.18.0
Upgrade scalar to v0.3.12

Fixed

#3107 - Fix:compatible with lower version of getOpenApi().
#3121 - NPE in KotlinDeprecatedPropertyCustomizer - resolvedSchema is null

`v2.8.0`

Compare Source

Added

#2790 - Moving to OpenAPI 3.1 as the default implementation for springdoc-openapi
#2817 - Obey annotations when flattening ParameterObject fields
#2826 - Make it possible to mark parameters with @RequestParam annotation to be sent in
form instead of query.
#2822 - Support returning null in ParameterCustomizer
#2830 - Add support for deprecated fields.
#2780 - Add Security Schema by AutoConfigure

Changed

Upgrade spring-boot to 3.4.1
Upgrade spring-cloud-function to 4.2.0
Upgrade swagger-core to 2.2.27

Fixed

#2804 - Stable release 2.7.0 depends on Spring Cloud Milestone 4.2.0-M1
#2828 - Required a bean of type '
org.springframework.data.rest.webmvc.mapping.Associations' that could not be found.
#2823 - Capturing pattern in identical paths only renders the path element of one method
#2817 - Automatically add required if a field is @notNull or @NotBlank.
#2814 - An unresolvable circular reference with
management.endpoint.gateway.enabled=true.
#2798 - Object schema generated for Unit Kotlin type.
#2797 - Removing operationId via customizer does not work anymore.
#2833 - Resolve infinite recursion and add example test with OpenAPI v3.1
#2827 - Ignoring @Parameter(required = false)

`v2.7.0`

Compare Source

Added

#2777 - Add SortAsQueryParam annotation
#2786 - No static resource swagger-ui/index.html error after migration to 2.7.0-RC1

Changed

Upgrade spring-boot to 3.4.0
Upgrade swagger-ui to 5.18.2
Upgrade spring-security-oauth2-authorization-server to 1.4.0

jwtk/jjwt (io.jsonwebtoken:jjwt)

`v0.13.0`

Compare Source

This is the last minor JJWT release branch that will support Java 7. Any necessary emergency bug fixes will be fixed in subsequent 0.13.x patch releases, but all new development, including Java 8 compatible changes, will be in the next minor (0.14.0) release.

All future JJWT major and minor versions ( 0.14.0 and later) will require Java 8 or later.

This 0.13.0 minor release has only one change:

The previously private JacksonDeserializer(ObjectMapper objectMapper, Map<String, Class<?>> claimTypeMap) constructor is now public for those that want register a claims
type converter on their own specified ObjectMapper instance. See Issue 914.

`v0.12.7`

Compare Source

This patch release:

Adds a new Maven BOM, useful for multi-module projects. See Issue 967.
Allows the JwtParserBuilder to have empty nested algorithm collections, effectively disabling the parser's associated feature:
- Emptying the zip() nested collection disables JWT decompression.
- Emptying the sig() nested collection disables JWS mac/signature verification (i.e. all JWSs will be unsupported/rejected).
- Emptying either the enc() or key() nested collections disables JWE decryption (i.e. all JWEs will be unsupported/rejected)
See Issue 996.
Fixes bug 961 where JwtParserBuilder nested collection builders were not correctly replacing algorithms with the same id.
Ensures a JwkSet's keys collection is no longer entirely secret/redacted by default. This was an overzealous default that was unnecessarily restrictive; the keys collection itself should always be public, and each individual key within should determine which fields should be redacted when printed. See Issue 976.
Improves performance slightly by ensuring all jjwt-api utility methods that create *Builder instances (Jwts.builder(), Jwts.parserBuilder(), Jwks.builder(), etc) no longer use reflection.

Instead,static factories are created via reflection only once during initial jjwt-api classloading, and then *Builders are created via standard instantiation using the new operator thereafter. This also benefits certain environments that may not have ideal ClassLoader implementations (e.g. Tomcat in some cases).

NOTE: because this changes which classes are loaded via reflection, any environments that must explicitly reference reflective class names (e.g. GraalVM applications) will need to be updated to reflect the new factory class names.

See Issue 988.
Upgrades the Gson dependency to 2.11.0
Upgrades the BouncyCastle dependency to 1.78.1

connect2id/oauth-2.0-sdk-with-openid-connect-extensions (com.nimbusds:oauth2-oidc-sdk)

`v11.30.1`

[Compare Source](https://bitbucket.org/conn

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot added the dependencies label Mar 14, 2023

renovate bot force-pushed the renovate/all branch 4 times, most recently from 377c8c8 to 6566015 Compare April 5, 2023 02:40

renovate bot force-pushed the renovate/all branch 3 times, most recently from e3757e7 to 19342ec Compare April 25, 2023 07:46

renovate bot force-pushed the renovate/all branch 2 times, most recently from a04145b to 722233b Compare May 11, 2023 05:53

renovate bot force-pushed the renovate/all branch from 722233b to 55e73d7 Compare May 29, 2023 21:52

renovate bot force-pushed the renovate/all branch 2 times, most recently from dca0db3 to 93f6ca1 Compare June 13, 2023 06:37

renovate bot force-pushed the renovate/all branch from 93f6ca1 to 960d73e Compare June 22, 2023 17:32

renovate bot force-pushed the renovate/all branch from 960d73e to 82aa4eb Compare June 30, 2023 17:53

renovate bot force-pushed the renovate/all branch from 82aa4eb to a3ba2aa Compare July 9, 2023 05:26

renovate bot force-pushed the renovate/all branch 4 times, most recently from d89e853 to ae4c85c Compare August 4, 2023 15:35

renovate bot force-pushed the renovate/all branch from ae4c85c to bf8b373 Compare August 9, 2023 13:19

renovate bot force-pushed the renovate/all branch 3 times, most recently from 1824fc2 to 5bd94c1 Compare August 29, 2023 12:05

renovate bot force-pushed the renovate/all branch 5 times, most recently from 407d2c3 to ae60919 Compare September 4, 2023 13:56

renovate bot force-pushed the renovate/all branch from ae60919 to a052574 Compare September 10, 2023 22:39

renovate bot force-pushed the renovate/all branch 5 times, most recently from 5ca4df7 to e73fa33 Compare August 23, 2025 18:12

renovate bot force-pushed the renovate/all branch 2 times, most recently from e9efe8c to 7d0c27b Compare September 1, 2025 19:08

renovate bot force-pushed the renovate/all branch from 7d0c27b to 8796f95 Compare September 7, 2025 16:56

renovate bot force-pushed the renovate/all branch 4 times, most recently from 6cd622c to c944ffd Compare September 22, 2025 21:33

renovate bot force-pushed the renovate/all branch 3 times, most recently from 50b7010 to c38cf2e Compare October 2, 2025 17:40

renovate bot force-pushed the renovate/all branch from c38cf2e to ace5fd5 Compare October 16, 2025 10:40

renovate bot force-pushed the renovate/all branch 2 times, most recently from cd178b8 to dadbaf6 Compare October 29, 2025 19:07

renovate bot force-pushed the renovate/all branch 3 times, most recently from e38f4b0 to bcd712c Compare November 6, 2025 18:44

renovate bot force-pushed the renovate/all branch 4 times, most recently from 3730892 to 93455af Compare November 21, 2025 06:28

renovate bot force-pushed the renovate/all branch 3 times, most recently from e65031c to 1d4f71e Compare December 10, 2025 03:44

Update all dependencies

daea09b

renovate bot force-pushed the renovate/all branch from 1d4f71e to daea09b Compare December 10, 2025 05:50

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update all dependencies #21

Update all dependencies #21

Uh oh!

renovate bot commented Mar 14, 2023 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Update all dependencies #21

Are you sure you want to change the base?

Update all dependencies #21

Uh oh!

Conversation

renovate bot commented Mar 14, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Added

Changed

Fixed

5.21.0

5.20.0

5.19.0

5.18.0

What's Changed

📦 Dependency updates

✍ Other changes

🚀 New Features

🐞 Bug fixes

✍ Other changes

📦 Dependency updates

Added

Changed

Fixed

Added

Changed

Fixed

Changed

Fixed

Added

Changed

Fixed

Added

Changed

Fixed

Added

Changed

Fixed

Fixed

Added

Changed

Fixed

Added

Changed

Fixed

Added

Changed

Fixed

Added

Changed

Fixed

Added

Added

Fixed

Added

Changed

Fixed

Added

Changed

Fixed

Added

Changed

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Mar 14, 2023 •

edited

Loading