Skip to content

fix(deps): bump the prod-deps group across 1 directory with 16 updates #709

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: master
Choose a base branch
from
Open

fix(deps): bump the prod-deps group across 1 directory with 16 updates #709

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Nov 24, 2025 •
edited
Loading

Bumps the prod-deps group with 16 updates in the / directory:

Package From To
org.springframework.boot:spring-boot-starter-parent 3.5.4 4.0.0
org.folio:folio-service-tools-spring-dev 4.1.1 5.0.0
org.folio:folio-spring-cql 9.0.0 9.1.0
io.github.openfeign:feign-jackson 12.1 13.6
org.apache.sshd:sshd-spring-sftp 2.15.0 2.16.0
commons-net:commons-net 3.11.1 3.12.0
io.hypersistence:hypersistence-utils-hibernate-63 3.7.3 3.12.0
com.opencsv:opencsv 5.11.2 5.12.0
org.marc4j:marc4j 2.9.1 2.9.6
software.amazon.awssdk:aws-sdk-java 2.29.6 2.39.2
one.util:streamex 0.8.3 0.8.4
org.openapitools:openapi-generator-maven-plugin 6.2.1 7.17.0
org.codehaus.mojo:exec-maven-plugin 3.5.1 3.6.2
org.apache.maven.plugins:maven-surefire-plugin 3.5.3 3.5.4
org.apache.maven.plugins:maven-release-plugin 3.1.1 3.2.0
org.folio:folio-module-descriptor-validator 1.0.0 1.0.1

Updates org.springframework.boot:spring-boot-starter-parent from 3.5.4 to 4.0.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.0.0

Full release notes for Spring Boot 4.0 are available on the wiki. There is also a migration guide to help you upgrade from Spring Boot 3.5.

⭐ New Features

  • Change tomcat and jetty runtime modules to starters #48175
  • Rename spring-boot-kotlin-serialization to align with the name of the Kotlinx module that it pulls in #48076

🐞 Bug Fixes

  • Error properties are a general web concern and should not be located beneath server.* #48201
  • With both Jackson 2 and 3 on the classpath, @JsonTest fails due to duplicate jacksonTesterFactoryBean #48198
  • Gradle war task does not exclude starter POMs from lib-provided #48197
  • spring.test.webclient.mockrestserviceserver.enabled is not aligned with its module's name #48193
  • SslMeterBinder doesn't register metrics for dynamically added bundles if no bundles exist at bind time #48182
  • Properties bound in the child management context ignore the parent's environment prefix #48177
  • ssl.chain.expiry metrics doesn't update for dynamically registered SSL bundles #48171
  • Starter for spring-boot-micrometer-metrics is missing #48161
  • Elasticsearch client's sniffer functionality should not be enabled by default #48155
  • spring-boot-starter-elasticsearch should depend on elasticsearch-java #48141
  • Auto-configuration exclusions are checked using a different class loader to the one that loads auto-configuration classes #48132
  • New arm64 macbooks fail to bootBuildImage due to incorrect platform image #48128
  • Properties for configuring an isolated JsonMapper or ObjectMapper are incorrectly named #48116
  • Buildpack fails with recent Docker installs due to hardcoded version in URL #48103
  • Image building may fail when specifying a platform if an image has already been built with a different platform #48099
  • Default values of Kotlinx Serialization JSON configuration properties are not documented #48097
  • Custom XML converters should override defaults in HttpMessageConverters #48096
  • Kotlin serialization is used too aggressively when other JSON libraries are available #48070
  • PortInUseException incorrectly thrown on failure to bind port due to Netty IP misconfiguration #48059
  • Auto-configured JCacheMetrics cannot be customized #48057
  • WebSecurityCustomizer beans are excluded by WebMvcTest #48055
  • Deprecated EnvironmentPostProcessor does not resolve arguments #48047
  • RetryPolicySettings should refer to maxRetries, not maxAttempts #48023
  • Devtools Restarter does not work with a parameterless main method #47996
  • Dependency management for Kafka should not manage Scala 2.12 libraries #47991
  • spring-boot-mail should depend on jakarta.mail:jakarta.mail-api and org.eclipse.angus:angus-mail instead of org.eclipse.angus:jakarta.mail #47983
  • spring-boot-starter-data-mongodb-reactive has dependency on reactor-test #47982
  • Support for ReactiveElasticsearchClient is in the wrong module #47848

📔 Documentation

  • Removed property spring.test.webclient.register-rest-template is still documented #48199
  • Mention support for detecting AWS ECS in "Deploying to the Cloud" #48170
  • Revise AWS section of "Deploying to the Cloud" in reference manual #48163
  • Fix typo in PortInUseException Javadoc #48134
  • Correct section about required setters in "Type-safe Configuration Properties" #48131
  • Use since attribute in configuration properties deprecation consistently #48122
  • Document EndpointJsonMapper and management.endpoints.jackson.isolated-json-mapper #48115
  • Document support for configuring servlet context init parameters using properties #48112
  • Some configuration properties are not documented in the appendix #48095

... (truncated)

Commits
  • 1c0e08b Release v4.0.0
  • 3487928 Merge branch '3.5.x'
  • 29b8e96 Switch make-default in preparation for Spring Boot 4.0.0
  • 88da0dd Merge branch '3.5.x'
  • 56feeaa Next development version (v3.5.9-SNAPSHOT)
  • 3becdc7 Move server.error properties to spring.web.error
  • 2b30632 Merge branch '3.5.x'
  • 4f03b44 Merge branch '3.4.x' into 3.5.x
  • 3d15c13 Next development version (v3.4.13-SNAPSHOT)
  • dc140df Upgrade to Spring Framework 7.0.1
  • Additional commits viewable in compare view

Updates org.folio:folio-service-tools-spring-dev from 4.1.1 to 5.0.0

Release notes

Sourced from org.folio:folio-service-tools-spring-dev's releases.

v5.0.0

Breaking changes

  • Upgrade to Java 21 (FST-88)
  • Remove TokenUtils and UserInfo classes (FST-89)

Features

Add autoOffsetReset to KafkaListenerProperties (FST-87) Add maxPollRecords and maxPollIntervalMs to KafkaListenerProperties (FST-85)

Dependencies

  • Bump RMB from 35.3.0 to 35.4.0
  • Bump folio-spring-support from 8.2.0 to 9.0.0
  • Bump spring-boot from 3.3.4 to 3.4.3
  • Bump Vertx from 4.5.10 to 4.5.13
Changelog

Sourced from org.folio:folio-service-tools-spring-dev's changelog.

v5.0.0 2025-02-28

Breaking changes

  • Upgrade to Java 21 (FST-88)
  • Remove TokenUtils and UserInfo classes (FST-89)

Features

Add autoOffsetReset to KafkaListenerProperties (FST-87) Add maxPollRecords and maxPollIntervalMs to KafkaListenerProperties (FST-85)

Dependencies

  • Bump RMB from 35.3.0 to 35.4.0
  • Bump folio-spring-support from 8.2.0 to 9.0.0
  • Bump spring-boot from 3.3.4 to 3.4.3
  • Bump Vertx from 4.5.10 to 4.5.13

v4.1.0 2024-10-25

Bug fixes

  • Do not delete kafka topics if collection topic is enabled (FST-77)
  • Fix incorrect base64 decoding in TokenUtils (FST-80)

Dependencies

  • Bump RMB from 35.2.2 to version 35.3.0.
  • Bump Vertx from 4.5.5 to version 4.5.10.
  • Bump folio-spring-support/folio-spring-base from 8.2.0-SNAPSHOT to final version 8.2.0.
  • Bump Spring Boot from 3.2.3 to version 3.3.4.
  • Bump log4j-slf4j-impl to log4j-slf4j2-impl.
  • Bump log4j from 2.23.1 to 2.24.1.
  • Bump commons-io from 2.15.1 to 2.17.0.

v4.0.0 2024-03-18

Breaking changes

  • Remove system-user related functionality from "folio-service-tools-spring-dev" (FST-68)
  • Delete TestSetUpHelper.getPgClient() method (FST-73)
  • Remove "folio-service-tools-spring-test" submodule (FST-74)

Bug fixes

  • Avoid additional totalRecords SQL query for offset=0 limit=MAX_INT (FST-72)

Tech Debt

  • Spring Boot 3.1.5, folio-spring-base 7.2.2, Snakeyaml, Snappy (FST-70)

Dependencies

  • Bump Spring Boot from 3.1.4 to 3.2.3
  • Bump folio-spring-base from 7.2.0 to 8.1.0
  • Bump log4j from 2.19.0 to 2.23.1
  • Bump vertx from 4.4.5 to 4.5.5
  • Bump raml-module-builder from 35.1.0 to 35.2.0

... (truncated)

Commits
  • dd544bf [maven-release-plugin] prepare release v5.0.0
  • fb94b4f [maven-release-plugin] prepare branch release/v5.0
  • 91b7618 Update NEWS
  • 972a21f Update dependencies
  • 2809c56 fix(deps): bump the prod-deps group with 2 updates (#214)
  • a020daf fix: do not fail on javadoc generation (#213)
  • 38d2000 chore: upgrade to Java 21 (#212)
  • 601355d feat: remove TokenUtils and UserInfo classes (#211)
  • 394b39e fix(deps): bump the prod-deps group with 3 updates (#210)
  • d86d608 feat(kafka): Add autoOffsetReset to KafkaListenerProperties (#209)
  • Additional commits viewable in compare view

Updates org.folio:folio-spring-cql from 9.0.0 to 9.1.0

Release notes

Sourced from org.folio:folio-spring-cql's releases.

v9.0.2

folio-spring-base

v9.0.1

cql submodule

  • FOLSPRINGS-185 Implement case insensitive accents ignoring CQL queries - backport, opt in only. To opt in call Cql2JpaCriteria.setCaseAccentsHandlingEnabled(true). Then a CQL search in a String field ignores case (= is case insensitive) and ignores accents by default; this is for consistency with RMB based modules. Use the annotations @RespectCase and/or @RespectAccents in the entity class to change this new default.

When enabling case insensitive and/or accents ignoring CQL queries you need to update database indices accordingly, for example:

DROP INDEX IF EXISTS idx_medreq_requester_barcode;
CREATE INDEX idx_medreq_requester_barcode ON ${database.defaultSchemaName}.mediated_request(lower(f_unaccent(requester_barcode)));

For test code that executes SQL you may need to add f_unaccent database method. Example: jpa-cql-general-it-schema.sql, @​Sql

Changelog

Sourced from org.folio:folio-spring-cql's changelog.

9.1.0 2025-04-23

Replacing OkHttpClient by ApacheHttpClient, adding configuration

Commits
  • a9c940e [maven-release-plugin] prepare release v9.1.0
  • f71312f Replacing OkHttpClient by ApacheHttpClient, adding configuration
  • 4eab61d Replacing OkHttpClient by ApacheHttpClient, adding configuration
  • e0ac99d Replacing OkHttpClient by ApacheHttpClient, adding configuration
  • See full diff in compare view

Updates io.github.openfeign:feign-jackson from 12.1 to 13.6

Release notes

Sourced from io.github.openfeign:feign-jackson's releases.

OpenFeign 13.6

What's Changed

... (truncated)

Commits
  • abd43f7 Generate jar for feign-vertx5-test
  • bb59bfe Force single thread while deploying artifacts
  • a45be66 prepare release 13.6
  • bab7f2e Build project with mvnd (#2839)
  • 5afdd22 Add missing secrets to nexus deploy
  • 1c3fe71 Bump vertx.version from 5.0.0.CR4 to 4.5.14 (#2837)
  • 61de712 FIX: inreliable JSON asserts in Java 11 project (#2816)
  • 241f3ee Merge pull request #2838 from OpenFeign/dependabot/maven/netty.version-4.2.0....
  • cff520a Bump netty.version from 4.1.119.Final to 4.2.0.Final
  • e225ee8 Merge pull request #2836 from OpenFeign/dependabot/maven/org.projectlombok-lo...
  • Additional commits viewable in compare view

Updates org.apache.sshd:sshd-spring-sftp from 2.15.0 to 2.16.0

Release notes

Sourced from org.apache.sshd:sshd-spring-sftp's releases.

Apache MINA SSHD 2.16.0

What's Changed

New Contributors

Full Changelog: apache/mina-sshd@sshd-2.15.0...sshd-2.16.0

Changelog

Sourced from org.apache.sshd:sshd-spring-sftp's changelog.

Previous Versions

Latest Released Version

Planned for Next Version

Bug Fixes

  • GH-807 Handle "verified" flag for sk-* keys
  • GH-809 Fix server-side authentication for FIDO/U2F sk-* keys with flags in authorized_keys
  • GH-827 Don't fail on invalid known_hosts lines; log and skip them
  • GH-830 EC public keys: let Bouncy Castle generate X.509 encodings with the curve OID as algorithm parameter

New Features

  • GH-814 Include a fix for CVE-2020-36843 in optional dependency net.i2p.crypto:eddsa:0.3.0: perform the missing range check in Apache MINA SSHD before delegating to the signature verification in net.i2p.crypto:eddsa:0.3.0. This means that using net.i2p.crypto:eddsa:0.3.0 in Apache MINA SSHD is safe despite that CVE in the dependency.

Potential Compatibility Issues

Major Code Re-factoring

Commits
  • 445ef7e [maven-release-plugin] prepare release sshd-2.16.0
  • ebbfaf9 [releng] SCM tag for development versions
  • 2ec336a Fix javadoc warnings
  • 92eb158 Prepare documentation for a 2.16.0 release
  • 62e6b5c [releng] Bump version to 2.16.0-SNAPSHOT
  • 3fbc0a8 Bump grpc.version from 1.73.0 to 1.74.0 (#792)
  • 99246d6 Fix ClientChannelEvent.Timeout and ClientSessionEvent.TIMEOUT (#790)
  • 2868de8 Merge pull request #794 from kwin/bugfix/close-repo-in-pack-cmd
  • 6358be2 Close repository after usage in GitPackCommand
  • 67e2e4c Bump pmd.version from 7.15.0 to 7.16.0 (#788)
  • Additional commits viewable in compare view

Updates commons-net:commons-net from 3.11.1 to 3.12.0

Changelog

Sourced from commons-net:commons-net's changelog.

Apache Commons Net 3.12.0 Release Notes

The Apache Commons Net team is pleased to announce the release of Apache Commons Net 3.12.0.

Apache Commons Net library contains a collection of network utilities and protocol implementations. Supported protocols include Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, and Whois.

This is a feature and maintenance release. Java 8 or later is required.

For complete information on Apache Commons Net, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Net website:

https://commons.apache.org/proper/commons-net/

Download page: https://commons.apache.org/proper/commons-net/download_net.cgi

New features

o Add org.apache.commons.net.nntp.Article#getChild(). Thanks to Gary Gregory. o Add org.apache.commons.net.nntp.Article#getNext(). Thanks to Gary Gregory. o Add private SubnetAddressStringIterable and private SubnetAddressStringIterator to implement SubnetInfo.iterableAddressStrings() and SubnetInfo.streamAddressStrings() #298. Thanks to Lixiongyou, Gary Gregory. o Add SubnetInfo.iterableAddressStrings(). Thanks to Gary Gregory. o Add SubnetInfo.streamAddressStrings(). Thanks to Gary Gregory. o Add FTPCmd.OPTS. Thanks to Gary Gregory. o Add FTP.opts(String, String). Thanks to Gary Gregory. o Add FTP.opts(String...). Thanks to Gary Gregory. o Add FTP.setControlEncoding(Charset). Thanks to Gary Gregory. o Add --OPTS to FTPClientExample. Thanks to Gary Gregory. o NET-727: Add accessing options map for TFTP request packet and allow using 'blksize' option #331. Thanks to Gary Gregory. o Add org.apache.commons.net.util.ListenerList.isEmpty(). Thanks to Gary Gregory. o Add org.apache.commons.net.ftp.FTPClient.getSystemTypeOverride(). Thanks to Gary Gregory. o Add generics to ListenerList. Thanks to Gary Gregory. o Add module-info.class in the JAR file instead of an Automatic-Module-Name in MANIFEST.MF. Thanks to Gary Gregory.

Fixed Bugs

o Increase message limit in IMAPReply.TAGGED_RESPONSE from 80 to 500 characters. Thanks to Andreas Lemke, Gary Gregory. o Increase message limit in IMAPReply.UNTAGGED_RESPONSE from 160 to 500 characters. Thanks to Andreas Lemke, Gary Gregory. o Remove InvalidKeySpecException from AuthenticatingIMAPClient.auth(AUTH_METHOD, String, String) never throws, it's not thrown. Thanks to Gary Gregory. o Remove InvalidKeySpecException from AuthenticatingIMAPClient.authenticate(AUTH_METHOD, String, String) never throws, it's not thrown. Thanks to Gary Gregory. o Remove InvalidKeySpecException from ExtendedPOP3Client.auth(AUTH_METHOD, String, String) never throws, it's not thrown. Thanks to Gary Gregory. o Remove InvalidKeySpecException from org.apache.commons.net.smtp.AuthenticatingSMTPClient.auth(AUTH_METHOD, String, String) never throws, it's not thrown. Thanks to Gary Gregory. o Fix SpotBugs RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE in SSLSocketUtils. Thanks to Gary Gregory. o Fix PMD UnnecessaryFullyQualifiedName. Thanks to Gary Gregory. o Fix PMD UnusedFormalParameter. Thanks to Gary Gregory.

... (truncated)

Commits
  • bb741d0 Prepare for the release candidate 3.12.0 RC1
  • bfaf5d2 Prepare for the next release candidate
  • 91baa6f Add module-info.class in the JAR file instead of an
  • 6a49728 Merge pull request #355 from apache/dependabot/github_actions/github/codeql-a...
  • de4990b Bump github/codeql-action from 3.29.2 to 3.29.4
  • 078c17d Merge some string literals
  • 200dccd Format nit
  • f84d393 Format nit
  • 7cfdadf Format nit
  • 1213ed8 Update the GitHub pull request template for AI
  • Additional commits viewable in compare view

Updates io.hypersistence:hypersistence-utils-hibernate-63 from 3.7.3 to 3.12.0

Changelog

Sourced from io.hypersistence:hypersistence-utils-hibernate-63's changelog.

Version 3.12.0 - November 09, 2025

Add support for Short identifiers in BatchSequenceGenerator #813

Replace JdbcOperationQuerySelect with JdbcOperation for Hibernate 7.2.0.CR1 #812

Version 3.11.0 - September 09, 2025

Add support for Hibernate 7.1 #802

ObjectMapperWrapper not working with Map<String, String> #793

Version 3.10.3 - July 11, 2025

Add support for @​Tsid generation on non-id entity attributes #794

Version 3.10.2 - July 05, 2025

Add support for addScalar in the Hibernate 7 module #792

Version 3.10.1 - June 14, 2025

Update description in pom.xml to mention support of Hibernate 6.6 #790

Remove the central-publishing-maven-plugin dependency #789

Version 3.10.0 - June 09, 2025

Add support for Hibernate 7 #784

Version 3.9.11 - June 07, 2025

Allow the PostgreSQLRangeType to work in AOT mode #787

Version 3.9.10 - April 27, 2025

ObjectMapperJsonSerializer throws StackOverflowError when using Map<String,String[]> #780

Version 3.9.9 - March 31, 2025

The ObjectMapperWrapper.fromBytes cannot instantiate an AbstractCollection #773

... (truncated)

Commits
  • 459208c [maven-release-plugin] prepare release hypersistence-utils-parent-3.12.0
  • 6fd15b4 Update changelog for the 3.12.0 release
  • d60da3f Add support for Short identifiers in BatchSequenceGenerator #813
  • 7a84cb1 Replace JdbcOperationQuerySelect with JdbcOperation for Hibernate 7.2.0.CR1 #812
  • 885c2d7 Bump version up
  • 61447a9 [maven-release-plugin] prepare for next development iteration
  • 898576d [maven-release-plugin] prepare release hypersistence-utils-parent-3.11.0
  • d1f3f6f Update changelog for the 3.11.0 release
  • e6ccf13 Add support for Hibernate 7.1 #802
  • 44e32c8 ObjectMapperWrapper not working with Map<String, String> #793
  • Additional commits viewable in compare view

Updates com.opencsv:opencsv from 5.11.2 to 5.12.0

Updates org.marc4j:marc4j from 2.9.1 to 2.9.6

Release notes

Sourced from org.marc4j:marc4j's releases.

2.9.6

This includes a couple of pull requests:
marc4j/marc4j#100 marc4j/marc4j#98 marc4j/marc4j#97 Plus code to handle marc4j/marc4j#102 marc4j/marc4j#94

Plus a number of changes to the build.xml code to support automatic uploading of the built code artifacts to sonatype.org Plus a new github workflow, that should run automatically when a release is published.

2.9.4

Include the additional Pull request that includes imports of org.marc4j.marc.Record to prevent collision with newer java class Record.

2.9.3

Merges in a Pull Request to add handling of NLM Call Numbers

Pull Request Release

Merged in several Pull requests, including some error fixes and upgrading the version of Ivy used to 2.5 and using https.

Commits
  • f654e83 handle issues :
  • 798ccea only run release.yml when a release is published
  • 3ebfe70 many changes to build code, to support automatically uploading to sonatype.or...
  • 1355383 Merge pull request #100 from MSU-Libraries/linked_occurrence
  • 975f789 Merge pull request #98 from cleydyr/issue-88
  • b526eda Merge pull request #97 from julianladisch/nlm-w
  • bd290cc Linked field no longer fails due to occurrence
  • 579295b refactor: [88] remove redundant if-else
  • d4e80cf Allow 3 class letters
  • de23419 prevent OOB errors on really bad records.
  • Additional commits viewable in compare view

Updates software.amazon.awssdk:aws-sdk-java from 2.29.6 to 2.39.2

Updates one.util:streamex from 0.8.3 to 0.8.4

Release notes

Sourced from one.util:streamex's releases.

StreamEx 0.8.4

  • #279 Added: AbstractStreamEx.mapToEntryPartial.
  • #280 Added: EntryStream.mapKeysPartial and mapValuesPartial
Commits
  • fa62158 Version 0.8.4
  • 0b76dac InternalsTest: cover exception in CloneableSpliterator
  • 724067b Inline the implementation of mapKeysPartial and mapValuesPartial to reduce th...
  • 351235a Update CHANGES.md and CHEATSHEET.md
  • 6e42b52 Merge pull request #280 from roblburris/rb/add-mapPartial-for-keys-and-values
  • 072bf1c Merge pull request #279 from rhuffy/rh/map-to-entry-partial
  • e664b14 reuse existing
  • 704a126 init
  • ba52b8e revert spurious whitespace
  • 3bb5714 formatting
  • Additional commits viewable in compare view

Updates org.openapitools:openapi-generator-maven-plugin from 6.2.1 to 7.17.0

Updates org.codehaus.mojo:exec-maven-plugin from 3.5.1 to 3.6.2

Release notes

Sourced from org.codehaus.mojo:exec-maven-plugin's releases.

3.6.2

🚀 New features and improvements

📦 Dependency updates

3.6.1

🐛 Bug Fixes

  • Revert change fr...

    Description has been truncated

@dependabot
fix(deps): bump the prod-deps group across 1 directory with 16 updates
234d3e8 
Bumps the prod-deps group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `3.5.4` | `4.0.0` |
| [org.folio:folio-service-tools-spring-dev](https://github.com/folio-org/folio-service-tools) | `4.1.1` | `5.0.0` |
| [org.folio:folio-spring-cql](https://github.com/folio-org/folio-spring-support) | `9.0.0` | `9.1.0` |
| [io.github.openfeign:feign-jackson](https://github.com/openfeign/feign) | `12.1` | `13.6` |
| [org.apache.sshd:sshd-spring-sftp](https://github.com/apache/mina-sshd) | `2.15.0` | `2.16.0` |
| [commons-net:commons-net](https://github.com/apache/commons-net) | `3.11.1` | `3.12.0` |
| [io.hypersistence:hypersistence-utils-hibernate-63](https://github.com/vladmihalcea/hypersistence-utils) | `3.7.3` | `3.12.0` |
| com.opencsv:opencsv | `5.11.2` | `5.12.0` |
| [org.marc4j:marc4j](https://github.com/marc4j/marc4j) | `2.9.1` | `2.9.6` |
| software.amazon.awssdk:aws-sdk-java | `2.29.6` | `2.39.2` |
| [one.util:streamex](https://github.com/amaembo/streamex) | `0.8.3` | `0.8.4` |
| org.openapitools:openapi-generator-maven-plugin | `6.2.1` | `7.17.0` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.5.1` | `3.6.2` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` |
| [org.apache.maven.plugins:maven-release-plugin](https://github.com/apache/maven-release) | `3.1.1` | `3.2.0` |
| [org.folio:folio-module-descriptor-validator](https://github.com/folio-org/folio-module-descriptor-validator) | `1.0.0` | `1.0.1` |



Updates `org.springframework.boot:spring-boot-starter-parent` from 3.5.4 to 4.0.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.4...v4.0.0)

Updates `org.folio:folio-service-tools-spring-dev` from 4.1.1 to 5.0.0
- [Release notes](https://github.com/folio-org/folio-service-tools/releases)
- [Changelog](https://github.com/folio-org/folio-service-tools/blob/master/NEWS.md)
- [Commits](folio-org/folio-service-tools@v4.1.1...v5.0.0)

Updates `org.folio:folio-spring-cql` from 9.0.0 to 9.1.0
- [Release notes](https://github.com/folio-org/folio-spring-support/releases)
- [Changelog](https://github.com/folio-org/folio-spring-support/blob/v9.1.0/NEWS.md)
- [Commits](folio-org/folio-spring-support@v9.0.0...v9.1.0)

Updates `io.github.openfeign:feign-jackson` from 12.1 to 13.6
- [Release notes](https://github.com/openfeign/feign/releases)
- [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
- [Commits](OpenFeign/feign@12.1...13.6)

Updates `org.apache.sshd:sshd-spring-sftp` from 2.15.0 to 2.16.0
- [Release notes](https://github.com/apache/mina-sshd/releases)
- [Changelog](https://github.com/apache/mina-sshd/blob/master/CHANGES.md)
- [Commits](apache/mina-sshd@sshd-2.15.0...sshd-2.16.0)

Updates `commons-net:commons-net` from 3.11.1 to 3.12.0
- [Changelog](https://github.com/apache/commons-net/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-net@rel/commons-net-3.11.1...rel/commons-net-3.12.0)

Updates `io.hypersistence:hypersistence-utils-hibernate-63` from 3.7.3 to 3.12.0
- [Changelog](https://github.com/vladmihalcea/hypersistence-utils/blob/master/changelog.txt)
- [Commits](vladmihalcea/hypersistence-utils@hypersistence-utils-parent-3.7.3...hypersistence-utils-parent-3.12.0)

Updates `com.opencsv:opencsv` from 5.11.2 to 5.12.0

Updates `org.marc4j:marc4j` from 2.9.1 to 2.9.6
- [Release notes](https://github.com/marc4j/marc4j/releases)
- [Changelog](https://github.com/marc4j/marc4j/blob/master/changes.txt)
- [Commits](marc4j/marc4j@2.9.1...2.9.6)

Updates `software.amazon.awssdk:aws-sdk-java` from 2.29.6 to 2.39.2

Updates `one.util:streamex` from 0.8.3 to 0.8.4
- [Release notes](https://github.com/amaembo/streamex/releases)
- [Commits](amaembo/streamex@streamex-0.8.3...streamex-0.8.4)

Updates `org.openapitools:openapi-generator-maven-plugin` from 6.2.1 to 7.17.0

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.5.1 to 3.6.2
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@3.5.1...3.6.2)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

Updates `org.apache.maven.plugins:maven-release-plugin` from 3.1.1 to 3.2.0
- [Release notes](https://github.com/apache/maven-release/releases)
- [Commits](apache/maven-release@maven-release-3.1.1...maven-release-3.2.0)

Updates `org.folio:folio-module-descriptor-validator` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/folio-org/folio-module-descriptor-validator/releases)
- [Changelog](https://github.com/folio-org/folio-module-descriptor-validator/blob/master/NEWS.md)
- [Commits](folio-org/folio-module-descriptor-validator@v1.0.0...v1.0.1)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.folio:folio-service-tools-spring-dev
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.folio:folio-spring-cql
  dependency-version: 9.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: io.github.openfeign:feign-jackson
  dependency-version: '13.6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.apache.sshd:sshd-spring-sftp
  dependency-version: 2.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: commons-net:commons-net
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: io.hypersistence:hypersistence-utils-hibernate-63
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: com.opencsv:opencsv
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.marc4j:marc4j
  dependency-version: 2.9.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: software.amazon.awssdk:aws-sdk-java
  dependency-version: 2.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: one.util:streamex
  dependency-version: 0.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.openapitools:openapi-generator-maven-plugin
  dependency-version: 7.17.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-release-plugin
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.folio:folio-module-descriptor-validator
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Nov 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant