Update vaadin.version to v24.9.0

[xdev-renovate]

This PR contains the following updates:

Package	Type	Update	Change
com.vaadin:vaadin-bom (source)	import	minor	24.8.8 -> 24.9.0
com.vaadin:vaadin-maven-plugin (source)	build	minor	24.8.8 -> 24.9.0

---

Release Notes

vaadin/platform (com.vaadin:vaadin-bom)

v24.9.0: Vaadin 24.9.0

Compare Source

Upgrading · Docs · Get Started

New and Noteworthy Since Vaadin 24.8

Since Vaadin 24.9, you can start using Vaadin Beta and Release Candidate versions from Maven Central.
Flow:

• add new HTML component <code>
• add new style methods: STYLE_BACKGROUND_POSITION, STYLE_BACKGROUND_SIZE, STYLE_FILTER, STYLE_GAP, STYLE_ROTATE
• add a short method to SortDirection enum (Thanks to @​abdurasul29052002)
• add convenient API to set item from DataView
• Upgraded commercial trial experience (read more)

Design System:

• add Tooltip support for SideNavItem

Hilla:

• support matching wildcard views with subdirectories

Copilot:

• Upgraded commercial trial experience (read more)
• Figma Importer API (read more)

Deprecation

Flow:

• Deprecate HierarchyMapper, HierarchicalCommunicationController, HierarchicalArrayUpdater and HierarchicalUpdate
• Deprecate methods in HierarchicalDataCommunicator (listed here)
• Deprecate webpackOutputDirectory
• Deprecate VaadinSession::setConfiguration(configuraiton)
• Deprecate setRequestedRange and computeRequestedRange
• Deprecate VaadinWebSecurity
• Deprecate arrayUpdater and dataupdater

Design System:

• Deprecate CookieConsent
• Deprecate legacy Grid API (listed here)
• Deprecate TreeGridElement's getNumberOfExpandedRows and isLoadingExpandedRows

*Deprecated APIs will be removed in Vaadin 25

Known Vulnerability

Vaadin 24.9 uses Spring Boot 3.5.x, which includes commons-lang3:3.17.0. Security scanners may report CVE-2025-48924 due to this version. To address the issue, users can override the dependency by adding <commons-lang3.version>3.18.0</commons-lang3.version> to the <properties> section in their pom.xml. More details about the missing latest version of commons-lang3 in the Spring Boot 3.5.x BOM can be found here

Changelogs

• Flow (24.9.0) and Hilla (24.9.0)
• Design System
  • Web Components (24.9.0)
  • Flow Components (24.9.0)
• TestBench (9.5.0)
• Feature Pack(24.8.2)
• Modernization Toolkit (Documentation)
  • Feature Pack (Documentation)
  • Dragonfly (Documentation)
  • Modernization Toolkit Analyzer (Analyzer for Eclipse, Analyzer for Maven)
• Multiplatform Runtime (MPR) (7.0.11)
• Router (2.0.0)
• Vaadin Kits
  • AppSec Kit (3.4.0)
  • Azure Kit (1.0.0)
  • Collaboration Engine (6.6.0)
  • Control Center (1.4.0)
  • Copilot (24.9.0)
  • Kubernetes Kit (2.5.0)
  • Observability Kit (3.2.0)
  • SSO Kit (3.2.0)
  • Swing Kit (2.4.1)

Official add-ons and plugins:

• Spring add-on (24.9.0)
• CDI add-on (15.2.0)
• Maven plugin (24.9.0)
• Gradle plugin (24.9.0)
• Quarkus plugin (2.2.1)

Upgrading guides

• Upgrading Flow to Vaadin 24
• Upgrading hilla to Vaadin 24
• Upgrading Design System to Vaadin 24

Support

Vaadin 24 is the latest stable version, with extended support options available (release model).

Vaadin also provides commercial support and warranty.

Supported technologies

Desktop browser	Chrome (evergreen). Firefox (evergreen). Firefox Extended Support Release (ESR). Safari 15 or newer (latest minor version in each major series). Edge (Chromium, evergreen).
Mobile browser	Chrome (evergreen) for Android (4.4 or newer). Safari 15 for iOS or newer (latest minor version in each major series).
Development OS	Windows macOS Linux
IDE	Any IDE or editor that works with the language of your choice should work well. Our teams often use IntelliJ, Eclipse, VS Code among others. Vaadin IDE plugins (IntelliJ and VS Code) support the IDE versions released during the last 12 months Vaadin Designer supports the following IDEs: Eclipse from Photon and upwards JetBrains IntelliJ IDEA from 2017 upwards
Java	Version 17 of any JDK or JRE
Maven	Version 3.5 or newer
Gradle	Version 8.7 or newer
Application server	Vaadin Flow requires Java Servlet API 6 and Java 17 or newer. It is tested on: Apache Tomcat 10.1 Open Liberty 23 RedHat JBoss EAP 8.0 beta WildFly 35 Jetty 12 Payara Server 6 Payara Micro 6
Node.js	Version 20 or newer
Spring Boot	Version 3.5 or newer

Known issues and limitations

Flow	The Template-in-Template feature has some limitations

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.