[DT-400-maven]: Bump the maven-other-updates group with 8 updates

[dependabot]

Bumps the maven-other-updates group with 8 updates:

Package	From	To
com.google.cloud:libraries-bom	26.72.0	26.73.0
ch.qos.logback:logback-classic	1.5.22	1.5.23
ch.qos.logback:logback-core	1.5.22	1.5.23
io.sentry:sentry	8.28.0	8.29.0
io.grpc:grpc-context	1.77.0	1.78.0
org.elasticsearch.client:elasticsearch-rest-client	9.2.2	9.2.3
org.testcontainers:mockserver	1.21.3	1.21.4
org.webjars:swagger-ui	5.30.3	5.31.0

Updates com.google.cloud:libraries-bom from 26.72.0 to 26.73.0

Release notes

Sourced from com.google.cloud:libraries-bom's releases.

v26.73.0

GCP Libraries BOM 26.73.0

Here are the differences from the previous version (26.72.0)

New Addition

• com.google.cloud:google-cloud-hypercomputecluster:0.1.0
• com.google.cloud:google-cloud-gkerecommender:0.1.0

The group ID of the following artifacts is com.google.cloud.

Notable Changes

google-cloud-bigquery 2.57.1 (prev: 2.56.0)

• Add timestamp_precision to Field (#4014) (57ffe1d)
• Introduce DataFormatOptions to configure the output of BigQuery data types (#4010) (6dcc900)
• Relax client-side validation for BigQuery entity IDs (#4000) (c3548a2)

google-cloud-bigquerystorage 3.19.0 (prev: 3.18.0)

• Add picosecond timestamp support for Json to Proto converter (#3131) (ea1bcc5)

google-cloud-firestore 3.34.0 (prev: 3.33.4)

• Publish the pipelines API to the stable branch (2cab2e0)

google-cloud-pubsub 1.144.0 (prev: 1.143.1)

• Add keepalive feature to tear down streams in their absence (#2605) (99aca4f)
• Make v1 the default protocolVersion (#2623) (12f014d)

google-cloud-spanner 6.105.0 (prev: 6.103.0)

• Include PostgreSQL error code in exceptions (#4236) (5874f8b)

• Add support of dynamic channel pooling (#4265) (923a14a)

• Include RequestID in requests and errors (#4263) (afd7d6b)

• Make grpc-gcp default enabled (#4239) (bb82f9e)

• Refine connecitivity metrics to capture RPCs with no response he… (#4252) (7b49412)

• Retry as PDML dit not retry Resource limit exceeded (#4258) (c735d42), closes #4253

google-cloud-storage 2.61.0 (prev: 2.60.0)

• Add support for partial success in ListBuckets for json (#3415) (37ef7f3)
• Modifying getters and setters to be more inline with s3 interface. (0a8bbea)
• mpu: Breaking change modifying getters and setters in MPU to be more inline with s3 interface. (66d54e2)

Other libraries

• [aiplatform] A new field min_gpu_driver_version is added to message .google.cloud.aiplatform.v1beta1.MachineSpec (b887034)
• [aiplatform] add gpu_partition_size in machine_spec v1 api (b887034)
• [aiplatform] add ReplicatedVoiceConfig to VoiceConfig to enable Gemini TTS voice replication (b887034)
• [aiplatform] add ReplicatedVoiceConfig to VoiceConfig to enable Gemini TTS voice replication (b887034)

... (truncated)

Commits

• 27ae483 chore: release main (#7310)
• 58507f6 deps: update dependency com.google.cloud:gapic-libraries-bom to v1.75.0 (#7311)
• d7745c3 deps: Explicitly override grpc-gcp to 1.9.0 (#7308)
• d45dbb5 chore: release main (#7283)
• 7d4a5df deps: update dependency com.google.cloud:google-cloud-spanner-jdbc to v2.34.1...
• eea1913 deps: update dependency com.google.cloud:google-cloud-spanner-bom to v6.105.0...
• a8acaf0 deps: update dependency com.google.cloud:gapic-libraries-bom to v1.74.1 (#7290)
• 4b9d736 deps: update dependency com.google.cloud:google-cloud-bigtable-bom to v2.70.1...
• 4195514 deps: update dependency com.google.cloud:google-cloud-datastore-bom to v2.33....
• b708bfc deps: update dependency com.google.cloud:google-cloud-logging-logback to v0.1...
• Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.5.22 to 1.5.23

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.23

2025-12-21 Release of logback version 1.5.23

• In response to issues/959 file name collisions are detected at configuration time by analyzing the configuration file and no longer at run time. This avoids the ConcurrentModificationException reported in the issue.

• ZIP and XZ compression now use a BufferedOutputStream when writing to the compressed file. This issue was reported in issues/988.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 0bcc3feb54a6d99caac70969ee5f8334aad1fbaf associated with the tag v_1.5.23. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits

• 0bcc3fe prepare release 1.5.23
• 4627dbd better to use BufferedOutputStream during ZIP and XZ compression, especially ...
• 299f091 add collision test in presence of conditional processing
• b446f3f In Context, remove collision map
• a3eb14d in response to issues/959, collision detection is now done by FileCollisionAn...
• 681b2be remove unused method, minor comment edits
• 17a3edf start work on 1.5.23-SNAPSHOT
• See full diff in compare view

Updates ch.qos.logback:logback-core from 1.5.22 to 1.5.23

Release notes

Sourced from ch.qos.logback:logback-core's releases.

Logback 1.5.23

2025-12-21 Release of logback version 1.5.23

• In response to issues/959 file name collisions are detected at configuration time by analyzing the configuration file and no longer at run time. This avoids the ConcurrentModificationException reported in the issue.

• ZIP and XZ compression now use a BufferedOutputStream when writing to the compressed file. This issue was reported in issues/988.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 0bcc3feb54a6d99caac70969ee5f8334aad1fbaf associated with the tag v_1.5.23. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits

• 0bcc3fe prepare release 1.5.23
• 4627dbd better to use BufferedOutputStream during ZIP and XZ compression, especially ...
• 299f091 add collision test in presence of conditional processing
• b446f3f In Context, remove collision map
• a3eb14d in response to issues/959, collision detection is now done by FileCollisionAn...
• 681b2be remove unused method, minor comment edits
• 17a3edf start work on 1.5.23-SNAPSHOT
• See full diff in compare view

Updates ch.qos.logback:logback-core from 1.5.22 to 1.5.23

Release notes

Sourced from ch.qos.logback:logback-core's releases.

Logback 1.5.23

2025-12-21 Release of logback version 1.5.23

• In response to issues/959 file name collisions are detected at configuration time by analyzing the configuration file and no longer at run time. This avoids the ConcurrentModificationException reported in the issue.

• ZIP and XZ compression now use a BufferedOutputStream when writing to the compressed file. This issue was reported in issues/988.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 0bcc3feb54a6d99caac70969ee5f8334aad1fbaf associated with the tag v_1.5.23. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits

• 0bcc3fe prepare release 1.5.23
• 4627dbd better to use BufferedOutputStream during ZIP and XZ compression, especially ...
• 299f091 add collision test in presence of conditional processing
• b446f3f In Context, remove collision map
• a3eb14d in response to issues/959, collision detection is now done by FileCollisionAn...
• 681b2be remove unused method, minor comment edits
• 17a3edf start work on 1.5.23-SNAPSHOT
• See full diff in compare view

Updates io.sentry:sentry from 8.28.0 to 8.29.0

Release notes

Sourced from io.sentry:sentry's releases.

8.29.0

Fixes

• Support serialization of primitive arrays (boolean[], byte[], short[], char[], int[], long[], float[], double[]) (#4968)
• Session Replay: Improve network body parsing and truncation handling (#4958)

Internal

• Support metric envelope item type (#4956)

Changelog

Sourced from io.sentry:sentry's changelog.

8.29.0

Fixes

• Support serialization of primitive arrays (boolean[], byte[], short[], char[], int[], long[], float[], double[]) (#4968)
• Session Replay: Improve network body parsing and truncation handling (#4958)

Internal

• Support metric envelope item type (#4956)

Commits

• 216800f release: 8.29.0
• 56d8c1e fix(serialization): Support primitive array serialization (#4968)
• 106e5aa build(deps): bump actions/upload-artifact from 5 to 6 (#4965)
• 5b66efd build(deps): bump actions/create-github-app-token from 2.1.4 to 2.2.1 (#4954)
• b01b11a fix: improve network body parsing and truncation handling (#4958)
• 6edfca2 build(deps): bump urllib3 in the pip group across 1 directory (#4952)
• 91bb874 feat(envelope-item): Support metric type (#4956)
• dba088c Merge branch 'release/8.28.0'
• See full diff in compare view

Updates io.grpc:grpc-context from 1.77.0 to 1.78.0

Release notes

Sourced from io.grpc:grpc-context's releases.

V1.78.0

Bug Fixes

• core: Fix shutdown failing accepted RPCs during channel startup (02e98a806). This fixes a race where RPCs could fail with "UNAVAILABLE: Channel shutdown invoked" even though they were created before channel.shutdown()
• okhttp: Fix race condition overwriting MAX_CONCURRENT_STREAMS (#12548) (8d49dc1c9)
• binder: Stop leaking this from BinderServerTransport's ctor (#12453) (89d77e062)
• rls: Avoid missed config update from reentrancy (55ae1d054). This fixes a regression since 1.75.0 triggered by CdsLb being converted to XdsDepManager. Without this fix, a second channel to the same target may hang when starting, causing DEADLINE_EXCEEDED, and unhang when the control plane delivers an update (e.g., endpoint address update)

Improvements

• xds: gRFC A88 - Changes to XdsClient Watcher APIs (#12446) (f385add31). We now have improved xDS error handling and this provides a clearer mechanism for the xDS server to report per-resource errors to the client, resulting in better error messages for debugging and faster detection of non-existent resources. This also improves the handling of all xDS-related data errors and the behavior of the xDS resource timer.
• rls: Control plane channel monitor state and back off handling (#12460) (26c1c1341). Resets RLS request backoff timers when the Control plane channel state transitions to READY. Also when the backoff timer expires, instead of making a RLS request immediately, it just causes a picker update to allow making rpc again to the RLS target.
• core: simplify DnsNameResolver.resolveAddresses() (4843256af)
• netty: Run handshakeCompleteRunnable in success cases (283f1031f)
• api,netty: Add custom header support for HTTP CONNECT proxy (bbc0aa369)
• binder: Pre-factor out the guts of the BinderClientTransport handshake. (9313e87df)
• compiler: Add RISC-V 64-bit architecture support to compiler build configuration (725ab22f3)
• core: Release lock before closing shared resource (cb73f217e). Shared resources are internal to gRPC for sharing expensive objects across channels and servers, like threads. This reduces the chances of forming a deadlock, like seen with s2a in d50098f
• Upgrade gson to 2.12.1 (6dab2ceab)
• Upgrade dependencies (f36defa2d). proto-google-common-protos to 2.63.1, google-auth-library to 1.40.0, error-prone annotations to 2.44.0, guava to 33.5.0-android, opentelemetry to 1.56.0
• compiler: Update maximum supported protobuf edition to EDITION_2024 (2f64092b8)
• binder: Introduce server authorization strategy v2 (d9710725d). Adds support for android:isolatedProcess Services and moves all security checks to the handshake, making subsequent transactions more efficient.

New Features

• compiler: Upgrade to C++ protobuf 33.1 (#12534) (58ae5f808).
• util: Add gRFC A68 random subsetting LB (48a42889d). The policy uses the name random_subsetting_experimental. If it is working for you, tell us so we can gauge marking it stable. While the xDS portions haven’t yet landed, it is possible to use with xDS with JSON-style Structs as supported by gRFC A52
• xds: Support for System Root Certs (#12499) (51611bad1). Most service mesh workloads use mTLS, as described in gRFC A29. However, there are cases where it is useful for applications to use normal TLS rather than using certificates for workload identity, such as when a mesh wants to move some workloads behind a reverse proxy. The xDS CertificateValidationContext message (see envoyproxy/envoy#34235) has a system_root_certs field. In the gRPC client, if this field is present and the ca_certificate_provider_instance field is unset, system root certificates will be used for validation. This implements gRFC A82.
• xds: Support for GCP Authentication Filter (#12499) (51611bad1). In service mesh environments, there are cases where intermediate proxies make it impossible to rely on mTLS for end-to-end authentication. These cases can be addressed instead by the use of service account identity JWT tokens. The xDS GCP Authentication filter provides a mechanism for attaching such JWT tokens as gRPC call credentials on GCP. gRPC already supports a framework for xDS HTTP filters, as described in gRFC A39. This release supports the GCP Authentication filter under this framework as described in gRFC A83.
• xds: Support for xDS-based authority rewriting (#12499) (51611bad1). gRPC supports getting routing configuration from an xDS server, as described in gRFCs A27 and A28. The xDS configuration can configure the client to rewrite the authority header on requests. This functionality can be useful in cases where the server is using the authority header to make decisions about how to process the request, such as when multiple hosts are handled via a reverse proxy. Note that this feature is solely about rewriting the authority header on data plane RPCs; it does not affect the authority used in the TLS handshake.
  As mentioned in gRFC A29, there are use-cases for gRPC that prohibit trusting the xDS server to control security-centric configuration. The authority rewriting feature falls under the same umbrella as mTLS configuration. As a result, the authority rewriting feature will only be enabled when the bootstrap config for the xDS server has trusted_xds_server in the server_features field.
• xds: xDS based SNI setting and SAN validation (#12378) (0567531). When using xDS credentials make SNI for the Tls handshake to be configured via xDS, rather than use the channel authority as the SNI, and make SAN validation to be able to use the SNI sent when so instructed via xDS. Implements gRFC A101.

Documentation

• api: Document gRFC A18 TCP_USER_TIMEOUT handling for keepalive (da7038782)
• core: Fix AbstractClientStream Javadoc (28a6130e8)
• examples: Document how to preserve META-INF/services in uber jars (97695d523)

Thanks to

• @​panchenko
• @​Dayuxiaoshui
• @​becomeStar
• @​kssumin
• @​marcindabrowski
• @​MariusVolkhart
• @​Zgoda91
• @​devalkone

... (truncated)

Commits

• 8fa6000 Bump version to 1.78.0
• 87df333 Update README etc to reference 1.78.0
• 283f103 netty: Run handshakeCompleteRunnable in success cases
• eb8a63c Introduce io.grpc.Uri. (#12535)
• 58ae5f8 compiler: Upgrade to protobuf 33.1 (#12534)
• 8d49dc1 okhttp: Fix race condition overwriting MAX_CONCURRENT_STREAMS (#12548)
• b1a94a4 xds: implement server feature fail_on_data_errors (#12544)
• 55ae1d0 rls: Avoid missed config update from reentrancy
• 53a0926 xds: fix race in simpleFlowControl (#12547)
• f36defa Upgrade dependencies
• Additional commits viewable in compare view

Updates org.elasticsearch.client:elasticsearch-rest-client from 9.2.2 to 9.2.3

Release notes

Sourced from org.elasticsearch.client:elasticsearch-rest-client's releases.

Elasticsearch 9.2.3

Downloads: https://elastic.co/downloads/elasticsearch Release notes: https://www.elastic.co/docs/release-notes/elasticsearch#elasticsearch-9.2.3-release-notes

Commits

• d8972a7 [Inference API] Use dimensions field in JinaAI text_embedding requests (#139549)
• 630b65b [9.2] Address CompoundRetrieverBuilder Failure Handling (#136732) (#139483)
• ef03007 Fix PushDownAndCombineLimits local limit handling when the limits are equal (...
• d27dd84 [CI] Rerun failing tests for periodic build pipelines (#139200) (#139430)
• 115c3b7 Fix offset maths bug in InetAddress parsing (#139420) (#139428)
• 5738aa9 Add test for int-to-long sort BWC conversion (#139358)
• 4ae2f2d Make testTopNSortExpressionWithinRemoteEnrichAliasing not require exact temp ...
• 3003abd Fix GPU vector merge slice position bug (#139063) (#139324)
• d07767c Change checkFileRead to throw IOException (#139320) (#139332)
• cee7566 Use correct index version constant for a 9.2 patch version (#139361)
• Additional commits viewable in compare view

Updates org.testcontainers:mockserver from 1.21.3 to 1.21.4

Release notes

Sourced from org.testcontainers:mockserver's releases.

1.21.4

This release makes version 1.21.x works with recent Docker Engine changes.

Commits

• d509c81 Set version during jreleaserDeploy task
• efa40ce Allow junit:junit dependency in checkPOMdependencies
• 76b1364 Add JReleaser to deploy to Portal Publisher API
• d6b6ff7 Fix compatibility with older Docker Engines by falling back to v1.32 (#11346)
• See full diff in compare view

Updates org.webjars:swagger-ui from 5.30.3 to 5.31.0

Release notes

Sourced from org.webjars:swagger-ui's releases.

v5.31.0

5.31.0 (2025-12-11)

Features

• add dark mode (#10653) (5f42eee), closes #5327 #9964 #10089

Commits

• 61dddd4 chore(release): cut the 5.31.0 release
• cf11271 Revert "chore(release): cut the 5.31.0 release" (#10658)
• e52faf8 chore(release): cut the 5.31.0 release
• 5f42eee feat: add dark mode (#10653)
• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
org.webjars:swagger-ui	[< 4.2, > 4.1.3]
org.webjars:swagger-ui	[< 4.5, > 4.4.1]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[fboulnois]

👍

[rushtong]

Tested swagger manually 👍🏽