Skip to content

fix(deps): bump the prod-deps group across 1 directory with 12 updates #717

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: master
Choose a base branch
from
Open

fix(deps): bump the prod-deps group across 1 directory with 12 updates #717

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 2, 2026

Bumps the prod-deps group with 12 updates in the / directory:

Package From To
org.springframework.boot:spring-boot-starter-parent 3.5.4 4.0.2
org.folio:folio-service-tools-spring-dev 4.1.1 5.0.1
org.folio:folio-spring-cql 9.0.0 9.1.0
io.github.openfeign:feign-jackson 12.1 13.6
org.apache.sshd:sshd-spring-sftp 2.15.0 2.17.1
commons-net:commons-net 3.11.1 3.12.0
io.hypersistence:hypersistence-utils-hibernate-63 3.7.3 3.15.1
io.xlate:staedi 1.26.0 1.26.1
com.opencsv:opencsv 5.11.2 5.12.0
org.marc4j:marc4j 2.9.1 2.9.6
software.amazon.awssdk:aws-sdk-java 2.40.2 2.41.19
one.util:streamex 0.8.3 0.8.4

Updates org.springframework.boot:spring-boot-starter-parent from 3.5.4 to 4.0.2

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.0.2

⚠️ Noteworthy Changes

  • The dependency on org.eclipse.jetty.ee11:jetty-ee11-servlets has been removed from spring-boot-jetty as it was unnecessary and unused. If your application code depends on a class from jetty-ee11-servlets, declare a dependency on it in your build configuration. #48677

🐞 Bug Fixes

  • No TransactionAutoConfiguration with spring-boot-starter-kafka for Spring Boot 4 #48880
  • Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #48840
  • When a bean condition references a type that is not present, it appears as ? in the condition evaluation report #48838
  • SessionAutoConfiguration creates a DefaultCookieSerializer with a default SameSite of null instead of Lax #48830
  • Setting graphql schema location to "classpath*:graphql/**/" causes failure due to incorrectly packaged test resource #48829
  • Message interpolation by MVC and WebFlux's Validators does not work correctly in a native image #48828
  • CloudFoundry integration fails in Servlet-based web app without a dependency on spring-boot-starter-restclient #48826
  • RestTestClientAutoConfiguration and TestRestTemplateAutoConfiguration should be package-private #48820
  • SSL metrics are no longer auto-configured #48819
  • Actuator /info endpoint fails in Java 25 Native Image (VirtualThreadSchedulerMXBean support) #48812
  • DataSourceBuilder cannot create oracle.ucp.jdbc.PoolDataSourceImpl in a native image #48703
  • The spring-boot-cloudfoundry module should only have an optional dependency on spring-boot-security #48685
  • Application JAR created by extract command is not reproductible #48678
  • AOT processing of tests should not be disabled when 'skipTests' is set #48662
  • @SpringBootTest(webEnvironment = WebEnvironment.RANDOM_PORT) is no longer applied to the management server #48653
  • Fix zero-length byte buffer in InspectedContent #48650
  • Can no longer override JacksonJsonHttpMessageConverter with ServerHttpMessageConvertersCustomizer #48635
  • HttpServiceClientProperties incorrectly uses the @ConfigurationProperties annotation on a LinkedHashMap class #48616
  • spring-boot-micrometer-tracing-opentelemetry fails if spring-boot-opentelemetry isn't there #48585
  • App fails to start with starter-webmvc and starter-zipkin #48581
  • Micrometer test modules should have an api dependency on micrometer-observation-test #48386

📔 Documentation

  • Fix typo in REST client documentation #48907
  • Remove duplicate word #48874
  • Document support for configuring arguments passed to Docker Compose #48806
  • The documentation related to EnvironmentPostProcessor links to deprecated interface #48803
  • Update documentation for Buildpack's AOT Cache support #48769
  • Correct docs to use new location for error handling configuration properties #48767
  • Document spring-boot-starter-cloudfoundry on Cloud Foundry Support Page #48675
  • Clarify javadoc to make it clear that HazelcastConfigCustomizer beans are only applied if Hazelcast is configured via a config file #48659
  • Example using excludeDevtools property should document that optional dependencies should be enabled #48641
  • Fix grammar and typos in the reference guide #48601
  • Update Tracing section for Spring Boot 4's modularity #48576

🔨 Dependency Upgrades

  • Upgrade to Classmate 1.7.3 #48783
  • Upgrade to Elasticsearch Client 9.2.3 #48721
  • Upgrade to Hibernate 7.2.1.Final #48857
  • Upgrade to HttpClient5 5.5.2 #48784
  • Upgrade to Jackson 2 Bom 2.20.2 #48910

... (truncated)

Commits
  • fae3545 Release v4.0.2
  • 9fde744 Merge branch '3.5.x' into 4.0.x
  • 650236d Remove breaking and unnecessary Undertow TLS with RSA test
  • 547bc77 Upgrade to Spring Batch 6.0.2
  • 4387cbb Upgrade to Jackson Bom 3.0.4
  • abec26e Polish
  • f677fba Upgrade to Spring Integration 7.0.2
  • 849c2ee Upgrade to Spring GraphQL 2.0.2
  • facd456 Upgrade to Nullability Plugin 0.0.10
  • e99c08f Merge branch '3.5.x' into 4.0.x
  • Additional commits viewable in compare view

Updates org.folio:folio-service-tools-spring-dev from 4.1.1 to 5.0.1

Release notes

Sourced from org.folio:folio-service-tools-spring-dev's releases.

v5.0.1

Dependencies

  • Bump RMB from 35.4.0 to 35.4.1 (FST-98)
  • Bump Vertx from 4.5.13 to 4.5.22

v5.0.0

Breaking changes

  • Upgrade to Java 21 (FST-88)
  • Remove TokenUtils and UserInfo classes (FST-89)

Features

Add autoOffsetReset to KafkaListenerProperties (FST-87) Add maxPollRecords and maxPollIntervalMs to KafkaListenerProperties (FST-85)

Dependencies

  • Bump RMB from 35.3.0 to 35.4.0
  • Bump folio-spring-support from 8.2.0 to 9.0.0
  • Bump spring-boot from 3.3.4 to 3.4.3
  • Bump Vertx from 4.5.10 to 4.5.13

v4.1.2

Dependencies

  • Bump RMB from 35.3.0 to Ramsons version 35.3.1. (FST-97)
  • Bump Vertx from 4.5.10 to Ramsons version 4.5.22.
Changelog

Sourced from org.folio:folio-service-tools-spring-dev's changelog.

v5.0.1 2025-12-11

Dependencies

  • Bump RMB from 35.4.0 to 35.4.1 (FST-98)
  • Bump Vertx from 4.5.13 to 4.5.22

v5.0.0 2025-02-28

Breaking changes

  • Upgrade to Java 21 (FST-88)
  • Remove TokenUtils and UserInfo classes (FST-89)

Features

Add autoOffsetReset to KafkaListenerProperties (FST-87) Add maxPollRecords and maxPollIntervalMs to KafkaListenerProperties (FST-85)

Dependencies

  • Bump RMB from 35.3.0 to 35.4.0
  • Bump folio-spring-support from 8.2.0 to 9.0.0
  • Bump spring-boot from 3.3.4 to 3.4.3
  • Bump Vertx from 4.5.10 to 4.5.13

v4.1.0 2024-10-25

Bug fixes

  • Do not delete kafka topics if collection topic is enabled (FST-77)
  • Fix incorrect base64 decoding in TokenUtils (FST-80)

Dependencies

  • Bump RMB from 35.2.2 to version 35.3.0.
  • Bump Vertx from 4.5.5 to version 4.5.10.
  • Bump folio-spring-support/folio-spring-base from 8.2.0-SNAPSHOT to final version 8.2.0.
  • Bump Spring Boot from 3.2.3 to version 3.3.4.
  • Bump log4j-slf4j-impl to log4j-slf4j2-impl.
  • Bump log4j from 2.23.1 to 2.24.1.
  • Bump commons-io from 2.15.1 to 2.17.0.

v4.0.0 2024-03-18

Breaking changes

  • Remove system-user related functionality from "folio-service-tools-spring-dev" (FST-68)
  • Delete TestSetUpHelper.getPgClient() method (FST-73)
  • Remove "folio-service-tools-spring-test" submodule (FST-74)

Bug fixes

  • Avoid additional totalRecords SQL query for offset=0 limit=MAX_INT (FST-72)

Tech Debt

  • Spring Boot 3.1.5, folio-spring-base 7.2.2, Snakeyaml, Snappy (FST-70)

... (truncated)

Commits
  • 5cf7f8b [maven-release-plugin] prepare release v5.0.1
  • 12c99d8 feat(deps): upgrade to RMB 35.4.1
  • bb62fb1 [maven-release-plugin] prepare for next development iteration
  • dd544bf [maven-release-plugin] prepare release v5.0.0
  • fb94b4f [maven-release-plugin] prepare branch release/v5.0
  • 91b7618 Update NEWS
  • 972a21f Update dependencies
  • 2809c56 fix(deps): bump the prod-deps group with 2 updates (#214)
  • a020daf fix: do not fail on javadoc generation (#213)
  • 38d2000 chore: upgrade to Java 21 (#212)
  • Additional commits viewable in compare view

Updates org.folio:folio-spring-cql from 9.0.0 to 9.1.0

Release notes

Sourced from org.folio:folio-spring-cql's releases.

v9.0.2

folio-spring-base

v9.0.1

cql submodule

  • FOLSPRINGS-185 Implement case insensitive accents ignoring CQL queries - backport, opt in only. To opt in call Cql2JpaCriteria.setCaseAccentsHandlingEnabled(true). Then a CQL search in a String field ignores case (= is case insensitive) and ignores accents by default; this is for consistency with RMB based modules. Use the annotations @RespectCase and/or @RespectAccents in the entity class to change this new default.

When enabling case insensitive and/or accents ignoring CQL queries you need to update database indices accordingly, for example:

DROP INDEX IF EXISTS idx_medreq_requester_barcode;
CREATE INDEX idx_medreq_requester_barcode ON ${database.defaultSchemaName}.mediated_request(lower(f_unaccent(requester_barcode)));

For test code that executes SQL you may need to add f_unaccent database method. Example: jpa-cql-general-it-schema.sql, @​Sql

Changelog

Sourced from org.folio:folio-spring-cql's changelog.

9.1.0 2025-04-23

Replacing OkHttpClient by ApacheHttpClient, adding configuration

Commits
  • a9c940e [maven-release-plugin] prepare release v9.1.0
  • f71312f Replacing OkHttpClient by ApacheHttpClient, adding configuration
  • 4eab61d Replacing OkHttpClient by ApacheHttpClient, adding configuration
  • e0ac99d Replacing OkHttpClient by ApacheHttpClient, adding configuration
  • See full diff in compare view

Updates io.github.openfeign:feign-jackson from 12.1 to 13.6

Release notes

Sourced from io.github.openfeign:feign-jackson's releases.

OpenFeign 13.6

What's Changed

... (truncated)

Commits
  • abd43f7 Generate jar for feign-vertx5-test
  • bb59bfe Force single thread while deploying artifacts
  • a45be66 prepare release 13.6
  • bab7f2e Build project with mvnd (#2839)
  • 5afdd22 Add missing secrets to nexus deploy
  • 1c3fe71 Bump vertx.version from 5.0.0.CR4 to 4.5.14 (#2837)
  • 61de712 FIX: inreliable JSON asserts in Java 11 project (#2816)
  • 241f3ee Merge pull request #2838 from OpenFeign/dependabot/maven/netty.version-4.2.0....
  • cff520a Bump netty.version from 4.1.119.Final to 4.2.0.Final
  • e225ee8 Merge pull request #2836 from OpenFeign/dependabot/maven/org.projectlombok-lo...
  • Additional commits viewable in compare view

Updates org.apache.sshd:sshd-spring-sftp from 2.15.0 to 2.17.1

Release notes

Sourced from org.apache.sshd:sshd-spring-sftp's releases.

Apache MINA SSHD 2.17.1

This patch release fixes the broken Maven deployment of 2.17.0. (The root pom was missing).

There were no code changes, only a pom update to work around a tooling bug that caused the problem with 2.17.0:

  • GH-875 Use Apache Parent POM 36

For the real changes since version 2.16.0 see the 2.17.0 change notes.

Apache MINA SSHD 2.17.0

Warning: the publication of this release to Maven Central somehow went wrong; it is missing the root POM.

Use the 2.17.1 release instead.

See the change log.

New Contributors

Full Changelog: apache/mina-sshd@sshd-2.16.0...sshd-2.17.0

Apache MINA SSHD 2.16.0

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from org.apache.sshd:sshd-spring-sftp's changelog.

Previous Versions

Latest Version

Planned for Next Version

Bug Fixes

New Features

Potential Compatibility Issues

Major Code Re-factoring

Commits
  • 03df246 [maven-release-plugin] prepare release sshd-2.17.1
  • e661b4a GH-875: Update Apache Parent POM
  • 42d2c7d [maven-release-plugin] prepare for next development iteration
  • 9308c1e [maven-release-plugin] prepare release sshd-2.17.0
  • 5f6bef6 Prepare documentation for a 2.17.0 release
  • 5ee81f4 Fix duplicate character echoing in ProcessShell
  • b6848c0 Mock git configuration in git-related tests
  • d839c95 Bump JUnit 5 to latest patch version
  • 7a7f2bb CoreTestSupportUtils: fix test framework
  • 7b397c7 [releng] Build with Java 25 in CI
  • Additional commits viewable in compare view

Updates commons-net:commons-net from 3.11.1 to 3.12.0

Changelog

Sourced from commons-net:commons-net's changelog.

Apache Commons Net 3.12.0 Release Notes

The Apache Commons Net team is pleased to announce the release of Apache Commons Net 3.12.0.

Apache Commons Net library contains a collection of network utilities and protocol implementations. Supported protocols include Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, and Whois.

This is a feature and maintenance release. Java 8 or later is required.

For complete information on Apache Commons Net, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Net website:

https://commons.apache.org/proper/commons-net/

Download page: https://commons.apache.org/proper/commons-net/download_net.cgi

New features

o Add org.apache.commons.net.nntp.Article#getChild(). Thanks to Gary Gregory. o Add org.apache.commons.net.nntp.Article#getNext(). Thanks to Gary Gregory. o Add private SubnetAddressStringIterable and private SubnetAddressStringIterator to implement SubnetInfo.iterableAddressStrings() and SubnetInfo.streamAddressStrings() #298. Thanks to Lixiongyou, Gary Gregory. o Add SubnetInfo.iterableAddressStrings(). Thanks to Gary Gregory. o Add SubnetInfo.streamAddressStrings(). Thanks to Gary Gregory. o Add FTPCmd.OPTS. Thanks to Gary Gregory. o Add FTP.opts(String, String). Thanks to Gary Gregory. o Add FTP.opts(String...). Thanks to Gary Gregory. o Add FTP.setControlEncoding(Charset). Thanks to Gary Gregory. o Add --OPTS to FTPClientExample. Thanks to Gary Gregory. o NET-727: Add accessing options map for TFTP request packet and allow using 'blksize' option #331. Thanks to Gary Gregory. o Add org.apache.commons.net.util.ListenerList.isEmpty(). Thanks to Gary Gregory. o Add org.apache.commons.net.ftp.FTPClient.getSystemTypeOverride(). Thanks to Gary Gregory. o Add generics to ListenerList. Thanks to Gary Gregory. o Add module-info.class in the JAR file instead of an Automatic-Module-Name in MANIFEST.MF. Thanks to Gary Gregory.

Fixed Bugs

o Increase message limit in IMAPReply.TAGGED_RESPONSE from 80 to 500 characters. Thanks to Andreas Lemke, Gary Gregory. o Increase message limit in IMAPReply.UNTAGGED_RESPONSE from 160 to 500 characters. Thanks to Andreas Lemke, Gary Gregory. o Remove InvalidKeySpecException from AuthenticatingIMAPClient.auth(AUTH_METHOD, String, String) never throws, it's not thrown. Thanks to Gary Gregory. o Remove InvalidKeySpecException from AuthenticatingIMAPClient.authenticate(AUTH_METHOD, String, String) never throws, it's not thrown. Thanks to Gary Gregory. o Remove InvalidKeySpecException from ExtendedPOP3Client.auth(AUTH_METHOD, String, String) never throws, it's not thrown. Thanks to Gary Gregory. o Remove InvalidKeySpecException from org.apache.commons.net.smtp.AuthenticatingSMTPClient.auth(AUTH_METHOD, String, String) never throws, it's not thrown. Thanks to Gary Gregory. o Fix SpotBugs RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE in SSLSocketUtils. Thanks to Gary Gregory. o Fix PMD UnnecessaryFullyQualifiedName. Thanks to Gary Gregory. o Fix PMD UnusedFormalParameter. Thanks to Gary Gregory. o Fix PMD AvoidBranchingStatementAsLastInLoop in org.apache.commons.net.bsd.RCommandClient. Thanks to Gary Gregory.

... (truncated)

Commits
  • bb741d0 Prepare for the release candidate 3.12.0 RC1
  • bfaf5d2 Prepare for the next release candidate
  • 91baa6f Add module-info.class in the JAR file instead of an
  • 6a49728 Merge pull request #355 from apache/dependabot/github_actions/github/codeql-a...
  • de4990b Bump github/codeql-action from 3.29.2 to 3.29.4
  • 078c17d Merge some string literals
  • 200dccd Format nit
  • f84d393 Format nit
  • 7cfdadf Format nit
  • 1213ed8 Update the GitHub pull request template for AI
  • Additional commits viewable in compare view

Updates io.hypersistence:hypersistence-utils-hibernate-63 from 3.7.3 to 3.15.1

Changelog

Sourced from io.hypersistence:hypersistence-utils-hibernate-63's changelog.

Version 3.15.1 - January 28, 2026

Add support for KotlinModule in the hypersistence-utils-hibernate-73 module #832

JsonType should not support non-Serializable attribute mappings #831

Version 3.15.0 - January 27, 2026

Add support for Hibernate ORM 7.3 and Jackson 3 #810

Version 3.14.1 - December 17, 2025

Deprecate all ArrayTypes, with the exception of the EnumArrayType #823

Version 3.14.0 - December 16, 2025

The Hibernate SessionFactory cannot be built due to a ClassCastException after upgrading to 3.13.3 #821

Add support for Hibernate 7.2.0.CR4

Version 3.13.3 - December 12, 2025

ArrayType causes org.hibernate.tool.schema.spi.SchemaManagementException: Schema-validation: wrong column type encountered in column found (Types#ARRAY), but expecting (Types#OTHER) #697

Version 3.13.2 - December 03, 2025

Change SQLStatementCountMismatchException to extend AssertionError #820

Version 3.13.1 - December 01, 2025

Change the signature of the SequenceOptimizerGenerator.configure method for Hibernate 7.1 #818

Add a null check for the XProperty JsonType parameter #814

Version 3.13.0 - December 01, 2025

Add SequenceOptimizer as an alternative to the deprecated GenericGenerator #817

Add support for registering the Jackson KotlinModule when using Kotlin #816

Version 3.12.0 - November 09, 2025

... (truncated)

Commits
  • 32aac07 [maven-release-plugin] prepare release hypersistence-utils-parent-3.15.1
  • 556a4c4 Update changelog for the 3.15.1 release
  • ae44778 Add support for KotlinModule in the hypersistence-utils-hibernate-73 module #832
  • c342591 JsonType should not support Serializable attribute mappings #831
  • 64eb113 Bump version up
  • 12bbb72 [maven-release-plugin] prepare for next development iteration
  • 385829e [maven-release-plugin] prepare release hypersistence-utils-parent-3.15.0
  • c9f3fd3 Update changelog for the 3.15.0 release
  • 733fdde Add support for Hibernate ORM 7.3 and Jackson 3
  • bb6c3f6 Bump version up
  • Additional commits viewable in compare view

Updates io.xlate:staedi from 1.26.0 to 1.26.1

Release notes

Sourced from io.xlate:staedi's releases.

v1.26.1

  • #592 Release 1.26.1
  • #591 Fix IllegalStateException on getTransactionType()
  • #589 Bump version.jackson from 2.20.1 to 2.21.0
  • #588 Bump org.sonatype.central:central-publishing-maven-plugin from 0.9.0 to 0.10.0
  • #587 Bump org.junit.jupiter:junit-jupiter from 6.0.1 to 6.0.2
  • #586 Bump actions/upload-artifact from 5 to 6
  • #585 Bump org.apache.maven.plugins:maven-release-plugin from 3.3.0 to 3.3.1
  • #584 Bump actions/cache from 4 to 5
  • #583 Bump org.mockito:mockito-core from 5.20.0 to 5.21.0
  • #582 Bump org.apache.maven.plugins:maven-release-plugin from 3.2.0 to 3.3.0
  • #581 Bump org.apache.maven.plugins:maven-source-plugin from 3.3.1 to 3.4.0
  • #580 Bump actions/checkout from 5 to 6
  • #579 Bump org.apache.maven.plugins:maven-jar-plugin from 3.4.2 to 3.5.0
  • #578 Bump org.apache.maven.plugins:maven-release-plugin from 3.1.1 to 3.2.0
  • #577 Bump org.junit.jupiter:junit-jupiter from 6.0.0 to 6.0.1
  • #576 Bump version.jackson from 2.20.0 to 2.20.1
  • #575 Bump actions/upload-artifact from 4 to 5
  • #574 Bump version.xmlunit from 2.10.4 to 2.11.0
  • #572 Bump github/codeql-action from 3 to 4
  • #571 Bump org.apache.maven.plugins:maven-dependency-plugin from 3.8.1 to 3.9.0
  • #570 Bump org.junit.jupiter:junit-jupiter from 5.13.4 to 6.0.0
  • #569 Bump org.sonatype.central:central-publishing-maven-plugin from 0.8.0 to 0.9.0
  • #568 Bump org.glassfish.jaxb:jaxb-runtime from 4.0.5 to 4.0.6
  • #567 Bump org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 to 3.14.1
  • #566 Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.3 to 3.12.0
  • #565 Bump org.mockito:mockito-core from 5.19.0 to 5.20.0
  • #564 Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.2 to 4.0.4
  • #563 Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.3 to 3.5.4
  • #562 Bump version.xmlunit from 2.10.3 to 2.10.4
  • #561 Bump actions/github-script from 7 to 8
  • #560 Bump version.jackson from 2.19.2 to 2.20.0
  • #559 Bump actions/setup-java from 4 to 5
  • #558 Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.2 to 3.11.3
  • #556 Bump org.mockito:mockito-core from 5.18.0 to 5.19.0
  • #555 Bump actions/checkout from 4 to 5
  • #554 Bump org.junit.jupiter:junit-jupiter from 5.13.3 to 5.13.4
  • #553 Bump version.jackson from 2.19.1 to 2.19.2
  • #551 Bump org.junit.jupiter:junit-jupiter from 5.13.2 to 5.13.3
  • #550 Bump org.sonatype.central:central-publishing-maven-plugin from 0.7.0 to 0.8.0
  • #549 Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8
Commits
  • 68a9078 [maven-release-plugin] prepare release v1.26.1
  • 0c3139d Release 1.26.1 (#592)
  • 6559cb5 Fix IllegalStateException on getTransactionType() (#591)
  • 198b8e8 Bump version.jackson from 2.20.1 to 2.21.0 (#589)
  • edd6a8d Bump org.sonatype.central:central-publishing-maven-plugin (#588)
  • df22433 Bump org.junit.jupiter:junit-jupiter from 6.0.1 to 6.0.2 (#587)
  • c23c1fd Bump actions/upload-artifact from 5 to 6 (#586)
  • 792f873 Bump org.apache.maven.plugins:maven-release-plugin from 3.3.0 to 3.3.1 (

@dependabot
fix(deps): bump the prod-deps group across 1 directory with 12 updates
23211bb 
Bumps the prod-deps group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `3.5.4` | `4.0.2` |
| [org.folio:folio-service-tools-spring-dev](https://github.com/folio-org/folio-service-tools) | `4.1.1` | `5.0.1` |
| [org.folio:folio-spring-cql](https://github.com/folio-org/folio-spring-support) | `9.0.0` | `9.1.0` |
| [io.github.openfeign:feign-jackson](https://github.com/openfeign/feign) | `12.1` | `13.6` |
| [org.apache.sshd:sshd-spring-sftp](https://github.com/apache/mina-sshd) | `2.15.0` | `2.17.1` |
| [commons-net:commons-net](https://github.com/apache/commons-net) | `3.11.1` | `3.12.0` |
| [io.hypersistence:hypersistence-utils-hibernate-63](https://github.com/vladmihalcea/hypersistence-utils) | `3.7.3` | `3.15.1` |
| [io.xlate:staedi](https://github.com/xlate/staedi) | `1.26.0` | `1.26.1` |
| com.opencsv:opencsv | `5.11.2` | `5.12.0` |
| [org.marc4j:marc4j](https://github.com/marc4j/marc4j) | `2.9.1` | `2.9.6` |
| software.amazon.awssdk:aws-sdk-java | `2.40.2` | `2.41.19` |
| [one.util:streamex](https://github.com/amaembo/streamex) | `0.8.3` | `0.8.4` |



Updates `org.springframework.boot:spring-boot-starter-parent` from 3.5.4 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.4...v4.0.2)

Updates `org.folio:folio-service-tools-spring-dev` from 4.1.1 to 5.0.1
- [Release notes](https://github.com/folio-org/folio-service-tools/releases)
- [Changelog](https://github.com/folio-org/folio-service-tools/blob/v5.0.1/NEWS.md)
- [Commits](folio-org/folio-service-tools@v4.1.1...v5.0.1)

Updates `org.folio:folio-spring-cql` from 9.0.0 to 9.1.0
- [Release notes](https://github.com/folio-org/folio-spring-support/releases)
- [Changelog](https://github.com/folio-org/folio-spring-support/blob/v9.1.0/NEWS.md)
- [Commits](folio-org/folio-spring-support@v9.0.0...v9.1.0)

Updates `io.github.openfeign:feign-jackson` from 12.1 to 13.6
- [Release notes](https://github.com/openfeign/feign/releases)
- [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
- [Commits](OpenFeign/feign@12.1...13.6)

Updates `org.apache.sshd:sshd-spring-sftp` from 2.15.0 to 2.17.1
- [Release notes](https://github.com/apache/mina-sshd/releases)
- [Changelog](https://github.com/apache/mina-sshd/blob/master/CHANGES.md)
- [Commits](apache/mina-sshd@sshd-2.15.0...sshd-2.17.1)

Updates `commons-net:commons-net` from 3.11.1 to 3.12.0
- [Changelog](https://github.com/apache/commons-net/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-net@rel/commons-net-3.11.1...rel/commons-net-3.12.0)

Updates `io.hypersistence:hypersistence-utils-hibernate-63` from 3.7.3 to 3.15.1
- [Changelog](https://github.com/vladmihalcea/hypersistence-utils/blob/master/changelog.txt)
- [Commits](vladmihalcea/hypersistence-utils@hypersistence-utils-parent-3.7.3...hypersistence-utils-parent-3.15.1)

Updates `io.xlate:staedi` from 1.26.0 to 1.26.1
- [Release notes](https://github.com/xlate/staedi/releases)
- [Commits](xlate/staedi@v1.26.0...v1.26.1)

Updates `com.opencsv:opencsv` from 5.11.2 to 5.12.0

Updates `org.marc4j:marc4j` from 2.9.1 to 2.9.6
- [Release notes](https://github.com/marc4j/marc4j/releases)
- [Changelog](https://github.com/marc4j/marc4j/blob/master/changes.txt)
- [Commits](marc4j/marc4j@2.9.1...2.9.6)

Updates `software.amazon.awssdk:aws-sdk-java` from 2.40.2 to 2.41.19

Updates `one.util:streamex` from 0.8.3 to 0.8.4
- [Release notes](https://github.com/amaembo/streamex/releases)
- [Commits](amaembo/streamex@streamex-0.8.3...streamex-0.8.4)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.folio:folio-service-tools-spring-dev
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.folio:folio-spring-cql
  dependency-version: 9.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: io.github.openfeign:feign-jackson
  dependency-version: '13.6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.apache.sshd:sshd-spring-sftp
  dependency-version: 2.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: commons-net:commons-net
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: io.hypersistence:hypersistence-utils-hibernate-63
  dependency-version: 3.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: io.xlate:staedi
  dependency-version: 1.26.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: com.opencsv:opencsv
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.marc4j:marc4j
  dependency-version: 2.9.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: software.amazon.awssdk:aws-sdk-java
  dependency-version: 2.41.19
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: one.util:streamex
  dependency-version: 0.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Feb 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants