From 2dde0dcba3d5f227190edb4594babfaa7713471b Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Tue, 9 Jul 2024 12:10:55 +0100 Subject: [PATCH 01/17] Upgrade to Byte Buddy 1.14.18 Closes gh-41371 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 9f61114f71..0402c76936 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -155,7 +155,7 @@ bom { releaseNotes("https://github.com/mojohaus/build-helper-maven-plugin/releases/tag/{version}") } } - library("Byte Buddy", "1.14.17") { + library("Byte Buddy", "1.14.18") { group("net.bytebuddy") { modules = [ "byte-buddy", From 76ebf9850dbe4e1faf9dc019e7948ce6c7cccaca Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Tue, 9 Jul 2024 12:11:00 +0100 Subject: [PATCH 02/17] Upgrade to Dependency Management Plugin 1.1.6 Closes gh-41372 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 0402c76936..db52bbe3ff 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -306,7 +306,7 @@ bom { ] } } - library("Dependency Management Plugin", "1.1.5") { + library("Dependency Management Plugin", "1.1.6") { group("io.spring.gradle") { modules = [ "dependency-management-plugin" From 3e7a13b8faa9555b451bdafd1a1700cacc0b7362 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Tue, 9 Jul 2024 12:11:04 +0100 Subject: [PATCH 03/17] Upgrade to Groovy 4.0.22 Closes gh-41373 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index db52bbe3ff..461c04b9df 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -461,7 +461,7 @@ bom { releaseNotes("https://github.com/graphql-java/graphql-java/releases/tag/v{version}") } } - library("Groovy", "4.0.21") { + library("Groovy", "4.0.22") { group("org.apache.groovy") { imports = [ "groovy-bom" From 620453a5ea3bab3c3dbeb14cf290f233b7abbedc Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Tue, 9 Jul 2024 12:11:09 +0100 Subject: [PATCH 04/17] Upgrade to HttpCore5 5.2.5 Closes gh-41374 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 461c04b9df..c210b66573 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -607,7 +607,7 @@ bom { ] } } - library("HttpCore5", "5.2.4") { + library("HttpCore5", "5.2.5") { group("org.apache.httpcomponents.core5") { modules = [ "httpcore5", From 5ff5c33c16db44c3956806ff800e8e8bec37592c Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Tue, 9 Jul 2024 12:11:14 +0100 Subject: [PATCH 05/17] Upgrade to Jackson Bom 2.17.2 Closes gh-41375 --- gradle.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle.properties b/gradle.properties index 0b4374da03..09a9a6b144 100644 --- a/gradle.properties +++ b/gradle.properties @@ -9,7 +9,7 @@ assertjVersion=3.25.3 commonsCodecVersion=1.16.1 graalVersion=22.3 hamcrestVersion=2.2 -jacksonVersion=2.17.1 +jacksonVersion=2.17.2 junitJupiterVersion=5.10.2 kotlinVersion=1.9.24 mavenVersion=3.9.4 From 7e1c7d9170d3805ce91d0fa0068b9185328c07f5 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Tue, 9 Jul 2024 12:11:19 +0100 Subject: [PATCH 06/17] Upgrade to Jetty 12.0.11 Closes gh-41376 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index c210b66573..5ecc28c58e 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -864,7 +864,7 @@ bom { ] } } - library("Jetty", "12.0.10") { + library("Jetty", "12.0.11") { group("org.eclipse.jetty.ee10") { imports = [ "jetty-ee10-bom" From 8442800e5a72d3eca880327fca62fa9a236005d5 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Tue, 9 Jul 2024 12:11:25 +0100 Subject: [PATCH 07/17] Upgrade to JsonAssert 1.5.3 Closes gh-41377 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 5ecc28c58e..056c59251e 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -928,7 +928,7 @@ bom { releaseNotes("https://github.com/netplex/json-smart-v2/releases/tag/{version}") } } - library("JsonAssert", "1.5.1") { + library("JsonAssert", "1.5.3") { group("org.skyscreamer") { modules = [ "jsonassert" From ecf08aa4f1bd4497a076e43ac36d4e1138c395c4 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Tue, 9 Jul 2024 12:11:30 +0100 Subject: [PATCH 08/17] Upgrade to JUnit Jupiter 5.10.3 Closes gh-41378 --- gradle.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle.properties b/gradle.properties index 09a9a6b144..1d9230242e 100644 --- a/gradle.properties +++ b/gradle.properties @@ -10,7 +10,7 @@ commonsCodecVersion=1.16.1 graalVersion=22.3 hamcrestVersion=2.2 jacksonVersion=2.17.2 -junitJupiterVersion=5.10.2 +junitJupiterVersion=5.10.3 kotlinVersion=1.9.24 mavenVersion=3.9.4 nativeBuildToolsVersion=0.10.2 From 31ea564e99bf303ad3d556a745e32025767b825c Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Tue, 9 Jul 2024 12:11:35 +0100 Subject: [PATCH 09/17] Upgrade to Kafka 3.7.1 Closes gh-41379 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 056c59251e..9a090bf162 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -966,7 +966,7 @@ bom { releaseNotes("https://junit.org/junit5/docs/{version}/release-notes") } } - library("Kafka", "3.7.0") { + library("Kafka", "3.7.1") { group("org.apache.kafka") { modules = [ "connect", From 54d3bcb9372c6466f2f1c52a77aac6ff15fc93fb Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Tue, 9 Jul 2024 12:11:40 +0100 Subject: [PATCH 10/17] Upgrade to Lombok 1.18.34 Closes gh-41380 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 9a090bf162..279a4e92f2 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1100,7 +1100,7 @@ bom { site("https://logback.qos.ch") } } - library("Lombok", "1.18.32") { + library("Lombok", "1.18.34") { group("org.projectlombok") { modules = [ "lombok" From e560491a0985c16d7eb9152bfd0a6deb30a6f7f2 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Tue, 9 Jul 2024 12:11:41 +0100 Subject: [PATCH 11/17] Upgrade to Micrometer 1.13.2 Closes gh-41298 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 279a4e92f2..d64287f1bb 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1248,7 +1248,7 @@ bom { ] } } - library("Micrometer", "1.13.2-SNAPSHOT") { + library("Micrometer", "1.13.2") { considerSnapshots() group("io.micrometer") { modules = [ From 63f0350ceba9d310c8ef0db451c57a932508b358 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Tue, 9 Jul 2024 12:11:42 +0100 Subject: [PATCH 12/17] Upgrade to Micrometer Tracing 1.3.2 Closes gh-41299 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index d64287f1bb..610e635c55 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1267,7 +1267,7 @@ bom { releaseNotes("https://github.com/micrometer-metrics/micrometer/releases/tag/v{version}") } } - library("Micrometer Tracing", "1.3.2-SNAPSHOT") { + library("Micrometer Tracing", "1.3.2") { considerSnapshots() group("io.micrometer") { imports = [ From 341f9cf5fc65f93c1593c275d1ea9184aa0021ea Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Tue, 9 Jul 2024 12:11:47 +0100 Subject: [PATCH 13/17] Upgrade to MSSQL JDBC 12.6.3.jre11 Closes gh-41381 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 610e635c55..492fc991b7 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1308,7 +1308,7 @@ bom { releaseNotes("https://github.com/mongodb/mongo-java-driver/releases/tag/r{version}") } } - library("MSSQL JDBC", "12.6.2.jre11") { + library("MSSQL JDBC", "12.6.3.jre11") { prohibit { endsWith(".jre8") because "we want to use the jre11 version" From cf8513ee584443dc366bbabbb6d2882b2d373896 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Tue, 9 Jul 2024 12:11:51 +0100 Subject: [PATCH 14/17] Upgrade to Neo4j Java Driver 5.22.0 Closes gh-41382 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 492fc991b7..8e21af2280 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1359,7 +1359,7 @@ bom { ] } } - library("Neo4j Java Driver", "5.21.0") { + library("Neo4j Java Driver", "5.22.0") { alignWith { version { from "org.springframework.data:spring-data-neo4j" From 59374b12cdd1d9eb90dcf9d226e745cb599b0d39 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Tue, 9 Jul 2024 12:11:56 +0100 Subject: [PATCH 15/17] Upgrade to R2DBC MariaDB 1.2.1 Closes gh-41383 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 8e21af2280..9a8d406ea4 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1578,7 +1578,7 @@ bom { ] } } - library("R2DBC MariaDB", "1.2.0") { + library("R2DBC MariaDB", "1.2.1") { group("org.mariadb") { modules = [ "r2dbc-mariadb" From c4729eab2f826ca214d82ae7254496b151a3fbbb Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Tue, 9 Jul 2024 12:12:01 +0100 Subject: [PATCH 16/17] Upgrade to Reactor Bom 2023.0.8 Closes gh-41384 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 9a8d406ea4..2adce49696 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1664,7 +1664,7 @@ bom { ] } } - library("Reactor Bom", "2023.0.7") { + library("Reactor Bom", "2023.0.8") { considerSnapshots() calendarName = "Reactor" group("io.projectreactor") { From b601b3adb398f7ebc528cd43fd623e0c9f76f8c4 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Tue, 9 Jul 2024 12:15:36 +0100 Subject: [PATCH 17/17] Prohibit upgrading to Undertow 2.3.14.Final Closes gh-41331 --- spring-boot-project/spring-boot-dependencies/build.gradle | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 2adce49696..15883cd5f7 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2197,6 +2197,10 @@ bom { } } library("Undertow", "2.3.13.Final") { + prohibit { + versionRange "[2.3.14.Final]" + because "it contains a regression (https://issues.redhat.com/browse/UNDERTOW-2420)" + } group("io.undertow") { modules = [ "undertow-core",