Skip to content

Bump the spring-boot-dependencies group across 1 directory with 12 updates#1767

Merged
Haarolean merged 1 commit intomainfrom
dependabot/gradle/spring-boot-dependencies-aaee51a769
Mar 30, 2026
Merged

Bump the spring-boot-dependencies group across 1 directory with 12 updates#1767
Haarolean merged 1 commit intomainfrom
dependabot/gradle/spring-boot-dependencies-aaee51a769

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 28, 2026

Bumps the spring-boot-dependencies group with 12 updates in the / directory:

Package From To
org.springframework.boot:spring-boot-starter-actuator 3.5.12 3.5.13
org.springframework.boot:spring-boot-starter-test 3.5.12 3.5.13
org.springframework.boot:spring-boot-starter-webflux 3.5.12 3.5.13
org.springframework.boot:spring-boot-starter-security 3.5.12 3.5.13
org.springframework.boot:spring-boot-starter-validation 3.5.12 3.5.13
org.springframework.boot:spring-boot-starter-oauth2-client 3.5.12 3.5.13
org.springframework.boot:spring-boot-starter-logging 3.5.12 3.5.13
org.springframework.boot:spring-boot-actuator 3.5.12 3.5.13
org.springframework.boot:spring-boot-devtools 3.5.12 3.5.13
org.springframework.boot:spring-boot-configuration-processor 3.5.12 3.5.13
org.springframework.boot 3.5.12 3.5.13
com.nimbusds:nimbus-jose-jwt 10.6 10.8

Updates org.springframework.boot:spring-boot-starter-actuator from 3.5.12 to 3.5.13

Release notes

Sourced from org.springframework.boot:spring-boot-starter-actuator's releases.

v3.5.13

⚠️ Attention Required

  • Jackson has been upgraded to 2.21.2 in response to the Jackson team ending support for Jackson 2.19.x and 2.20.x. #49365

🐞 Bug Fixes

  • WebSocket messaging's task executors are only auto-configured and stompWebSocketHandlerMapping is only forced to be eager when using Jackson #49750
  • Metadata annotation processor ignores method-level @NestedConfigurationProperty when using constructor binding #49734
  • Override of property in external 'application.properties' or 'application.yaml' is ignored #49724
  • Some sliced tests that import TransactionAutoConfiguration do not import TransactionManagerCustomizationAutoConfiguration #49716
  • NativeImageResourceProvider does not find Flyway migration scripts in subdirectories #49661
  • @GraphQlTest does not include @ControllerAdvice #49660

📔 Documentation

  • Fix incorrect indefinite articles in Javadoc #49723
  • Add some more Kotlin examples and trivial style fixes #49710

🔨 Dependency Upgrades

  • Upgrade to Hibernate 6.6.45.Final #49757
  • Upgrade to jOOQ 3.19.31 #49758
  • Upgrade to Netty 4.1.132.Final #49759
  • Upgrade to Tomcat 10.1.53 #49760
  • Upgrade to Undertow 2.3.24.Final #49761
  • Upgrade to Zipkin Reporter 3.5.3 #49756

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, @​deejay1, @​dlwldnjs1009, and @​ljrmorgan

Commits
  • 4a4c79f Release v3.5.13
  • 696a60e Full auto-configure transaction management in slice tests
  • 4b37ecb Upgrade to Undertow 2.3.24.Final
  • 32a51d5 Upgrade to Tomcat 10.1.53
  • 0934296 Upgrade to Netty 4.1.132.Final
  • 851ddda Upgrade to jOOQ 3.19.31
  • ef876fe Upgrade to Hibernate 6.6.45.Final
  • 2841d87 Upgrade to Zipkin Reporter 3.5.3
  • 025b527 Fix WebSocketMessagingAutoConfiguration in the absence of Jackson
  • 3282672 Make DevTools tests more tolerant to wrapped DataSource
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-test from 3.5.12 to 3.5.13

Release notes

Sourced from org.springframework.boot:spring-boot-starter-test's releases.

v3.5.13

⚠️ Attention Required

  • Jackson has been upgraded to 2.21.2 in response to the Jackson team ending support for Jackson 2.19.x and 2.20.x. #49365

🐞 Bug Fixes

  • WebSocket messaging's task executors are only auto-configured and stompWebSocketHandlerMapping is only forced to be eager when using Jackson #49750
  • Metadata annotation processor ignores method-level @NestedConfigurationProperty when using constructor binding #49734
  • Override of property in external 'application.properties' or 'application.yaml' is ignored #49724
  • Some sliced tests that import TransactionAutoConfiguration do not import TransactionManagerCustomizationAutoConfiguration #49716
  • NativeImageResourceProvider does not find Flyway migration scripts in subdirectories #49661
  • @GraphQlTest does not include @ControllerAdvice #49660

📔 Documentation

  • Fix incorrect indefinite articles in Javadoc #49723
  • Add some more Kotlin examples and trivial style fixes #49710

🔨 Dependency Upgrades

  • Upgrade to Hibernate 6.6.45.Final #49757
  • Upgrade to jOOQ 3.19.31 #49758
  • Upgrade to Netty 4.1.132.Final #49759
  • Upgrade to Tomcat 10.1.53 #49760
  • Upgrade to Undertow 2.3.24.Final #49761
  • Upgrade to Zipkin Reporter 3.5.3 #49756

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, @​deejay1, @​dlwldnjs1009, and @​ljrmorgan

Commits
  • 4a4c79f Release v3.5.13
  • 696a60e Full auto-configure transaction management in slice tests
  • 4b37ecb Upgrade to Undertow 2.3.24.Final
  • 32a51d5 Upgrade to Tomcat 10.1.53
  • 0934296 Upgrade to Netty 4.1.132.Final
  • 851ddda Upgrade to jOOQ 3.19.31
  • ef876fe Upgrade to Hibernate 6.6.45.Final
  • 2841d87 Upgrade to Zipkin Reporter 3.5.3
  • 025b527 Fix WebSocketMessagingAutoConfiguration in the absence of Jackson
  • 3282672 Make DevTools tests more tolerant to wrapped DataSource
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-webflux from 3.5.12 to 3.5.13

Release notes

Sourced from org.springframework.boot:spring-boot-starter-webflux's releases.

v3.5.13

⚠️ Attention Required

  • Jackson has been upgraded to 2.21.2 in response to the Jackson team ending support for Jackson 2.19.x and 2.20.x. #49365

🐞 Bug Fixes

  • WebSocket messaging's task executors are only auto-configured and stompWebSocketHandlerMapping is only forced to be eager when using Jackson #49750
  • Metadata annotation processor ignores method-level @NestedConfigurationProperty when using constructor binding #49734
  • Override of property in external 'application.properties' or 'application.yaml' is ignored #49724
  • Some sliced tests that import TransactionAutoConfiguration do not import TransactionManagerCustomizationAutoConfiguration #49716
  • NativeImageResourceProvider does not find Flyway migration scripts in subdirectories #49661
  • @GraphQlTest does not include @ControllerAdvice #49660

📔 Documentation

  • Fix incorrect indefinite articles in Javadoc #49723
  • Add some more Kotlin examples and trivial style fixes #49710

🔨 Dependency Upgrades

  • Upgrade to Hibernate 6.6.45.Final #49757
  • Upgrade to jOOQ 3.19.31 #49758
  • Upgrade to Netty 4.1.132.Final #49759
  • Upgrade to Tomcat 10.1.53 #49760
  • Upgrade to Undertow 2.3.24.Final #49761
  • Upgrade to Zipkin Reporter 3.5.3 #49756

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, @​deejay1, @​dlwldnjs1009, and @​ljrmorgan

Commits
  • 4a4c79f Release v3.5.13
  • 696a60e Full auto-configure transaction management in slice tests
  • 4b37ecb Upgrade to Undertow 2.3.24.Final
  • 32a51d5 Upgrade to Tomcat 10.1.53
  • 0934296 Upgrade to Netty 4.1.132.Final
  • 851ddda Upgrade to jOOQ 3.19.31
  • ef876fe Upgrade to Hibernate 6.6.45.Final
  • 2841d87 Upgrade to Zipkin Reporter 3.5.3
  • 025b527 Fix WebSocketMessagingAutoConfiguration in the absence of Jackson
  • 3282672 Make DevTools tests more tolerant to wrapped DataSource
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-security from 3.5.12 to 3.5.13

Release notes

Sourced from org.springframework.boot:spring-boot-starter-security's releases.

v3.5.13

⚠️ Attention Required

  • Jackson has been upgraded to 2.21.2 in response to the Jackson team ending support for Jackson 2.19.x and 2.20.x. #49365

🐞 Bug Fixes

  • WebSocket messaging's task executors are only auto-configured and stompWebSocketHandlerMapping is only forced to be eager when using Jackson #49750
  • Metadata annotation processor ignores method-level @NestedConfigurationProperty when using constructor binding #49734
  • Override of property in external 'application.properties' or 'application.yaml' is ignored #49724
  • Some sliced tests that import TransactionAutoConfiguration do not import TransactionManagerCustomizationAutoConfiguration #49716
  • NativeImageResourceProvider does not find Flyway migration scripts in subdirectories #49661
  • @GraphQlTest does not include @ControllerAdvice #49660

📔 Documentation

  • Fix incorrect indefinite articles in Javadoc #49723
  • Add some more Kotlin examples and trivial style fixes #49710

🔨 Dependency Upgrades

  • Upgrade to Hibernate 6.6.45.Final #49757
  • Upgrade to jOOQ 3.19.31 #49758
  • Upgrade to Netty 4.1.132.Final #49759
  • Upgrade to Tomcat 10.1.53 #49760
  • Upgrade to Undertow 2.3.24.Final #49761
  • Upgrade to Zipkin Reporter 3.5.3 #49756

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, @​deejay1, @​dlwldnjs1009, and @​ljrmorgan

Commits
  • 4a4c79f Release v3.5.13
  • 696a60e Full auto-configure transaction management in slice tests
  • 4b37ecb Upgrade to Undertow 2.3.24.Final
  • 32a51d5 Upgrade to Tomcat 10.1.53
  • 0934296 Upgrade to Netty 4.1.132.Final
  • 851ddda Upgrade to jOOQ 3.19.31
  • ef876fe Upgrade to Hibernate 6.6.45.Final
  • 2841d87 Upgrade to Zipkin Reporter 3.5.3
  • 025b527 Fix WebSocketMessagingAutoConfiguration in the absence of Jackson
  • 3282672 Make DevTools tests more tolerant to wrapped DataSource
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-validation from 3.5.12 to 3.5.13

Release notes

Sourced from org.springframework.boot:spring-boot-starter-validation's releases.

v3.5.13

⚠️ Attention Required

  • Jackson has been upgraded to 2.21.2 in response to the Jackson team ending support for Jackson 2.19.x and 2.20.x. #49365

🐞 Bug Fixes

  • WebSocket messaging's task executors are only auto-configured and stompWebSocketHandlerMapping is only forced to be eager when using Jackson #49750
  • Metadata annotation processor ignores method-level @NestedConfigurationProperty when using constructor binding #49734
  • Override of property in external 'application.properties' or 'application.yaml' is ignored #49724
  • Some sliced tests that import TransactionAutoConfiguration do not import TransactionManagerCustomizationAutoConfiguration #49716
  • NativeImageResourceProvider does not find Flyway migration scripts in subdirectories #49661
  • @GraphQlTest does not include @ControllerAdvice #49660

📔 Documentation

  • Fix incorrect indefinite articles in Javadoc #49723
  • Add some more Kotlin examples and trivial style fixes #49710

🔨 Dependency Upgrades

  • Upgrade to Hibernate 6.6.45.Final #49757
  • Upgrade to jOOQ 3.19.31 #49758
  • Upgrade to Netty 4.1.132.Final #49759
  • Upgrade to Tomcat 10.1.53 #49760
  • Upgrade to Undertow 2.3.24.Final #49761
  • Upgrade to Zipkin Reporter 3.5.3 #49756

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, @​deejay1, @​dlwldnjs1009, and @​ljrmorgan

Commits
  • 4a4c79f Release v3.5.13
  • 696a60e Full auto-configure transaction management in slice tests
  • 4b37ecb Upgrade to Undertow 2.3.24.Final
  • 32a51d5 Upgrade to Tomcat 10.1.53
  • 0934296 Upgrade to Netty 4.1.132.Final
  • 851ddda Upgrade to jOOQ 3.19.31
  • ef876fe Upgrade to Hibernate 6.6.45.Final
  • 2841d87 Upgrade to Zipkin Reporter 3.5.3
  • 025b527 Fix WebSocketMessagingAutoConfiguration in the absence of Jackson
  • 3282672 Make DevTools tests more tolerant to wrapped DataSource
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-oauth2-client from 3.5.12 to 3.5.13

Release notes

Sourced from org.springframework.boot:spring-boot-starter-oauth2-client's releases.

v3.5.13

⚠️ Attention Required

  • Jackson has been upgraded to 2.21.2 in response to the Jackson team ending support for Jackson 2.19.x and 2.20.x. #49365

🐞 Bug Fixes

  • WebSocket messaging's task executors are only auto-configured and stompWebSocketHandlerMapping is only forced to be eager when using Jackson #49750
  • Metadata annotation processor ignores method-level @NestedConfigurationProperty when using constructor binding #49734
  • Override of property in external 'application.properties' or 'application.yaml' is ignored #49724
  • Some sliced tests that import TransactionAutoConfiguration do not import TransactionManagerCustomizationAutoConfiguration #49716
  • NativeImageResourceProvider does not find Flyway migration scripts in subdirectories #49661
  • @GraphQlTest does not include @ControllerAdvice #49660

📔 Documentation

  • Fix incorrect indefinite articles in Javadoc #49723
  • Add some more Kotlin examples and trivial style fixes #49710

🔨 Dependency Upgrades

  • Upgrade to Hibernate 6.6.45.Final #49757
  • Upgrade to jOOQ 3.19.31 #49758
  • Upgrade to Netty 4.1.132.Final #49759
  • Upgrade to Tomcat 10.1.53 #49760
  • Upgrade to Undertow 2.3.24.Final #49761
  • Upgrade to Zipkin Reporter 3.5.3 #49756

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, @​deejay1, @​dlwldnjs1009, and @​ljrmorgan

Commits
  • 4a4c79f Release v3.5.13
  • 696a60e Full auto-configure transaction management in slice tests
  • 4b37ecb Upgrade to Undertow 2.3.24.Final
  • 32a51d5 Upgrade to Tomcat 10.1.53
  • 0934296 Upgrade to Netty 4.1.132.Final
  • 851ddda Upgrade to jOOQ 3.19.31
  • ef876fe Upgrade to Hibernate 6.6.45.Final
  • 2841d87 Upgrade to Zipkin Reporter 3.5.3
  • 025b527 Fix WebSocketMessagingAutoConfiguration in the absence of Jackson
  • 3282672 Make DevTools tests more tolerant to wrapped DataSource
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-logging from 3.5.12 to 3.5.13

Release notes

Sourced from org.springframework.boot:spring-boot-starter-logging's releases.

v3.5.13

⚠️ Attention Required

  • Jackson has been upgraded to 2.21.2 in response to the Jackson team ending support for Jackson 2.19.x and 2.20.x. #49365

🐞 Bug Fixes

  • WebSocket messaging's task executors are only auto-configured and stompWebSocketHandlerMapping is only forced to be eager when using Jackson #49750
  • Metadata annotation processor ignores method-level @NestedConfigurationProperty when using constructor binding #49734
  • Override of property in external 'application.properties' or 'application.yaml' is ignored #49724
  • Some sliced tests that import TransactionAutoConfiguration do not import TransactionManagerCustomizationAutoConfiguration #49716
  • NativeImageResourceProvider does not find Flyway migration scripts in subdirectories #49661
  • @GraphQlTest does not include @ControllerAdvice #49660

📔 Documentation

  • Fix incorrect indefinite articles in Javadoc #49723
  • Add some more Kotlin examples and trivial style fixes #49710

🔨 Dependency Upgrades

  • Upgrade to Hibernate 6.6.45.Final #49757
  • Upgrade to jOOQ 3.19.31 #49758
  • Upgrade to Netty 4.1.132.Final #49759
  • Upgrade to Tomcat 10.1.53 #49760
  • Upgrade to Undertow 2.3.24.Final #49761
  • Upgrade to Zipkin Reporter 3.5.3 #49756

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, @​deejay1, @​dlwldnjs1009, and @​ljrmorgan

Commits
  • 4a4c79f Release v3.5.13
  • 696a60e Full auto-configure transaction management in slice tests
  • 4b37ecb Upgrade to Undertow 2.3.24.Final
  • 32a51d5 Upgrade to Tomcat 10.1.53
  • 0934296 Upgrade to Netty 4.1.132.Final
  • 851ddda Upgrade to jOOQ 3.19.31
  • ef876fe Upgrade to Hibernate 6.6.45.Final
  • 2841d87 Upgrade to Zipkin Reporter 3.5.3
  • 025b527 Fix WebSocketMessagingAutoConfiguration in the absence of Jackson
  • 3282672 Make DevTools tests more tolerant to wrapped DataSource
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-actuator from 3.5.12 to 3.5.13

Release notes

Sourced from org.springframework.boot:spring-boot-actuator's releases.

v3.5.13

⚠️ Attention Required

  • Jackson has been upgraded to 2.21.2 in response to the Jackson team ending support for Jackson 2.19.x and 2.20.x. #49365

🐞 Bug Fixes

  • WebSocket messaging's task executors are only auto-configured and stompWebSocketHandlerMapping is only forced to be eager when using Jackson #49750
  • Metadata annotation processor ignores method-level @NestedConfigurationProperty when using constructor binding #49734
  • Override of property in external 'application.properties' or 'application.yaml' is ignored #49724
  • Some sliced tests that import TransactionAutoConfiguration do not import TransactionManagerCustomizationAutoConfiguration #49716
  • NativeImageResourceProvider does not find Flyway migration scripts in subdirectories #49661
  • @GraphQlTest does not include @ControllerAdvice #49660

📔 Documentation

  • Fix incorrect indefinite articles in Javadoc #49723
  • Add some more Kotlin examples and trivial style fixes #49710

🔨 Dependency Upgrades

  • Upgrade to Hibernate 6.6.45.Final #49757
  • Upgrade to jOOQ 3.19.31 #49758
  • Upgrade to Netty 4.1.132.Final #49759
  • Upgrade to Tomcat 10.1.53 #49760
  • Upgrade to Undertow 2.3.24.Final #49761
  • Upgrade to Zipkin Reporter 3.5.3 #49756

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, @​deejay1, @​dlwldnjs1009, and @​ljrmorgan

Commits
  • 4a4c79f Release v3.5.13
  • 696a60e Full auto-configure transaction management in slice tests
  • 4b37ecb Upgrade to Undertow 2.3.24.Final
  • 32a51d5 Upgrade to Tomcat 10.1.53
  • 0934296 Upgrade to Netty 4.1.132.Final
  • 851ddda Upgrade to jOOQ 3.19.31
  • ef876fe Upgrade to Hibernate 6.6.45.Final
  • 2841d87 Upgrade to Zipkin Reporter 3.5.3
  • 025b527 Fix WebSocketMessagingAutoConfiguration in the absence of Jackson
  • 3282672 Make DevTools tests more tolerant to wrapped DataSource
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-devtools from 3.5.12 to 3.5.13

Release notes

Sourced from org.springframework.boot:spring-boot-devtools's releases.

v3.5.13

⚠️ Attention Required

  • Jackson has been upgraded to 2.21.2 in response to the Jackson team ending support for Jackson 2.19.x and 2.20.x. #49365

🐞 Bug Fixes

  • WebSocket messaging's task executors are only auto-configured and stompWebSocketHandlerMapping is only forced to be eager when using Jackson #49750
  • Metadata annotation processor ignores method-level @NestedConfigurationProperty when using constructor binding #49734
  • Override of property in external 'application.properties' or 'application.yaml' is ignored #49724
  • Some sliced tests that import TransactionAutoConfiguration do not import TransactionManagerCustomizationAutoConfiguration #49716
  • NativeImageResourceProvider does not find Flyway migration scripts in subdirectories #49661
  • @GraphQlTest does not include @ControllerAdvice #49660

📔 Documentation

  • Fix incorrect indefinite articles in Javadoc #49723
  • Add some more Kotlin examples and trivial style fixes #49710

🔨 Dependency Upgrades

  • Upgrade to Hibernate 6.6.45.Final #49757
  • Upgrade to jOOQ 3.19.31 #49758
  • Upgrade to Netty 4.1.132.Final #49759
  • Upgrade to Tomcat 10.1.53 #49760
  • Upgrade to Undertow 2.3.24.Final #49761
  • Upgrade to Zipkin Reporter 3.5.3 #49756

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, @​deejay1, @​dlwldnjs1009, and @​ljrmorgan

Commits
  • 4a4c79f Release v3.5.13
  • 696a60e Full auto-configure transaction management in slice tests
  • 4b37ecb Upgrade to Undertow 2.3.24.Final
  • 32a51d5 Upgrade to Tomcat 10.1.53
  • 0934296 Upgrade to Netty 4.1.132.Final
  • 851ddda Upgrade to jOOQ 3.19.31
  • ef876fe Upgrade to Hibernate 6.6.45.Final
  • 2841d87 Upgrade to Zipkin Reporter 3.5.3
  • 025b527 Fix WebSocketMessagingAutoConfiguration in the absence of Jackson
  • 3282672 Make DevTools tests more tolerant to wrapped DataSource
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-configuration-processor from 3.5.12 to 3.5.13

Release notes

Sourced from org.springframework.boot:spring-boot-configuration-processor's releases.

v3.5.13

⚠️ Attention Required

  • Jackson has been upgraded to 2.21.2 in response to the Jackson team ending support for Jackson 2.19.x and 2.20.x. #49365

🐞 Bug Fixes

  • WebSocket messaging's task executors are only auto-configured and stompWebSocketHandlerMapping is only forced to be eager when using Jackson #49750
  • Metadata annotation processor ignores method-level @NestedConfigurationProperty when using constructor binding #49734
  • Override of property in external 'application.properties' or 'application.yaml' is ignored #49724
  • Some sliced tests that import TransactionAutoConfiguration do not import TransactionManagerCustomizationAutoConfiguration #49716
  • NativeImageResourceProvider does not find Flyway migration scripts in subdirectories #49661
  • @GraphQlTest does not include @ControllerAdvice #49660

📔 Documentation

  • Fix incorrect indefinite articles in Javadoc #49723
  • Add some more Kotlin examples and trivial style fixes #49710

🔨 Dependency Upgrades

  • Upgrade to Hibernate 6.6.45.Final #49757
  • Upgrade to jOOQ 3.19.31 #49758
  • Upgrade to Netty 4.1.132.Final #49759
  • Upgrade to Tomcat 10.1.53 #49760
  • Upgrade to Undertow 2.3.24.Final #49761
  • Upgrade to Zipkin Reporter 3.5.3 #49756

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, @​deejay1, @​dlwldnjs1009, and @​ljrmorgan

Commits
  • 4a4c79f Release v3.5.13
  • 696a60e Full auto-configure transaction management in slice tests
  • 4b37ecb Upgrade to Undertow 2.3.24.Final
  • 32a51d5 Upgrade to Tomcat 10.1.53
  • 0934296 Upgrade to Netty 4.1.132.Final
  • 851ddda Upgrade to jOOQ 3.19.31
  • ef876fe Upgrade to Hibernate 6.6.45.Final
  • 2841d87 Upgrade to Zipkin Reporter 3.5.3
  • 025b527 Fix WebSocketMessagingAutoConfiguration in the absence of Jackson
  • 3282672 Make DevTools tests more tolerant to wrapped DataSource
  • Additional commits viewable in compare view

Updates org.springframework.boot from 3.5.12 to 3.5.13

Release notes

Sourced from org.springframework.boot's releases.

v3.5.13

⚠️ Attention Required

  • Jackson has been upgraded to 2.21.2 in response to the Jackson team ending support for Jackson 2.19.x and 2.20.x. #49365

🐞 Bug Fixes

  • WebSocket messaging's task executors are only auto-configured and stompWebSocketHandlerMapping is only forced to be eager when using Jackson #49750
  • Metadata annotation processor ignores method-level @NestedConfigurationProperty when using constructor binding #49734
  • Override of property in external 'application.properties' or 'application.yaml' is ignored #49724
  • Some sliced tests that import TransactionAutoConfiguration do not import TransactionManagerCustomizationAutoConfiguration #49716
  • NativeImageResourceProvider does not find Flyway migration scripts in subdirectories #49661
  • @GraphQlTest does not include @ControllerAdvice #49660

📔 Documentation

  • Fix incorrect indefinite articles in Javadoc #49723
  • Add some more Kotlin examples and trivial style fixes #49710

🔨 Dependency Upgrades

  • Upgrade to Hibernate 6.6.45.Final #49757
  • Upgrade to jOOQ 3.19.31 #49758
  • Upgrade to Netty 4.1.132.Final #49759
  • Upgrade to Tomcat 10.1.53 #49760
  • Upgrade to Undertow 2.3.24.Final #49761
  • Upgrade to Zipkin Reporter 3.5.3 #49756

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, @​deejay1, @​dlwldnjs1009, and @​ljrmorgan

Commits
  • 4a4c79f Release v3.5.13
  • 696a60e Full auto-configure transaction management in slice tests
  • 4b37ecb Upgrade to Undertow 2.3.24.Final
  • 32a51d5 Upgrade to Tomcat 10.1.53
  • 0934296 Upgrade to Netty 4.1.132.Final
  • 851ddda Upgrade to jOOQ 3.19.31
  • ef876fe Upgrade to Hibernate 6.6.45.Final
  • 2841d87 Upgrade to Zipkin Reporter 3.5.3
  • 025b527 Fix WebSocketMessagingAutoConfiguration in the absence of Jackson
  • 3282672 Make DevTools tests more tolerant to wrapped DataSource
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-test from 3.5.12 to 3.5.13

Release notes

Sourced from org.springframework.boot:spring-boot-starter-test's releases.

v3.5.13

⚠️ Attention Required

  • Jackson has been upgraded to 2.21.2 in response to the Jackson team ending support for Jackson 2.19.x and 2.20.x. #49365

🐞 Bug Fixes

  • WebSocket messaging's task executors are only auto-configured and stompWebSocketHandlerMapping is only forced to be eager when using Jackson #49750
  • Metadata annotation processor ignores method-level @NestedConfigurationProperty when using constructor binding #49734
  • Override of property in external 'application.properties' or 'application.yaml' is ignored #49724
  • Some sliced tests that import TransactionAutoConfiguration do not import TransactionManagerCustomizationAutoConfiguration #49716
  • NativeImageResourceProvider does not find Flyway migration scripts in subdirectories #49661
  • @GraphQlTest does not include @ControllerAdvice #49660

📔 Documentation

  • Fix incorrect indefinite articles in Javadoc #49723
  • Add some more Kotlin examples and trivial style fixes #49710

🔨 Dependency Upgrades

  • Upgrade to Hibernate 6.6.45.Final #49757
  • Upgrade to jOOQ 3.19.31 #49758
  • Upgrade to Netty 4.1.132.Final #49759
  • Upgrade to Tomcat 10.1.53 #49760
  • Upgrade to Undertow 2.3.24.Final #49761
  • Upgrade to Zipkin Reporter 3.5.3 #49756

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, @​deejay1, @​dlwldnjs1009, and @​ljrmorgan

Commits
  • 4a4c79f Release v3.5.13
  • 696a60e Full auto-configure transaction management in slice tests
  • 4b37ecb Upgrade to Undertow 2.3.24.Final
  • 32a51d5 Upgrade to Tomcat 10.1.53

@dependabot dependabot Bot added scope/backend Related to backend changes type/dependencies A pull request/issue dedicated to updating the dependency(-ies) labels Mar 28, 2026
@dependabot dependabot Bot requested a review from a team as a code owner March 28, 2026 17:37
@dependabot dependabot Bot added scope/backend Related to backend changes type/dependencies A pull request/issue dedicated to updating the dependency(-ies) labels Mar 28, 2026
@kapybro kapybro Bot added status/triage Issues pending maintainers triage status/triage/manual Manual triage in progress status/triage/completed Automatic triage completed and removed status/triage Issues pending maintainers triage labels Mar 28, 2026
@yeikel
Copy link
Copy Markdown
Collaborator

yeikel commented Mar 29, 2026

@Haarolean Could you please review this?

@Haarolean Haarolean enabled auto-merge (squash) March 30, 2026 14:45
@yeikel
Copy link
Copy Markdown
Collaborator

yeikel commented Mar 30, 2026

@Haarolean It seems that the branch is out of date so auto merge won't run here

You can try @dependabot rebase first and then enable auto merge.

Thanks again!

@Haarolean
Copy link
Copy Markdown
Member

@dependabot rebase

@Haarolean
Copy link
Copy Markdown
Member

@yeikel smh at this dependabot inconsistency where sometimes it does rebase the PR, sometimes it doesn't

…dates

Bumps the spring-boot-dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-starter-actuator](https://github.com/spring-projects/spring-boot) | `3.5.12` | `3.5.13` |
| [org.springframework.boot:spring-boot-starter-test](https://github.com/spring-projects/spring-boot) | `3.5.12` | `3.5.13` |
| [org.springframework.boot:spring-boot-starter-webflux](https://github.com/spring-projects/spring-boot) | `3.5.12` | `3.5.13` |
| [org.springframework.boot:spring-boot-starter-security](https://github.com/spring-projects/spring-boot) | `3.5.12` | `3.5.13` |
| [org.springframework.boot:spring-boot-starter-validation](https://github.com/spring-projects/spring-boot) | `3.5.12` | `3.5.13` |
| [org.springframework.boot:spring-boot-starter-oauth2-client](https://github.com/spring-projects/spring-boot) | `3.5.12` | `3.5.13` |
| [org.springframework.boot:spring-boot-starter-logging](https://github.com/spring-projects/spring-boot) | `3.5.12` | `3.5.13` |
| [org.springframework.boot:spring-boot-actuator](https://github.com/spring-projects/spring-boot) | `3.5.12` | `3.5.13` |
| [org.springframework.boot:spring-boot-devtools](https://github.com/spring-projects/spring-boot) | `3.5.12` | `3.5.13` |
| [org.springframework.boot:spring-boot-configuration-processor](https://github.com/spring-projects/spring-boot) | `3.5.12` | `3.5.13` |
| [org.springframework.boot](https://github.com/spring-projects/spring-boot) | `3.5.12` | `3.5.13` |
| [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) | `10.6` | `10.8` |



Updates `org.springframework.boot:spring-boot-starter-actuator` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

Updates `org.springframework.boot:spring-boot-starter-test` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

Updates `org.springframework.boot:spring-boot-starter-webflux` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

Updates `org.springframework.boot:spring-boot-starter-security` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

Updates `org.springframework.boot:spring-boot-starter-validation` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

Updates `org.springframework.boot:spring-boot-starter-oauth2-client` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

Updates `org.springframework.boot:spring-boot-starter-logging` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

Updates `org.springframework.boot:spring-boot-actuator` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

Updates `org.springframework.boot:spring-boot-devtools` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

Updates `org.springframework.boot:spring-boot-configuration-processor` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

Updates `org.springframework.boot` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

Updates `org.springframework.boot:spring-boot-starter-test` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

Updates `org.springframework.boot:spring-boot-starter-webflux` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

Updates `org.springframework.boot:spring-boot-starter-security` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

Updates `com.nimbusds:nimbus-jose-jwt` from 10.6 to 10.8
- [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.8..10.6)

Updates `org.springframework.boot:spring-boot-starter-validation` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

Updates `org.springframework.boot:spring-boot-starter-oauth2-client` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

Updates `org.springframework.boot:spring-boot-starter-logging` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

Updates `org.springframework.boot:spring-boot-actuator` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

Updates `org.springframework.boot:spring-boot-devtools` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

Updates `org.springframework.boot:spring-boot-configuration-processor` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

Updates `org.springframework.boot` from 3.5.12 to 3.5.13
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.13)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-actuator
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-test
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-webflux
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-security
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-validation
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-oauth2-client
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-logging
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
- dependency-name: org.springframework.boot:spring-boot-actuator
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
- dependency-name: org.springframework.boot:spring-boot-devtools
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
- dependency-name: org.springframework.boot:spring-boot-configuration-processor
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
- dependency-name: org.springframework.boot
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-test
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-webflux
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-security
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
- dependency-name: com.nimbusds:nimbus-jose-jwt
  dependency-version: '10.8'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: spring-boot-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-validation
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-oauth2-client
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-logging
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
- dependency-name: org.springframework.boot:spring-boot-actuator
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
- dependency-name: org.springframework.boot:spring-boot-devtools
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
- dependency-name: org.springframework.boot:spring-boot-configuration-processor
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
- dependency-name: org.springframework.boot
  dependency-version: 3.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/gradle/spring-boot-dependencies-aaee51a769 branch from dfcbdf9 to 0c90978 Compare March 30, 2026 16:42
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Mar 30, 2026

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 701c0fd3-33c2-48f5-8792-472c21d158b7

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/gradle/spring-boot-dependencies-aaee51a769

Comment @coderabbitai help to get the list of available commands and usage tips.

@yeikel
Copy link
Copy Markdown
Collaborator

yeikel commented Mar 30, 2026

@yeikel smh at this dependabot inconsistency where sometimes it does rebase the PR, sometimes it doesn't

It only auto rebases when there are conflicts as per the docs. But I do agree that sometimes it seems inconsistent

@Haarolean Haarolean merged commit 30c5bdb into main Mar 30, 2026
17 of 18 checks passed
@Haarolean Haarolean deleted the dependabot/gradle/spring-boot-dependencies-aaee51a769 branch March 30, 2026 16:49
@yeikel yeikel mentioned this pull request Mar 30, 2026
10 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

scope/backend Related to backend changes status/triage/completed Automatic triage completed status/triage/manual Manual triage in progress type/dependencies A pull request/issue dedicated to updating the dependency(-ies)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants