Skip to content

chore(deps): update all dependencies#339

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/all
Open

chore(deps): update all dependencies#339
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/all

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Feb 24, 2026

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
gittools/actions action minor v4.3.2v4.4.2 age adoption passing confidence
paulhatch/semantic-version action patch v6.0.1v6.0.2 age adoption passing confidence
release-drafter/release-drafter action major v6v7 age adoption passing confidence
org.springframework.kafka:spring-kafka-test test patch 4.0.34.0.4 age adoption passing confidence
org.springframework.kafka:spring-kafka compile patch 4.0.34.0.4 age adoption passing confidence
org.liquibase:liquibase-core (source) compile patch 5.0.15.0.2 age adoption passing confidence
com.sun.xml.bind:jaxb-impl (source) compile patch 4.0.64.0.7 age adoption passing confidence
com.sun.xml.bind:jaxb-core (source) compile patch 4.0.64.0.7 age adoption passing confidence
com.fasterxml.jackson.core:jackson-databind (source) compile patch 2.21.12.21.2 age adoption passing confidence
org.springframework.cloud:spring-cloud-starter-config (source) compile patch 5.0.15.0.2 age adoption passing confidence
org.springframework.cloud:spring-cloud-config-client (source) compile patch 5.0.15.0.2 age adoption passing confidence
org.springframework.cloud:spring-cloud-config-server (source) compile patch 5.0.15.0.2 age adoption passing confidence
org.springframework.boot:spring-boot-starter-test (source) test patch 4.0.34.0.5 age adoption passing confidence
org.springframework.boot:spring-boot-starter-thymeleaf (source) compile patch 4.0.34.0.5 age adoption passing confidence
org.springframework.boot:spring-boot-starter-security (source) compile patch 4.0.34.0.5 age adoption passing confidence
org.springframework.boot:spring-boot-starter-data-jpa (source) compile patch 4.0.34.0.5 age adoption passing confidence
org.springframework.boot:spring-boot-devtools (source) runtime patch 4.0.34.0.5 age adoption passing confidence
org.springframework.boot:spring-boot-starter-actuator (source) compile patch 4.0.34.0.5 age adoption passing confidence
org.springframework.boot:spring-boot-configuration-processor (source) optional patch 4.0.34.0.5 age adoption passing confidence
org.springframework.boot:spring-boot-starter-web (source) compile patch 4.0.34.0.5 age adoption passing confidence
org.springframework.boot:spring-boot-starter-parent (source) parent patch 4.0.34.0.5 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2026-22739

Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from 3.1.X before 3.1.13, from 4.1.X before 4.1.9, from 4.2.X before 4.2.3, from 4.3.X before 4.3.2, from 5.0.X before 5.0.2.


Release Notes

gittools/actions (gittools/actions)

v4.4.2

Compare Source

As part of this release we had 3 commits which resulted in 1 issue being closed.

Bug

  • #​2006 [ISSUE]: Upgrade GitVersionTask from 4.3.3 to 4.4.1 breaks /overrideconfig
SHA256 Hashes of the release artifacts
  • 203023fae8db443599353c7a3d5fc2cf84efc7c6e5aa0b6a466bb6ac20b205c0 - gittools.gittools-4.4.2.260316134.vsix

v4.4.1

Compare Source

As part of this release we had 4 commits which resulted in 1 issue being closed.

Bug

  • #​2001 [Bug]: Updating the versions in docs and workflows on new release
SHA256 Hashes of the release artifacts
  • c8c9754a01a5c4de9def15f1012776d9a42cd904d5c1119ebe169bc88eb9e69b - gittools.gittools-4.4.1.260316032.vsix

v4.4.0

Compare Source

As part of this release we had 49 commits which resulted in 2 issues being closed.

Bug

  • #​1912 [ISSUE]: gitversion-execute@​4.2.0 fails on Windows (with self hosted agent?)

Improvements

  • #​1992 [ISSUE]: NodeJS20 will be deprecated in Github ACtions
SHA256 Hashes of the release artifacts
  • a9c2459127afc0451fb36b38a68d9755b212d707218bd5181bdcff531f84975f - gittools.gittools-4.4.0.260316014.vsix

v4.3.3

Compare Source

As part of this release we had 10 commits which resulted in 1 issue being closed.

Improvements

  • #​1970 Move re-usable steps into composite actions in the gittools/cicd repository
SHA256 Hashes of the release artifacts
  • 2207bbdf742767043711581535de911ec26a90c005ba3740e1f0f2dcfd2628c0 - gittools.gittools-4.3.3.260223212.vsix
paulhatch/semantic-version (paulhatch/semantic-version)

v6.0.2

Compare Source

What's Changed

New Contributors

Full Changelog: PaulHatch/semantic-version@v6.0.1...v6.0.2

release-drafter/release-drafter (release-drafter/release-drafter)

v7

Compare Source

spring-projects/spring-kafka (org.springframework.kafka:spring-kafka-test)

v4.0.4

🐞 Bug Fixes

  • Listener with async acks pauses indefinitely #​4344
  • Observations for filtered messages are leaked, filling memory #​4336
  • assertTopic validation breaks meta-annotated @KafkaListener with programmatic topic resolution #​4311

🔨 Dependency Upgrades

  • Bump io.projectreactor:reactor-bom from 2025.0.3 to 2025.0.4 #​4353
  • Bump org.springframework.data:spring-data-bom from 2025.1.3 to 2025.1.4 #​4352
  • Bump org.springframework:spring-framework-bom from 7.0.5 to 7.0.6 #​4349
  • Bump io.micrometer:micrometer-tracing-bom from 1.6.3 to 1.6.4 #​4348
  • Bump io.micrometer:micrometer-bom from 1.16.3 to 1.16.4 #​4346
liquibase/liquibase (org.liquibase:liquibase-core)

v5.0.2

See the Liquibase Community 5.0.2 Release Notes for the complete set of release information.

Changes

Notable Changes

New Features

Bug Fixes

Security, Driver and Other Updates

Full Changelog: liquibase/liquibase@v5.0.1...v5.0.2

Changes in version 5.0.1 (2025.10.03)

spring-cloud/spring-cloud-config (org.springframework.cloud:spring-cloud-starter-config)

v5.0.2: 5.0.2

🔒 Security

Addresses CVE-2026-22739

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​dependabot[bot]

spring-projects/spring-boot (org.springframework.boot:spring-boot-starter-test)

v4.0.5

v4.0.4


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from dishantkamble as a code owner February 24, 2026 01:29
@renovate renovate bot changed the title chore(deps): update gittools/actions action to v4.3.3 chore(deps): update all dependencies Mar 5, 2026
@renovate renovate bot force-pushed the renovate/all branch 7 times, most recently from 8063775 to 80ef329 Compare March 19, 2026 17:13
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from cababa0 to e5a5d39 Compare March 23, 2026 21:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants