Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Oct 27, 2025

Bumps the other-dependencies group with 30 updates in the / directory:

Package From To
com.nimbusds:nimbus-jose-jwt 10.0.2 10.5
io.swagger.core.v3:swagger-integration-jakarta 2.2.28 2.2.39
org.mapstruct:mapstruct 1.6.2 1.6.3
org.mapstruct:mapstruct-processor 1.6.2 1.6.3
org.openapitools:jackson-databind-nullable 0.2.6 0.2.8
org.apache.commons:commons-lang3 3.18.0 3.19.0
org.apache.commons:commons-text 1.13.1 1.14.0
org.apache.commons:commons-compress 1.26.0 1.28.0
org.apache.avro:avro 1.11.4 1.12.1
software.amazon.msk:aws-msk-iam-auth 2.3.0 2.3.4
com.azure:azure-identity 1.15.4 1.18.1
dev.cel:cel 0.3.0 0.11.1
org.testcontainers:testcontainers 1.20.6 1.21.3
org.testcontainers:kafka 1.20.6 1.21.3
org.testcontainers:junit-jupiter 1.20.6 1.21.3
org.opendatadiscovery:oddrn-generator-java 0.1.17 0.1.21
net.bytebuddy:byte-buddy 1.14.19 1.17.8
org.assertj:assertj-core 3.25.3 3.27.6
org.bouncycastle:bcpkix-jdk18on 1.80 1.82
com.google.cloud.hosted.kafka:managed-kafka-auth-login-handler 1.0.5 1.0.6
io.modelcontextprotocol.sdk:mcp-spring-webflux 0.10.0 0.14.1
io.prometheus:prometheus-metrics-core 1.3.6 1.4.1
io.prometheus:prometheus-metrics-exposition-textformats 1.3.6 1.4.1
io.prometheus:prometheus-metrics-exporter-pushgateway 1.3.6 1.4.1
org.apache.lucene:lucene-core 10.2.2 10.3.1
org.apache.lucene:lucene-queryparser 10.2.2 10.3.1
org.apache.lucene:lucene-analysis-common 10.2.2 10.3.1
com.gorylenko.gradle-git-properties 2.4.2 2.5.3
org.openapitools.openapistylevalidator 1.10 1.11
org.openapi.generator 7.13.0 7.16.0

Updates com.nimbusds:nimbus-jose-jwt from 10.0.2 to 10.5

Changelog

Sourced from com.nimbusds:nimbus-jose-jwt's changelog.

10.0.2 (2025-02-25) * Updates JSONObjectUtils.parse and JSONArrayUtils.parse to reject JSON strings with object and array nesting deeper than 255. This is intended to prevent StackOverflowError's in Gson when a parsed JSON string with excessive nesting is serialised, for example to log the claims of a parsed JWT. Note that in Gson the JSON reader is not susceptible to StackOverflowError's, only the serialisation. The nesting limit of depth 255 is introduced in Gson 2.12.0 (iss #583). * Updates GSon to 2.12.1.

10.1 (2025-04-03) * Restores module-info.java. * Adds ExpiredJWTException extends BadJWTException to enable easy programmatic detection whether a JWT has expired (iss #585). * Adds URLBasedJWKSetSource getJWKSetURL and getResourceRetriever methods to ease class extension.

10.2 (2025-04-07) * Gson is made a direct instead of a shaded dependency to address module issues introduced in 10.1 (iss #550).

10.3 (2025-05-09) * Restores the Gson shading, adding placeholder interfaces to prevent NoClassDefFoundError occurrences at runtime when the JAR is used on a module path (iss #550).

10.3.1 (2025-07-01) * OctetKeyPairGenerator with Curve.Ed25519 should use the provided SecureRandom (iss #590).

10.4 (2025-07-19) * Creates a hierarchy of Option interfaces, extended by JWSSignerOption, JWEEncrypterOption and JWEDecrypterOption. Intended to provide optional configuration parameters to RSASSASigner, ECDSASigner, RSADecrypter, etc. * Introduces CipherMode implementing JWEEncrypterOption and JWEDecrypterOption, to specify a preferred JCA Cipher mode, such as MODE_ENCRYPT / MODE_DECRYPT when the default MODE_WRAP / MODE_UNWRAP is not supported by the JCA provider (iss #576). * Updates RSAEncrypter and RSADecrypter to support the JWEEncrypterOption CipherMode.ENCRYPT_DECRYPT (iss #576). * Factors out OptionUtils.ensureMinRSAPrivateKeySize. * Deprecates OptionUtils.optionIsPresent.

10.4.1 (2025-08-05) * Adds "requires java.sql" to module com.nimbusds.jose.jwt (iss #595).

10.4.2 (2025-08-14) * Updates GSon to 2.13.1. * Updates BouncyCastle to 1.81.

... (truncated)

Commits
  • 1690d5a Clarifies 10.2 iss #550 fix
  • 3fbd750 [maven-release-plugin] prepare release 10.2
  • a988a2d [maven-release-plugin] prepare for next development iteration
  • 5fa1dc9 shade gson again
  • 800db7b Merged in feature/shaded-gson (pull request #127)
  • f474bcf Adds change log entry for 10.3 (iss #550)
  • c1f3c44 [maven-release-plugin] prepare release 10.3
  • 93076c1 [maven-release-plugin] prepare for next development iteration
  • 0b56cf0 OctetKeyPairGenerator with Curve.Ed25519 should use the provided SecureRandom...
  • 584951f Adds support for specifying the ScheduledExecutorService-instance in RefreshA...
  • Additional commits viewable in compare view

Updates io.swagger.core.v3:swagger-integration-jakarta from 2.2.28 to 2.2.39

Updates org.mapstruct:mapstruct from 1.6.2 to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct's releases.

1.6.3

Bugs

  • Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
  • Stackoverflow with Immutables custom builder (#3370)
  • Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

  • Add section to README.md comparing mapstruct with Java Records (#3751)
Commits
  • b4e25e4 Releasing version 1.6.3
  • 772fae4 Prepare release notes for 1.6.3
  • efdf435 #3751 Improve readme to include support for Java 16+ records
  • c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
  • 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
  • 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
  • 26c5bcd Update readme with 1.6.2
  • 4e0d73d Next version 1.7.0-SNAPSHOT
  • See full diff in compare view

Updates org.mapstruct:mapstruct-processor from 1.6.2 to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct-processor's releases.

1.6.3

Bugs

  • Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
  • Stackoverflow with Immutables custom builder (#3370)
  • Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

  • Add section to README.md comparing mapstruct with Java Records (#3751)
Commits
  • b4e25e4 Releasing version 1.6.3
  • 772fae4 Prepare release notes for 1.6.3
  • efdf435 #3751 Improve readme to include support for Java 16+ records
  • c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
  • 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
  • 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
  • 26c5bcd Update readme with 1.6.2
  • 4e0d73d Next version 1.7.0-SNAPSHOT
  • See full diff in compare view

Updates org.mapstruct:mapstruct-processor from 1.6.2 to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct-processor's releases.

1.6.3

Bugs

  • Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
  • Stackoverflow with Immutables custom builder (#3370)
  • Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

  • Add section to README.md comparing mapstruct with Java Records (#3751)
Commits
  • b4e25e4 Releasing version 1.6.3
  • 772fae4 Prepare release notes for 1.6.3
  • efdf435 #3751 Improve readme to include support for Java 16+ records
  • c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
  • 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
  • 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
  • 26c5bcd Update readme with 1.6.2
  • 4e0d73d Next version 1.7.0-SNAPSHOT
  • See full diff in compare view

Updates org.openapitools:jackson-databind-nullable from 0.2.6 to 0.2.8

Release notes

Sourced from org.openapitools:jackson-databind-nullable's releases.

v0.2.8 released

What's Changed

New Contributors

Full Changelog: OpenAPITools/jackson-databind-nullable@v0.2.7...v0.2.8

v0.2.7 released

What's Changed

New Contributors

Full Changelog: OpenAPITools/jackson-databind-nullable@v0.2.6...v0.2.7

Commits
  • 108f5bd v0.2.8 release (#92)
  • b2ca809 Update to move away from deprecated methods (#91)
  • 377e8c4 Change the maven compile execution for Java 8 to override the default compile...
  • 5b73076 Fix typos and linguistic errors in documentation (#88)
  • 85e68d4 Bump org.junit:junit-bom from 5.13.4 to 5.14.0 (#87)
  • 9dd4094 Build as multi release jar (#62)
  • 6712288 Ignore semver-major Mockito and JUnit updates until Java 17+ is used for buil...
  • f377eda adding the following methods to JsonNullable, based on methods (#68)
  • 09ee5fc Ignore Hibernate Validator updates until Java 17+ is used for builds (#83)
  • 338ccf8 Update GitHub actions to use commit sha instead of tags to avoid supply chain...
  • Additional commits viewable in compare view

Updates org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0

Updates org.apache.commons:commons-text from 1.13.1 to 1.14.0

Changelog

Sourced from org.apache.commons:commons-text's changelog.

Apache Commons Text 1.14.0 Release Notes

The Apache Commons Text team is pleased to announce the release of Apache Commons Text 1.14.0.

Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.

Release 1.14.0. Requires Java 8 or above.

New features

  •        Interface StringLookup now extends UnaryOperator<String>. Thanks to Gary Gregory.
    
  •        Interface TextRandomProvider extends IntUnaryOperator. Thanks to Gary Gregory.
    
  •        Add RandomStringGenerator.Builder.usingRandom(IntUnaryOperator). Thanks to Gary Gregory.
    
  •        Add PMD check to default Maven goal. Thanks to Gary Gregory.
    
  •        Add org.apache.commons.text.RandomStringGenerator.Builder.setAccumulate(boolean). Thanks to Gary Gregory.
    

Fixed Bugs

  •        Fix PMD UnnecessaryFullyQualifiedName in StringLookupFactory. Thanks to Gary Gregory.
    
  •        Fix PMD UnnecessaryFullyQualifiedName in DefaultStringLookupsHolder. Thanks to Gary Gregory.
    
  •        Fix PMD UnnecessaryFullyQualifiedName in PropertiesStringLookup. Thanks to Gary Gregory.
    
  •        Fix PMD UnnecessaryFullyQualifiedName in JavaPlatformStringLookup. Thanks to Gary Gregory.
    
  •        Fix PMD UnnecessaryFullyQualifiedName in StringSubstitutor. Thanks to Gary Gregory.
    
  •        Fix PMD UnnecessaryFullyQualifiedName in StrSubstitutor. Thanks to Gary Gregory.
    
  •        Fix PMD UnnecessaryFullyQualifiedName in AlphabetConverter. Thanks to Gary Gregory.
    
  •        Fix PMD AvoidBranchingStatementAsLastInLoop in TextStringBuilder. Thanks to Gary Gregory.
    
  •        Fix PMD AvoidBranchingStatementAsLastInLoop in StrBuilder. Thanks to Gary Gregory.
    
  •        org.apache.commons.text.translate.LookupTranslator.LookupTranslator(Map CharSequence>) now throws NullPointerException instead of java.security.InvalidParameterException. Thanks to Gary Gregory.
    

Changes

  •        Bump org.apache.commons:commons-parent from 81 to 85 [#668](https://github.com/apache/commons-text/issues/668). Thanks to Dependabot, Gary Gregory.
    
  •        Bump commons-io:commons-io from 2.18.0 to 2.20.0. Thanks to Gary Gregory.
    
  •        Bump graalvm.version from 24.2.0 to 24.2.2 [#665](https://github.com/apache/commons-text/issues/665), [#681](https://github.com/apache/commons-text/issues/681). Thanks to Dependabot, Gary Gregory.
    
  •        Bump commons.bytebuddy.version from 1.17.5 to 1.17.6 ([#677](https://github.com/apache/commons-text/issues/677)). Thanks to Dependabot.
    
  •        Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 [#680](https://github.com/apache/commons-text/issues/680). Thanks to Dependabot.
    

Historical list of changes: https://commons.apache.org/proper/commons-text/changes.html

For complete information on Apache Commons Text, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Text website:

https://commons.apache.org/proper/commons-text

... (truncated)

Commits

Updates org.apache.commons:commons-compress from 1.26.0 to 1.28.0

Changelog

Sourced from org.apache.commons:commons-compress's changelog.

Apache Commons Compress 1.28.0 Release Notes

The Apache Commons Compress team is pleased to announce the release of Apache Commons Compress 1.28.0.

Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.

This is a feature and maintenance release. Java 8 or later is required.

This release updates Apache Commons Lang to 3.18.0 to pick up the fix for CVE-2025-48924 (https://nvd.nist.gov/vuln/detail/CVE-2025-48924), but is not affected by it.

Changes in this version

Changes in this version include the following.

New Features

  •        Add GzipParameters.getModificationInstant(). Thanks to Gary Gregory. 
    
  •        Add GzipParameters.setModificationInstant(Instant). Thanks to Gary Gregory. 
    
  •        Add GzipParameters.OS, setOS(OS), getOS(). Thanks to Gary Gregory. 
    
  •        Add GzipParameters.toString(). Thanks to Gary Gregory. 
    
  • COMPRESS-638: Add GzipParameters.setFileNameCharset(Charset) and getFileNameCharset() to override the default ISO-8859-1 Charset #602. Thanks to vincexjl, Gary Gregory, Piotr P. Karwasz.
  •        Add support for gzip extra subfields, see GzipParameters.setExtra(HeaderExtraField) [#604](https://github.com/apache/commons-compress/issues/604). Thanks to ddeschenes-1, Gary Gregory. 
    
  •        Add CompressFilterOutputStream and refactor to use. Thanks to Gary Gregory. 
    
  •        Add ZipFile.stream(). Thanks to Gary Gregory. 
    
  •        GzipCompressorInputStream reads the modification time (MTIME) and stores its value incorrectly multiplied by 1,000. Thanks to Danny Deschenes, Gary Gregory. 
    
  •        GzipCompressorInputStream writes the modification time (MTIME) the value incorrectly divided by 1,000. Thanks to Danny Deschenes, Gary Gregory. 
    
  •        Add optional FHCRC to GZIP header [#627](https://github.com/apache/commons-compress/issues/627). Thanks to Danny Deschenes, Gary Gregory. 
    
  •        Add GzipCompressorInputStream.Builder allowing to customize the file name and comment Charsets. Thanks to Gary Gregory. 
    
  •        Add GzipCompressorInputStream.Builder.setOnMemberStart(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. 
    
  •        Add GzipCompressorInputStream.Builder.setOnMemberEnd(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. 
    
  •        Add PMD check to default Maven goal. Thanks to Gary Gregory. 
    
  •        Add SevenZFile.Builder.setMaxMemoryLimitKiB(int). Thanks to Gary Gregory. 
    
  •        Add MemoryLimitException.MemoryLimitException(long, int, Throwable) and deprecate MemoryLimitException.MemoryLimitException(long, int, Exception). Thanks to Gary Gregory. 
    
  • COMPRESS-692: Add support for zstd compression in zip archives. Thanks to Mehmet Karaman, Andrey Loskutov, Gary Gregory.
  •        Add support for XZ compression in ZIP archives. Thanks to Gary Gregory. 
    
  • COMPRESS-695: Add ZipArchiveInputStream.createZstdInputStream(InputStream) to provide a different InputStream implementation for Zstandard (Zstd) #649. Thanks to Gary Gregory.
  •        Add org.apache.commons.compress.harmony.pack200.Pack200Exception.Pack200Exception(String, Throwable). Thanks to Gary Gregory. 
    
  • COMPRESS-697: Move BitStream.nextBit() method to BitInputStream #663. Thanks to Fredrik Kjellberg, Gary Gregory.
  •        Add org.apache.commons.compress.compressors.lzma.LZMACompressorInputStream.builder/Builder(). Thanks to Gary Gregory. 
    
  •        Add org.apache.commons.compress.compressors.lzma.LZMACompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. 
    
  •        Add org.apache.commons.compress.compressors.xz.XZCompressorInputStream.builder/Builder(). Thanks to Gary Gregory. 
    
  •        Add org.apache.commons.compress.compressors.xz.XZCompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. 
    
  •        Add org.apache.commons.compress.compressors.xz.ZstdCompressorOutputStream.builder/Builder() [#666](https://github.com/apache/commons-compress/issues/666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. 
    
  •        Add org.apache.commons.compress.compressors.xz.ZstdConstants [#666](https://github.com/apache/commons-compress/issues/666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. 
    

... (truncated)

Commits

Updates org.apache.avro:avro from 1.11.4 to 1.12.1

Updates software.amazon.msk:aws-msk-iam-auth from 2.3.0 to 2.3.4

Release notes

Sourced from software.amazon.msk:aws-msk-iam-auth's releases.

2.3.4

  • Skip credential providers chain
  • Upgrade AWS SDK version

2.3.3

  • Upgrade AWS SDK version

2.3.2

  • Fix unreleased file lock issue in Gradle
  • Enable FIPS endpoint support

2.3.1

  • Upgrade Jackson Databind version
Commits

Updates com.azure:azure-identity from 1.15.4 to 1.18.1

Commits
  • 11e59ef updated changelog for identity-broker
  • fb60a61 updated identity-broker pom
  • 3048a6f updated identity-broker
  • 5e63890 added dependency changes
  • 97c2251 Prepares identity release 1.18.1
  • 1f3c249 Merge remote-tracking branch 'upstream/main' into release/identity_1.18.1
  • 079701f Update main with branch release of azure-search-documents 11.8.0 (#46985)
  • 0793e0b Sync eng/common directory with azure-sdk-tools for PR 12410 (#46928)
  • 045894d Sync eng/common directory with azure-sdk-tools for PR 12454 (#46974)
  • 8f80a14 mgmt network, fix availabilityzones and prepare release 2.54.0 (#46966)
  • Additional commits viewable in compare view

Updates dev.cel:cel from 0.3.0 to 0.11.1

Release notes

Sourced from dev.cel:cel's releases.

v0.11.1

Significant changes

  • CEL-Java evaluates the following expressions to their proto equivalent form:
timestamp(100) -> google.protobuf.Timestamp
duration("1h") -> google.protobuf.Duration

Starting with this release, the runtime can evaluate these literals to the following Java native type equivalents:

timestamp(100) -> java.time.Instant
duration("1h") -> java.time.Duration

This new behavior is not yet enabled by default. Call CelOptions.Builder.evaluateCanonicalTypesToNativeValues(true) to explicitly enable it.

  • Previously only identifiers containing a period were allowed to be aliased. This constraint has been removed, so the following aliasing is now allowed:
CelContainer.newBuilder().addAlias("short", "really_long_package_name").build();

What's Changed

Features

  • Evaluate CEL's timestamp and duration types to their native equivalent values in google/cel-java#790
  • Relax constraint for fully qualifying a package name when aliasing in google/cel-java#837

Optimizations

Safety

Bug fixes

  • Fixed negative zero comparison. "0.0 == -0.0" now evaluates to true
  • Fixed FileDescriptorSetConverter to always reference WellKnownTypes descriptors from generated ones in google/cel-java#833
  • Fixed bytes(string) standard function to respect evaluateCanonicalTypesToNativeValues flag in google/cel-java#828

Testing infra

Miscellaneous

... (truncated)

Commits
  • cc130d7 Fix Typos: add space after "e.g." and remove commas after "e.g.".
  • 7caf057 Prepare 0.11.1 release
  • 9c7c431 Update evaluateCanonicalTypesToNativeValues documentation and fix tests
  • f1ab6e5 Include comprehensions in CelEnvironment
  • c9f7e9a Relax constraint for fully qualifying a package name when aliasing
  • 1ffe7c4 Fix FileDescriptorSetConverter to always reference WellKnownTypes descriptors...
  • f665c8a Fix type-checker to always rewrite resolved identifiers and functions through...
  • 4df3772 Internal Changes
  • 6997259 Internal Changes
  • 1fc8922 Add comprehension nesting validator.
  • Additional commits viewable in compare view

Updates org.testcontainers:testcontainers from 1.20.6 to 1.21.3

Release notes

Sourced from org.testcontainers:testcontainers's releases.

1.21.3

What's Changed

1.21.2

What's Changed

📖 Documentation

📦 Dependency updates

1.21.1

What's Changed

🚀 Features & Enhancements

🐛 Bug Fixes

  • Use generic init script filename when copying it into a Cassandra container (#9606) @​maximevw

📖 Documentation

📦 Dependency updates

1.21.0

What's Changed

... (truncated)

Commits

Updates org.testcontainers:kafka from 1.20.6 to 1.21.3

Release notes

Sourced from org.testcontainers:kafka's releases.

1.21.3

What's Changed

1.21.2

What's Changed

📖 Documentation

📦 Dependency updates

1.21.1

What's Changed

🚀 Features & Enhancements

🐛 Bug Fixes

  • Use generic init script filename when copying it into a Cassandra container (#9606) @​maximevw

📖 Documentation

📦 Dependency updates

1.21.0

What's Changed

... (truncated)

Commits

Bumps the other-dependencies group with 30 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) | `10.0.2` | `10.5` |
| io.swagger.core.v3:swagger-integration-jakarta | `2.2.28` | `2.2.39` |
| [org.mapstruct:mapstruct](https://github.com/mapstruct/mapstruct) | `1.6.2` | `1.6.3` |
| [org.mapstruct:mapstruct-processor](https://github.com/mapstruct/mapstruct) | `1.6.2` | `1.6.3` |
| [org.openapitools:jackson-databind-nullable](https://github.com/OpenAPITools/jackson-databind-nullable) | `0.2.6` | `0.2.8` |
| org.apache.commons:commons-lang3 | `3.18.0` | `3.19.0` |
| [org.apache.commons:commons-text](https://github.com/apache/commons-text) | `1.13.1` | `1.14.0` |
| [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) | `1.26.0` | `1.28.0` |
| org.apache.avro:avro | `1.11.4` | `1.12.1` |
| [software.amazon.msk:aws-msk-iam-auth](https://github.com/aws/aws-msk-iam-auth) | `2.3.0` | `2.3.4` |
| [com.azure:azure-identity](https://github.com/Azure/azure-sdk-for-java) | `1.15.4` | `1.18.1` |
| [dev.cel:cel](https://github.com/google/cel-java) | `0.3.0` | `0.11.1` |
| [org.testcontainers:testcontainers](https://github.com/testcontainers/testcontainers-java) | `1.20.6` | `1.21.3` |
| [org.testcontainers:kafka](https://github.com/testcontainers/testcontainers-java) | `1.20.6` | `1.21.3` |
| [org.testcontainers:junit-jupiter](https://github.com/testcontainers/testcontainers-java) | `1.20.6` | `1.21.3` |
| [org.opendatadiscovery:oddrn-generator-java](https://github.com/opendatadiscovery/oddrn-specification) | `0.1.17` | `0.1.21` |
| [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.14.19` | `1.17.8` |
| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.25.3` | `3.27.6` |
| [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) | `1.80` | `1.82` |
| [com.google.cloud.hosted.kafka:managed-kafka-auth-login-handler](https://github.com/googleapis/managedkafka) | `1.0.5` | `1.0.6` |
| [io.modelcontextprotocol.sdk:mcp-spring-webflux](https://github.com/modelcontextprotocol/java-sdk) | `0.10.0` | `0.14.1` |
| io.prometheus:prometheus-metrics-core | `1.3.6` | `1.4.1` |
| io.prometheus:prometheus-metrics-exposition-textformats | `1.3.6` | `1.4.1` |
| io.prometheus:prometheus-metrics-exporter-pushgateway | `1.3.6` | `1.4.1` |
| org.apache.lucene:lucene-core | `10.2.2` | `10.3.1` |
| org.apache.lucene:lucene-queryparser | `10.2.2` | `10.3.1` |
| org.apache.lucene:lucene-analysis-common | `10.2.2` | `10.3.1` |
| com.gorylenko.gradle-git-properties | `2.4.2` | `2.5.3` |
| [org.openapitools.openapistylevalidator](https://github.com/openapitools/openapi-style-validator) | `1.10` | `1.11` |
| org.openapi.generator | `7.13.0` | `7.16.0` |



Updates `com.nimbusds:nimbus-jose-jwt` from 10.0.2 to 10.5
- [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.5..10.0.2)

Updates `io.swagger.core.v3:swagger-integration-jakarta` from 2.2.28 to 2.2.39

Updates `org.mapstruct:mapstruct` from 1.6.2 to 1.6.3
- [Release notes](https://github.com/mapstruct/mapstruct/releases)
- [Changelog](https://github.com/mapstruct/mapstruct/blob/main/NEXT_RELEASE_CHANGELOG.md)
- [Commits](mapstruct/mapstruct@1.6.2...1.6.3)

Updates `org.mapstruct:mapstruct-processor` from 1.6.2 to 1.6.3
- [Release notes](https://github.com/mapstruct/mapstruct/releases)
- [Changelog](https://github.com/mapstruct/mapstruct/blob/main/NEXT_RELEASE_CHANGELOG.md)
- [Commits](mapstruct/mapstruct@1.6.2...1.6.3)

Updates `org.mapstruct:mapstruct-processor` from 1.6.2 to 1.6.3
- [Release notes](https://github.com/mapstruct/mapstruct/releases)
- [Changelog](https://github.com/mapstruct/mapstruct/blob/main/NEXT_RELEASE_CHANGELOG.md)
- [Commits](mapstruct/mapstruct@1.6.2...1.6.3)

Updates `org.openapitools:jackson-databind-nullable` from 0.2.6 to 0.2.8
- [Release notes](https://github.com/OpenAPITools/jackson-databind-nullable/releases)
- [Commits](OpenAPITools/jackson-databind-nullable@v0.2.6...v0.2.8)

Updates `org.apache.commons:commons-lang3` from 3.18.0 to 3.19.0

Updates `org.apache.commons:commons-text` from 1.13.1 to 1.14.0
- [Changelog](https://github.com/apache/commons-text/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-text@rel/commons-text-1.13.1...rel/commons-text-1.14.0)

Updates `org.apache.commons:commons-compress` from 1.26.0 to 1.28.0
- [Changelog](https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-compress@rel/commons-compress-1.26.0...rel/commons-compress-1.28.0)

Updates `org.apache.avro:avro` from 1.11.4 to 1.12.1

Updates `software.amazon.msk:aws-msk-iam-auth` from 2.3.0 to 2.3.4
- [Release notes](https://github.com/aws/aws-msk-iam-auth/releases)
- [Commits](aws/aws-msk-iam-auth@v2.3.0...v2.3.4)

Updates `com.azure:azure-identity` from 1.15.4 to 1.18.1
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@azure-identity_1.15.4...azure-identity_1.18.1)

Updates `dev.cel:cel` from 0.3.0 to 0.11.1
- [Release notes](https://github.com/google/cel-java/releases)
- [Commits](google/cel-java@v0.3.0...v0.11.1)

Updates `org.testcontainers:testcontainers` from 1.20.6 to 1.21.3
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.6...1.21.3)

Updates `org.testcontainers:kafka` from 1.20.6 to 1.21.3
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.6...1.21.3)

Updates `org.testcontainers:junit-jupiter` from 1.20.6 to 1.21.3
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.6...1.21.3)

Updates `org.testcontainers:junit-jupiter` from 1.20.6 to 1.21.3
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.6...1.21.3)

Updates `org.opendatadiscovery:oddrn-generator-java` from 0.1.17 to 0.1.21
- [Commits](https://github.com/opendatadiscovery/oddrn-specification/commits)

Updates `net.bytebuddy:byte-buddy` from 1.14.19 to 1.17.8
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.14.19...byte-buddy-1.17.8)

Updates `org.assertj:assertj-core` from 3.25.3 to 3.27.6
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.25.3...assertj-build-3.27.6)

Updates `org.bouncycastle:bcpkix-jdk18on` from 1.80 to 1.82
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `com.google.cloud.hosted.kafka:managed-kafka-auth-login-handler` from 1.0.5 to 1.0.6
- [Release notes](https://github.com/googleapis/managedkafka/releases)
- [Commits](googleapis/managedkafka@v1.0.5...v1.0.6)

Updates `io.modelcontextprotocol.sdk:mcp-spring-webflux` from 0.10.0 to 0.14.1
- [Release notes](https://github.com/modelcontextprotocol/java-sdk/releases)
- [Commits](modelcontextprotocol/java-sdk@v0.10.0...v0.14.1)

Updates `io.prometheus:prometheus-metrics-core` from 1.3.6 to 1.4.1

Updates `io.prometheus:prometheus-metrics-exposition-textformats` from 1.3.6 to 1.4.1

Updates `io.prometheus:prometheus-metrics-exporter-pushgateway` from 1.3.6 to 1.4.1

Updates `io.prometheus:prometheus-metrics-exposition-textformats` from 1.3.6 to 1.4.1

Updates `io.prometheus:prometheus-metrics-exporter-pushgateway` from 1.3.6 to 1.4.1

Updates `org.apache.lucene:lucene-core` from 10.2.2 to 10.3.1

Updates `org.apache.lucene:lucene-queryparser` from 10.2.2 to 10.3.1

Updates `org.apache.lucene:lucene-analysis-common` from 10.2.2 to 10.3.1

Updates `org.apache.lucene:lucene-queryparser` from 10.2.2 to 10.3.1

Updates `org.apache.lucene:lucene-analysis-common` from 10.2.2 to 10.3.1

Updates `com.gorylenko.gradle-git-properties` from 2.4.2 to 2.5.3

Updates `org.openapitools.openapistylevalidator` from 1.10 to 1.11
- [Release notes](https://github.com/openapitools/openapi-style-validator/releases)
- [Commits](https://github.com/openapitools/openapi-style-validator/commits)

Updates `org.openapi.generator` from 7.13.0 to 7.16.0

---
updated-dependencies:
- dependency-name: com.nimbusds:nimbus-jose-jwt
  dependency-version: '10.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: io.swagger.core.v3:swagger-integration-jakarta
  dependency-version: 2.2.39
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-dependencies
- dependency-name: org.mapstruct:mapstruct
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-dependencies
- dependency-name: org.mapstruct:mapstruct-processor
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-dependencies
- dependency-name: org.mapstruct:mapstruct-processor
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-dependencies
- dependency-name: org.openapitools:jackson-databind-nullable
  dependency-version: 0.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-dependencies
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.apache.commons:commons-text
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.apache.commons:commons-compress
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.apache.avro:avro
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: software.amazon.msk:aws-msk-iam-auth
  dependency-version: 2.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-dependencies
- dependency-name: com.azure:azure-identity
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: dev.cel:cel
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.testcontainers:testcontainers
  dependency-version: 1.21.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.testcontainers:kafka
  dependency-version: 1.21.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.testcontainers:junit-jupiter
  dependency-version: 1.21.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.testcontainers:junit-jupiter
  dependency-version: 1.21.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.opendatadiscovery:oddrn-generator-java
  dependency-version: 0.1.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-dependencies
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.17.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.bouncycastle:bcpkix-jdk18on
  dependency-version: '1.82'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: com.google.cloud.hosted.kafka:managed-kafka-auth-login-handler
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-dependencies
- dependency-name: io.modelcontextprotocol.sdk:mcp-spring-webflux
  dependency-version: 0.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: io.prometheus:prometheus-metrics-core
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: io.prometheus:prometheus-metrics-exposition-textformats
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: io.prometheus:prometheus-metrics-exporter-pushgateway
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: io.prometheus:prometheus-metrics-exposition-textformats
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: io.prometheus:prometheus-metrics-exporter-pushgateway
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.apache.lucene:lucene-core
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.apache.lucene:lucene-queryparser
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.apache.lucene:lucene-analysis-common
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.apache.lucene:lucene-queryparser
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.apache.lucene:lucene-analysis-common
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: com.gorylenko.gradle-git-properties
  dependency-version: 2.5.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.openapitools.openapistylevalidator
  dependency-version: '1.11'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.openapi.generator
  dependency-version: 7.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Oct 27, 2025

Labels

The following labels could not be found: scope/backend, type/dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant