Skip to content

chore: [DevOps] bump the production-minor-patch group with 2 updates#860

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/main/production-minor-patch-24726d07d7
Closed

chore: [DevOps] bump the production-minor-patch group with 2 updates#860
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/main/production-minor-patch-24726d07d7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 13, 2026

Bumps the production-minor-patch group with 2 updates: org.springframework.ai:spring-ai-bom and org.springframework.ai:spring-ai-autoconfigure-mcp-client.

Updates org.springframework.ai:spring-ai-bom from 1.1.5 to 1.1.6

Release notes

Sourced from org.springframework.ai:spring-ai-bom's releases.

Spring AI 1.1.6 Release Notes

🎯 Highlights

This release includes 1 new features, 5 bug fixes, 2 documentation improvements, 5 other improvements.

⏪ Breaking Changes

  • Chat memory advisors now require an explicit conversation ID to be supplied. This is a behavioral change that affects how chat memory is scoped and managed. Applications relying on implicit conversation IDs must be updated to supply an explicit ID. 13cde41

⚠️ Upgrading Notes

  • PromptChatMemoryAdvisor is now deprecated and chat memory advisors require an explicit conversation ID. Update your code to: (1) replace PromptChatMemoryAdvisor with the recommended alternative, and (2) ensure an explicit conversation ID is supplied when using any chat memory advisor. 917f62e

⭐ New Features

  • MCP auto-configuration now includes the missing @​ConditionalOnMissingBean check, allowing users to provide their own bean definitions and override the auto-configured MCP beans as expected in Spring Boot auto-configuration patterns. d4025e5

🪲 Bug Fixes

  • Fixed an issue where the MilvusVectorStore's doDelete method incorrectly escaped strings in the ID list, which could cause deletion operations to fail or behave unexpectedly. 20206a4
  • Fixed the ChatClientAdvisorTests test suite to supply an explicit conversation ID, aligning tests with the new requirement for explicit conversation IDs in chat memory advisors. 704e5c6
  • Fixed the MistralAiChatModelObservationIT integration test to ensure observation functionality works correctly with the MistralAI chat model provider. a89145d
  • Corrects an issue where configured options were not being properly included in MistralAI API requests, ensuring all user-defined settings are correctly passed through. 7bcf32a
  • Resolves a regression in how AssistantMessage.ToolCall.id is handled when using the Ollama integration, restoring correct tool call identification behavior. bb9d65e

📓 Documentation

  • Corrected typographical errors in the MCP (Model Context Protocol) documentation for improved readability and accuracy. a1ad7f2
  • Fixed broken xref anchors in the documentation to restore proper cross-reference navigation between documentation sections. f03c104

🔨 Dependency Upgrades

  • Updated MCP SDK from version 0.17.0 to 0.18.2 and MCP annotations from 0.8.0 to 0.9.0, bringing in the latest MCP protocol improvements and bug fixes. #5961

🔩 Build Updates

  • Updated the project build to use JDK 17.0.19, ensuring compatibility and incorporating the latest Java 17 patch release for the build environment. 27281e6
  • Reorganizes the project structure by relocating Spring AI starter modules to a dedicated starters/ directory for better maintainability and clarity. 22f8676

🙏 Contributors

Thanks to all contributors who made this release possible:

Commits
  • 10cd1f4 Release version 1.1.6
  • 20206a4 Fix MilvusVectorStore doDelete idList string esacping
  • 704e5c6 Fix ChatClientAdvisorTests to supply explicit conversation ID
  • 917f62e Deprecate PromptChatMemoryAdvisor
  • 13cde41 Require explicit conversation ID in chat memory advisors
  • d4025e5 Add missing ConditionalOnMissingBean check on MCP autoconfig
  • 974183e Bump MCP dependencies: sdk 0.17.0 → 0.18.2, annotations 0.8.0 → 0.9.0 (#5961)
  • a89145d Fix MistralAiChatModelObservationIT
  • 27281e6 Switch to JDK 17.0.19 to build the project
  • a1ad7f2 Fix typos in MCP documentation
  • Additional commits viewable in compare view

Updates org.springframework.ai:spring-ai-autoconfigure-mcp-client from 1.0.6 to 1.0.7

Release notes

Sourced from org.springframework.ai:spring-ai-autoconfigure-mcp-client's releases.

Spring AI 1.0.7 - Bug Fixes

Spring AI 1.0.7 Release Notes

🎯 Highlights

This release includes 5 bug fixes, 6 other improvements.

⏪ Breaking Changes

  • Chat memory advisors now require an explicit conversation ID to be supplied. Previously, a default or implicit ID may have been used, which could cause incorrect memory scoping across conversations. Callers must now provide a conversation ID explicitly. be48f06

⚠️ Upgrading Notes

  • If you are using PromptChatMemoryAdvisor, migrate to the replacement advisor. All chat memory advisors now require an explicit conversationId to be provided — update your code to pass a conversation ID when creating or invoking chat memory advisors. be48f06

🪲 Bug Fixes

  • Corrected string escaping in the Milvus vector store's doDelete method when handling ID lists, preventing potential query errors during deletion operations. 864ef81
  • Resolved a misconfiguration of the ObjectMapper in the MCP server, ensuring proper JSON serialization and deserialization behavior. 436c765
  • Corrected auto-configuration issues affecting MCP server and Spring WebMvc server setup. A prior incorrect fix was reverted and replaced with the proper resolution. 4b21612
  • Updated integration tests for ChatClientAdvisor to supply an explicit conversation ID, aligning with the new requirement for explicit IDs in chat memory advisors. a5fb397
  • Resolved a test failure in the Anthropic chat client integration test for method-invoking function callbacks. daa1b68

🔨 Dependency Upgrades

  • Updated the Model Context Protocol (MCP) SDK by a significant version jump (0.10.0 → 0.18.2), incorporating many upstream improvements, new capabilities, and compatibility updates. #5958

🔩 Build Updates

  • The project build now uses JDK 17.0.19, ensuring alignment with the latest LTS patch release for improved security and stability in the build environment. 1badb6f
  • Spring AI starter modules have been relocated to a dedicated starters/ directory, improving the project's directory structure and organization. 36df6b9
  • Project version advanced to 1.0.7-SNAPSHOT to begin the next development cycle following the 1.0.6 release. 82848f2

🙏 Contributors

Thanks to all contributors who made this release possible:

Commits
  • 1086c3d Release version 1.0.7
  • 864ef81 Fix MilvusVectorStore doDelete idList string esacping
  • a5fb397 Fix ChatClientAdvisorTests to supply explicit conversation ID
  • be48f06 Deprecate PromptChatMemoryAdvisor
  • e1402de Require explicit conversation ID in chat memory advisors
  • 436c765 Fix MCP server ObjectMapper configuration
  • 23b482c Revert "Fix MCP server/WebMvc server autoconfigurations"
  • 4b21612 Fix MCP server/WebMvc server autoconfigurations
  • daa1b68 Fix AnthropicChatClientMethodInvokingFunctionCallbackIT
  • 18c989a Upgrade MCP SDK from 0.10.0 to 0.18.2 (#5958)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-minor-patch group with 2 updates: [org.springframework.ai:spring-ai-bom](https://github.com/spring-projects/spring-ai) and [org.springframework.ai:spring-ai-autoconfigure-mcp-client](https://github.com/spring-projects/spring-ai).


Updates `org.springframework.ai:spring-ai-bom` from 1.1.5 to 1.1.6
- [Release notes](https://github.com/spring-projects/spring-ai/releases)
- [Commits](spring-projects/spring-ai@v1.1.5...v1.1.6)

Updates `org.springframework.ai:spring-ai-autoconfigure-mcp-client` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/spring-projects/spring-ai/releases)
- [Commits](spring-projects/spring-ai@v1.0.6...v1.0.7)

---
updated-dependencies:
- dependency-name: org.springframework.ai:spring-ai-bom
  dependency-version: 1.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: org.springframework.ai:spring-ai-autoconfigure-mcp-client
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels May 13, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 14, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 14, 2026
@dependabot dependabot Bot deleted the dependabot/maven/main/production-minor-patch-24726d07d7 branch May 14, 2026 21:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants