Update patch/hotfix dependencies by renovate[bot] · Pull Request #328 · x1F/sip-framework

renovate · 2025-12-10T16:03:46Z

This PR contains the following updates:

Package	Change	Age	Confidence
org.apache.maven.plugins:maven-plugin-plugin (source)	`3.15.0` → `3.15.2`
org.apache.maven.plugins:maven-gpg-plugin (source)	`3.2.6` → `3.2.8`
org.jacoco:jacoco-maven-plugin (source)	`0.8.12` → `0.8.14`
org.apache.maven.plugins:maven-surefire-plugin (source)	`3.5.0` → `3.5.5`
org.apache.maven.plugins:maven-enforcer-plugin (source)	`3.6.1` → `3.6.2`
org.apache.maven.plugin-tools:maven-plugin-annotations (source)	`3.15.0` → `3.15.2`
org.apache.maven:maven-artifact (source)	`3.9.9` → `3.9.14`
org.apache.maven:maven-model (source)	`3.9.9` → `3.9.14`
org.apache.maven:maven-plugin-api (source)	`3.9.9` → `3.9.14`
org.apache.maven:maven-core (source)	`3.9.9` → `3.9.14`
org.projectlombok:lombok (source)	`1.18.38` → `1.18.44`
io.swagger.core.v3:swagger-annotations	`2.2.34` → `2.2.45`
org.springdoc:springdoc-openapi-starter-webmvc-ui (source)	`2.8.13` → `2.8.16`
org.springdoc:springdoc-openapi-starter-common (source)	`2.8.13` → `2.8.16`
org.springframework.boot:spring-boot-maven-plugin (source)	`3.5.11` → `3.5.12`
org.springframework.boot:spring-boot-starter-test (source)	`3.5.11` → `3.5.12`
org.springframework.boot:spring-boot-dependencies (source)	`3.5.11` → `3.5.12`
org.springframework.boot:spring-boot-starter-parent (source)	`3.5.11` → `3.5.12`

Release Notes

jacoco/jacoco (org.jacoco:jacoco-maven-plugin)

`v0.8.14`: 0.8.14

Compare Source

New Features

JaCoCo now officially supports Java 25 (GitHub #1950).
Experimental support for Java 26 class files (GitHub #1870).
Branches added by the Kotlin compiler for default argument number 33 or higher are filtered out during generation of report (GitHub #1655).
Part of bytecode generated by the Kotlin compiler for elvis operator that follows safe call operator is filtered out during generation of report (GitHub #1814, #1954).
Part of bytecode generated by the Kotlin compiler for more cases of chained safe call operators is filtered out during generation of report (GitHub #1956).
Part of bytecode generated by the Kotlin compiler for invocations of suspendCoroutineUninterceptedOrReturn intrinsic is filtered out during generation of report (GitHub #1929).
Part of bytecode generated by the Kotlin compiler for suspending lambdas with parameters is filtered out during generation of report (GitHub #1945).
Part of bytecode generated by the Kotlin compiler for suspending functions and lambdas with suspension points that return inline value class is filtered out during generation of report (GitHub #1871).
Part of bytecode generated by the Kotlin Compose compiler plugin for pausable composition is filtered out during generation of report (GitHub #1911).
Methods generated by the Kotlin serialization compiler plugin are filtered out (GitHub #1885, #1970, #1971).

Fixed bugs

Fixed handling of implicit else clause of when with String subject in Kotlin (GitHub #1813, #1940).
Fixed handling of implicit default clause of switch by String in Java when compiled by ECJ (GitHub #1813, #1940).
Fixed handling of exceptions in chains of safe call operators in Kotlin (GitHub #1819).

Non-functional Changes

JaCoCo now depends on ASM 9.9 (GitHub #1965).

`v0.8.13`: 0.8.13

Compare Source

New Features

JaCoCo now officially supports Java 23 and Java 24 (GitHub #1757, #1631, #1867).
Experimental support for Java 25 class files (GitHub #1807).
Calculation of line coverage for Kotlin inline functions (GitHub #1670).
Calculation of line coverage for Kotlin inline functions with reified type parameter (GitHub #1670, #1700).
Calculation of coverage for Kotlin JvmSynthetic functions (GitHub #1700).
Part of bytecode generated by the Kotlin Compose compiler plugin is filtered out during generation of report (GitHub #1616).
Part of bytecode generated by the Kotlin compiler for inline value classes is filtered out during generation of report (GitHub #1475).
Part of bytecode generated by the Kotlin compiler for suspending lambdas without suspension points is filtered out during generation of report (GitHub #1283).
Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable enum subject is filtered out during generation of report (GitHub #1774).
Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable String subject is filtered out during generation of report (GitHub #1769).
Part of bytecode generated by the Kotlin compiler for chains of safe call operators is filtered out during generation of report (GitHub #1810, #1818).
Method getEntries generated by the Kotlin compiler for enum classes is filtered out during generation of report (GitHub #1625).
Methods generated by the Kotlin compiler for constructors and functions with JvmOverloads annotation are filtered out (GitHub #1768).

Fixed bugs

Fixed interpretation of Kotlin SMAP (GitHub #1525).
File extensions are preserved in HTML report in case of clashes of normalized file names (GitHub #1660).

Non-functional Changes

JaCoCo build now uses Maven Wrapper and requires at least Maven 3.9.9 (GitHub #1708, #1707, #1681).
JaCoCo now depends on ASM 9.8 (GitHub #1862).
More context information when IllegalArgumentException occurs during reading of zip file (GitHub #1833).

apache/maven (org.apache.maven:maven-artifact)

`v3.9.14`

`v3.9.13`

`v3.9.12`: 3.9.12

🚀 New features and improvements

[3.9.x] Apply resolver changes and improvements (#11536) @cstamas
Update formatting of prerequisites-requirements error to improve readability (#11523) @slawekjaranowski
Allow a Maven plugin to require a Java version (#11479) @slawekjaranowski
Use MavenRepositorySystem in ProjectBuildingHelper instead of deprecated RepositorySystem (#11358) @slawekjaranowski
Make maven.config use UTF8 (#11264) @cstamas
Simplify prefix resolution (#11197) @slawekjaranowski

🐛 Bug Fixes

Add default implementation for new method in MavenPluginManager (#11522) @slawekjaranowski
Repository layout should be used in MavenRepositorySystem (#11495) @slawekjaranowski
Fix plugin prefix resolution when metadata is not available from repository (#11290) @slawekjaranowski
Improve source root modification warning message (#11105) @gnodet
Bug: bad cache isolation between two sessions (#11082) @cstamas
Set Guice class loading to CHILD - avoid using terminally deprecated methods (#11003) @slawekjaranowski
Avoid parsing MAVEN_OPTS (3.9.x) (#10969) @BobVul

📝 Documentation updates

clarify repository vs deployment repository (#11492) @hboutemy
add maintained branches (#11448) @hboutemy

👻 Maintenance

Add IntelliJ icon (#11408) @Bukama
Build by JDK 25 (#11187) @slawekjaranowski
Deprecate org.apache.maven.repository.RepositorySystem in 3.9.x (#11096) @slawekjaranowski

🔧 Build

Bump actions/download-artifact from 5.0.0 to 6.0.0 (#11335) @dependabot[bot]
Bump actions/upload-artifact from 4.6.2 to 5.0.0 (#11336) @dependabot[bot]

📦 Dependency updates

Bump actions/cache from 4.3.0 to 5.0.0 (#11542) @dependabot[bot]
Bump resolverVersion from 1.9.24 to 1.9.25 (#11533) @dependabot[bot]
Bump actions/checkout from 6.0.0 to 6.0.1 (#11512) @dependabot[bot]
Bump actions/setup-java from 5.0.0 to 5.1.0 (#11519) @dependabot[bot]
Bump actions/checkout from 5.0.1 to 6.0.0 (#11476) @dependabot[bot]
Bump actions/checkout from 5.0.0 to 5.0.1 (#11458) @dependabot[bot]
Bump commons-cli:commons-cli from 1.10.0 to 1.11.0 (#11438) @dependabot[bot]
Bump org.codehaus.plexus:plexus-interpolation from 1.28 to 1.29 (#11416) @dependabot[bot]
Bump commons-io:commons-io from 2.20.0 to 2.21.0 (#11417) @dependabot[bot]
Bump xmlunitVersion from 2.10.4 to 2.11.0 (#11331) @dependabot[bot]
Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.24 to 1.26 (#11231) @dependabot[bot]
Bump org.ow2.asm:asm from 9.8 to 9.9 (#11203) @dependabot[bot]
Bump actions/cache from 4.2.4 to 4.3.0 (#11172) @dependabot[bot]
Bump com.google.guava:guava from 33.4.8-jre to 33.5.0-jre (#11143) @dependabot[bot]
Bump xmlunitVersion from 2.10.3 to 2.10.4 (#11121) @dependabot[bot]
Bump actions/cache from 4.2.3 to 4.2.4 (#11032) @dependabot[bot]
Bump commons-cli:commons-cli from 1.9.0 to 1.10.0 (#11018) @dependabot[bot]
Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#10966) @dependabot[bot]

`v3.9.11`: 3.9.11

🚀 New features and improvements

Augment version range resolution used repositories (#2574) @cstamas

🐛 Bug Fixes

Deduplicate filtered dependency graph (#2489) @alzimmermsft
Move ensure in boundaries of project lock (#2470) @cstamas

👻 Maintenance

[MNGSITE-393] - remove references to Maven 2 (#2438) @elharo
Update CONTRIBUTING after GitHub issues enabled (#2449) @slawekjaranowski
Enable Github Issues (3.9.x) (#2414) @Bukama
[MNG-8763] - Remove name from site bannerLeft (#2419) @slawekjaranowski

🔧 Build

Pin GitHub action versions by hash (#10898) @slawekjaranowski
Build the project by JDK 21 as default (#10896) @slawekjaranowski
Use Maven 3.9.10 for build on GitHub (#2452) @slawekjaranowski

📦 Dependency updates

Bump resolverVersion from 1.9.23 to 1.9.24 (#2540) @dependabot[bot]
Bump xmlunitVersion from 2.10.2 to 2.10.3 (#2500) @dependabot[bot]
Bump org.apache.maven:maven-parent from 44 to 45 (#2491) @dependabot[bot]
Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.0 to 3.6.1 (#2432) @dependabot[bot]

`v3.9.10`: 3.9.10

Release Notes - Maven - Version 3.9.10

Bug

[MNG-8096] - Inconsistent dependency resolution behaviour for concurrent multi-module build can cause failures
[MNG-8169] - MINGW support requires --add-opens java.base/java.lang=ALL-UNNAMED
[MNG-8170] - Maven 3.9.8 contains weird native library for Jansi on Windows/arm64
[MNG-8211] - Maven should fail builds that use CI Friendly versions but have no values set
[MNG-8248] - WARNING: A restricted method in java.lang.System has been called
[MNG-8256] - ProjectDependencyGraph bug: in case of filtering, non-direct module links are lost
[MNG-8315] - Failure of mvn.cmd if a .mvn directory is located at drive root
[MNG-8396] - Maven takes forever to resume
[MNG-8711] - "Duplicate artifact" in LifecycleDependencyResolver

Improvement

[MNG-8370] - Introduce maven.repo.local.head
[MNG-8399] - JDK 24+ issues warning about usage of sun.misc.Unsafe
[MNG-8707] - Add methods to remove compile and test source roots
[MNG-8712] - improve dependency version explanation: it's a requirement, not always effective version
[MNG-8717] - Remove maven-plugin-plugin:addPluginArtifactMetadata from default binding
[MNG-8722] - Use a single standalone version of asm
[MNG-8731] - Use https for xsi:schemaLocation in generated descriptors
[MNG-8734] - Simplify scripting like "get project version" cases

Task

[MNG-8728] - Bump Eclipse Sisu from 0.9.0.M3 to 0.9.0.M4 and use Java 24 on CI

Dependency upgrade

[MNG-8289] - Update Plexus annotations to 2.2.0
[MNG-8443] - Bump com.google.guava:guava from 33.2.1-jre to 33.4.0-jre
[MNG-8531] - Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 3.6.0
[MNG-8532] - Bump commons-io:commons-io from 2.16.1 to 2.18.0
[MNG-8534] - Bump org.codehaus.mojo:buildnumber-maven-plugin from 3.2.0 to 3.2.1
[MNG-8635] - Bump com.google.guava:failureaccess from 1.0.2 to 1.0.3
[MNG-8636] - Bump com.google.guava:guava from 33.4.0-jre to 33.4.5-jre
[MNG-8640] - Bump org.apache.maven:maven-parent from 43 to 44
[MNG-8661] - Bump com.google.guava:guava from 33.4.5-jre to 33.4.6-jre
[MNG-8701] - Bump org.codehaus.plexus:plexus-interpolation from 1.27 to 1.28
[MNG-8702] - Bump org.codehaus.plexus:plexus-classworlds from 2.8.0 to 2.9.0
[MNG-8703] - Bump commons-io:commons-io from 2.18.0 to 2.19.0
[MNG-8704] - Bump com.google.guava:guava from 33.4.6-jre to 33.4.8-jre
[MNG-8705] - Bump commons-jxpath:commons-jxpath from 1.3 to 1.4.0
[MNG-8706] - Bump commons-cli:commons-cli from 1.8.0 to 1.9.0
[MNG-8715] - Bump org.fusesource.jansi:jansi from 2.4.1 to 2.4.2
[MNG-8716] - Bump resolver to 1.9.23
[MNG-8745] - Bump xmlunitVersion from 2.10.0 to 2.10.2

What's Changed

[MNG-8211] Fail the build if CI Friendly revision used without value by @cstamhttps://github.com/apache/maven/pull/1656l/1656
Add missing since by @cstamhttps://github.com/apache/maven/pull/1682l/1682
[MNG-8256] FilteredProjectDependencyGraph fix for non-transitive case by @cstamhttps://github.com/apache/maven/pull/1724l/1724
[MNG-8315] Failure of mvn.cmd if a .mvn folder is located at drive root by @fmarhttps://github.com/apache/maven/pull/1806l/1806
[MNG-8289] Update Plexus Annotations to 2.2.0 by @dependabhttps://github.com/apache/maven/pull/1666l/1666
[MNG-8370] Add maven.repo.local.head by @slawekjaranowshttps://github.com/apache/maven/pull/1915l/1915
[MNG-8443] Bump com.google.guava:guava from 33.2.1-jre to 33.4.0-jre by @dependabhttps://github.com/apache/maven/pull/1991l/1991
[MNG-8531] Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 3.6.0 by @dependabhttps://github.com/apache/maven/pull/2013l/2013
[MNG-8532] Bump commons-io:commons-io from 2.16.1 to 2.18.0 by @dependabhttps://github.com/apache/maven/pull/1926l/1926
[MNG-8534] Bump org.codehaus.mojo:buildnumber-maven-plugin from 3.2.0 to 3.2.1 by @dependabhttps://github.com/apache/maven/pull/1699l/1699
Add PR Automation action by @slawekjaranowshttps://github.com/apache/maven/pull/2113l/2113
Bump com.google.guava:failureaccess from 1.0.2 to 1.0.3 by @dependabhttps://github.com/apache/maven/pull/2167l/2167
Bump com.google.guava:guava from 33.4.0-jre to 33.4.5-jre by @dependabhttps://github.com/apache/maven/pull/2168l/2168
[MNG-8640] Bump org.apache.maven:maven-parent from 43 to 44 by @dependabhttps://github.com/apache/maven/pull/2163l/2163
Use Maven 3.9.9 for build maven-3.9.x branch by @slawekjaranowshttps://github.com/apache/maven/pull/2177l/2177
[MNG-8248] Add enable-native-access to startup scripts by @slawekjaranowshttps://github.com/apache/maven/pull/2171l/2171
[MNG-8661] Bump com.google.guava:guava from 33.4.5-jre to 33.4.6-jre by @dependabhttps://github.com/apache/maven/pull/2185l/2185
Use dedicated local repo for ITs on Jenkins by @slawekjaranowshttps://github.com/apache/maven/pull/2255l/2255
[MNG-8701] Bump org.codehaus.plexus:plexus-interpolation from 1.27 to 1.28 by @dependabhttps://github.com/apache/maven/pull/2240l/2240
[MNG-8702] Bump org.codehaus.plexus:plexus-classworlds from 2.8.0 to 2.9.0 by @dependabhttps://github.com/apache/maven/pull/2241l/2241
[MNG-8703] Bump commons-io:commons-io from 2.18.0 to 2.19.0 by @dependabhttps://github.com/apache/maven/pull/2258l/2258
[MNG-8704] Bump com.google.guava:guava from 33.4.6-jre to 33.4.8-jre by @dependabhttps://github.com/apache/maven/pull/2264l/2264
[MNG-8705] Bump commons-jxpath:commons-jxpath from 1.3 to 1.4.0 by @dependabhttps://github.com/apache/maven/pull/2270l/2270
[MNG-8706] Bump commons-cli:commons-cli from 1.8.0 to 1.9.0 by @dependabhttps://github.com/apache/maven/pull/1665l/1665
[MNG-8715] Bump org.fusesource.jansi:jansi from 2.4.1 to 2.4.2 by @dependabhttps://github.com/apache/maven/pull/2280l/2280
[MNG-8707] Add methods to remove compile and test source roots by @gnodhttps://github.com/apache/maven/pull/2275l/2275
[MNG-8712] dependency version is a requirement, not effective by @hboutehttps://github.com/apache/maven/pull/2279l/2279
[MNG-8717] Remove maven-plugin-plugin:addPluginArtifactMetadata from default binding by @slawekjaranowshttps://github.com/apache/maven/pull/2295l/2295
[MNG-8169] Add opens java.base/java.lang=ALL-UNNAMED for MinGW by @slawekjaranowshttps://github.com/apache/maven/pull/2296l/2296
[MNG-8722] Use a single standalone version of asm by @slawekjaranowshttps://github.com/apache/maven/pull/2297l/2297
[MNG-8716] Bump resolver to 1.9.23 by @slawekjaranowshttps://github.com/apache/maven/pull/2282l/2282
[MNG-8731] Use https for xsi:schemaLocation in generated descriptors by @slawekjaranowshttps://github.com/apache/maven/pull/2343l/2343
[MNG-8711] Fix concurrent cache access by @slawekjaranowshttps://github.com/apache/maven/pull/2345l/2345
Update README.md by @slawekjaranowshttps://github.com/apache/maven/pull/2353l/2353
[MNG-8728] Bump Eclipse Sisu from 0.9.0.M3 to 0.9.0.M4 by @cstamhttps://github.com/apache/maven/pull/2359l/2359
[MNG-8728] Build ITs on JDK 21, 24 by @slawekjaranowshttps://github.com/apache/maven/pull/2360l/2360
[MNG-8734] Make Maven 3.9.10 ignore --raw-streams option by @cstamhttps://github.com/apache/maven/pull/2361l/2361
Bump xmlunitVersion from 2.10.0 to 2.10.1 by @dependabhttps://github.com/apache/maven/pull/2354l/2354
[MNG-8396] Backport: add cache layer to the filtered dep graph by @cstamhttps://github.com/apache/maven/pull/2393l/2393
[MNG-8745] Bump xmlunitVersion from 2.10.1 to 2.10.2 by @dependabhttps://github.com/apache/maven/pull/2389l/2389

New Contributors

@fmarot made their first contributihttps://github.com/apache/maven/pull/1806l/1806

Full Changelog: apache/maven@maven-3.9.9...maven-3.9.10

projectlombok/lombok (org.projectlombok:lombok)

`v1.18.44`

`v1.18.42`

`v1.18.40`

swagger-api/swagger-core (io.swagger.core.v3:swagger-annotations)

`v2.2.45`: Swagger-core 2.2.45 released!

Compare Source

fix: ensure sentinel values are handled correctly in defaultValue mer… (#5078)
chore: update jackson dependencies (#5075)
chore(deps-dev): bump ch.qos.logback:logback-core from 1.5.22 to 1.5.25 (#5072)
nit: Renamed GericModelConverter into GenericModelConverter (#5066)
fix: treat streams with arraySchema annotation as array type (#5013) (#5064)

`v2.2.44`: Swagger-core 2.2.44 released!

Compare Source

fix: add empty default value (#4838) (#5063)
fix: null values in examples, example and default (#4339, #4229) (#5060)
fix: do not set schema.nullable for OAS 3.1 (#5059)
fix: calculate sibling properties based upon whether the schema is the array or the item in the array (#5055)
fix: OAS 3.1 schema generation for raw Object properties (#5034)
feat: Multiple SecurityRequirement annotations with AND condition #3556 (#5025)
bug fix propertyNames schema is not removed as unreferenced by SpecFilter #5017 (#5020)
5001: Add support for @Nullable annotations in OpenAPI 3.1 schemas (#5018)

`v2.2.43`: Swagger-core 2.2.43 released!

Compare Source

fix: add missing @ArraysSchema.arraySchema properties (#5049)
refactor: introduce class responsible for how bean validation annotations affect schemas (#5047)
fix: treat example values starting with numbers as strings (#5046)
refactor: add an overloaded method for resolving required so that the field type can be utilized (#5042)
test: Add test showing how @JsonSubTypes can be used with @Schema-oneOf annotations (#5030)
chore: update commons-lang3 to 3.20 (#5026)

`v2.2.42`: Swagger-core 2.2.42 released!

Compare Source

fix: apply minItems/minLength from @NotEmpty/@NotBlank regardless of requiredMode (#5033)
chore: update logback-core dependency (#5029)

`v2.2.41`: Swagger-core 2.2.41 released!

Compare Source

Fix/annotated type caching 5003 (#5005)
#4852 Unit test and fix to allow recursive models to process without StackOverflow (#5004)
fix: Refactor JsonAssert and apply to json/yaml assertions (#5002)
fix: use arraySchema when deciding required of an array (#4998)
fix: NotBlank and NotEmpty annotations follow NotNull behavior (#4968)

`v2.2.40`: Swagger-core 2.2.40 released!

Compare Source

fix: remove superfluous ref for a composed schema. Fixes #4959 (#5000)
Bump classgraph version to 4.8.184 (#4992)
fix(test): Make serialization tests robust against key reordering (#4990)

`v2.2.39`: Swagger-core 2.2.39 released!

Compare Source

chore: remove System.out and printStackTrace to align with Sonar rules S106 and S1148 (#4988)
fix: adjust docs about RequiredMode.AUTO + small refactor (#4982)
Fix a non-deterministic assertion in ServletUtilsTest (#4981)
Fix(core): Prevent redundant schema resolution by fixing AnnotatedType equality (#4975)

`v2.2.38`: Swagger-core 2.2.38 released!

Compare Source

honor array schema description when generating OpenAPI 3.1 (#4942)

`v2.2.37`: Swagger-core 2.2.37 released!

Compare Source

fix: prevent leaking properties to enum schema when Schema#implementa… (#4970)
refs enumAsRef Issue 4932 (#4969)
fix: add booleanSchemaValue to Schema's hashCode and equals (#4958)
fix: Fix missing items on nested @ArraySchema items in OAS 3.1 (#4949)

`v2.2.36`: Swagger-core 2.2.36 released!

Compare Source

fix: Fix ClassCastException on resolving JsonSchema. This solves issu… (#4950)

`v2.2.35`: Swagger-core 2.2.35 released!

Compare Source

chore: bump jackson versions to 2.19.2 (#4943)
Bump github classgraph version to 4.8.181 (#4940)
chore: update common lang3 to 3.18 (#4938)
chore: add GitHub issue and pull request templates (#4934)
docs: provide a better formatting for README (#4930)
Revert temp workarounds for sonatype 502 (#4922)
Ticket-4910 | Added FailedApiResponse.java (#4911)

springdoc/springdoc-openapi (org.springdoc:springdoc-openapi-starter-webmvc-ui)

`v2.8.16`

Added

Add support for springdoc.swagger-ui.document-title property to customize the browser tab title

Changed

Upgrade Spring Boot to version 3.5.11
Upgrade swagger-core to version 2.2.43
Upgrade swagger-ui to version 5.32.0
Upgrade Scalar to version 0.5.55

Fixed

#3230 – Scalar source URLs resolve to null/<groupName> on second request when using GroupedOpenApi
#3226 – Propagate @JsonView context when resolving Page<T> schema in PageOpenAPIConverter
#3205 – springdoc-ui does not work with native compile GraalVM 25
#3219 – Upgrade swagger-core from 2.2.42 to 2.2.43 (fixes schema resolution issues)
#3193 – OpenApi field in SpringDocConfigProperties does not comply with camelCase naming conventions
#3161 – Prevent duplicate _links in allOf child schemas extending RepresentationModel
Fix type annotation not considered when Kotlin is not present
Fix property resolution for parameter default values

`v2.8.15`

Compare Source

Added

#3122 – Add log notifications when SpringDocs / Scalar are enabled by default
#3123 – Add support for serving static resources
#3151 – Add @Order to ApplicationReadyEvent listener
#3158 – Add support for API groups in Scalar
#3187 – Add Scalar WebMVC and WebFlux support
#3185 – Disable creation of blank GitHub issues (GitHub settings & workflow)
#3186 – Decouple Web Server APIs following Spring Boot modularization
#3131 - Improve warning messages when documentation is explicitly enabled
#3183 - Remove unused operations consumer from route builder methods
#3141 - Change handling so useReturnTypeSchema is evaluated at HTTP status code level instead of method level

Changed

Upgrade Spring Boot to version 3.5.9
Upgrade swagger-core to version 2.2.41
Upgrade swagger-ui to version 5.31.0
Upgrade Scalar to version 0.4.3

Fixed

#3133 – Fix regression where content type from Swagger @RequestBody did not take precedence
#3146 – Fix WebJar resource handler mappings for Swagger UI resources
#3168 – Support @Schema annotations on Kotlin value classes
#3178 – Fix regression when generating documentation for Kotlin LinkedHashSet
#3170 – Fix warnings when setting title and description in application.yml
#3187 – Add scalar scalar-webmvc and scalar-webflux support

`v2.8.14`

Compare Source

Added

#3090 - Add logs to notify when SpringDocs/Scalar is enabled because SpringDocs/Scalar is enabled by default

Changed

Upgrade swagger-ui to v5.30.1
Upgrade swagger-core to v2.2.38
Upgrade spring-boot to v3.5.7
Upgrade commons-lang3 to v3.18.0
Upgrade scalar to v0.3.12

Fixed

#3107 - Fix:compatible with lower version of getOpenApi().
#3121 - NPE in KotlinDeprecatedPropertyCustomizer - resolvedSchema is null

spring-projects/spring-boot (org.springframework.boot:spring-boot-maven-plugin)

`v3.5.12`

Compare Source

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

…s' into renovate/patchhotfix-dependencies # Conflicts: # pom.xml

renovate · 2026-03-25T13:31:21Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

renovate bot force-pushed the renovate/patchhotfix-dependencies branch 14 times, most recently from 95cdfdb to cd6cff0 Compare December 12, 2025 15:24

MartinBuchheim force-pushed the develop branch from 8aee1cc to d9df36c Compare December 12, 2025 15:36

renovate bot force-pushed the renovate/patchhotfix-dependencies branch 13 times, most recently from 80179ff to 1c1e93d Compare December 18, 2025 13:36

renovate bot force-pushed the renovate/patchhotfix-dependencies branch 2 times, most recently from 804c745 to 696de4d Compare January 5, 2026 08:11

renovate bot force-pushed the renovate/patchhotfix-dependencies branch 2 times, most recently from 81fa55c to bab67ee Compare January 29, 2026 09:33

renovate bot force-pushed the renovate/patchhotfix-dependencies branch 7 times, most recently from e728a31 to 6c4f7f5 Compare February 21, 2026 13:37

renovate bot force-pushed the renovate/patchhotfix-dependencies branch 3 times, most recently from 9f1f93f to 83f4514 Compare March 6, 2026 13:03

renovate bot force-pushed the renovate/patchhotfix-dependencies branch 3 times, most recently from bd9d5b2 to 9e01b79 Compare March 12, 2026 13:46

renovate bot force-pushed the renovate/patchhotfix-dependencies branch 2 times, most recently from 1566c61 to 77ff150 Compare March 25, 2026 10:11

Update patch/hotfix dependencies

95004ea

renovate bot force-pushed the renovate/patchhotfix-dependencies branch 3 times, most recently from 29c672b to 81eb8c3 Compare March 25, 2026 12:42

Update patch/hotfix dependencies

619e07e

renovate bot force-pushed the renovate/patchhotfix-dependencies branch from 81eb8c3 to 619e07e Compare March 25, 2026 12:43

MartinBuchheim added 2 commits March 25, 2026 14:28

Added changelog for dependency hotfix updates

a1c8fad

Merge remote-tracking branch 'origin/renovate/patchhotfix-dependencie…

7ed6abc

…s' into renovate/patchhotfix-dependencies # Conflicts: # pom.xml

Revert maven dependency versions to 3.9.9 for compatibility adjustments

edb2424

MartinBuchheim marked this pull request as ready for review March 25, 2026 15:10

MartinBuchheim merged commit 8deb8f1 into develop Mar 25, 2026
13 checks passed

MartinBuchheim deleted the renovate/patchhotfix-dependencies branch March 25, 2026 15:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update patch/hotfix dependencies#328

Update patch/hotfix dependencies#328
MartinBuchheim merged 5 commits intodevelopfrom
renovate/patchhotfix-dependencies

renovate bot commented Dec 10, 2025 •

edited

Loading

Uh oh!

renovate bot commented Mar 25, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate bot commented Dec 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.8.14: 0.8.14

New Features

Fixed bugs

Non-functional Changes

v0.8.13: 0.8.13

New Features

Fixed bugs

Non-functional Changes

v3.9.12: 3.9.12

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

🔧 Build

📦 Dependency updates

v3.9.11: 3.9.11

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

🔧 Build

📦 Dependency updates

v3.9.10: 3.9.10

Bug

Improvement

Task

Dependency upgrade

What's Changed

New Contributors

v2.2.45: Swagger-core 2.2.45 released!

v2.2.44: Swagger-core 2.2.44 released!

v2.2.43: Swagger-core 2.2.43 released!

v2.2.42: Swagger-core 2.2.42 released!

v2.2.41: Swagger-core 2.2.41 released!

v2.2.40: Swagger-core 2.2.40 released!

v2.2.39: Swagger-core 2.2.39 released!

v2.2.38: Swagger-core 2.2.38 released!

v2.2.37: Swagger-core 2.2.37 released!

v2.2.36: Swagger-core 2.2.36 released!

v2.2.35: Swagger-core 2.2.35 released!

Added

Changed

Fixed

Added

Changed

Fixed

Added

Changed

Fixed

Configuration

Uh oh!

renovate bot commented Mar 25, 2026

Edited/Blocked Notification

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Dec 10, 2025 •

edited

Loading

`v0.8.14`: 0.8.14

`v0.8.13`: 0.8.13

`v3.9.12`: 3.9.12

`v3.9.11`: 3.9.11

`v3.9.10`: 3.9.10

`v2.2.45`: Swagger-core 2.2.45 released!

`v2.2.44`: Swagger-core 2.2.44 released!

`v2.2.43`: Swagger-core 2.2.43 released!

`v2.2.42`: Swagger-core 2.2.42 released!

`v2.2.41`: Swagger-core 2.2.41 released!

`v2.2.40`: Swagger-core 2.2.40 released!

`v2.2.39`: Swagger-core 2.2.39 released!

`v2.2.38`: Swagger-core 2.2.38 released!

`v2.2.37`: Swagger-core 2.2.37 released!

`v2.2.36`: Swagger-core 2.2.36 released!

`v2.2.35`: Swagger-core 2.2.35 released!