Skip to content

Bump the maven-minor-updates group across 2 directories with 16 updates - #425

Merged
ramanathan1504 merged 1 commit into
mainfrom
dependabot/maven/maven-minor-updates-4eb7e90e93
Sep 9, 2026
Merged

Bump the maven-minor-updates group across 2 directories with 16 updates#425
ramanathan1504 merged 1 commit into
mainfrom
dependabot/maven/maven-minor-updates-4eb7e90e93

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-minor-updates group with 12 updates in the / directory:

Package From To
org.jspecify:jspecify 1.0.0 1.0.1
com.github.spotbugs:spotbugs-annotations 4.10.3 4.10.4
com.google.guava:guava 33.6.0-jre 33.7.1-jre
joda-time:joda-time 2.14.2 2.14.3
org.yaml:snakeyaml 2.6 2.7
org.springframework.boot:spring-boot-dependencies 3.5.7 3.5.16
org.springframework.boot:spring-boot-maven-plugin 3.5.7 3.5.16
org.springframework.cloud:spring-cloud-dependencies 2025.0.0 2025.0.3
commons-io:commons-io 2.17.0 2.22.0
io.netty:netty-bom 4.1.135.Final 4.2.17.Final
org.apache.maven:apache-maven 3.9.9 3.9.16
org.apache.maven.wrapper:maven-wrapper 3.3.2 3.3.4

Bumps the maven-minor-updates group with 4 updates in the /log4j-samples-graalvm directory: org.junit:junit-bom, ch.qos.logback:logback-classic, net.javacrumbs.json-unit:json-unit-assertj and org.graalvm.buildtools:native-maven-plugin.

Updates org.jspecify:jspecify from 1.0.0 to 1.0.1

Release notes

Sourced from org.jspecify:jspecify's releases.

1.0.1

JSpecify 1.0.1 makes small changes to documentation and build setup but no semantic changes.

Artifacts

Changes since version 1.0.0

  • The JSpecify module-info.class is now present at the root of the jar instead of under a multi-release root. This prevents the jar from containing a file at META-INF/versions/9/OSGI-INF/MANIFEST.MF, which was causing trouble for some users, particularly on Android.
  • The JSpecify module-info.class now contains its version number.
  • We have made various improvements to our Javadoc. While the latest docs are always available at jspecify.dev/docs/api, this release makes our improvements visible in the source files in your IDE.
Commits
  • ce9bec0 Set version to 1.0.1.
  • 7c7f0cf Migrate to com.vanniktech.maven.publish.
  • 2789f67 Bump yaml from 1.10.2 to 1.10.3 in /docs (#853)
  • 1638ca0 Bump svgo from 3.3.2 to 3.3.4 in /docs (#852)
  • 4e80178 Place module-info in the root of the jar. (#809)
  • 5b679e0 Codex found a few more questions the FAQ already answers. (#848)
  • 2019899 Link to the new location of the design FAQ and to specific sections. (#845)
  • f01eac9 batch of javadoc revisions for clarity and completeness (#671)
  • c4eff31 Import the nullness design FAQ as Markdown. (#838)
  • 75fb9cf Bump websocket-driver from 0.7.4 to 0.7.5 in /docs (#835)
  • Additional commits viewable in compare view

Updates com.github.spotbugs:spotbugs-annotations from 4.10.3 to 4.10.4

Release notes

Sourced from com.github.spotbugs:spotbugs-annotations's releases.

4.10.4

SpotBugs 4.10.4

CHANGELOG

Fixed

  • Fix NN_NAKED_NOTIFY false negatives when a field read is stored in a local variable before notify() or notifyAll() (#3884)
  • Fix ASE_ASSERTION_WITH_SIDE_EFFECT and ASE_ASSERTION_WITH_SIDE_EFFECT_METHOD false positives in every method analysed after a method that reads $assertionsDisabled without throwing an AssertionError (#3483)
  • Fix INT_BAD_COMPARISON_WITH_SIGNED_BYTE false positive for meaningful comparisons of a signed byte with 127 (b < 127, b >= 127) (#4201)
  • Fix EI_EXPOSE_REP false negative for public getters in anonymous classes (#4237)
  • Fix missing class report for java.util.Collections$EmptyNavigableSet and java.util.Collections$EmptyNavigableMap when the result of Collections.emptySortedSet(), emptyNavigableSet(), emptySortedMap() or emptyNavigableMap() is stored (#4244)
  • Fix URF_UNREAD_FIELD false negative for unread instance fields declared in enums (#4246)
  • Stop publishing global dependency-management constraints to consumer POMs. (#4223)

CHECKSUM

file checksum (sha256)
spotbugs-4.10.4-javadoc.jar 06bfc9ccdcfb9b594b5053817199b9489dff6312dc35c8864faa9b9357cf5be4
spotbugs-4.10.4-sources.jar d087c11e3b0714e8445b29f2bef9bb4c62b4ee13ad67caf7a4b64d61e82ea400
spotbugs-4.10.4.tgz 72bc0d4edd686e462c0f71f42a049b27bf4da6708797ff7b2b56dd202714b4e5
spotbugs-4.10.4.zip 771c8702beb2b4b6aa20df87ea85f22fda7280c7ce36fce4077b7b3c076d1e14
spotbugs-annotations-4.10.4-javadoc.jar 0fc9d3c529c6ee93aeddf9cfbd4b1438708e37fd53b5157aa47070446fbc7303
spotbugs-annotations-4.10.4-sources.jar 87974d23caffbc8c6e66c567747627267b5ed06573cee966d7af6d236b8d65bd
spotbugs-annotations.jar 28fa4befaddce5d7b79b07c68e7c12fa27c5d9282c4229528717971606661ea3
spotbugs-ant-4.10.4-javadoc.jar eaa1ee0a4e004b7b12e2dfc65290c6324effff6ffc0e7b7ee94c98875997e51c
spotbugs-ant-4.10.4-sources.jar af1c78c8e194c2f82ea3e0517ab38a5eb6ba608c8d0e776c9097605d6b7efca6
spotbugs-ant.jar 9ec240477b7c87270be7dfe3196180cd3763f04c369e5691feeb12e66110a065
spotbugs.jar a88cad2e0ea9bb74b908ce82ae89416c61fa8f8ea5cfcc9368b1baac2da878d2
test-harness-4.10.4-javadoc.jar c1ff7bcd0c4f61f4356ae9734be34567df680175651a3104fdee241e324d6df7
test-harness-4.10.4-sources.jar 805d2d124b0d4ea513ee9262d4ad6027c3471d45defd80fd7d20e23425d17df7
test-harness-4.10.4.jar bd10d1f11a1b93e4ca4db4d27772f611bd3407f9452dbbd2d1ba62584ddc171f
test-harness-core-4.10.4-javadoc.jar ac735a1508609001d122a91e43f6dfb10c4c691cf555d5ba386f216df904ac9b
test-harness-core-4.10.4-sources.jar 043a55d99a517c0d9cf702b0c183b4afd3f03af9eff4a86d59bb37df1b35b532
test-harness-core-4.10.4.jar 1f9a0ee8f150dd71f960ca4f59dcf7912a45d0e9e6aefc4585fd44b975454bc0
test-harness-jupiter-4.10.4-javadoc.jar c9554b4a6509d0d24c6436b6e01171eb8e71fca96df6edf8f80c7b51ab5bda16
test-harness-jupiter-4.10.4-sources.jar 17144f315686bfd01c02fa4ae7c916060c41de8eed58d5b8470416fa08f46ced
test-harness-jupiter-4.10.4.jar a91146da3e993479cfefd2690781cbd102c6360ecc63a96d88995be3bd60fcbb
Changelog

Sourced from com.github.spotbugs:spotbugs-annotations's changelog.

4.10.4 - 2026-08-19

Fixed

  • Fix NN_NAKED_NOTIFY false negatives when a field read is stored in a local variable before notify() or notifyAll() (#3884)
  • Fix ASE_ASSERTION_WITH_SIDE_EFFECT and ASE_ASSERTION_WITH_SIDE_EFFECT_METHOD false positives in every method analysed after a method that reads $assertionsDisabled without throwing an AssertionError (#3483)
  • Fix INT_BAD_COMPARISON_WITH_SIGNED_BYTE false positive for meaningful comparisons of a signed byte with 127 (b < 127, b >= 127) (#4201)
  • Fix EI_EXPOSE_REP false negative for public getters in anonymous classes (#4237)
  • Fix missing class report for java.util.Collections$EmptyNavigableSet and java.util.Collections$EmptyNavigableMap when the result of Collections.emptySortedSet(), emptyNavigableSet(), emptySortedMap() or emptyNavigableMap() is stored (#4244)
  • Fix URF_UNREAD_FIELD false negative for unread instance fields declared in enums (#4246)
  • Stop publishing global dependency-management constraints to consumer POMs. (#4223)
Commits
  • 1a58a48 release v4.10.4
  • 160d4a6 Gradle build cleanup (#4255)
  • 2354168 Fix EI_EXPOSE_REP not reported for anonymous-class getters (#4237)
  • 4895bce Fix naked notify detection after local stores (#4245)
  • 28348e5 Fixes #3955 : Fix URF_UNREAD_FIELD false negative for unread fields i… (#4246)
  • 3ec259e chore(build): Add changelog regarding dependency management constraints remov...
  • 33075ce Remove eclipse table latest as noted version 3.1 that is long retired and dis...
  • 1bf27d8 Update Gradle to v9.7.1 (#4252)
  • ee61d5b Update dependency com.google.guava:guava to v33.7.1-jre (#4250)
  • f352226 Update plugin com.diffplug.spotless to v8.10.0 (#4249)
  • Additional commits viewable in compare view

Updates com.google.guava:guava from 33.6.0-jre to 33.7.1-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.7.1

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.1-jre</version>
  <!-- or, for Android: -->
  <version>33.7.1-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

Guava 33.7.1 removes the Multi-Release line from our jar manifest, fixing an issue under Java 9 and 10 that was introduced to guava-jre in version 33.7.0. Sorry for the trouble.

33.7.0

Newly introduced problem for Java 9 and Java 10 only

Guava 33.7.0 includes a Multi-Release line in its jar manifest, even though it is no longer a multi-release jar. This causes some problems with tools from Java 9 and Java 10. The issue is fixed in version 33.7.1. Sorry for the trouble.

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.0-jre</version>
  <!-- or, for Android: -->
</tr></table>

... (truncated)

Commits

Updates joda-time:joda-time from 2.14.2 to 2.14.3

Release notes

Sourced from joda-time:joda-time's releases.

Release v2.14.3

See the change notes for more information.

What's Changed

Full Changelog: JodaOrg/joda-time@v2.14.2...v2.14.3

Commits

Updates org.yaml:snakeyaml from 2.6 to 2.7

Updates org.springframework.boot:spring-boot-dependencies from 3.5.7 to 3.5.16

Release notes

Sourced from org.springframework.boot:spring-boot-dependencies's releases.

v3.5.16

🔨 Dependency Upgrades

v3.5.15

🐞 Bug Fixes

  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50743
  • MailSender auto-configuration does not enable hostname verification #50742
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50624
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50501
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50451
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50429
  • GraphQL WebSocket support does not configure allowed origins #50391
  • Buildpack module does not validate long-to-int casts #50382
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50373
  • Created StackTracePrinter instances have no access to the Environment #50303
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50301
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50292
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50273
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50254
  • Meter registries are not removed from the global registry when the context is closed #50235
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50225
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50205
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50118
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50095

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50641
  • Remove the use of Optional from Data Neo4j repository examples #50600
  • Fix typos in documentation #50593
  • Document Java 25 requirement for AOT cache #50482
  • Clarify dependency requirement for Bean Validation support #50290
  • Document SSL reloading with Let's Encrypt #50222
  • Polish InvalidConfigurationPropertyValueException constructor javadoc #50212
  • Document known testcontainers lifecycle issues #50210
  • Document configuring multiple connectors with Jetty #50206
  • Fix typo in Spring Security OAuth2 client registration documentation #50193

🔨 Dependency Upgrades

... (truncated)

Commits
  • 0566f69 Release v3.5.16
  • 93edd16 Next development version (v3.5.16-SNAPSHOT)
  • 5bafd0a Upgrade to Spring Integration 6.5.10
  • baf3290 Upgrade to Spring AMQP 3.2.12
  • 2c5964a Upgrade to Spring Data Bom 2025.0.13
  • dbb08aa Upgrade Antora dependencies
  • 9b281d5 Upgrade to actions/checkout 7.0.0
  • a854058 Upgrade to jfrog/setup-jfrog-cli 5.1.0
  • fc236ae Start building against Spring Integration 6.5.10 snapshots
  • 5271da7 Start building against Spring Data Bom 2025.0.13 snapshots
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-maven-plugin from 3.5.7 to 3.5.16

Release notes

Sourced from org.springframework.boot:spring-boot-maven-plugin's releases.

v3.5.16

🔨 Dependency Upgrades

v3.5.15

🐞 Bug Fixes

  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50743
  • MailSender auto-configuration does not enable hostname verification #50742
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50624
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50501
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50451
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50429
  • GraphQL WebSocket support does not configure allowed origins #50391
  • Buildpack module does not validate long-to-int casts #50382
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50373
  • Created StackTracePrinter instances have no access to the Environment #50303
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50301
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50292
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50273
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50254
  • Meter registries are not removed from the global registry when the context is closed #50235
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50225
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50205
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50118
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50095

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50641
  • Remove the use of Optional from Data Neo4j repository examples #50600
  • Fix typos in documentation #50593
  • Document Java 25 requirement for AOT cache #50482
  • Clarify dependency requirement for Bean Validation support #50290
  • Document SSL reloading with Let's Encrypt #50222
  • Polish InvalidConfigurationPropertyValueException constructor javadoc #50212
  • Document known testcontainers lifecycle issues #50210
  • Document configuring multiple connectors with Jetty #50206
  • Fix typo in Spring Security OAuth2 client registration documentation #50193

🔨 Dependency Upgrades

... (truncated)

Commits
  • 0566f69 Release v3.5.16
  • 93edd16 Next development version (v3.5.16-SNAPSHOT)
  • 5bafd0a Upgrade to Spring Integration 6.5.10
  • baf3290 Upgrade to Spring AMQP 3.2.12
  • 2c5964a Upgrade to Spring Data Bom 2025.0.13
  • dbb08aa Upgrade Antora dependencies
  • 9b281d5 Upgrade to actions/checkout 7.0.0
  • a854058 Upgrade to jfrog/setup-jfrog-cli 5.1.0
  • fc236ae Start building against Spring Integration 6.5.10 snapshots
  • 5271da7 Start building against Spring Data Bom 2025.0.13 snapshots
  • Additional commits viewable in compare view

Updates org.springframework.cloud:spring-cloud-dependencies from 2025.0.0 to 2025.0.3

Release notes

Sourced from org.springframework.cloud:spring-cloud-dependencies's releases.

v2025.0.3

What's Included

  • Spring Cloud Bus 4.3.2 (issues)
  • Spring Cloud Openfeign 4.3.3 (issues)
  • Spring Cloud Circuitbreaker 3.3.3 (issues)
  • Spring Cloud Kubernetes 3.3.3 (issues)
  • Spring Cloud Function 4.3.4 (issues)
  • Spring Cloud Task 3.3.2 (issues)
  • Spring Cloud Stream 4.3.3 (issues)
  • Spring Cloud Starter Build 2025.0.3 (issues)
  • Spring Cloud Vault 4.3.3 (issues)
  • Spring Cloud Commons 4.3.3 (issues)
  • Spring Cloud Netflix 4.3.3 (issues)
  • Spring Cloud Consul 4.3.3 (issues)
  • Spring Cloud Gateway 4.3.5 (issues)
  • Spring Cloud Zookeeper 4.3.3 (issues)
  • Spring Cloud Config 4.3.4 (issues)
  • Spring Cloud Build 4.3.4 (issues)
  • Spring Cloud Contract 4.3.4 (issues)

What's Changed

Full Changelog: spring-cloud/spring-cloud-release@v2025.0.2...v2025.0.3

v2025.0.2

What's Changed

Full Changelog: spring-cloud/spring-cloud-release@v2025.0.1...v2025.0.2

Commits
  • 43c1a75 Update SNAPSHOT to 2025.0.3
  • dde5a5b Merge pull request #518 from spring-cloud/dependabot/npm_and_yarn/docs/2025.0...
  • eb93475 Bump @​springio/antora-extensions from 1.14.11 to 1.14.12 in /docs
  • b4f01fe Bumping versions
  • 8543039 Upgrading antora to 3.2.0-alpha.12
  • acabf2c Update spring-cloud-bus and spring-cloud-task versions
  • e797671 Bumping versions
  • 18cb936 Update spring-cloud-config version to 4.3.4-SNAPSHOT
  • 8531a88 Bumping versions
  • 443c71f Update spring-cloud-function version to 4.3.4-SNAPSHOT
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-maven-plugin from 3.5.7 to 3.5.16

Release notes

Sourced from org.springframework.boot:spring-boot-maven-plugin's releases.

v3.5.16

🔨 Dependency Upgrades

v3.5.15

🐞 Bug Fixes

  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50743
  • MailSender auto-configuration does not enable hostname verification #50742
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50624
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50501
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50451
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50429
  • GraphQL WebSocket support does not configure allowed origins #50391
  • Buildpack module does not validate long-to-int casts #50382
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50373
  • Created StackTracePrinter instances have no access to the Environment #50303
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50301
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50292
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50273
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50254
  • Meter registries are not removed from the global registry when the context is closed #50235
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50225
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50205
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50118
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50095

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50641
  • Remove the use of Optional from Data Neo4j repository examples #50600
  • Fix typos in documentation #50593
  • Document Java 25 requirement for AOT cache #50482
  • Clarify dependency requirement for Bean Validation support #50290
  • Document SSL reloading with Let's Encrypt #50222
  • Polish InvalidConfigurationPropertyValueException constructor javadoc #50212
  • Document known testcontainers lifecycle issues #50210
  • Document configuring multiple connectors with Jetty #50206
  • Fix typo in Spring Security OAuth2 client registration documentation #50193

🔨 Dependency Upgrades

... (truncated)

Commits
  • 0566f69 Release v3.5.16
  • 93edd16 Next development version (v3.5.16-SNAPSHOT)
  • 5bafd0a Upgrade to Spring Integration 6.5.10
  • baf3290 Upgrade to Spring AMQP 3.2.12
  • 2c5964a Upgrade to Spring Data Bom 2025.0.13
  • dbb08aa Upgrade Antora dependencies
  • 9b281d5 Upgrade to actions/checkout 7.0.0
  • a854058 Upgrade to jfrog/setup-jfrog-cli 5.1.0
  • fc236ae Start building against Spring Integration 6.5.10 snapshots
  • 5271da7 Start building against Spring Data Bom 2025.0.13 snapshots
  • Additional commits viewable in compare view

Updates commons-io:commons-io from 2.17.0 to 2.22.0

Updates io.netty:netty-bom from 4.1.135.Final to 4.2.17.Final

Release notes

Sourced from io.netty:netty-bom's releases.

netty-4.2.17.Final

What's Changed

New Contributors

... (truncated)

Commits
  • e0789d3 [maven-release-plugin] prepare release netty-4.2.17.Final
  • 1b5abc6 Merge changes from forks (#17213)
  • 36fbf57 Update surefire plugin to latest version (#17210)
  • a96226c Add .editorconfig to enforce consistent coding style (#17052)
  • 14a4e6a OpenSSL: Allow to obtain used nam...

    Description has been truncated

@dependabot
Bump the maven-minor-updates group across 2 directories with 16 updates
6bf1204 
Bumps the maven-minor-updates group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.jspecify:jspecify](https://github.com/jspecify/jspecify) | `1.0.0` | `1.0.1` |
| [com.github.spotbugs:spotbugs-annotations](https://github.com/spotbugs/spotbugs) | `4.10.3` | `4.10.4` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.6.0-jre` | `33.7.1-jre` |
| [joda-time:joda-time](https://github.com/JodaOrg/joda-time) | `2.14.2` | `2.14.3` |
| org.yaml:snakeyaml | `2.6` | `2.7` |
| [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) | `3.5.7` | `3.5.16` |
| [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) | `3.5.7` | `3.5.16` |
| [org.springframework.cloud:spring-cloud-dependencies](https://github.com/spring-cloud/spring-cloud-release) | `2025.0.0` | `2025.0.3` |
| commons-io:commons-io | `2.17.0` | `2.22.0` |
| [io.netty:netty-bom](https://github.com/netty/netty) | `4.1.135.Final` | `4.2.17.Final` |
| org.apache.maven:apache-maven | `3.9.9` | `3.9.16` |
| [org.apache.maven.wrapper:maven-wrapper](https://github.com/apache/maven-wrapper) | `3.3.2` | `3.3.4` |

Bumps the maven-minor-updates group with 4 updates in the /log4j-samples-graalvm directory: [org.junit:junit-bom](https://github.com/junit-team/junit-framework), [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback), [net.javacrumbs.json-unit:json-unit-assertj](https://github.com/lukas-krecan/JsonUnit) and [org.graalvm.buildtools:native-maven-plugin](https://github.com/graalvm/native-build-tools).


Updates `org.jspecify:jspecify` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/jspecify/jspecify/releases)
- [Commits](jspecify/jspecify@v1.0.0...v1.0.1)

Updates `com.github.spotbugs:spotbugs-annotations` from 4.10.3 to 4.10.4
- [Release notes](https://github.com/spotbugs/spotbugs/releases)
- [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md)
- [Commits](spotbugs/spotbugs@4.10.3...4.10.4)

Updates `com.google.guava:guava` from 33.6.0-jre to 33.7.1-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `joda-time:joda-time` from 2.14.2 to 2.14.3
- [Release notes](https://github.com/JodaOrg/joda-time/releases)
- [Changelog](https://github.com/JodaOrg/joda-time/blob/main/RELEASE-NOTES.txt)
- [Commits](JodaOrg/joda-time@v2.14.2...v2.14.3)

Updates `org.yaml:snakeyaml` from 2.6 to 2.7

Updates `org.springframework.boot:spring-boot-dependencies` from 3.5.7 to 3.5.16
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.7...v3.5.16)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.5.7 to 3.5.16
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.7...v3.5.16)

Updates `org.springframework.cloud:spring-cloud-dependencies` from 2025.0.0 to 2025.0.3
- [Release notes](https://github.com/spring-cloud/spring-cloud-release/releases)
- [Changelog](https://github.com/spring-cloud/spring-cloud-release/blob/main/release-train-settings.xml)
- [Commits](spring-cloud/spring-cloud-release@v2025.0.0...v2025.0.3)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.5.7 to 3.5.16
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.7...v3.5.16)

Updates `commons-io:commons-io` from 2.17.0 to 2.22.0

Updates `io.netty:netty-bom` from 4.1.135.Final to 4.2.17.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.1.135.Final...netty-4.2.17.Final)

Updates `org.apache.maven:apache-maven` from 3.9.9 to 3.9.16

Updates `org.apache.maven.wrapper:maven-wrapper` from 3.3.2 to 3.3.4
- [Release notes](https://github.com/apache/maven-wrapper/releases)
- [Commits](apache/maven-wrapper@maven-wrapper-3.3.2...maven-wrapper-3.3.4)

Updates `org.junit:junit-bom` from 6.1.2 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.2...r6.1.3)

Updates `ch.qos.logback:logback-classic` from 1.6.0 to 1.6.3
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.6.0...v_1.6.3)

Updates `net.javacrumbs.json-unit:json-unit-assertj` from 6.0.1 to 6.2.0
- [Changelog](https://github.com/lukas-krecan/JsonUnit/blob/master/RELEASES.md)
- [Commits](lukas-krecan/JsonUnit@json-unit-parent-6.0.1...json-unit-parent-6.2.0)

Updates `org.graalvm.buildtools:native-maven-plugin` from 1.1.5 to 1.1.11
- [Release notes](https://github.com/graalvm/native-build-tools/releases)
- [Commits](graalvm/native-build-tools@1.1.5...1.1.11)

---
updated-dependencies:
- dependency-name: org.jspecify:jspecify
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: com.github.spotbugs:spotbugs-annotations
  dependency-version: 4.10.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: com.google.guava:guava
  dependency-version: 33.7.1-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-updates
- dependency-name: joda-time:joda-time
  dependency-version: 2.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: org.yaml:snakeyaml
  dependency-version: '2.7'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-updates
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 3.5.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 3.5.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: org.springframework.cloud:spring-cloud-dependencies
  dependency-version: 2025.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 3.5.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: commons-io:commons-io
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-updates
- dependency-name: io.netty:netty-bom
  dependency-version: 4.2.17.Final
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-updates
- dependency-name: org.apache.maven:apache-maven
  dependency-version: 3.9.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: org.apache.maven.wrapper:maven-wrapper
  dependency-version: 3.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: org.junit:junit-bom
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: net.javacrumbs.json-unit:json-unit-assertj
  dependency-version: 6.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-updates
- dependency-name: org.graalvm.buildtools:native-maven-plugin
  dependency-version: 1.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 9, 2026
@ramanathan1504
ramanathan1504 enabled auto-merge (squash) September 9, 2026 10:42
@ramanathan1504
ramanathan1504 merged commit a1d8bbc into main Sep 9, 2026
11 checks passed
@ramanathan1504
ramanathan1504 deleted the dependabot/maven/maven-minor-updates-4eb7e90e93 branch September 9, 2026 10:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ramanathan1504 ramanathan1504 ramanathan1504 approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ramanathan1504