Skip to content

chore(deps): bump the all-minor-and-patch-updates group across 1 directory with 8 updates#49

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-maven-all-minor-and-patch-updates-97d83b93f2
Open

chore(deps): bump the all-minor-and-patch-updates group across 1 directory with 8 updates#49
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-maven-all-minor-and-patch-updates-97d83b93f2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps the all-minor-and-patch-updates group with 8 updates in the / directory:

Package From To
org.springframework.boot:spring-boot-starter-parent 4.0.5 4.0.6
io.swagger.core.v3:swagger-core-jakarta 2.2.48 2.2.49
io.swagger.core.v3:swagger-annotations-jakarta 2.2.48 2.2.49
io.swagger.core.v3:swagger-models-jakarta 2.2.48 2.2.49
org.projectlombok:lombok 1.18.44 1.18.46
org.mapstruct:mapstruct 1.5.5.Final 1.6.3
org.mapstruct:mapstruct-processor 1.5.5.Final 1.6.3
io.swagger.parser.v3:swagger-parser 2.1.40 2.1.41

Updates org.springframework.boot:spring-boot-starter-parent from 4.0.5 to 4.0.6

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.0.6

🐞 Bug Fixes

  • Default security is misconfigured when spring-boot-actuator-autoconfigure is present and spring-boot-health is not #50188
  • Elasticsearch Rest5Client auto-configuration misconfigures underlying HTTP client #50187
  • ApplicationPidFileWriter does not handle symlinks correctly #50185
  • RandomValuePropertySource is not suitable for secrets #50183
  • Cassandra auto-configuration misconfigures CqlSessionBuilder #50180
  • ApplicationTemp does not handle symlinks correctly #50178
  • Remote DevTools performs comparison incorrectly #50176
  • spring.rabbitmq.ssl.verify-hostname is applied inconsistently #50174
  • Whole number values are ignored when configuring min and max expected values and SLO boundaries for a distribution summary meter #50077
  • Classic starters are missing several modules #50071
  • Module spring-boot-resttestclient is missing from spring-boot-starter-test-classic #50069
  • Annotations like @Ssl don't work on @Bean methods when using @ServiceConnection #50064
  • EnversRevisionRepositoriesRegistrar should reuse @EnableEnversRepositories rather than configuring the JPA counterpart #50039
  • WebFlux Cloud Foundry links endpoint includes query string from received request in resolved links #50017
  • Imports on a containing test class are ignored when a nested class has imports #50012
  • With spring.jackson.use-jackson2-defaults set to true, FAIL_ON_UNKNOWN_PROPERTIES is enabled #49951
  • 500 response from env endpoint when supplied pattern is invalid #49946
  • Reactive MongoDB starter has a transitive dependency on the synchronous MongoDB driver #49945
  • HTTP method is lost when configuring excludes in EndpointRequest #49943
  • Honor HttpMethod for reactive additional endpoint paths #49880
  • Docker Compose support doesn't work with apache/artemis image #49869
  • Docker Compose support doesn't work with apache/activemq image #49866
  • Spring Security's PathPatternRequestMatcher.Builder is not auto-configured when using WebMvcTest and spring-boot-security-test #49854
  • API versioning path strategy should be applied path last as it is not meant to yield #49800

📔 Documentation

  • Update docs to encourage Java fundamentals for beginners that prefer to learn that way #50146
  • HTTP Service Interface Clients still document that API versioning can be configured via properties #50126
  • Link to the observability section of the Lettuce documentation is broken #50097
  • Javadoc for StaticResourceLocation.FAVICON doesn't describe icons location #50085
  • MySamlRelyingPartyConfiguration is missing a Kotlin sample #50024
  • Incorrect default value for management.httpexchanges.recording.include in configuration metadata #50019
  • Link to the Kubernetes documentation when discussing startup probes #50015
  • Typo in JdbcSessionAutoConfiguration Javadoc #49873
  • Clarify that configuration property default values are not available through the Environment #49851
  • Document the need for Liquibase and Flyway starters #49839
  • Kafka documentation refers to deprecated JSON serializer and deserializer classes #49826

🔨 Dependency Upgrades

... (truncated)

Commits
  • 8821ad2 Release v4.0.6
  • 9e4048a Merge branch '3.5.x' into 4.0.x
  • 20bb11c Next development version (v3.5.15-SNAPSHOT)
  • 98daa8e Merge branch '3.5.x' into 4.0.x
  • 9dc5aa2 Polish
  • 874f629 Fix default security with actuator but without health
  • e41b3bf Enable hostname verification for SSL connections to Elasticsearch
  • ef8527b Merge branch '3.5.x' into 4.0.x
  • f533a45 Do not follow symlinks when writing PID file
  • 4a7bd33 Merge branch '3.5.x' into 4.0.x
  • Additional commits viewable in compare view

Updates io.swagger.core.v3:swagger-core-jakarta from 2.2.48 to 2.2.49

Updates io.swagger.core.v3:swagger-annotations-jakarta from 2.2.48 to 2.2.49

Updates io.swagger.core.v3:swagger-models-jakarta from 2.2.48 to 2.2.49

Updates io.swagger.core.v3:swagger-annotations-jakarta from 2.2.48 to 2.2.49

Updates io.swagger.core.v3:swagger-models-jakarta from 2.2.48 to 2.2.49

Updates org.projectlombok:lombok from 1.18.44 to 1.18.46

Changelog

Sourced from org.projectlombok:lombok's changelog.

v1.18.46 (April 22nd, 2026)

  • PLATFORM: JDK26 support added #4019.
  • PLATFORM: Spring Tools Suite 5 supported #3985.
  • BUGFIX: @Jacksonized no longer stops generating @JsonProperty once an explicit @JsonIgnore annotations is encountered #4022.
  • BUGFIX: In eclipse, mixing @Jacksonized and fluent = true no longer causes the error com.fasterxml.jackson.annotation.JsonProperty is not a repeatable annotation interface. #3934.
  • BUGFIX: Some finishing touches for v1.18.44's support of Jackson3 #4004.
Commits
  • 936ca59 [build] lombok's launcher is still intended to be 1.4 compatible, or at least...
  • fcdab3f [version] pre-release version bump
  • 1cb7d49 [changelog]#4004 Mention Jackson3 final touches in changelog.
  • 12a15b0 Fix: Bump EA_JDK to 27 (25 and 26 have been released)
  • 2be766c Merge branch 'jackson3-final-touches'
  • 290fa4c [trivial] constantize the warning we spit out for ambiguous jackson2/3, and m...
  • e6567b6 test: Add Jackson 3 test cases and version ambiguity warnings
  • 45e72e2 feat: Add Jackson 3 databind/dataformat annotations to HandlerUtil copy lists
  • 184d423 feat: Add Jackson 3 support to @​Jacksonized handlers
  • e027ad0 refactored to ShadowClassLoader use Collections::enumeration instead of Vector
  • Additional commits viewable in compare view

Updates org.mapstruct:mapstruct from 1.5.5.Final to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct's releases.

1.6.3

Bugs

  • Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
  • Stackoverflow with Immutables custom builder (#3370)
  • Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

  • Add section to README.md comparing mapstruct with Java Records (#3751)

1.6.2

Bugs

  • Regression from 1.6.1: ClassCastException when using records (#3717)

1.6.1

Enhancements

  • Use Java LinkedHashSet and LinkedHashMap new factory method with known capacity when on Java 19 or later (#3113)

Bugs

  • Inverse Inheritance Strategy not working for ignored mappings only with target (#3652)
  • Inconsistent ambiguous mapping method error when using SubclassMapping: generic vs raw types (#3668)
  • Fix regression when using InheritInverseConfiguration with nested target properties and reversing target = "." (#3670)
  • Deep mapping with multiple mappings broken in 1.6.0 (#3667)
  • Two different constants are ignored in 1.6.0 (#3673)
  • Inconsistent ambiguous mapping method error: generic vs raw types in 1.6.0 (#3668)
  • Fix cross module records with interfaces not recognizing accessors (#3661)
  • @AfterMapping methods are called twice when using target with builder (#3678)
  • Compile error when using @AfterMapping method with Builder and TargetObject (#3703)

Behaviour change

Inverse Inheritance Strategy not working for ignored mappings only with target

Prior to this fix @Mapping(target = "myProperty", ignore = true) was being ignored when using @InheritInverseConfiguration.

e.g.

@Mapper
public interface ModelMapper {
@Mapping(target = "creationDate", ignore = true)
Entity toEntity(Model model);    
@InheritInverseConfiguration
Model toModel(Entity entity);

</tr></table>

... (truncated)

Commits
  • b4e25e4 Releasing version 1.6.3
  • 772fae4 Prepare release notes for 1.6.3
  • efdf435 #3751 Improve readme to include support for Java 16+ records
  • c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
  • 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
  • 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
  • 26c5bcd Update readme with 1.6.2
  • 4e0d73d Next version 1.7.0-SNAPSHOT
  • 212607b Releasing version 1.6.2
  • 4fd22d6 Prepare release notes for 1.6.2
  • Additional commits viewable in compare view

Updates org.mapstruct:mapstruct-processor from 1.5.5.Final to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct-processor's releases.

1.6.3

Bugs

  • Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
  • Stackoverflow with Immutables custom builder (#3370)
  • Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

  • Add section to README.md comparing mapstruct with Java Records (#3751)

1.6.2

Bugs

  • Regression from 1.6.1: ClassCastException when using records (#3717)

1.6.1

Enhancements

  • Use Java LinkedHashSet and LinkedHashMap new factory method with known capacity when on Java 19 or later (#3113)

Bugs

  • Inverse Inheritance Strategy not working for ignored mappings only with target (#3652)
  • Inconsistent ambiguous mapping method error when using SubclassMapping: generic vs raw types (#3668)
  • Fix regression when using InheritInverseConfiguration with nested target properties and reversing target = "." (#3670)
  • Deep mapping with multiple mappings broken in 1.6.0 (#3667)
  • Two different constants are ignored in 1.6.0 (#3673)
  • Inconsistent ambiguous mapping method error: generic vs raw types in 1.6.0 (#3668)
  • Fix cross module records with interfaces not recognizing accessors (#3661)
  • @AfterMapping methods are called twice when using target with builder (#3678)
  • Compile error when using @AfterMapping method with Builder and TargetObject (#3703)

Behaviour change

Inverse Inheritance Strategy not working for ignored mappings only with target

Prior to this fix @Mapping(target = "myProperty", ignore = true) was being ignored when using @InheritInverseConfiguration.

e.g.

@Mapper
public interface ModelMapper {
@Mapping(target = &quot;creationDate&quot;, ignore = true)
Entity toEntity(Model model);    
@InheritInverseConfiguration
Model toModel(Entity entity);

</tr></table>

... (truncated)

Commits
  • b4e25e4 Releasing version 1.6.3
  • 772fae4 Prepare release notes for 1.6.3
  • efdf435 #3751 Improve readme to include support for Java 16+ records
  • c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
  • 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
  • 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
  • 26c5bcd Update readme with 1.6.2
  • 4e0d73d Next version 1.7.0-SNAPSHOT
  • 212607b Releasing version 1.6.2
  • 4fd22d6 Prepare release notes for 1.6.2
  • Additional commits viewable in compare view

Updates org.mapstruct:mapstruct-processor from 1.5.5.Final to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct-processor's releases.

1.6.3

Bugs

  • Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
  • Stackoverflow with Immutables custom builder (#3370)
  • Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

  • Add section to README.md comparing mapstruct with Java Records (#3751)

1.6.2

Bugs

  • Regression from 1.6.1: ClassCastException when using records (#3717)

1.6.1

Enhancements

  • Use Java LinkedHashSet and LinkedHashMap new factory method with known capacity when on Java 19 or later (#3113)

Bugs

  • Inverse Inheritance Strategy not working for ignored mappings only with target (#3652)
  • Inconsistent ambiguous mapping method error when using SubclassMapping: generic vs raw types (#3668)
  • Fix regression when using InheritInverseConfiguration with nested target properties and reversing target = "." (#3670)
  • Deep mapping with multiple mappings broken in 1.6.0 (#3667)
  • Two different constants are ignored in 1.6.0 (#3673)
  • Inconsistent ambiguous mapping method error: generic vs raw types in 1.6.0 (#3668)
  • Fix cross module records with interfaces not recognizing accessors (#3661)
  • @AfterMapping methods are called twice when using target with builder (#3678)
  • Compile error when using @AfterMapping method with Builder and TargetObject (#3703)

Behaviour change

Inverse Inheritance Strategy not working for ignored mappings only with target

Prior to this fix @Mapping(target = "myProperty", ignore = true) was being ignored when using @InheritInverseConfiguration.

e.g.

@Mapper
public interface ModelMapper {
@Mapping(target = &quot;creationDate&quot;, ignore = true)
Entity toEntity(Model model);    
@InheritInverseConfiguration
Model toModel(Entity entity);

</tr></table>

... (truncated)

Commits
  • b4e25e4 Releasing version 1.6.3
  • 772fae4 Prepare release notes for 1.6.3
  • efdf435 #3751 Improve readme to include support for Java 16+ records
  • c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
  • 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
  • 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
  • 26c5bcd Update readme with 1.6.2
  • 4e0d73d Next version 1.7.0-SNAPSHOT
  • 212607b Releasing version 1.6.2
  • 4fd22d6 Prepare release notes for 1.6.2
  • Additional commits viewable in compare view

Updates io.swagger.parser.v3:swagger-parser from 2.1.40 to 2.1.41

Release notes

Sourced from io.swagger.parser.v3:swagger-parser's releases.

Swagger-parser 2.1.41 released!

  • Bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.14 (#2317)
  • chore: update v2 parser to 1.0.76 (#2314)
  • Prevent StackOverflowError in ResolverFully (#2297)
  • Fix thread-safety bug in OpenAPIDereferencer31 (#2294)
  • fix(converter): keep x-nullable in shared $ref responses (#2276)
Commits
  • 1d86e4a prepare release 2.1.41 (#2322)
  • f0cb8e5 Fix thread-safety bug in OpenAPIDereferencer31 (#2294)
  • 9e2ff91 Prevent StackOverflowError in ResolverFully (#2297)
  • 57c0edb Bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.14 (#2317)
  • bb8a82c fix(converter): keep x-nullable in shared $ref responses (#2276)
  • b6ed0cc chore: update v2 parser to 1.0.76 (#2314)
  • afc1742 Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.2 to 3.6.3 (#2025)
  • 370c009 Bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.2 to 3.2.5 (#2045)
  • bfd616c Bump org.jacoco:jacoco-maven-plugin from 0.8.8 to 0.8.11 (#2027)
  • 81d8790 bump snapshot 2.1.41-SNAPSHOT (#2310)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels May 4, 2026
…ctory with 8 updates

Bumps the all-minor-and-patch-updates group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `4.0.5` | `4.0.6` |
| io.swagger.core.v3:swagger-core-jakarta | `2.2.48` | `2.2.49` |
| io.swagger.core.v3:swagger-annotations-jakarta | `2.2.48` | `2.2.49` |
| io.swagger.core.v3:swagger-models-jakarta | `2.2.48` | `2.2.49` |
| [org.projectlombok:lombok](https://github.com/projectlombok/lombok) | `1.18.44` | `1.18.46` |
| [org.mapstruct:mapstruct](https://github.com/mapstruct/mapstruct) | `1.5.5.Final` | `1.6.3` |
| [org.mapstruct:mapstruct-processor](https://github.com/mapstruct/mapstruct) | `1.5.5.Final` | `1.6.3` |
| [io.swagger.parser.v3:swagger-parser](https://github.com/swagger-api/swagger-parser) | `2.1.40` | `2.1.41` |



Updates `org.springframework.boot:spring-boot-starter-parent` from 4.0.5 to 4.0.6
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.5...v4.0.6)

Updates `io.swagger.core.v3:swagger-core-jakarta` from 2.2.48 to 2.2.49

Updates `io.swagger.core.v3:swagger-annotations-jakarta` from 2.2.48 to 2.2.49

Updates `io.swagger.core.v3:swagger-models-jakarta` from 2.2.48 to 2.2.49

Updates `io.swagger.core.v3:swagger-annotations-jakarta` from 2.2.48 to 2.2.49

Updates `io.swagger.core.v3:swagger-models-jakarta` from 2.2.48 to 2.2.49

Updates `org.projectlombok:lombok` from 1.18.44 to 1.18.46
- [Changelog](https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown)
- [Commits](projectlombok/lombok@v1.18.44...v1.18.46)

Updates `org.mapstruct:mapstruct` from 1.5.5.Final to 1.6.3
- [Release notes](https://github.com/mapstruct/mapstruct/releases)
- [Commits](mapstruct/mapstruct@1.5.5.Final...1.6.3)

Updates `org.mapstruct:mapstruct-processor` from 1.5.5.Final to 1.6.3
- [Release notes](https://github.com/mapstruct/mapstruct/releases)
- [Commits](mapstruct/mapstruct@1.5.5.Final...1.6.3)

Updates `org.mapstruct:mapstruct-processor` from 1.5.5.Final to 1.6.3
- [Release notes](https://github.com/mapstruct/mapstruct/releases)
- [Commits](mapstruct/mapstruct@1.5.5.Final...1.6.3)

Updates `io.swagger.parser.v3:swagger-parser` from 2.1.40 to 2.1.41
- [Release notes](https://github.com/swagger-api/swagger-parser/releases)
- [Commits](swagger-api/swagger-parser@v2.1.40...v2.1.41)

---
updated-dependencies:
- dependency-name: io.swagger.core.v3:swagger-annotations-jakarta
  dependency-version: 2.2.49
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-updates
- dependency-name: io.swagger.core.v3:swagger-annotations-jakarta
  dependency-version: 2.2.49
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-updates
- dependency-name: io.swagger.core.v3:swagger-core-jakarta
  dependency-version: 2.2.49
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-updates
- dependency-name: io.swagger.core.v3:swagger-models-jakarta
  dependency-version: 2.2.49
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-updates
- dependency-name: io.swagger.core.v3:swagger-models-jakarta
  dependency-version: 2.2.49
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-updates
- dependency-name: io.swagger.parser.v3:swagger-parser
  dependency-version: 2.1.41
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-updates
- dependency-name: org.mapstruct:mapstruct
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-updates
- dependency-name: org.mapstruct:mapstruct-processor
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-updates
- dependency-name: org.mapstruct:mapstruct-processor
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-updates
- dependency-name: org.projectlombok:lombok
  dependency-version: 1.18.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-updates
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 4.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot-maven-all-minor-and-patch-updates-97d83b93f2 branch from f2b06c7 to a2acb68 Compare May 11, 2026 05:56
@sonarqubecloud
Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants