Skip to content

fix(deps): bump the prod-deps group with 3 updates#670

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/prod-deps-b9514b6063
Open

fix(deps): bump the prod-deps group with 3 updates#670
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/prod-deps-b9514b6063

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 12, 2026

Bumps the prod-deps group with 3 updates: org.folio:domain-models-runtime, org.folio:folio-di-support and org.folio:folio-liquibase-util.

Updates org.folio:domain-models-runtime from 36.0.0-SNAPSHOT to 36.0.0

Release notes

Sourced from org.folio:domain-models-runtime's releases.

v36.0.0

Trillium (2026 R1) release, see upgrade notes.

  • RMB-1025 Create schema even if role already exists
  • RMB-1028 readonly custom field should delete property
  • RMB-785 Replace GenerateRunner with domain-models-maven-plugin in README.md
  • RMB-1027 Migrate Vert.x from 4 to 5
  • RMB-1031 validate module_to which will be stored in DB
  • RMB-1023 Remove/Reduce Ineffective/Verbose Log Lines For CQL2PgJSON
  • RMB-1032 Add futurized TenantAPI.postTenantSync
  • RMB-1033 RestRouting null removal: allow array in path
  • FAT-22537 Added upgrading note about ServicesResourceTransformer to avoid race condition during FolioLocal initialization
  • RMB-1036 Initialize loggers before setting log level
  • RMB-1029 TRUNCATE rmb_internal_analyze; ERROR: canceling statement due to lock timeout (55P03)
  • RMB-1026 DB_MAX_LIFETIME option with default of 30 minutes
  • RMB-1040 Don't "WARN TenantLoading TenantLoading.perform No X-Okapi-Url-to header"
  • RMB-1041 HttpStatus, HttpHeaders - drop-in replacement of httpcomponents
  • RMB-1042 Vert.x 5.0.6 fixing CVE-2025-67735 Netty CRLF injection request smuggling
  • RMB-1045 upgrade to test-containers 2.0.3
  • RMB-1046 Avoid regex in .replaceAll(" +[*]", "")
  • RMB-1047 Fix polynomial runtime regex in PgUtil - Support ) and = in error message fields
  • RMB-1030 CachedConnectionManager "permission denied": Better recovery from error state, warn about buggy DB_MAXSHAREDPOOLSIZE
  • RMB-1051 Trillium: Bump dependencies (Vertx 5.0.10, log4j 2.25.4, …)
  • RMB-1052 ERROR: 42501: permission denied for "CREATE SCHEMA IF NOT EXISTS"
  • RMB-1048 Enable maven workflows, disable Jenkins workflow
Changelog

Sourced from org.folio:domain-models-runtime's changelog.

36.0.0 2026-04-09

Trillium (2026 R1) release, see upgrade notes.

  • RMB-1025 Create schema even if role already exists
  • RMB-1028 readonly custom field should delete property
  • RMB-785 Replace GenerateRunner with domain-models-maven-plugin in README.md
  • RMB-1027 Migrate Vert.x from 4 to 5
  • RMB-1031 validate module_to which will be stored in DB
  • RMB-1023 Remove/Reduce Ineffective/Verbose Log Lines For CQL2PgJSON
  • RMB-1032 Add futurized TenantAPI.postTenantSync
  • RMB-1033 RestRouting null removal: allow array in path
  • FAT-22537 Added upgrading note about ServicesResourceTransformer to avoid race condition during FolioLocal initialization
  • RMB-1036 Initialize loggers before setting log level
  • RMB-1029 TRUNCATE rmb_internal_analyze; ERROR: canceling statement due to lock timeout (55P03)
  • RMB-1026 DB_MAX_LIFETIME option with default of 30 minutes
  • RMB-1040 Don't "WARN TenantLoading TenantLoading.perform No X-Okapi-Url-to header"
  • RMB-1041 HttpStatus, HttpHeaders - drop-in replacement of httpcomponents
  • RMB-1042 Vert.x 5.0.6 fixing CVE-2025-67735 Netty CRLF injection request smuggling
  • RMB-1045 upgrade to test-containers 2.0.3
  • RMB-1046 Avoid regex in .replaceAll(" +[*]", "")
  • RMB-1047 Fix polynomial runtime regex in PgUtil - Support ) and = in error message fields
  • RMB-1030 CachedConnectionManager "permission denied": Better recovery from error state, warn about buggy DB_MAXSHAREDPOOLSIZE
  • RMB-1051 Trillium: Bump dependencies (Vertx 5.0.10, log4j 2.25.4, …)
  • RMB-1052 ERROR: 42501: permission denied for "CREATE SCHEMA IF NOT EXISTS"
  • RMB-1048 Enable maven workflows, disable Jenkins workflow

35.4.0 2025-02-28

Sunflower (2025 R1) release, see upgrade notes.

  • RMB-1010: PostgreSQLContainer withStartupAttempts(3)
  • RMB-1011: Timeout when trying to connect to DB_HOST:DB_PORT
  • RMB-1013: make helper functions public in PgUtil class
  • RMB-1021: Upgrade Java from 17 to 21
  • RMB-1022, RMB-1014: Vert.x 4.5.13, other dep upgrades for Sunflower

35.3.0 2024-10-14

Ramsons (2024 R2) release, see upgrade notes.

New features:

  • RMB-993 Set db connection application_name for Postgres' pg_stat_activity
  • RMB-994 Cache loading of schema.json in CQL2PgJSON
  • RMB-997 Avoid left(...,600) for sqlExpression/sqlExpressionQuery
  • RMB-998, RMB-1007 Upgrade dependencies for Ramsons; add license
  • RMB-985 Avoid SET ROLE/SET SCHEMA in Shared Pool
  • RMB-1000 Provide ObjectMapperTool.valueAsString
  • RMB-975 Define DB_HOST_ASYNC_READER, DB_PORT_ASYNC_READER
  • RMB-1003 Replace deprecated io.vertx.core.logging.Logger by org.apache.logging.log4j.Logger

... (truncated)

Commits

Updates org.folio:folio-di-support from 4.0.0-SNAPSHOT to 4.0.0

Release notes

Sourced from org.folio:folio-di-support's releases.

v4.0.0

Breaking changes

  • Upgrade the module for Vert.X 5.0.x (FDIS-38)

Tech Dept

  • Use GitHub workflow for CI/CD (FDIS-39)

Dependencies

  • Bump springframework from 6.2.3 to 7.0.6
  • Bump vertx from 4.5.13 to 5.0.10
  • Bump lombok from 1.18.36 to 1.18.44
  • Bump log4j from 2.24.3 to 2.25.4
Changelog

Sourced from org.folio:folio-di-support's changelog.

4.0.0 2026-04-06

Breaking changes

  • Upgrade the module for Vert.X 5.0.x (FDIS-38)

Tech Dept

  • Use GitHub workflow for CI/CD (FDIS-39)

Dependencies

  • Bump springframework from 6.2.3 to 7.0.6
  • Bump vertx from 4.5.13 to 5.0.10
  • Bump lombok from 1.18.36 to 1.18.44
  • Bump log4j from 2.24.3 to 2.25.4

3.0.0 2025-02-28

Breaking changes

  • Upgrade the module for Java 21 & the latest dependencies (FDIS-33)

Dependencies

  • Bump springframework from 6.1.14 to 6.2.3
  • Bump vertx from 4.5.10 to 4.5.13
  • Bump lombok from 1.18.34 to 1.18.36
  • Bump log4j from 2.24.1 to 2.24.3

2.2.0 2024-29-11

Dependencies

  • Bump springframework from 6.1.5 to 6.1.14
  • Bump vertx from 4.5.5 to 4.5.10
  • Bump lombok from 1.18.30 to 1.18.34
  • Bump log4j from 2.23.1 to 2.24.1

2.1.0 2024-15-03

Dependencies

  • Bump springframework from 6.0.12 to 6.1.5
  • Bump vertx from 4.4.5 to 4.5.5
  • Bump log4j from 2.20.0 to 2.23.1

2.0.0 2023-10-03

Breaking changes

  • Update the module for Java 17 & the latest dependencies (FDIS-27)

Tech Dept

Dependencies

  • Bump java from 11 to 17
  • Bump springframework from 5.3.23 to 6.0.12

... (truncated)

Commits

Updates org.folio:folio-liquibase-util from 1.11.0-SNAPSHOT to 1.11.0

Release notes

Sourced from org.folio:folio-liquibase-util's releases.

1.11.0 2026-04-10

Changelog

Sourced from org.folio:folio-liquibase-util's changelog.

1.11.0 2026-04-10

1.10.0 2025-03-07

1.9.0 2024-10-28

  • LIQUTIL-43 folio-liquibase-util Ramsons 2024 R2 - RMB v35.3.x update

1.8.0 2024-03-19

1.7.0 2023-10-11

  • LIQUTIL-37 Upgrade folio-liquibase-util to Java 17

1.6.0 2023-02-06

1.5.3 2022-10-19

  • LIQUTIL-32 commons-text 1.10.0 fixing Arbitrary Code Execution
  • LIQUTIL-33 Upgrade RMB 35.0.1, Vert.x 4.3.4

1.5.2 2022-09-30

1.5.1 2022-08-25

  • LIQUTIL-26 Vert.x 4.3.3, PostgreSQL 42.5.0 fixing vulns; bump RMB, Liquibase, JUnit

1.5.0 2022-06-14

  • LIQUTIL-23 Upgrade to RAML Module Builder 34.0.0

1.4.0 2022-02-22

  • LIQUTIL-17 Pass exceptions, don't catch and swallow them

1.3.0 2022-02-01

  • LIQUTIL-11 Upgrade to RAML Module Builder 33.2.3
  • Update liquibase to v4.7.1

1.2.0 2021-02-11

  • LIQUTIL-9 Upgrade to RAML Module Builder 32.x
  • LIQUTIL-8 Add personal data disclosure form

1.1.0 2020-09-28

  • Upgrade to RAML Module Builder 31.0.2

1.0.0 2020-06-05

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
fix(deps): bump the prod-deps group with 3 updates
798cf4b 
Bumps the prod-deps group with 3 updates: [org.folio:domain-models-runtime](https://github.com/folio-org/raml-module-builder), [org.folio:folio-di-support](https://github.com/folio-org/folio-di-support) and [org.folio:folio-liquibase-util](https://github.com/folio-org/folio-liquibase-util).


Updates `org.folio:domain-models-runtime` from 36.0.0-SNAPSHOT to 36.0.0
- [Release notes](https://github.com/folio-org/raml-module-builder/releases)
- [Changelog](https://github.com/folio-org/raml-module-builder/blob/master/NEWS.md)
- [Commits](https://github.com/folio-org/raml-module-builder/commits/v36.0.0)

Updates `org.folio:folio-di-support` from 4.0.0-SNAPSHOT to 4.0.0
- [Release notes](https://github.com/folio-org/folio-di-support/releases)
- [Changelog](https://github.com/folio-org/folio-di-support/blob/master/NEWS.md)
- [Commits](https://github.com/folio-org/folio-di-support/commits/v4.0.0)

Updates `org.folio:folio-liquibase-util` from 1.11.0-SNAPSHOT to 1.11.0
- [Release notes](https://github.com/folio-org/folio-liquibase-util/releases)
- [Changelog](https://github.com/folio-org/folio-liquibase-util/blob/master/NEWS.md)
- [Commits](https://github.com/folio-org/folio-liquibase-util/commits/v1.11.0)

---
updated-dependencies:
- dependency-name: org.folio:domain-models-runtime
  dependency-version: 36.0.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.folio:folio-di-support
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.folio:folio-liquibase-util
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Apr 12, 2026
@dependabot dependabot bot requested a review from a team as a code owner April 12, 2026 01:14
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Apr 12, 2026
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Apr 12, 2026

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@psmagin psmagin Awaiting requested review from psmagin psmagin is a code owner automatically assigned from folio-org/spitfire-backend

@viacheslavkol viacheslavkol Awaiting requested review from viacheslavkol viacheslavkol is a code owner automatically assigned from folio-org/spitfire-backend

@SvitlanaKovalova1 SvitlanaKovalova1 Awaiting requested review from SvitlanaKovalova1 SvitlanaKovalova1 is a code owner automatically assigned from folio-org/spitfire-backend

At least 2 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants