Skip to content

Bump the maven-dependencies group with 14 updates#411

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/maven/maven-dependencies-f23b4a16f8
Jul 27, 2025
Merged

Bump the maven-dependencies group with 14 updates#411
github-actions[bot] merged 1 commit into
mainfrom
dependabot/maven/maven-dependencies-f23b4a16f8

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jul 27, 2025

Bumps the maven-dependencies group with 14 updates:

Package From To
org.axonframework:axon-bom 4.11.3 4.11.4
org.axonframework:axon-server-connector 4.11.2 4.12.0
org.axonframework:axon-messaging 4.11.2 4.12.0
org.axonframework:axon-spring-boot-autoconfigure 4.11.2 4.12.0
org.springframework.boot:spring-boot-starter-parent 3.5.3 3.5.4
org.springframework.boot:spring-boot-starter-webflux 3.5.3 3.5.4
org.springframework.boot:spring-boot-maven-plugin 3.5.3 3.5.4
org.springframework.boot:spring-boot-starter 3.5.3 3.5.4
org.springframework.boot:spring-boot-starter-data-jpa 3.5.3 3.5.4
org.springframework.boot:spring-boot-docker-compose 3.5.3 3.5.4
org.junit.jupiter:junit-jupiter 5.13.3 5.13.4
com.vaadin:vaadin-bom 24.8.3 24.8.4
com.vaadin:vaadin-maven-plugin 24.8.3 24.8.4
org.flywaydb:flyway-core 11.10.3 11.10.4

Updates org.axonframework:axon-bom from 4.11.3 to 4.11.4

Release notes

Sourced from org.axonframework:axon-bom's releases.

Axon Bill of Materials v4.11.4

🛠️ Dependency Upgrade

  • Upgrade Axon Framework to 4.11.3 #204

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

Commits
  • 2b452f0 [maven-release-plugin] prepare release axon-4.11.4
  • e8184b8 Merge pull request #204 from AxonFramework/dependency-upgrade/axon-4.11.3
  • e0ec278 Upgrade Axon Framework to 4.11.3
  • 5956e05 Set server identifier to central
  • 85a84f8 Trigger change to validate snapshot process
  • d4a7ea5 Adjust deploy and publish process
  • 00999b8 Replace Gerard and Milen for Mateusz
  • 639aedb Replace reviewers for CODEOWNERS
  • 6764017 Set milestone to 4.11.4
  • ea7afbb [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates org.axonframework:axon-server-connector from 4.11.2 to 4.12.0

Release notes

Sourced from org.axonframework:axon-server-connector's releases.

Axon Framework v4.12.0

Update Checker Notice

This release introduces the "Axon Framework Update Checker," which report the Axon Framework version and anonymized machine identifier to AxonIQ Servers. In return, the Update Checker receives information about version updates and potential vulnerabilities, reporting this to the Axon Framework application. For more details on what it does, why we added it, what you get in return, and how you can configure it, can be found on this page.

⭐ Features

  • #3543 Update Checker with Anonymous Usage Analytics
  • #3556 - Introduce the TopologyChangeListener

📈 Enhancements

  • #3431 Added caching for unknown classes
  • #3530 Incompatibility of MessageAuthorizationDispatchInterceptor and Tracing (DataDog)
  • #3549 Spring Authorization intercepting simplification

🪲 Bug fixes

  • #3551 - TrackingEventProcessor does not restart after janitor timeout interruption
  • #3532 Duplicate call to Eventstream.excludePayloadType() in EventBuffer.skipMessagesWithPayloadTypeOf()
  • #3533 Remove duplicate call to Eventstream.excludePayloadType when skipping an UnknownSerializedType

📖 Documentation

  • #3374 docs: fix broken link for allocation-size details in "Auto-increment and sequences" section
  • #3391 Spring Boot App Fails to Start: Missing RuntimeDomain Class from Protobuf After Axonframework Update from 4.10.3 to 4.11.1
  • #3518 Upcasting snapshots documentation
  • #3531 docs(event-snapshots): add warning - make it clear that SnapshotFilter implementations should check the aggregate type
  • #3534 docs(known-issues): describe Protobuf version conflicts with Axon Server Connector
  • #3546 Add Snapshot Event Upcasting section and SnapshotFilter usage warning

🛠️ Dependency upgrades

The following dependency updates were included in this release:

  • #3282 Bump the maven-dependencies group with 8 updates
  • #3300 Bump the maven-dependencies group with 3 updates
  • #3301 Bump com.mchange:c3p0 from 0.11.0-pre1 to 0.11.0-pre2
  • #3303 Bump the maven-dependencies group with 3 updates
  • #3321 Bump the maven-dependencies group with 6 updates
  • #3330 Bump the maven-dependencies group with 4 updates
  • #3341 Bump the maven-dependencies group with 5 updates
  • #3347 Bump the maven-dependencies group with 2 updates
  • #3359 Bump the maven-dependencies group with 4 updates
  • #3368 Bump the maven-dependencies group with 7 updates
  • #3386 Bump the maven-dependencies group with 3 updates
  • #3387 Bump actions/setup-java from 4.7.0 to 4.7.1 in the github-dependencies group
  • #3406 Bump the maven-dependencies group with 4 updates

... (truncated)

Commits
  • 3cb0254 [maven-release-plugin] prepare release axon-4.12.0
  • 215f87d Merge pull request #3556 from AxonFramework/feature/topology-change-listener
  • a787aed Add missing copy right notice
  • b712354 React on a TopologyChange i.o. a gRPC TopologyChange
  • 8d777cc Introduce a TopologyChange object
  • 9d1dcbf Update axon-server-connector/src/main/java/org/axonframework/axonserver/conne...
  • 3929f33 Merge pull request #3549 from AxonFramework/bug/3530/authorization-intercepto...
  • eb8764b Merge branch 'master' into bug/3530/authorization-interceptor-changes
  • c9d8390 Merge branch 'master' into feature/topology-change-listener
  • 508b215 Fix version
  • Additional commits viewable in compare view

Updates org.axonframework:axon-messaging from 4.11.2 to 4.12.0

Release notes

Sourced from org.axonframework:axon-messaging's releases.

Axon Framework v4.12.0

Update Checker Notice

This release introduces the "Axon Framework Update Checker," which report the Axon Framework version and anonymized machine identifier to AxonIQ Servers. In return, the Update Checker receives information about version updates and potential vulnerabilities, reporting this to the Axon Framework application. For more details on what it does, why we added it, what you get in return, and how you can configure it, can be found on this page.

⭐ Features

  • #3543 Update Checker with Anonymous Usage Analytics
  • #3556 - Introduce the TopologyChangeListener

📈 Enhancements

  • #3431 Added caching for unknown classes
  • #3530 Incompatibility of MessageAuthorizationDispatchInterceptor and Tracing (DataDog)
  • #3549 Spring Authorization intercepting simplification

🪲 Bug fixes

  • #3551 - TrackingEventProcessor does not restart after janitor timeout interruption
  • #3532 Duplicate call to Eventstream.excludePayloadType() in EventBuffer.skipMessagesWithPayloadTypeOf()
  • #3533 Remove duplicate call to Eventstream.excludePayloadType when skipping an UnknownSerializedType

📖 Documentation

  • #3374 docs: fix broken link for allocation-size details in "Auto-increment and sequences" section
  • #3391 Spring Boot App Fails to Start: Missing RuntimeDomain Class from Protobuf After Axonframework Update from 4.10.3 to 4.11.1
  • #3518 Upcasting snapshots documentation
  • #3531 docs(event-snapshots): add warning - make it clear that SnapshotFilter implementations should check the aggregate type
  • #3534 docs(known-issues): describe Protobuf version conflicts with Axon Server Connector
  • #3546 Add Snapshot Event Upcasting section and SnapshotFilter usage warning

🛠️ Dependency upgrades

The following dependency updates were included in this release:

  • #3282 Bump the maven-dependencies group with 8 updates
  • #3300 Bump the maven-dependencies group with 3 updates
  • #3301 Bump com.mchange:c3p0 from 0.11.0-pre1 to 0.11.0-pre2
  • #3303 Bump the maven-dependencies group with 3 updates
  • #3321 Bump the maven-dependencies group with 6 updates
  • #3330 Bump the maven-dependencies group with 4 updates
  • #3341 Bump the maven-dependencies group with 5 updates
  • #3347 Bump the maven-dependencies group with 2 updates
  • #3359 Bump the maven-dependencies group with 4 updates
  • #3368 Bump the maven-dependencies group with 7 updates
  • #3386 Bump the maven-dependencies group with 3 updates
  • #3387 Bump actions/setup-java from 4.7.0 to 4.7.1 in the github-dependencies group
  • #3406 Bump the maven-dependencies group with 4 updates

... (truncated)

Commits
  • 3cb0254 [maven-release-plugin] prepare release axon-4.12.0
  • 215f87d Merge pull request #3556 from AxonFramework/feature/topology-change-listener
  • a787aed Add missing copy right notice
  • b712354 React on a TopologyChange i.o. a gRPC TopologyChange
  • 8d777cc Introduce a TopologyChange object
  • 9d1dcbf Update axon-server-connector/src/main/java/org/axonframework/axonserver/conne...
  • 3929f33 Merge pull request #3549 from AxonFramework/bug/3530/authorization-intercepto...
  • eb8764b Merge branch 'master' into bug/3530/authorization-interceptor-changes
  • c9d8390 Merge branch 'master' into feature/topology-change-listener
  • 508b215 Fix version
  • Additional commits viewable in compare view

Updates org.axonframework:axon-spring-boot-autoconfigure from 4.11.2 to 4.12.0

Release notes

Sourced from org.axonframework:axon-spring-boot-autoconfigure's releases.

Axon Framework v4.12.0

Update Checker Notice

This release introduces the "Axon Framework Update Checker," which report the Axon Framework version and anonymized machine identifier to AxonIQ Servers. In return, the Update Checker receives information about version updates and potential vulnerabilities, reporting this to the Axon Framework application. For more details on what it does, why we added it, what you get in return, and how you can configure it, can be found on this page.

⭐ Features

  • #3543 Update Checker with Anonymous Usage Analytics
  • #3556 - Introduce the TopologyChangeListener

📈 Enhancements

  • #3431 Added caching for unknown classes
  • #3530 Incompatibility of MessageAuthorizationDispatchInterceptor and Tracing (DataDog)
  • #3549 Spring Authorization intercepting simplification

🪲 Bug fixes

  • #3551 - TrackingEventProcessor does not restart after janitor timeout interruption
  • #3532 Duplicate call to Eventstream.excludePayloadType() in EventBuffer.skipMessagesWithPayloadTypeOf()
  • #3533 Remove duplicate call to Eventstream.excludePayloadType when skipping an UnknownSerializedType

📖 Documentation

  • #3374 docs: fix broken link for allocation-size details in "Auto-increment and sequences" section
  • #3391 Spring Boot App Fails to Start: Missing RuntimeDomain Class from Protobuf After Axonframework Update from 4.10.3 to 4.11.1
  • #3518 Upcasting snapshots documentation
  • #3531 docs(event-snapshots): add warning - make it clear that SnapshotFilter implementations should check the aggregate type
  • #3534 docs(known-issues): describe Protobuf version conflicts with Axon Server Connector
  • #3546 Add Snapshot Event Upcasting section and SnapshotFilter usage warning

🛠️ Dependency upgrades

The following dependency updates were included in this release:

  • #3282 Bump the maven-dependencies group with 8 updates
  • #3300 Bump the maven-dependencies group with 3 updates
  • #3301 Bump com.mchange:c3p0 from 0.11.0-pre1 to 0.11.0-pre2
  • #3303 Bump the maven-dependencies group with 3 updates
  • #3321 Bump the maven-dependencies group with 6 updates
  • #3330 Bump the maven-dependencies group with 4 updates
  • #3341 Bump the maven-dependencies group with 5 updates
  • #3347 Bump the maven-dependencies group with 2 updates
  • #3359 Bump the maven-dependencies group with 4 updates
  • #3368 Bump the maven-dependencies group with 7 updates
  • #3386 Bump the maven-dependencies group with 3 updates
  • #3387 Bump actions/setup-java from 4.7.0 to 4.7.1 in the github-dependencies group
  • #3406 Bump the maven-dependencies group with 4 updates

... (truncated)

Commits
  • 3cb0254 [maven-release-plugin] prepare release axon-4.12.0
  • 215f87d Merge pull request #3556 from AxonFramework/feature/topology-change-listener
  • a787aed Add missing copy right notice
  • b712354 React on a TopologyChange i.o. a gRPC TopologyChange
  • 8d777cc Introduce a TopologyChange object
  • 9d1dcbf Update axon-server-connector/src/main/java/org/axonframework/axonserver/conne...
  • 3929f33 Merge pull request #3549 from AxonFramework/bug/3530/authorization-intercepto...
  • eb8764b Merge branch 'master' into bug/3530/authorization-interceptor-changes
  • c9d8390 Merge branch 'master' into feature/topology-change-listener
  • 508b215 Fix version
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-parent from 3.5.3 to 3.5.4

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.5.4

🐞 Bug Fixes

  • LambdaSafe.withFilter is not public #46474
  • Executable JAR application class encounters performance issues when used with Palo Alto Network Cortex XDR agent #46402
  • Runtime dependencies are missing from aotCompileClasspath and aotTestCompileClasspath when using Kotlin #46398
  • Additional fields for structured JSON logging incompatible with nested ecs logging in 3.5.x #46351
  • Change in DefaultErrorAttributes alters the shape of API validation error responses #46260
  • jdbc.connections.active and jdbc.connections.idle metrics are not available when using Hikari in a native image #46225
  • developmentOnly and testAndDevelopmentOnly dependencies may prevent implementation dependencies from being included in the uber-jar #46205
  • Hash calculation for uber archive entries that require unpacking is inefficient #46203
  • Permissions are applied inconsistently when building uber archives with Gradle #46194
  • Environment variables using legacy dash format can no longer be bound #46184
  • EmbeddedWebServerFactoryCustomizerAutoConfiguration fails when undertow-core is on the classpath and undertow-servlet is not #46180
  • Executable JAR application class encounters performance issues #46177
  • Executable JAR application class encounters performance issues #46176
  • Setting spring.reactor.context-propagation has no effect when lazy initialization is enabled #46174
  • Setting spring.netty.leak-detection has no effect when lazy initialization is enabled #46170
  • SslInfo does not use its Clock when checking certificate validity #46011

📔 Documentation

  • Fix description of spring.batch.job.enabled #46247
  • Fix broken Kotlin examples in reference documentation #46168
  • Add Logback Access Reactor Netty to community starters #46060

🔨 Dependency Upgrades

  • Upgrade to ActiveMQ 6.1.7 #46373
  • Upgrade to Caffeine 3.2.2 #46432
  • Upgrade to Couchbase Client 3.8.2 #46460
  • Upgrade to GraphQL Java 24.1 #46395
  • Upgrade to Groovy 4.0.28 #46516
  • Upgrade to Hibernate 6.6.22.Final #46492
  • Upgrade to HikariCP 6.3.1 #46493
  • Upgrade to Infinispan 15.2.5.Final #46461
  • Upgrade to Jackson Bom 2.19.2 #46494
  • Upgrade to Jetty 12.0.23 #46375
  • Upgrade to MariaDB 3.5.4 #46376
  • Upgrade to Maven Invoker Plugin 3.9.1 #46377
  • Upgrade to Micrometer 1.15.2 #46280
  • Upgrade to Micrometer Tracing 1.5.2 #46281
  • Upgrade to MSSQL JDBC 12.10.1.jre11 #46378
  • Upgrade to MySQL 9.3.0 #46371
  • Upgrade to Neo4j Java Driver 5.28.9 #46434
  • Upgrade to Netty 4.1.123.Final #46435
  • Upgrade to Prometheus Client 1.3.10 #46379
  • Upgrade to Reactor Bom 2024.0.8 #46282
  • Upgrade to RxJava3 3.1.11 #46380
  • Upgrade to Spring AMQP 3.2.6 #46283

... (truncated)

Commits
  • 925f9bc Release v3.5.4
  • d82fb35 Merge branch '3.4.x' into 3.5.x
  • 4b6064f Next development version (v3.4.9-SNAPSHOT)
  • a39c8f0 Merge branch '3.4.x' into 3.5.x
  • 99d53de Upgrade to Spring Integration 6.5.1
  • 1b4aad5 Upgrade to Groovy 4.0.28
  • 3f0f79b Upgrade to Spring Integration 6.4.6
  • ff8443c Upgrade to Groovy 4.0.28
  • aed8550 Merge branch '3.4.x' into 3.5.x
  • 5406976 Apply commercial input consistently
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-webflux from 3.5.3 to 3.5.4

Release notes

Sourced from org.springframework.boot:spring-boot-starter-webflux's releases.

v3.5.4

🐞 Bug Fixes

  • LambdaSafe.withFilter is not public #46474
  • Executable JAR application class encounters performance issues when used with Palo Alto Network Cortex XDR agent #46402
  • Runtime dependencies are missing from aotCompileClasspath and aotTestCompileClasspath when using Kotlin #46398
  • Additional fields for structured JSON logging incompatible with nested ecs logging in 3.5.x #46351
  • Change in DefaultErrorAttributes alters the shape of API validation error responses #46260
  • jdbc.connections.active and jdbc.connections.idle metrics are not available when using Hikari in a native image #46225
  • developmentOnly and testAndDevelopmentOnly dependencies may prevent implementation dependencies from being included in the uber-jar #46205
  • Hash calculation for uber archive entries that require unpacking is inefficient #46203
  • Permissions are applied inconsistently when building uber archives with Gradle #46194
  • Environment variables using legacy dash format can no longer be bound #46184
  • EmbeddedWebServerFactoryCustomizerAutoConfiguration fails when undertow-core is on the classpath and undertow-servlet is not #46180
  • Executable JAR application class encounters performance issues #46177
  • Executable JAR application class encounters performance issues #46176
  • Setting spring.reactor.context-propagation has no effect when lazy initialization is enabled #46174
  • Setting spring.netty.leak-detection has no effect when lazy initialization is enabled #46170
  • SslInfo does not use its Clock when checking certificate validity #46011

📔 Documentation

  • Fix description of spring.batch.job.enabled #46247
  • Fix broken Kotlin examples in reference documentation #46168
  • Add Logback Access Reactor Netty to community starters #46060

🔨 Dependency Upgrades

  • Upgrade to ActiveMQ 6.1.7 #46373
  • Upgrade to Caffeine 3.2.2 #46432
  • Upgrade to Couchbase Client 3.8.2 #46460
  • Upgrade to GraphQL Java 24.1 #46395
  • Upgrade to Groovy 4.0.28 #46516
  • Upgrade to Hibernate 6.6.22.Final #46492
  • Upgrade to HikariCP 6.3.1 #46493
  • Upgrade to Infinispan 15.2.5.Final #46461
  • Upgrade to Jackson Bom 2.19.2 #46494
  • Upgrade to Jetty 12.0.23 #46375
  • Upgrade to MariaDB 3.5.4 #46376
  • Upgrade to Maven Invoker Plugin 3.9.1 #46377
  • Upgrade to Micrometer 1.15.2 #46280
  • Upgrade to Micrometer Tracing 1.5.2 #46281
  • Upgrade to MSSQL JDBC 12.10.1.jre11 #46378
  • Upgrade to MySQL 9.3.0 #46371
  • Upgrade to Neo4j Java Driver 5.28.9 #46434
  • Upgrade to Netty 4.1.123.Final #46435
  • Upgrade to Prometheus Client 1.3.10 #46379
  • Upgrade to Reactor Bom 2024.0.8 #46282
  • Upgrade to RxJava3 3.1.11 #46380
  • Upgrade to Spring AMQP 3.2.6 #46283

... (truncated)

Commits
  • 925f9bc Release v3.5.4
  • d82fb35 Merge branch '3.4.x' into 3.5.x
  • 4b6064f Next development version (v3.4.9-SNAPSHOT)
  • a39c8f0 Merge branch '3.4.x' into 3.5.x
  • 99d53de Upgrade to Spring Integration 6.5.1
  • 1b4aad5 Upgrade to Groovy 4.0.28
  • 3f0f79b Upgrade to Spring Integration 6.4.6
  • ff8443c Upgrade to Groovy 4.0.28
  • aed8550 Merge branch '3.4.x' into 3.5.x
  • 5406976 Apply commercial input consistently
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-maven-plugin from 3.5.3 to 3.5.4

Release notes

Sourced from org.springframework.boot:spring-boot-maven-plugin's releases.

v3.5.4

🐞 Bug Fixes

  • LambdaSafe.withFilter is not public #46474
  • Executable JAR application class encounters performance issues when used with Palo Alto Network Cortex XDR agent #46402
  • Runtime dependencies are missing from aotCompileClasspath and aotTestCompileClasspath when using Kotlin #46398
  • Additional fields for structured JSON logging incompatible with nested ecs logging in 3.5.x #46351
  • Change in DefaultErrorAttributes alters the shape of API validation error responses #46260
  • jdbc.connections.active and jdbc.connections.idle metrics are not available when using Hikari in a native image #46225
  • developmentOnly and testAndDevelopmentOnly dependencies may prevent implementation dependencies from being included in the uber-jar #46205
  • Hash calculation for uber archive entries that require unpacking is inefficient #46203
  • Permissions are applied inconsistently when building uber archives with Gradle #46194
  • Environment variables using legacy dash format can no longer be bound #46184
  • EmbeddedWebServerFactoryCustomizerAutoConfiguration fails when undertow-core is on the classpath and undertow-servlet is not #46180
  • Executable JAR application class encounters performance issues #46177
  • Executable JAR application class encounters performance issues #46176
  • Setting spring.reactor.context-propagation has no effect when lazy initialization is enabled #46174
  • Setting spring.netty.leak-detection has no effect when lazy initialization is enabled #46170
  • SslInfo does not use its Clock when checking certificate validity #46011

📔 Documentation

  • Fix description of spring.batch.job.enabled #46247
  • Fix broken Kotlin examples in reference documentation #46168
  • Add Logback Access Reactor Netty to community starters #46060

🔨 Dependency Upgrades

  • Upgrade to ActiveMQ 6.1.7 #46373
  • Upgrade to Caffeine 3.2.2 #46432
  • Upgrade to Couchbase Client 3.8.2 #46460
  • Upgrade to GraphQL Java 24.1 #46395
  • Upgrade to Groovy 4.0.28 #46516
  • Upgrade to Hibernate 6.6.22.Final #46492
  • Upgrade to HikariCP 6.3.1 #46493
  • Upgrade to Infinispan 15.2.5.Final #46461
  • Upgrade to Jackson Bom 2.19.2 #46494
  • Upgrade to Jetty 12.0.23 #46375
  • Upgrade to MariaDB 3.5.4 #46376
  • Upgrade to Maven Invoker Plugin 3.9.1 #46377
  • Upgrade to Micrometer 1.15.2 #46280
  • Upgrade to Micrometer Tracing 1.5.2 #46281
  • Upgrade to MSSQL JDBC 12.10.1.jre11 #46378
  • Upgrade to MySQL 9.3.0 #46371
  • Upgrade to Neo4j Java Driver 5.28.9 #46434
  • Upgrade to Netty 4.1.123.Final #46435
  • Upgrade to Prometheus Client 1.3.10 #46379
  • Upgrade to Reactor Bom 2024.0.8 #46282
  • Upgrade to RxJava3 3.1.11 #46380
  • Upgrade to Spring AMQP 3.2.6 #46283

... (truncated)

Commits
  • 925f9bc Release v3.5.4
  • d82fb35 Merge branch '3.4.x' into 3.5.x
  • 4b6064f Next development version (v3.4.9-SNAPSHOT)
  • a39c8f0 Merge branch '3.4.x' into 3.5.x
  • 99d53de Upgrade to Spring Integration 6.5.1
  • 1b4aad5 Upgrade to Groovy 4.0.28
  • 3f0f79b Upgrade to Spring Integration 6.4.6
  • ff8443c Upgrade to Groovy 4.0.28
  • aed8550 Merge branch '3.4.x' into 3.5.x
  • 5406976 Apply commercial input consistently
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter from 3.5.3 to 3.5.4

Release notes

Sourced from org.springframework.boot:spring-boot-starter's releases.

v3.5.4

🐞 Bug Fixes

  • LambdaSafe.withFilter is not public #46474
  • Executable JAR application class encounters performance issues when used with Palo Alto Network Cortex XDR agent #46402
  • Runtime dependencies are missing from aotCompileClasspath and aotTestCompileClasspath when using Kotlin #46398
  • Additional fields for structured JSON logging incompatible with nested ecs logging in 3.5.x #46351
  • Change in DefaultErrorAttributes alters the shape of API validation error responses #46260
  • jdbc.connections.active and jdbc.connections.idle metrics are not available when using Hikari in a native image #46225
  • developmentOnly and testAndDevelopmentOnly dependencies may prevent implementation dependencies from being included in the uber-jar #46205
  • Hash calculation for uber archive entries that require unpacking is inefficient #46203
  • Permissions are applied inconsistently when building uber archives with Gradle #46194
  • Environment variables using legacy dash format can no longer be bound #46184
  • EmbeddedWebServerFactoryCustomizerAutoConfiguration fails when undertow-core is on the classpath and undertow-servlet is not #46180
  • Executable JAR application class encounters performance issues #46177
  • Executable JAR application class encounters performance issues #46176
  • Setting spring.reactor.context-propagation has no effect when lazy initialization is enabled #46174
  • Setting spring.netty.leak-detection has no effect when lazy initialization is enabled #46170
  • SslInfo does not use its Clock when checking certificate validity #46011

📔 Documentation

  • Fix description of spring.batch.job.enabled #46247
  • Fix broken Kotlin examples in reference documentation #46168
  • Add Logback Access Reactor Netty to community starters #46060

🔨 Dependency Upgrades

  • Upgrade to ActiveMQ 6.1.7 #46373
  • Upgrade to Caffeine 3.2.2 #46432
  • Upgrade to Couchbase Client 3.8.2 #46460
  • Upgrade to GraphQL Java 24.1 #46395
  • Upgrade to Groovy 4.0.28 #46516
  • Upgrade to Hibernate 6.6.22.Final #46492
  • Upgrade to HikariCP 6.3.1 #46493
  • Upgrade to Infinispan 15.2.5.Final #46461
  • Upgrade to Jackson Bom 2.19.2 #46494
  • Upgrade to Jetty 12.0.23 #46375
  • Upgrade to MariaDB 3.5.4 #46376
  • Upgrade to Maven Invoker Plugin 3.9.1 #46377
  • Upgrade to Micrometer 1.15.2 #46280
  • Upgrade to Micrometer Tracing 1.5.2 #46281
  • Upgrade to MSSQL JDBC 12.10.1.jre11 #46378
  • Upgrade to MySQL 9.3.0 #46371
  • Upgrade to Neo4j Java Driver 5.28.9 #46434
  • Upgrade to Netty 4.1.123.Final #46435
  • Upgrade to Prometheus Client 1.3.10 #46379
  • Upgrade to Reactor Bom 2024.0.8 #46282
  • Upgrade to RxJava3 3.1.11 #46380
  • Upgrade to Spring AMQP 3.2.6 #46283

... (truncated)

Commits
  • 925f9bc Release v3.5.4
  • d82fb35 Merge branch '3.4.x' into 3.5.x
  • 4b6064f Next development version (v3.4.9-SNAPSHOT)
  • a39c8f0 Merge branch '3.4.x' into 3.5.x
  • 99d53de Upgrade to Spring Integration 6.5.1
  • 1b4aad5 Upgrade to Groovy 4.0.28
  • 3f0f79b Upgrade to Spring Integration 6.4.6
  • ff8443c Upgrade to Groovy 4.0.28
  • aed8550 Merge branch '3.4.x' into 3.5.x
  • 5406976 Apply commercial input consistently
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-data-jpa from 3.5.3 to 3.5.4

Release notes

Sourced from org.springframework.boot:spring-boot-starter-data-jpa's releases.

v3.5.4

🐞 Bug Fixes

  • LambdaSafe.withFilter is not public #46474
  • Executable JAR application class encounters performance issues when used with Palo Alto Network Cortex XDR agent #46402
  • Runtime dependencies are missing from aotCompileClasspath and aotTestCompileClasspath when using Kotlin #46398
  • Additional fields for structured JSON logging incompatible with nested ecs logging in 3.5.x #46351
  • Change in DefaultErrorAttributes alters the shape of API validation error responses #46260
  • jdbc.connections.active and jdbc.connections.idle metrics are not available when using Hikari in a native image #46225
  • developmentOnly and testAndDevelopmentOnly dependencies may prevent implementation dependencies from being included in the uber-jar #46205
  • Hash calculation for uber archive entries that require unpacking is inefficient #46203
  • Permissions are applied inconsistently when building uber archives with Gradle #46194
  • Environment variables using legacy dash format can no longer be bound #46184
  • EmbeddedWebServerFactoryCustomizerAutoConfiguration fails when undertow-core is on the classpath and undertow-servlet...

    Description has been truncated

Bumps the maven-dependencies group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [org.axonframework:axon-bom](https://github.com/AxonFramework/axon-bom) | `4.11.3` | `4.11.4` |
| [org.axonframework:axon-server-connector](https://github.com/AxonFramework/AxonFramework) | `4.11.2` | `4.12.0` |
| [org.axonframework:axon-messaging](https://github.com/AxonFramework/AxonFramework) | `4.11.2` | `4.12.0` |
| [org.axonframework:axon-spring-boot-autoconfigure](https://github.com/AxonFramework/AxonFramework) | `4.11.2` | `4.12.0` |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `3.5.3` | `3.5.4` |
| [org.springframework.boot:spring-boot-starter-webflux](https://github.com/spring-projects/spring-boot) | `3.5.3` | `3.5.4` |
| [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) | `3.5.3` | `3.5.4` |
| [org.springframework.boot:spring-boot-starter](https://github.com/spring-projects/spring-boot) | `3.5.3` | `3.5.4` |
| [org.springframework.boot:spring-boot-starter-data-jpa](https://github.com/spring-projects/spring-boot) | `3.5.3` | `3.5.4` |
| [org.springframework.boot:spring-boot-docker-compose](https://github.com/spring-projects/spring-boot) | `3.5.3` | `3.5.4` |
| [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `5.13.3` | `5.13.4` |
| com.vaadin:vaadin-bom | `24.8.3` | `24.8.4` |
| [com.vaadin:vaadin-maven-plugin](https://github.com/vaadin/platform) | `24.8.3` | `24.8.4` |
| [org.flywaydb:flyway-core](https://github.com/flyway/flyway) | `11.10.3` | `11.10.4` |


Updates `org.axonframework:axon-bom` from 4.11.3 to 4.11.4
- [Release notes](https://github.com/AxonFramework/axon-bom/releases)
- [Commits](AxonFramework/axon-bom@axon-4.11.3...axon-4.11.4)

Updates `org.axonframework:axon-server-connector` from 4.11.2 to 4.12.0
- [Release notes](https://github.com/AxonFramework/AxonFramework/releases)
- [Changelog](https://github.com/AxonFramework/AxonFramework/blob/master/axon-4-api-changes.md)
- [Commits](AxonIQ/AxonFramework@axon-4.11.2...axon-4.12.0)

Updates `org.axonframework:axon-messaging` from 4.11.2 to 4.12.0
- [Release notes](https://github.com/AxonFramework/AxonFramework/releases)
- [Changelog](https://github.com/AxonFramework/AxonFramework/blob/master/axon-4-api-changes.md)
- [Commits](AxonIQ/AxonFramework@axon-4.11.2...axon-4.12.0)

Updates `org.axonframework:axon-spring-boot-autoconfigure` from 4.11.2 to 4.12.0
- [Release notes](https://github.com/AxonFramework/AxonFramework/releases)
- [Changelog](https://github.com/AxonFramework/AxonFramework/blob/master/axon-4-api-changes.md)
- [Commits](AxonIQ/AxonFramework@axon-4.11.2...axon-4.12.0)

Updates `org.springframework.boot:spring-boot-starter-parent` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.3...v3.5.4)

Updates `org.springframework.boot:spring-boot-starter-webflux` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.3...v3.5.4)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.3...v3.5.4)

Updates `org.springframework.boot:spring-boot-starter` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.3...v3.5.4)

Updates `org.springframework.boot:spring-boot-starter-data-jpa` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.3...v3.5.4)

Updates `org.springframework.boot:spring-boot-docker-compose` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.3...v3.5.4)

Updates `org.springframework.boot:spring-boot-starter-webflux` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.3...v3.5.4)

Updates `org.junit.jupiter:junit-jupiter` from 5.13.3 to 5.13.4
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.13.3...r5.13.4)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.3...v3.5.4)

Updates `org.springframework.boot:spring-boot-starter` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.3...v3.5.4)

Updates `com.vaadin:vaadin-bom` from 24.8.3 to 24.8.4

Updates `com.vaadin:vaadin-maven-plugin` from 24.8.3 to 24.8.4
- [Release notes](https://github.com/vaadin/platform/releases)
- [Commits](vaadin/platform@24.8.3...24.8.4)

Updates `org.springframework.boot:spring-boot-starter-data-jpa` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.3...v3.5.4)

Updates `org.flywaydb:flyway-core` from 11.10.3 to 11.10.4
- [Release notes](https://github.com/flyway/flyway/releases)
- [Commits](flyway/flyway@flyway-11.10.3...flyway-11.10.4)

Updates `com.vaadin:vaadin-maven-plugin` from 24.8.3 to 24.8.4
- [Release notes](https://github.com/vaadin/platform/releases)
- [Commits](vaadin/platform@24.8.3...24.8.4)

Updates `org.springframework.boot:spring-boot-docker-compose` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.3...v3.5.4)

---
updated-dependencies:
- dependency-name: org.axonframework:axon-bom
  dependency-version: 4.11.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.axonframework:axon-server-connector
  dependency-version: 4.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.axonframework:axon-messaging
  dependency-version: 4.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.axonframework:axon-spring-boot-autoconfigure
  dependency-version: 4.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-webflux
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-data-jpa
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-docker-compose
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-webflux
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-version: 5.13.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.vaadin:vaadin-bom
  dependency-version: 24.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.vaadin:vaadin-maven-plugin
  dependency-version: 24.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-data-jpa
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.flywaydb:flyway-core
  dependency-version: 11.10.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.vaadin:vaadin-maven-plugin
  dependency-version: 24.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-docker-compose
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions github-actions Bot merged commit 5dac5cb into main Jul 27, 2025
4 checks passed
@dependabot dependabot Bot deleted the dependabot/maven/maven-dependencies-f23b4a16f8 branch July 27, 2025 04:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants