Visitar URL original
Bump the backend-minor-patch group across 1 directory with 15 updates by dependabot[bot] · Pull Request #11 · voidstackloop/escld · GitHub
Skip to content

Bump the backend-minor-patch group across 1 directory with 15 updates - #11

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/backend/backend-minor-patch-4cf8b939f1
Open

Bump the backend-minor-patch group across 1 directory with 15 updates#11
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/backend/backend-minor-patch-4cf8b939f1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the backend-minor-patch group with 15 updates in the /backend directory:

Package From To
org.springframework.boot:spring-boot-starter-parent 4.0.5 4.1.1
io.opentelemetry:opentelemetry-api 1.51.0 1.66.0
org.apache.kafka:kafka-clients 4.3.0 4.3.1
software.amazon.msk:aws-msk-iam-auth 2.3.2 2.3.9
software.amazon.awssdk:s3 2.48.3 2.55.6
software.amazon.awssdk:dynamodb 2.48.3 2.55.6
software.amazon.awssdk:sqs 2.48.3 2.55.6
software.amazon.awssdk:kafka 2.48.3 2.55.6
software.amazon.awssdk:cognitoidentityprovider 2.48.3 2.55.6
software.amazon.awssdk:bom 2.48.3 2.55.6
software.amazon.awssdk:dynamodb 2.48.3 2.55.6
software.amazon.awssdk:sqs 2.48.3 2.55.6
software.amazon.awssdk:kafka 2.48.3 2.55.6
software.amazon.awssdk:cognitoidentityprovider 2.48.3 2.55.6
com.bucket4j:bucket4j_jdk17-core 8.14.0 8.20.0
com.bucket4j:bucket4j_jdk17-lettuce 8.14.0 8.20.0
com.bucket4j:bucket4j_jdk17-lettuce 8.14.0 8.20.0
org.testcontainers:junit-jupiter 1.21.3 1.21.4
org.testcontainers:postgresql 1.21.3 1.21.4
org.testcontainers:postgresql 1.21.3 1.21.4
software.amazon.awssdk:bom 2.48.3 2.55.6
org.apache.maven:apache-maven 3.9.14 3.9.16

Updates org.springframework.boot:spring-boot-starter-parent from 4.0.5 to 4.1.1

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.1.1

⚠️ Attention Required

  • Spring Boot's Gradle plugin no longer automatically configures gRPC when the Protobuf plugin is applied. This behavior caused problems for those using Protobuf without gRPC. To opt in to the configuration of gRPC, configure the protobuf extension with the grpc plugin using an empty block. The Spring Boot Gradle plugin will then automatically configure the use of protoc-gen-grpc-java as before. #50822

🐞 Bug Fixes

  • Kafka consumer-specific security protocol is not taken into account #51369
  • Structured logging: a failed JSON encode corrupts the next log event written on the same thread #51156
  • Micrometer registries pin the application context #51135
  • Temporary file is not deleted when ExportedImageTar construction fails #51132
  • Metadata annotation processor ignores getter-level @NestedConfigurationProperty for records #51098
  • spring-boot-h2-console pulls servlet-api as transitive dependency #51095
  • PropertiesLauncher does not log nested archive paths #51089
  • Methods that return the result of Map#remove are not declared with a @Nullable return type #51087
  • NativeImageResourceProvider flattens Flyway migration paths in subdirectories #50964
  • Fix ordering of Kotlinx Serialization CodecCustomizer #50961
  • JarFile is not closed when finding main class from archive #50959
  • Application-managed JUL bridge handler should only be removed if installed #50950
  • CloudFoundry reactive auto-configuration should not require a WebClient.Builder bean to be defined #50944
  • Context refresh fails on reactive Cloud Foundry when using Actuator without spring-boot-health #50942
  • Resources are not cleaned up when resolving an image that is not yet present in the builder #50941
  • GraphQlWebMvcAutoConfiguration should apply customizers in order #50914
  • Auto-configured RedisMessageListenerContainer does not use virtual threads when spring.threads.virtual.enabled is true #50884
  • Context refresh fails when using Actuator on Jersey without spring-boot-health #50872
  • Context refresh fails on Cloud Foundry when using Actuator without spring-boot-health #50871
  • IllegalStateException when binding properties to a @Validated class that contains a map whose value type is a wildcard #50856
  • High number of connections due to Mongo health indicator #50852
  • Inconsistent handling of empty string values of spring.security.oauth2.resourceserver.jwt issuer-uri and jwk-set-uri #50849
  • Return type nullability of ApplicationContextAssert's getBean methods does not indicate that bean may be null #50845
  • PropertiesWebClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #50843
  • Exposing gRPC test server port should backoff if gRPC is not present #50825
  • JpaBaseConfiguration#entityManagerConfiguration can cause a dependency loop on beans declaring AsyncTaskExecutor #50801
  • spring.grpc.server.health.include-overall-health is not taken into account #50799
  • Setting 'server.servlet.session.cookie.partitioned' to false still emits the 'Partitioned' cookie attribute #50790
  • Managed version of Prometheus Client is not aligned with Micrometer's micrometer-registry-prometheus #50780
  • Map properties bound from empty strings fail with ConverterNotFoundException #50773
  • Protobuf Common Protos should not be a managed dependency #50772
  • An application that depends on spring-boot-security-oauth2-resource-server may fail to start with a ClassNotFoundException when Reactor is on the classpath but WebFlux is not #50764
  • W3CHeaderParser's decoding is not compliant with RFC 3986 #50650

📔 Documentation

  • Description of spring.graphql.websocket.connection-init-timeout does not render correctly in the reference guide #51348
  • spring.profiles.group should have a 'spring-profile-name' hint provider #51284
  • Remove reference to removed InfluxDB auto-configuration #51176
  • Use JacksonJsonSerde in Kafka Streams documentation #51161
  • Document alternatives to HttpMessageConverters #51129
  • Fix stale type reference for OTLP logging transport metadata #51119
  • Metadata for spring.test.mockmvc.htmlunit.url declares the wrong type #51115

... (truncated)

Commits
  • 6fdf67e Release 4.1.1
  • fde599b Upgrade to Spring Pulsar 2.0.7
  • 9daa58f Upgrade to Spring HATEOAS 3.1.2
  • 353993e Upgrade to Spring Data Bom 2026.0.1
  • 24ba596 Upgrade to Spring Session 4.1.1
  • 5cb5c29 Upgrade to Spring Security 7.1.1
  • 4adc8eb Upgrade to Spring LDAP 4.1.1
  • 4d9c19c Upgrade to Spring Kafka 4.1.1
  • f30f612 Upgrade to Spring Integration 7.1.1
  • b930283 Upgrade to Spring gRPC 1.1.1
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-api from 1.51.0 to 1.66.0

Release notes

Sourced from io.opentelemetry:opentelemetry-api's releases.

Version 1.66.0

API

  • Fix Baggage.fromContext() and Baggage.fromContextOrNull() to handle a null context (#8667)
  • Do not percent-encode W3C baggage metadata (#8682)
  • Fix ArrayIndexOutOfBoundsException in OtelEncodingUtils for invalid hex characters (#8748)

SDK

Traces

  • Record processed spans before export completes and reject new spans on shutdown in SpanProcessor self-observability instrumentation (#8735)

Metrics

  • Improve explicit bucket histogram contention performance (#8717)

Logs

  • Record processed logs before export completes and reject new logs on shutdown in LogRecordProcessor self-observability instrumentation (#8698)

Exporters

  • OTLP: Respect Retry-After in OTLP HTTP senders (#8633)
  • OTLP: Add setEnabledProtocols option to OTLP HTTP exporter builders (#8610)
  • OTLP: Reject mixing keyManager and sslContext in TlsConfigHelper (#8710)
  • OTLP: Fix OkHttpGrpcSender mTLS when using the platform default trust store (#8758)
  • OTLP: Suppress instrumentation of exporter requests in JdkHttpSender (#8757)
  • OTLP: Accept RFC 1123 hostnames in EndpointUtil.validateEndpoint for OkHttp senders (#8746)
  • OTLP: Include the number of affected items in exporter error logging (#8780)
  • OTLP: Add toString to OtlpJsonLogging{Span,Metric,LogRecord}Exporter (#8725)
  • OTLP Profiles: Improve JFR export example and align LinkData null-element handling with the spec (#8349)
  • Prometheus: Remove default host log warning in PrometheusHttpServerBuilder (#8679)
  • Prometheus: Align UCUM byte unit conversions with the specification table (#8752)

Extensions

  • BREAKING Declarative config: Rename generated model POJO setters from with<Prop> to set<Prop> (#8742)
  • Declarative config: Resolve experimental properties on stable APIs in generated model POJOs (#8654)
  • Declarative config: Fix inverted scope_info_enabled and target_info_enabled flags in the Prometheus component provider (#8750)
  • Declarative config: Support output_stream in otlp_file/development (#8676)
  • Incubator: Add toString to ComposableAnnotatingSampler (#8645)

Project tooling

  • Remediate zizmor findings in GitHub Actions workflows (#8592)

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-api's changelog.

Version 1.66.0 (2026-09-11)

API

  • Fix Baggage.fromContext() and Baggage.fromContextOrNull() to handle a null context (#8667)
  • Do not percent-encode W3C baggage metadata (#8682)
  • Fix ArrayIndexOutOfBoundsException in OtelEncodingUtils for invalid hex characters (#8748)

SDK

Traces

  • Record processed spans before export completes and reject new spans on shutdown in SpanProcessor self-observability instrumentation (#8735)

Metrics

  • Improve explicit bucket histogram contention performance (#8717)

Logs

  • Record processed logs before export completes and reject new logs on shutdown in LogRecordProcessor self-observability instrumentation (#8698)

Exporters

  • OTLP: Respect Retry-After in OTLP HTTP senders (#8633)
  • OTLP: Add setEnabledProtocols option to OTLP HTTP exporter builders (#8610)
  • OTLP: Reject mixing keyManager and sslContext in TlsConfigHelper (#8710)
  • OTLP: Fix OkHttpGrpcSender mTLS when using the platform default trust store (#8758)
  • OTLP: Suppress instrumentation of exporter requests in JdkHttpSender (#8757)
  • OTLP: Accept RFC 1123 hostnames in EndpointUtil.validateEndpoint for OkHttp senders (#8746)
  • OTLP: Include the number of affected items in exporter error logging (#8780)
  • OTLP: Add toString to OtlpJsonLogging{Span,Metric,LogRecord}Exporter (#8725)
  • OTLP Profiles: Improve JFR export example and align LinkData null-element handling with the spec (#8349)

... (truncated)

Commits
  • 300a358 [release/v1.66.x] Prepare release 1.66.0 (#8799)
  • dd71106 Prepare for 1.66.0 release (#8795)
  • 9284265 Manual 1.65.0 post release (#8794)
  • 10c7338 Align UCUM byte unit conversions with the specification table (#8752)
  • bf1a64c Accept RFC 1123 hostnames in EndpointUtil.validateEndpoint (#8746)
  • ab72956 Add number of affected items to Exporter error logging (#8780)
  • 275fe92 Update dependency com.squareup.wire:wire-bom to v7 (#8793)
  • 050f481 Remove unused parameter from B3 propagation integration tests (#8791)
  • 8d7bd65 Improve explicit histogram contention performance (#8717)
  • 2c880d9 Rename inverted grpc detection test in GrpcJavaOtlpIntegrationTest (#8790)
  • Additional commits viewable in compare view

Updates org.apache.kafka:kafka-clients from 4.3.0 to 4.3.1

Updates software.amazon.msk:aws-msk-iam-auth from 2.3.2 to 2.3.9

Release notes

Sourced from software.amazon.msk:aws-msk-iam-auth's releases.

2.3.9

What's Changed

Bug fixes

  • Fixed credential resolution failures when dualstack endpoints are enabled (AWS_USE_DUALSTACK_ENDPOINT, the aws.useDualstackEndpoint system property, or use_dualstack_endpoint in the AWS config profile). (#252, fixes #248)
    • Removed the explicit STS endpoint override. Endpoint resolution is now delegated to the AWS SDK's endpoint ruleset, which resolves regional, dualstack, and FIPS endpoints correctly. Resolved endpoints for existing non-dualstack regional configurations are unchanged.
    • With dualstack enabled and no awsStsRegion configured, provider construction now fails fast with an actionable error naming the awsStsRegion JAAS option, instead of repeatedly retrying the nonexistent sts.aws-global.api.aws hostname.
    • When the last configured credential provider (for example the awsRoleArn STS provider) fails and the chain falls back to the default providers, a WARN is now logged naming the failed provider, so the connection no longer silently authenticates as an unintended ambient identity. Setting awsAddDefaultProviders="false" remains the way to fail fast instead of falling back.
    • fipsEnabled is now set on the STS client only when the awsShouldUseFips JAAS option requests it, so ambient FIPS configuration is honored.

2.3.8

What's changed in 2.3.8

  • Fix signing-region resolution for cluster names containing an AWS region id: the region is now anchored to the endpoint DNS suffix instead of matched as an unanchored substring (#245)
  • Upgrade the AWS SDK BOM from 2.44.12 to 2.51.2
  • Update jackson-databind to 2.22.1, resolving CVE-2026-54512, CVE-2026-54513, CVE-2026-54514 and CVE-2026-54515
  • Switch the synchronous HTTP client from apache-client to apache5-client, replacing Apache HttpClient 4.x with 5.x and removing commons-logging from the dependency tree
  • Constrain httpclient5 to 5.6.4, resolving CVE-2026-64607 and CVE-2026-71290
  • Exclude the unused netty-nio-client asynchronous HTTP client, which this library never instantiates, reducing the uber jar from roughly 14.4 MB to 10.2 MB and removing all 36 CVEs reported against Netty 4.1.133.Final across its ten modules
  • Update slf4j-api to 1.7.36
  • Raise the kafka-clients compile floor from 2.8.1 to 3.9.2
  • Upgrade the OWASP dependency-check plugin from 7.1.0.1 to 13.0.0. Releases 9.0.0 and later use the NVD API in place of the retired NVD data feeds, which the previous version could no longer reach

Maven Central

<dependency>
    <groupId>software.amazon.msk</groupId>
    <artifactId>aws-msk-iam-auth</artifactId>
    <version>2.3.8</version>
</dependency>
</tr></table>

... (truncated)

Commits
  • 5ef1a55 Fix/issue 248 dualstack sts endpoint (#252)
  • a9850ea chore: Prepare release 2.3.8 (#250)
  • e471175 Merge pull request #249 from aws/fix/kafka-clients-compile-floor
  • 10b73f4 Merge pull request #247 from aws/fix/anchored-region-resolution
  • b190015 Merge pull request #244 from aws/fix/dependency-currency-2.3.8
  • db6eda1 docs: Document only the NVD_API_KEY environment variable for the scan key
  • 89dc120 fix: Publish the httpclient5 floor in the POM and exclude apache-client
  • 462873b fix: Anchor signing-region resolution to the endpoint DNS suffix
  • 6a84660 fix: Raise the kafka-clients compile floor to 3.9.2
  • 4a9cb31 chore: Tighten build script comments
  • Additional commits viewable in compare view

Updates software.amazon.awssdk:s3 from 2.48.3 to 2.55.6

Updates software.amazon.awssdk:dynamodb from 2.48.3 to 2.55.6

Updates software.amazon.awssdk:sqs from 2.48.3 to 2.55.6

Updates software.amazon.awssdk:kafka from 2.48.3 to 2.55.6

Updates software.amazon.awssdk:cognitoidentityprovider from 2.48.3 to 2.55.6

Updates software.amazon.awssdk:bom from 2.48.3 to 2.55.6

Updates software.amazon.awssdk:dynamodb from 2.48.3 to 2.55.6

Updates software.amazon.awssdk:sqs from 2.48.3 to 2.55.6

Updates software.amazon.awssdk:kafka from 2.48.3 to 2.55.6

Updates software.amazon.awssdk:cognitoidentityprovider from 2.48.3 to 2.55.6

Updates com.bucket4j:bucket4j_jdk17-core from 8.14.0 to 8.20.0

Release notes

Sourced from com.bucket4j:bucket4j_jdk17-core's releases.

8.20.0

What's Changed

New Contributors

Full Changelog: bucket4j/bucket4j@8.19.0...8.20.0

8.19.0

What's Changed

New Contributors

Full Changelog: bucket4j/bucket4j@8.18.0...8.19.0

8.18.0

What's Changed

New Contributors

Full Changelog: bucket4j/bucket4j@8.17.0...8.18.0

8.17.0

What's Changed

... (truncated)

Commits
  • a69b57c fix publishing
  • 9a3ce79 Merge branch 'master' into 8.20
  • 20d24fe fix javadoc plugin
  • af4e99a Merge branch 'master' into 8.20
  • d66f88c fix javadoc plugin
  • e2937bc prepare release artifacts
  • 06af45c feat(core): add RetryStrategies.exponentialBackoffWithJitter
  • 043b872 Fix Geode client-server tests in multi-module reactor builds
  • e9fd3c2 #468 Gemfire/Geode support (#615)
  • 9dd348d massive documentation fixes
  • Additional commits viewable in compare view

Updates com.bucket4j:bucket4j_jdk17-lettuce from 8.14.0 to 8.20.0

Release notes

Sourced from com.bucket4j:bucket4j_jdk17-lettuce's releases.

8.20.0

What's Changed

New Contributors

Full Changelog: bucket4j/bucket4j@8.19.0...8.20.0

8.19.0

What's Changed

New Contributors

Full Changelog: bucket4j/bucket4j@8.18.0...8.19.0

8.18.0

What's Changed

New Contributors

Full Changelog: bucket4j/bucket4j@8.17.0...8.18.0

8.17.0

What's Changed

... (truncated)

Commits
  • a69b57c fix publishing
  • 9a3ce79 Merge branch 'master' into 8.20
  • 20d24fe fix javadoc plugin
  • af4e99a Merge branch 'master' into 8.20
  • d66f88c fix javadoc plugin
  • e2937bc prepare release artifacts
  • 06af45c feat(core): add RetryStrategies.exponentialBackoffWithJitter
  • 043b872 Fix Geode client-server tests in multi-module reactor builds
  • e9fd3c2 #468 Gemfire/Geode support (#615)
  • 9dd348d massive documentation fixes
  • Additional commits viewable in compare view

Updates com.bucket4j:bucket4j_jdk17-lettuce from 8.14.0 to 8.20.0

Release notes

Sourced from com.bucket4j:bucket4j_jdk17-lettuce's releases.

8.20.0

What's Changed

New Contributors

Full Changelog: bucket4j/bucket4j@8.19.0...8.20.0

8.19.0

What's Changed

New Contributors

Full Changelog: bucket4j/bucket4j@8.18.0...8.19.0

8.18.0

What's Changed

New Contributors

Full Changelog: bucket4j/bucket4j@8.17.0...8.18.0

8.17.0

What's Changed

... (truncated)

Commits
  • a69b57c fix publishing
  • 9a3ce79 Merge branch 'master' into 8.20
  • 20d24fe fix javadoc plugin
  • af4e99a Merge branch 'master' into 8.20
  • d66f88c fix javadoc plugin
  • e2937bc prepare release artifacts
  • 06af45c feat(core): add RetryStrategies.exponentialBackoffWithJitter
  • 043b872 Fix Geode client-server tests in multi-module reactor builds
  • e9fd3c2 #468 Gemfire/Geode support (#615)
  • 9dd348d massive documentation fixes
  • Additional commits viewable in compare view

Updates org.testcontainers:junit-jupiter from 1.21.3 to 1.21.4

Release notes

Sourced from org.testcontainers:junit-jupiter's releases.

1.21.4

This release makes version 1.21.x works with recent Docker Engine changes.

Commits
  • d509c81 Set version during jreleaserDeploy task
  • efa40ce Allow junit:junit dependency in checkPOMdependencies
  • 76b1364 Add JReleaser to deploy to Portal Publisher API
  • d6b6ff7 Fix compatibility with older Docker Engines by falling back to v1.32 (#11346)
  • See full diff in compare view

Updates org.testcontainers:postgresql from 1.21.3 to 1.21.4

Release notes

Sourced from org.testcontainers:postgresql's releases.

1.21.4

This release makes version 1.21.x works with recent Docker Engine changes.

Commits
  • d509c81 Set version during jreleaserDeploy task
  • efa40ce Allow junit:junit dependency in checkPOMdependencies
  • 76b1364 Add JReleaser to deploy to Portal Publisher API
  • d6b6ff7 Fix compatibility with older Docker Engines by falling back to v1.32 (#11346)
  • See full diff in compare view

Updates org.testcontainers:postgresql from 1.21.3 to 1.21.4

Release notes

Sourced from org.testcontainers:postgresql's releases.

1.21.4

This release makes version 1.21.x works with recent Docker Engine changes.

Commits
  • d509c81 Set version during jreleaserDeploy task
  • efa40ce Allow junit:junit dependency in checkPOMdependencies
  • 76b1364 Add JReleaser to deploy to Portal Publisher API
  • d6b6ff7 Fix compatibility with older Docker Engines by falling back to v1.32 (#11346)
  • See full diff in compare view

Updates software.amazon.awssdk:bom from 2.48.3 to 2.55.6

Updates org.apache.maven:apache-maven from 3.9.14 to 3.9.16

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 10, 2026
@dependabot dependabot Bot changed the title Bump the backend-minor-patch group in /backend with 15 updates Bump the backend-minor-patch group across 1 directory with 15 updates Sep 17, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/backend/backend-minor-patch-4cf8b939f1 branch from 4751e74 to 6931757 Compare September 17, 2026 03:08
@dependabot
Bump the backend-minor-patch group across 1 directory with 15 updates
3d0b6af 
Bumps the backend-minor-patch group with 15 updates in the /backend directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `4.0.5` | `4.1.1` |
| [io.opentelemetry:opentelemetry-api](https://github.com/open-telemetry/opentelemetry-java) | `1.51.0` | `1.66.0` |
| org.apache.kafka:kafka-clients | `4.3.0` | `4.3.1` |
| [software.amazon.msk:aws-msk-iam-auth](https://github.com/aws/aws-msk-iam-auth) | `2.3.2` | `2.3.9` |
| software.amazon.awssdk:s3 | `2.48.3` | `2.55.6` |
| software.amazon.awssdk:dynamodb | `2.48.3` | `2.55.6` |
| software.amazon.awssdk:sqs | `2.48.3` | `2.55.6` |
| software.amazon.awssdk:kafka | `2.48.3` | `2.55.6` |
| software.amazon.awssdk:cognitoidentityprovider | `2.48.3` | `2.55.6` |
| software.amazon.awssdk:bom | `2.48.3` | `2.55.6` |
| software.amazon.awssdk:dynamodb | `2.48.3` | `2.55.6` |
| software.amazon.awssdk:sqs | `2.48.3` | `2.55.6` |
| software.amazon.awssdk:kafka | `2.48.3` | `2.55.6` |
| software.amazon.awssdk:cognitoidentityprovider | `2.48.3` | `2.55.6` |
| [com.bucket4j:bucket4j_jdk17-core](https://github.com/bucket4j/bucket4j) | `8.14.0` | `8.20.0` |
| [com.bucket4j:bucket4j_jdk17-lettuce](https://github.com/bucket4j/bucket4j) | `8.14.0` | `8.20.0` |
| [com.bucket4j:bucket4j_jdk17-lettuce](https://github.com/bucket4j/bucket4j) | `8.14.0` | `8.20.0` |
| [org.testcontainers:junit-jupiter](https://github.com/testcontainers/testcontainers-java) | `1.21.3` | `1.21.4` |
| [org.testcontainers:postgresql](https://github.com/testcontainers/testcontainers-java) | `1.21.3` | `1.21.4` |
| [org.testcontainers:postgresql](https://github.com/testcontainers/testcontainers-java) | `1.21.3` | `1.21.4` |
| software.amazon.awssdk:bom | `2.48.3` | `2.55.6` |
| org.apache.maven:apache-maven | `3.9.14` | `3.9.16` |



Updates `org.springframework.boot:spring-boot-starter-parent` from 4.0.5 to 4.1.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.5...v4.1.1)

Updates `io.opentelemetry:opentelemetry-api` from 1.51.0 to 1.66.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.51.0...v1.66.0)

Updates `org.apache.kafka:kafka-clients` from 4.3.0 to 4.3.1

Updates `software.amazon.msk:aws-msk-iam-auth` from 2.3.2 to 2.3.9
- [Release notes](https://github.com/aws/aws-msk-iam-auth/releases)
- [Commits](aws/aws-msk-iam-auth@v2.3.2...v2.3.9)

Updates `software.amazon.awssdk:s3` from 2.48.3 to 2.55.6

Updates `software.amazon.awssdk:dynamodb` from 2.48.3 to 2.55.6

Updates `software.amazon.awssdk:sqs` from 2.48.3 to 2.55.6

Updates `software.amazon.awssdk:kafka` from 2.48.3 to 2.55.6

Updates `software.amazon.awssdk:cognitoidentityprovider` from 2.48.3 to 2.55.6

Updates `software.amazon.awssdk:bom` from 2.48.3 to 2.55.6

Updates `software.amazon.awssdk:dynamodb` from 2.48.3 to 2.55.6

Updates `software.amazon.awssdk:sqs` from 2.48.3 to 2.55.6

Updates `software.amazon.awssdk:kafka` from 2.48.3 to 2.55.6

Updates `software.amazon.awssdk:cognitoidentityprovider` from 2.48.3 to 2.55.6

Updates `com.bucket4j:bucket4j_jdk17-core` from 8.14.0 to 8.20.0
- [Release notes](https://github.com/bucket4j/bucket4j/releases)
- [Commits](bucket4j/bucket4j@8.14.0...8.20.0)

Updates `com.bucket4j:bucket4j_jdk17-lettuce` from 8.14.0 to 8.20.0
- [Release notes](https://github.com/bucket4j/bucket4j/releases)
- [Commits](bucket4j/bucket4j@8.14.0...8.20.0)

Updates `com.bucket4j:bucket4j_jdk17-lettuce` from 8.14.0 to 8.20.0
- [Release notes](https://github.com/bucket4j/bucket4j/releases)
- [Commits](bucket4j/bucket4j@8.14.0...8.20.0)

Updates `org.testcontainers:junit-jupiter` from 1.21.3 to 1.21.4
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.21.3...1.21.4)

Updates `org.testcontainers:postgresql` from 1.21.3 to 1.21.4
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.21.3...1.21.4)

Updates `org.testcontainers:postgresql` from 1.21.3 to 1.21.4
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.21.3...1.21.4)

Updates `software.amazon.awssdk:bom` from 2.48.3 to 2.55.6

Updates `org.apache.maven:apache-maven` from 3.9.14 to 3.9.16

---
updated-dependencies:
- dependency-name: com.bucket4j:bucket4j_jdk17-core
  dependency-version: 8.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: com.bucket4j:bucket4j_jdk17-lettuce
  dependency-version: 8.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: com.bucket4j:bucket4j_jdk17-lettuce
  dependency-version: 8.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: io.opentelemetry:opentelemetry-api
  dependency-version: 1.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: org.apache.kafka:kafka-clients
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: org.apache.maven:apache-maven
  dependency-version: 3.9.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: org.testcontainers:junit-jupiter
  dependency-version: 1.21.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: org.testcontainers:postgresql
  dependency-version: 1.21.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: org.testcontainers:postgresql
  dependency-version: 1.21.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:bom
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:bom
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:cognitoidentityprovider
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:cognitoidentityprovider
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:dynamodb
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:dynamodb
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:kafka
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:kafka
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:s3
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:sqs
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:sqs
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.msk:aws-msk-iam-auth
  dependency-version: 2.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/backend/backend-minor-patch-4cf8b939f1 branch from 6931757 to 3d0b6af Compare October 1, 2026 03:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants