Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

chore: [DevOps] bump the production-minor-patch group with 20 updates

Merged
Number: #879
Type: Pull Request
State: Merged
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 0
Created: August 05, 2025 at 04:40 AM UTC
(10 months ago)
Updated: August 05, 2025 at 10:19 AM UTC
(10 months ago)
Merged: August 05, 2025 at 10:19 AM UTC
(10 months ago)
by bot-sdk-js
Time to Close: about 6 hours
Labels:
dependencies java
Description:

Bumps the production-minor-patch group with 20 updates:

Package From To
org.springframework:spring-framework-bom 6.2.8 6.2.9
org.apache.maven:maven-core 3.9.10 3.9.11
org.apache.maven:maven-plugin-api 3.9.10 3.9.11
org.apache.maven:maven-compat 3.9.10 3.9.11
com.fasterxml.jackson.dataformat:jackson-dataformat-xml 2.19.1 2.19.2
com.fasterxml.jackson.core:jackson-core 2.19.1 2.19.2
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.19.1 2.19.2
io.swagger.core.v3:swagger-models 2.2.34 2.2.35
org.junit.jupiter:junit-jupiter-engine 5.13.3 5.13.4
org.junit.jupiter:junit-jupiter-api 5.13.3 5.13.4
org.junit.jupiter:junit-jupiter-params 5.13.3 5.13.4
commons-codec:commons-codec 1.18.0 1.19.0
com.sap.cloud.security:java-bom 3.6.0 3.6.1
io.vavr:vavr 0.10.6 0.10.7
com.fasterxml.jackson.core:jackson-databind 2.19.1 2.19.2
commons-io:commons-io 2.19.0 2.20.0
com.google.errorprone:error_prone_annotations 2.40.0 2.41.0
io.grpc:grpc-bom 1.73.0 1.74.0
io.spiffe:java-spiffe-core 0.8.12 0.8.13
io.spiffe:grpc-netty-linux 0.8.12 0.8.13

Updates org.springframework:spring-framework-bom from 6.2.8 to 6.2.9

Release notes

Sourced from org.springframework:spring-framework-bom's releases.

v6.2.9

:star: New Features

  • OncePerRequestFilter cannot be CGLib-proxied #35198
  • Consistently catch InaccessibleObjectException next to IllegalAccessException #35190
  • Introduce Date-to-Instant and Instant-to-Date converters #35175
  • Consistent nullability and exception declarations in AbstractMessagingTemplate hierarchy #35159
  • Register runtime hints for Instant-to-Timestamp conversion #35156
  • Improve handling of ResponseEntity<?> in Spring MVC #35153
  • Support @CacheConfig("myCacheName") declarations for simplified configuration #35152
  • Declare messageSelector parameters in JmsOperations as @Nullable #35151
  • Add getter for OverflowStrategy in ConcurrentWebSocketSessionDecorator #35132
  • Use preset Content-Type for streaming and reactive responses in Spring MVC #35130
  • Leniently tolerate null @Aspect bean #35074
  • DataAccessResourceFailureException thrown when transaction times out on PostgreSQL #35073
  • MethodInvokingFactoryBean fails to invoke publicly exported methods overridden by internal classes when using JPMS #34028

:lady_beetle: Bug Fixes

  • Restore preference for interface (most abstract) method in getPubliclyAccessibleMethodIfPossible #35189
  • Make targetBeanName field in AbstractBeanFactoryBasedTargetSource protected to avoid exceptions in logging and toString() #35172
  • Fix inconsistencies in StaticListableBeanFactory #35119
  • Support StreamingHttpOutputMessage in RestClient #35102
  • When building DELETE requests, the request body is not used in JdkClientHttpRequest.buildRequest #35068
  • AOT-generated bean registration file contains "too many constants" when building with many beans #35044
  • Prevent cache pollution by storing only the factories #34732
  • WebFlux decodes wildcard content-types as form-data/multipart #34660
  • AOT-generated CGLib proxies do not contain method overrides #34642
  • 500 response for ResourceHttpRequestHandler when requested range is not satisfied #34490

:notebook_with_decorative_cover: Documentation

  • Document how to register runtime hints for convention-based conversion #35178
  • Link to @ContextConfiguration Javadoc from reference manual #35088

:hammer: Dependency Upgrades

  • Upgrade to JUnit 5.13.3 #35103
  • Upgrade to Micrometer 1.14.9 #35202
  • Upgrade to Reactor 2024.0.8 #35201

:heart: Contributors

Thank you to all the contributors who worked on this release:

@​Meijuh, @​RazorNd, @​chenggwang, @​izeye, @​mjd507, @​ngocnhan-tran1996, and @​philwebb

Commits
  • 09a5ca3 Release v6.2.9
  • a4ec25d Upgrade to MockK 1.13.17
  • 0fc043f Upgrade to Netty 4.1.123, Selenium 4.34, XMLUnit 2.10.3
  • 5473260 Backport nullability refinements for Micrometer
  • 12a6098 Upgrade to Reactor 2024.0.8 and Micrometer 1.14.9
  • f86034b Drop final declaration from doFilter entry point (for CGLIB proxying)
  • 2180783 Upgrade to Jetty 12.0.23, Netty 4.1.122, Gson 2.13.1, Caffeine 3.2.1
  • 2434bb1 Polishing
  • 4063cb5 Publish releases using Central Portal
  • 4277682 Catch InaccessibleObjectException next to IllegalAccessException
  • Additional commits viewable in compare view

Updates org.apache.maven:maven-core from 3.9.10 to 3.9.11

Updates org.apache.maven:maven-plugin-api from 3.9.10 to 3.9.11

Release notes

Sourced from org.apache.maven:maven-plugin-api's releases.

3.9.11

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

🔧 Build

📦 Dependency updates

Commits
  • 3e54c93 [maven-release-plugin] prepare release maven-3.9.11
  • 299f1f3 Pin GitHub action versions by hash
  • a8a44dc Build the project by JDK 21 as default
  • a0360b3 Augment version range resolution used repositories (#2574)
  • ef54677 Bump resolverVersion from 1.9.23 to 1.9.24 (#2540)
  • 96bf155 Bump xmlunitVersion from 2.10.2 to 2.10.3
  • 7b27ab5 Bump org.apache.maven:maven-parent from 44 to 45
  • 5107f47 Deduplicate filtered dependency graph (#2489)
  • 69267a1 Move ensure in boundaries of project lock (#2470)
  • 9ac9bc2 Use Maven 3.9.10 for build on GitHub
  • Additional commits viewable in compare view

Updates org.apache.maven:maven-compat from 3.9.10 to 3.9.11

Release notes

Sourced from org.apache.maven:maven-compat's releases.

3.9.11

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

🔧 Build

📦 Dependency updates

Commits
  • 3e54c93 [maven-release-plugin] prepare release maven-3.9.11
  • 299f1f3 Pin GitHub action versions by hash
  • a8a44dc Build the project by JDK 21 as default
  • a0360b3 Augment version range resolution used repositories (#2574)
  • ef54677 Bump resolverVersion from 1.9.23 to 1.9.24 (#2540)
  • 96bf155 Bump xmlunitVersion from 2.10.2 to 2.10.3
  • 7b27ab5 Bump org.apache.maven:maven-parent from 44 to 45
  • 5107f47 Deduplicate filtered dependency graph (#2489)
  • 69267a1 Move ensure in boundaries of project lock (#2470)
  • 9ac9bc2 Use Maven 3.9.10 for build on GitHub
  • Additional commits viewable in compare view

Updates org.apache.maven:maven-plugin-api from 3.9.10 to 3.9.11

Release notes

Sourced from org.apache.maven:maven-plugin-api's releases.

3.9.11

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

🔧 Build

📦 Dependency updates

Commits
  • 3e54c93 [maven-release-plugin] prepare release maven-3.9.11
  • 299f1f3 Pin GitHub action versions by hash
  • a8a44dc Build the project by JDK 21 as default
  • a0360b3 Augment version range resolution used repositories (#2574)
  • ef54677 Bump resolverVersion from 1.9.23 to 1.9.24 (#2540)
  • 96bf155 Bump xmlunitVersion from 2.10.2 to 2.10.3
  • 7b27ab5 Bump org.apache.maven:maven-parent from 44 to 45
  • 5107f47 Deduplicate filtered dependency graph (#2489)
  • 69267a1 Move ensure in boundaries of project lock (#2470)
  • 9ac9bc2 Use Maven 3.9.10 for build on GitHub
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-xml from 2.19.1 to 2.19.2

Commits
  • db02787 [maven-release-plugin] prepare release jackson-dataformat-xml-2.19.2
  • 2707601 Prep for 2.19.2
  • 391bbda Merge branch '2.18' into 2.19
  • ea3f4d6 Add JDK 24 in CI
  • 967ee6c Back to snapshot dep
  • 44ba915 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates com.fasterxml.jackson.core:jackson-core from 2.19.1 to 2.19.2

Commits

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-yaml from 2.19.1 to 2.19.2

Commits
  • 28c8df2 [maven-release-plugin] prepare release jackson-dataformats-text-2.19.2
  • a3b0e7a Prep for 2.19.2
  • 4dd1536 Back to snapshot dep
  • cf085a7 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates io.swagger.core.v3:swagger-models from 2.2.34 to 2.2.35

Updates com.fasterxml.jackson.core:jackson-core from 2.19.1 to 2.19.2

Commits

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-yaml from 2.19.1 to 2.19.2

Commits
  • 28c8df2 [maven-release-plugin] prepare release jackson-dataformats-text-2.19.2
  • a3b0e7a Prep for 2.19.2
  • 4dd1536 Back to snapshot dep
  • cf085a7 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates org.junit.jupiter:junit-jupiter-engine from 5.13.3 to 5.13.4

Release notes

Sourced from org.junit.jupiter:junit-jupiter-engine's releases.

JUnit 5.13.4 = Platform 1.13.4 + Jupiter 5.13.4 + Vintage 5.13.4

See Release Notes.

Full Changelog: https://github.com/junit-team/junit-framework/compare/r5.13.3...r5.13.4

Commits
  • 8a21048 Release 5.13.4
  • 9a38789 Finalize 5.13.4 release notes
  • 458325c Log only once per implementation type for CloseableResource types
  • 976a110 Protect against potential problems when converting file-based selectors
  • e94f728 Allow default package for PackageSource
  • b60fecf Fail on classpath resource names that are blank after removing leading /
  • 6378c88 Remove java.* packages from Import-Package headers in all jars (#4738)
  • 1a360f3 Create initial 5.13.4 release notes from template
  • 806fc9a Document #4689 in release notes
  • 1653839 Document #4686 in release notes
  • Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-api from 5.13.3 to 5.13.4

Release notes

Sourced from org.junit.jupiter:junit-jupiter-api's releases.

JUnit 5.13.4 = Platform 1.13.4 + Jupiter 5.13.4 + Vintage 5.13.4

See Release Notes.

Full Changelog: https://github.com/junit-team/junit-framework/compare/r5.13.3...r5.13.4

Commits
  • 8a21048 Release 5.13.4
  • 9a38789 Finalize 5.13.4 release notes
  • 458325c Log only once per implementation type for CloseableResource types
  • 976a110 Protect against potential problems when converting file-based selectors
  • e94f728 Allow default package for PackageSource
  • b60fecf Fail on classpath resource names that are blank after removing leading /
  • 6378c88 Remove java.* packages from Import-Package headers in all jars (#4738)
  • 1a360f3 Create initial 5.13.4 release notes from template
  • 806fc9a Document #4689 in release notes
  • 1653839 Document #4686 in release notes
  • Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-params from 5.13.3 to 5.13.4

Release notes

Sourced from org.junit.jupiter:junit-jupiter-params's releases.

JUnit 5.13.4 = Platform 1.13.4 + Jupiter 5.13.4 + Vintage 5.13.4

See Release Notes.

Full Changelog: https://github.com/junit-team/junit-framework/compare/r5.13.3...r5.13.4

Commits
  • 8a21048 Release 5.13.4
  • 9a38789 Finalize 5.13.4 release notes
  • 458325c Log only once per implementation type for CloseableResource types
  • 976a110 Protect against potential problems when converting file-based selectors
  • e94f728 Allow default package for PackageSource
  • b60fecf Fail on classpath resource names that are blank after removing leading /
  • 6378c88 Remove java.* packages from Import-Package headers in all jars (#4738)
  • 1a360f3 Create initial 5.13.4 release notes from template
  • 806fc9a Document #4689 in release notes
  • 1653839 Document #4686 in release notes
  • Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-params from 5.13.3 to 5.13.4

Release notes

Sourced from org.junit.jupiter:junit-jupiter-params's releases.

JUnit 5.13.4 = Platform 1.13.4 + Jupiter 5.13.4 + Vintage 5.13.4

See Release Notes.

Full Changelog: https://github.com/junit-team/junit-framework/compare/r5.13.3...r5.13.4

Commits
  • 8a21048 Release 5.13.4
  • 9a38789 Finalize 5.13.4 release notes
  • 458325c Log only once per implementation type for CloseableResource types
  • 976a110 Protect against potential problems when converting file-based selectors
  • e94f728 Allow default package for PackageSource
  • b60fecf Fail on classpath resource names that are blank after removing leading /
  • 6378c88 Remove java.* packages from Import-Package headers in all jars (#4738)
  • 1a360f3 Create initial 5.13.4 release notes from template
  • 806fc9a Document #4689 in release notes
  • 1653839 Document #4686 in release notes
  • Additional commits viewable in compare view

Updates org.apache.maven:maven-compat from 3.9.10 to 3.9.11

Release notes

Sourced from org.apache.maven:maven-compat's releases.

3.9.11

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

🔧 Build

📦 Dependency updates

Commits
  • 3e54c93 [maven-release-plugin] prepare release maven-3.9.11
  • 299f1f3 Pin GitHub action versions by hash
  • a8a44dc Build the project by JDK 21 as default
  • a0360b3 Augment version range resolution used repositories (#2574)
  • ef54677 Bump resolverVersion from 1.9.23 to 1.9.24 (#2540)
  • 96bf155 Bump xmlunitVersion from 2.10.2 to 2.10.3
  • 7b27ab5 Bump org.apache.maven:maven-parent from 44 to 45
  • 5107f47 Deduplicate filtered dependency graph (#2489)
  • 69267a1 Move ensure in boundaries of project lock (#2470)
  • 9ac9bc2 Use Maven 3.9.10 for build on GitHub
  • Additional commits viewable in compare view

Updates commons-codec:commons-codec from 1.18.0 to 1.19.0

Changelog

Sourced from commons-codec:commons-codec's changelog.

Apache Commons Codec 1.19.0 Release Notes

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.19.0.

The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

New features

  •         Add HmacUtils.hmac(Path). Thanks to Gary Gregory.

  •         Add HmacUtils.hmacHex(Path). Thanks to Gary Gregory.

  •         Add PMD check to the default Maven goal. Thanks to Gary Gregory.

  •         Add SpotBugs check to the default Maven goal. Thanks to Gary Gregory.

Fixed Bugs

  •         Remove -nouses directive from maven-bundle-plugin. OSGi package imports now state 'uses' definitions for package imports, this doesn't affect JPMS (from org.apache.commons:commons-parent:80). Thanks to Gary Gregory.

  •         Refactor DigestUtils.updateDigest(MessageDigest, File) to use NIO. Thanks to Gary Gregory.
  • CODEC-328: Clarify Javadoc for org.apache.commons.codec.digest.UnixCrypt.crypt(byte[],String). Thanks to Gary Gregory.
  •         Precompile regular expressions in DaitchMokotoffSoundex.Rule. Thanks to Gary Gregory.

  •         Precompile regular expressions in DaitchMokotoffSoundex.parseRules(Scanner, String, Map, Map). Thanks to Gary Gregory.

  •         Precompile regular expressions in Lang.loadFromResource(String, Languages). Thanks to Gary Gregory.

  •         Precompile regular expressions in PhoneticEngine.encode(String, LanguageSet). Thanks to Gary Gregory.

  •         Precompile regular expressions in org.apache.commons.codec.language.bm.Rule.parse*(*). Thanks to Gary Gregory.

  •         Remove redundant checks for whitespace in DaitchMokotoffSoundex.soundex(String, boolean). Thanks to Gary Gregory.

  •         Javadoc typo in Base16.java [#380](https://github.com/apache/commons-codec/issues/380). Thanks to Sebastian Baunsgaard.

  •         Deprecate unused constant org.apache.commons.codec.language.bm.Rule.ALL. Thanks to Gary Gregory.
  • CODEC-331: org.apache.commons.codec.language.bm.Rule.parsePhonemeExpr(String) adds duplicate empty phoneme when input ends with |. Thanks to IlikeCode, Gary Gregory.
  • CODEC-331: org.apache.commons.codec.language.DaitchMokotoffSoundex.cleanup(String) does not remove special characters like punctuation. Thanks to IlikeCode, Gary Gregory.
  •         Fix PMD multiple UnnecessaryFullyQualifiedName in org.apache.commons.codec.binary.StringUtils. Thanks to Gary Gregory.

  •         Fix PMD UnusedFormalParameter in private constructor in org.apache.commons.codec.binary.Base16. Thanks to Gary Gregory.

  •         Fix PMD multiple UnnecessaryFullyQualifiedName in org.apache.commons.codec.digest.Blake3. Thanks to Gary Gregory.

  •         Fix PMD UnnecessaryFullyQualifiedName in org.apache.commons.codec.digest.Md5Crypt. Thanks to Gary Gregory.

  •         Fix PMD EmptyControlStatement in org.apache.commons.codec.language.Metaphone. Thanks to Gary Gregory.

  •         Fix SpotBugs [ERROR] Medium: org.apache.commons.codec.binary.BaseNCodec$AbstractBuilder.setEncodeTable(byte[]) may expose internal representation by storing an externally mutable object into BaseNCodec$AbstractBuilder.encodeTable [org.apache.commons.codec.binary.BaseNCodec$AbstractBuilder] At BaseNCodec.java:[line 131] EI_EXPOSE_REP2. Thanks to Gary Gregory.

  •         The method org.apache.commons.codec.binary.BaseNCodec.AbstractBuilder.setLineSeparator(byte...) now makes a defensive copy. Thanks to Gary Gregory.

  •         Avoid unnecessary String conversion in org.apache.commons.codec.language.bm.PhoneticEngine.applyFinalRules(PhonemeBuilder, Map). Thanks to Gary Gregory.

  •         Fix SpotBugs [ERROR] High: Potentially dangerous use of non-short-circuit logic in org.apache.commons.codec.language.DaitchMokotoffSoundex.cleanup(String) [org.apache.commons.codec.language.DaitchMokotoffSoundex] At DaitchMokotoffSoundex.java:[line 350] NS_DANGEROUS_NON_SHORT_CIRCUIT. Thanks to Gary Gregory.

Changes

... (truncated)

Commits
  • 351cb22 Prepare for the release candidate 1.19.0 RC1
  • 0d501b6 Prepare for the next release candidate
  • d6d4b82 Refactor duplicate code
  • 6d6456c No need to exclude abstract test classes from Surefire runs
  • 22d62e4 No need to specify the default value for linkXref
  • c4daf34 No longer need to override the version of the Jacoco Maven plugin
  • 8f2b673 Remove workaround for [SUREFIRE-2253]
  • 466a61d Fix Javadoc
  • ca27bd3 Fix Checkstyle
  • 1dfb4e5 Better internal method name
  • Additional commits viewable in compare view

Updates com.sap.cloud.security:java-bom from 3.6.0 to 3.6.1

Release notes

Sourced from com.sap.cloud.security:java-bom's releases.

3.6.1

  • Fix spring retry configuration for token service
  • added documentation of retry feature to README
  • Improve error message when client certificate for proof token validation is missing

Dependency upgrades

  • Bump org.eclipse.jetty.version from 12.0.21 to 12.0.22
  • bump caffeine version to 3.2.0
  • Bump org.mockito:mockito-core from 5.17.0 to 5.18.0
  • Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.4 to 5.5
  • Bump com.sap.cloud.environment.servicebinding:java-bom
  • Bump org.json:json from 20250107 to 20250517
  • Bump commons-io:commons-io from 2.18.0 to 2.19.0
  • Bump spring.core.version from 6.2.5 to 6.2.7
  • Bump io.github.hakky54:logcaptor from 2.10.2 to 2.11.0
  • Bump spring.security.version from 6.4.4 to 6.4.5
  • Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.3 to 5.4.4
  • Bump spring.boot.version from 3.4.4 to 3.4.5
  • Bump org.wiremock:wiremock-standalone from 3.12.1 to 3.13.0
  • Bump org.eclipse.jetty.version from 12.0.19 to 12.0.21
  • Bump io.projectreactor:reactor-test from 3.7.4 to 3.7.6
  • Bump io.projectreactor:reactor-core from 3.7.4 to 3.7.6
Changelog

Sourced from com.sap.cloud.security:java-bom's changelog.

3.6.1

  • Fix spring retry configuration for token service
  • added documentation of retry feature to README
  • Improve error message when client certificate for proof token validation is missing

Dependency upgrades

Bump org.eclipse.jetty.version from 12.0.21 to 12.0.22 bump caffeine version to 3.2.0 Bump org.mockito:mockito-core from 5.17.0 to 5.18.0 Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.4 to 5.5 Bump com.sap.cloud.environment.servicebinding:java-bom Bump org.json:json from 20250107 to 20250517 Bump commons-io:commons-io from 2.18.0 to 2.19.0 Bump spring.core.version from 6.2.5 to 6.2.7 Bump io.github.hakky54:logcaptor from 2.10.2 to 2.11.0 Bump spring.security.version from 6.4.4 to 6.4.5 Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.3 to 5.4.4 Bump spring.boot.version from 3.4.4 to 3.4.5 Bump org.wiremock:wiremock-standalone from 3.12.1 to 3.13.0 Bump org.eclipse.jetty.version from 12.0.19 to 12.0.21 Bump io.projectreactor:reactor-test from 3.7.4 to 3.7.6 Bump io.projectreactor:reactor-core from 3.7.4 to 3.7.6

Commits
Package Dependencies
Package:
 org.junit.jupiter:junit-jupiter-engine
Ecosystem:
maven
Version Change:
5.13.3 → 5.13.4
Update Type:
Patch
Package:
org.junit.jupiter:junit-jupiter-api
Ecosystem:
maven
Version Change:
5.13.3 → 5.13.4
Update Type:
Patch
Package:
commons-io:commons-io
Ecosystem:
maven
Version Change:
2.19.0 → 2.20.0
Update Type:
Minor
Package:
org.apache.maven:maven-core
Ecosystem:
maven
Version Change:
3.9.10 → 3.9.11
Update Type:
Patch
Package:
org.apache.maven:maven-plugin-api
Ecosystem:
maven
Version Change:
3.9.10 → 3.9.11
Update Type:
Patch
Package:
org.apache.maven:maven-compat
Ecosystem:
maven
Version Change:
3.9.10 → 3.9.11
Update Type:
Patch
Package:
org.junit.jupiter:junit-jupiter-params
Ecosystem:
maven
Version Change:
5.13.3 → 5.13.4
Update Type:
Patch
Package:
com.fasterxml.jackson.core:jackson-core
Ecosystem:
maven
Version Change:
2.19.1 → 2.19.2
Update Type:
Patch
Package:
com.fasterxml.jackson.core:jackson-databind
Ecosystem:
maven
Version Change:
2.19.1 → 2.19.2
Update Type:
Patch
Package:
commons-codec:commons-codec
Ecosystem:
maven
Version Change:
1.18.0 → 1.19.0
Update Type:
Minor
Package:
com.fasterxml.jackson.dataformat:jackson-dataformat-xml
Ecosystem:
maven
Version Change:
2.19.1 → 2.19.2
Update Type:
Patch
Package:
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml
Ecosystem:
maven
Version Change:
2.19.1 → 2.19.2
Update Type:
Patch
Package:
com.google.errorprone:error_prone_annotations
Ecosystem:
maven
Version Change:
2.40.0 → 2.41.0
Update Type:
Minor
Package:
io.grpc:grpc-bom
Ecosystem:
maven
Version Change:
1.73.0 → 1.74.0
Update Type:
Minor
Package:
org.springframework:spring-framework-bom
Ecosystem:
maven
Version Change:
6.2.8 → 6.2.9
Update Type:
Patch
Package:
io.swagger.core.v3:swagger-models
Ecosystem:
maven
Version Change:
2.2.34 → 2.2.35
Update Type:
Patch
Package:
io.vavr:vavr
Ecosystem:
maven
Version Change:
0.10.6 → 0.10.7
Update Type:
Patch
Package:
io.spiffe:java-spiffe-core
Ecosystem:
maven
Version Change:
0.8.12 → 0.8.13
Update Type:
Patch
Package:
io.spiffe:grpc-netty-linux
Ecosystem:
maven
Version Change:
0.8.12 → 0.8.13
Update Type:
Patch
Package:
com.sap.cloud.security:java-bom
Ecosystem:
maven
Version Change:
3.6.0 → 3.6.1
Update Type:
Patch
Security Advisories
jackson-core can throw a StackoverflowError when processing deeply nested data
GHSA-h46c-h94j-95f3 CVE-2025-52999 HIGH
### Impact With older versions of jackson-core, if you parse an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large. ##...
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 4607809
UUID: 2719841713
Node ID: PR_kwDOJWVxms6iHX2x
Host: GitHub
Repository: SAP/cloud-sdk-java
Merge State: Unknown