Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

Bump the all-maven-dependencies group across 2 directories with 5 updates

Open
Number: #548
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 0
Created: September 22, 2025 at 11:42 AM UTC
(9 months ago)
Updated: September 22, 2025 at 11:42 AM UTC
(9 months ago)
Labels:
dependencies java
Description:

Bumps the all-maven-dependencies group with 5 updates in the / directory:

Package From To
org.springframework.boot:spring-boot-starter-parent 3.5.5 3.5.6
com.sap.cds:cds-services-bom 4.3.0 4.3.1
com.sap.cds:cds-maven-plugin 4.3.0 4.3.1
org.apache.maven.plugins:maven-compiler-plugin 3.14.0 3.14.1
org.codehaus.mojo:flatten-maven-plugin 1.7.2 1.7.3

Bumps the all-maven-dependencies group with 5 updates in the /srv directory:

Package From To
org.springframework.boot:spring-boot-starter-parent 3.5.5 3.5.6
com.sap.cds:cds-maven-plugin 4.3.0 4.3.1
com.sap.cds:cds-services-bom 4.3.0 4.3.1
org.apache.maven.plugins:maven-compiler-plugin 3.14.0 3.14.1
org.codehaus.mojo:flatten-maven-plugin 1.7.2 1.7.3

Updates org.springframework.boot:spring-boot-starter-parent from 3.5.5 to 3.5.6

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.5.6

:lady_beetle: Bug Fixes

  • Quoted -D arguments break system property resolution on Linux with Spring AOT #47166
  • Groovy Templates fails with an NPE when rendering an auto new line #47139
  • available() does not behave correctly when reading stored entries from a NestedJarFile #47057
  • spring-boot-docker-compose doesn't create service connections when image has registry host but not project #47019
  • Flyway Ignore Migration Patterns setting can't be set to an empty string #47013

:notebook_with_decorative_cover: Documentation

  • Default value of server.tomcat.resource.cache-ttl is not documented #47253
  • Document Java 25 support #47245
  • Fix links to Flyway reference documentation #46988
  • Clarify Javadoc of Customizer interfaces about overriding behavior #46942

:hammer: Dependency Upgrades

  • Upgrade to Ehcache3 3.10.9 #47106
  • Upgrade to Elasticsearch Client 8.18.6 #47094
  • Upgrade to Gson 2.13.2 #47158
  • Upgrade to Hibernate 6.6.29.Final #47216
  • Upgrade to HikariCP 6.3.3 #47187
  • Upgrade to HttpCore5 5.3.5 #47108
  • Upgrade to Infinispan 15.2.6.Final #47109
  • Upgrade to Jakarta Activation 2.1.4 #47188
  • Upgrade to Jakarta Mail 2.1.4 #47110
  • Upgrade to Jaybird 6.0.3 #47111
  • Upgrade to Jetty 12.0.27 #47159
  • Upgrade to jOOQ 3.19.26 #47160
  • Upgrade to Lombok 1.18.40 #47113
  • Upgrade to MariaDB 3.5.6 #47189
  • Upgrade to Maven Failsafe Plugin 3.5.4 #47190
  • Upgrade to Maven Shade Plugin 3.6.1 #47191
  • Upgrade to Maven Surefire Plugin 3.5.4 #47192
  • Upgrade to Micrometer 1.15.4 #47083
  • Upgrade to Micrometer Tracing 1.5.4 #47084
  • Upgrade to Netty 4.1.127.Final #47127
  • Upgrade to R2DBC MSSQL 1.0.3.RELEASE #47193
  • Upgrade to Reactor Bom 2024.0.10 #47085
  • Upgrade to Spring AMQP 3.2.7 #47086
  • Upgrade to Spring Batch 5.2.3 #47087
  • Upgrade to Spring Data Bom 2025.0.4 #47088
  • Upgrade to Spring Framework 6.2.11 #47089
  • Upgrade to Spring GraphQL 1.4.2 #47090
  • Upgrade to Spring Integration 6.5.2 #47091
  • Upgrade to Spring Kafka 3.3.10 #47092
  • Upgrade to Spring Pulsar 1.2.10 #47093
  • Upgrade to Spring Security 6.5.5 #47257
  • Upgrade to Tomcat 10.1.46 #47194

... (truncated)

Commits
  • 23bcd7b Release v3.5.6
  • d96267f Merge branch '3.4.x' into 3.5.x
  • 9363f03 Next development version (v3.4.11-SNAPSHOT)
  • a465cdb Revert "Upgrade to Jakarta XML Bind 4.0.4"
  • 391e745 Merge branch '3.4.x' into 3.5.x
  • ad9a7ee Revert "Upgrade to Jakarta XML Bind 4.0.4"
  • 66ba918 Document support for Java 25
  • 943f0ae Merge branch '3.4.x' into 3.5.x
  • 43fee16 Upgrade to Spring Batch 5.2.3
  • 11de7d1 Upgrade to Spring Batch 5.2.3
  • Additional commits viewable in compare view

Updates com.sap.cds:cds-services-bom from 4.3.0 to 4.3.1

Updates com.sap.cds:cds-maven-plugin from 4.3.0 to 4.3.1

Updates com.sap.cds:cds-maven-plugin from 4.3.0 to 4.3.1

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 to 3.14.1

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.14.1

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

Commits
  • 0df6940 [maven-release-plugin] prepare release maven-compiler-plugin-3.14.1
  • 1bf9e5a Enforce asm version used here, to not depend on brittle transitive (#964)
  • f5161c4 Bump mavenVersion from 3.9.10 to 3.9.11 (#952)
  • 63846f1 Improve DeltaList behavior for large projects (#335)
  • ab3f845 Bump org.apache.maven.plugins:maven-plugins from 44 to 45
  • 164bad4 Allow to not use --module-version for the Java compiler
  • 0b76ccd Bump mavenVersion from 3.9.9 to 3.9.10
  • 5dbc9c3 Bump org.codehaus.plexus:plexus-java from 1.4.0 to 1.5.0
  • 17949d1 Bump org.apache.maven.plugins:maven-plugins from 43 to 44 (#316)
  • d44d1be Add generatedSourcesPath back to the maven project
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:flatten-maven-plugin from 1.7.2 to 1.7.3

Release notes

Sourced from org.codehaus.mojo:flatten-maven-plugin's releases.

1.7.3

🐛 Bug Fixes

  • Fixes condition-activated profiles not considered in effective model (#481) @​oldhen

📦 Dependency updates

Commits
  • bd7c560 [maven-release-plugin] prepare release 1.7.3
  • aee23ca Bump org.assertj:assertj-core from 3.27.4 to 3.27.5
  • 7da52c3 Fixes condition-activated profiles not considered in effective model (#481)
  • 7680ed4 Bump org.codehaus.mojo:mojo-parent from 92 to 93
  • deae474 Bump org.assertj:assertj-core from 3.27.3 to 3.27.4
  • 3189718 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates org.springframework.boot:spring-boot-starter-parent from 3.5.5 to 3.5.6

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.5.6

:lady_beetle: Bug Fixes

  • Quoted -D arguments break system property resolution on Linux with Spring AOT #47166
  • Groovy Templates fails with an NPE when rendering an auto new line #47139
  • available() does not behave correctly when reading stored entries from a NestedJarFile #47057
  • spring-boot-docker-compose doesn't create service connections when image has registry host but not project #47019
  • Flyway Ignore Migration Patterns setting can't be set to an empty string #47013

:notebook_with_decorative_cover: Documentation

  • Default value of server.tomcat.resource.cache-ttl is not documented #47253
  • Document Java 25 support #47245
  • Fix links to Flyway reference documentation #46988
  • Clarify Javadoc of Customizer interfaces about overriding behavior #46942

:hammer: Dependency Upgrades

  • Upgrade to Ehcache3 3.10.9 #47106
  • Upgrade to Elasticsearch Client 8.18.6 #47094
  • Upgrade to Gson 2.13.2 #47158
  • Upgrade to Hibernate 6.6.29.Final #47216
  • Upgrade to HikariCP 6.3.3 #47187
  • Upgrade to HttpCore5 5.3.5 #47108
  • Upgrade to Infinispan 15.2.6.Final #47109
  • Upgrade to Jakarta Activation 2.1.4 #47188
  • Upgrade to Jakarta Mail 2.1.4 #47110
  • Upgrade to Jaybird 6.0.3 #47111
  • Upgrade to Jetty 12.0.27 #47159
  • Upgrade to jOOQ 3.19.26 #47160
  • Upgrade to Lombok 1.18.40 #47113
  • Upgrade to MariaDB 3.5.6 #47189
  • Upgrade to Maven Failsafe Plugin 3.5.4 #47190
  • Upgrade to Maven Shade Plugin 3.6.1 #47191
  • Upgrade to Maven Surefire Plugin 3.5.4 #47192
  • Upgrade to Micrometer 1.15.4 #47083
  • Upgrade to Micrometer Tracing 1.5.4 #47084
  • Upgrade to Netty 4.1.127.Final #47127
  • Upgrade to R2DBC MSSQL 1.0.3.RELEASE #47193
  • Upgrade to Reactor Bom 2024.0.10 #47085
  • Upgrade to Spring AMQP 3.2.7 #47086
  • Upgrade to Spring Batch 5.2.3 #47087
  • Upgrade to Spring Data Bom 2025.0.4 #47088
  • Upgrade to Spring Framework 6.2.11 #47089
  • Upgrade to Spring GraphQL 1.4.2 #47090
  • Upgrade to Spring Integration 6.5.2 #47091
  • Upgrade to Spring Kafka 3.3.10 #47092
  • Upgrade to Spring Pulsar 1.2.10 #47093
  • Upgrade to Spring Security 6.5.5 #47257
  • Upgrade to Tomcat 10.1.46 #47194

... (truncated)

Commits
  • 23bcd7b Release v3.5.6
  • d96267f Merge branch '3.4.x' into 3.5.x
  • 9363f03 Next development version (v3.4.11-SNAPSHOT)
  • a465cdb Revert "Upgrade to Jakarta XML Bind 4.0.4"
  • 391e745 Merge branch '3.4.x' into 3.5.x
  • ad9a7ee Revert "Upgrade to Jakarta XML Bind 4.0.4"
  • 66ba918 Document support for Java 25
  • 943f0ae Merge branch '3.4.x' into 3.5.x
  • 43fee16 Upgrade to Spring Batch 5.2.3
  • 11de7d1 Upgrade to Spring Batch 5.2.3
  • Additional commits viewable in compare view

Updates com.sap.cds:cds-maven-plugin from 4.3.0 to 4.3.1

Updates com.sap.cds:cds-services-bom from 4.3.0 to 4.3.1

Updates com.sap.cds:cds-maven-plugin from 4.3.0 to 4.3.1

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 to 3.14.1

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.14.1

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

Commits
  • 0df6940 [maven-release-plugin] prepare release maven-compiler-plugin-3.14.1
  • 1bf9e5a Enforce asm version used here, to not depend on brittle transitive (#964)
  • f5161c4 Bump mavenVersion from 3.9.10 to 3.9.11 (#952)
  • 63846f1 Improve DeltaList behavior for large projects (#335)
  • ab3f845 Bump org.apache.maven.plugins:maven-plugins from 44 to 45
  • 164bad4 Allow to not use --module-version for the Java compiler
  • 0b76ccd Bump mavenVersion from 3.9.9 to 3.9.10
  • 5dbc9c3 Bump org.codehaus.plexus:plexus-java from 1.4.0 to 1.5.0
  • 17949d1 Bump org.apache.maven.plugins:maven-plugins from 43 to 44 (#316)
  • d44d1be Add generatedSourcesPath back to the maven project
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:flatten-maven-plugin from 1.7.2 to 1.7.3

Release notes

Sourced from org.codehaus.mojo:flatten-maven-plugin's releases.

1.7.3

🐛 Bug Fixes

  • Fixes condition-activated profiles not considered in effective model (#481) @​oldhen

📦 Dependency updates

Commits
  • bd7c560 [maven-release-plugin] prepare release 1.7.3
  • aee23ca Bump org.assertj:assertj-core from 3.27.4 to 3.27.5
  • 7da52c3 Fixes condition-activated profiles not considered in effective model (#481)
  • 7680ed4 Bump org.codehaus.mojo:mojo-parent from 92 to 93
  • deae474 Bump org.assertj:assertj-core from 3.27.3 to 3.27.4
  • 3189718 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
1
Files Changed:
1
Additions:
+4
Deletions:
-4
Package Dependencies
Package:
org.springframework.boot:spring-boot-starter-parent
Ecosystem:
maven
Version Change:
3.5.5 → 3.5.6
Update Type:
Patch
Package:
org.apache.maven.plugins:maven-compiler-plugin
Ecosystem:
maven
Version Change:
3.14.0 → 3.14.1
Update Type:
Patch
Package:
com.sap.cds:cds-services-bom
Ecosystem:
maven
Version Change:
4.3.0 → 4.3.1
Update Type:
Patch
Package:
com.sap.cds:cds-maven-plugin
Ecosystem:
maven
Version Change:
4.3.0 → 4.3.1
Update Type:
Patch
Package:
org.codehaus.mojo:flatten-maven-plugin
Ecosystem:
maven
Version Change:
1.7.2 → 1.7.3
Update Type:
Patch
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 8187155
UUID: 2849115007
Node ID: PR_kwDOD4OiKs6p0gt_
Host: GitHub
Repository: SAP-samples/cloud-cap-samples-java
Merge State: Unknown