Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

Bump the gradle-version-updates group across 1 directory with 9 updates

Open
Number: #3299
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 3
Created: September 29, 2025 at 10:50 AM UTC
(4 days ago)
Updated: October 01, 2025 at 04:50 PM UTC
(2 days ago)
Labels:
dependencies java
Description:

Bumps the gradle-version-updates group with 6 updates in the /hooks/persistence-defectdojo/hook directory:

Package From To
org.springframework:spring-web 6.2.10 6.2.11
com.fasterxml.jackson.core:jackson-core 2.19.2 2.20.0
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.19.2 2.20.0
org.mockito:mockito-core 5.19.0 5.20.0
io.freefair.lombok 8.14.2 9.0.0
com.github.ben-manes.versions 0.52.0 0.53.0

Updates org.springframework:spring-web from 6.2.10 to 6.2.11

Release notes

Sourced from org.springframework:spring-web's releases.

v6.2.11

:star: New Features

  • Missing @Nullable on JsonPathAssertions.isEqualTo #35445
  • Graceful fallback for non-default NIO.2 FileSystems #35443
  • Avoid thread pinning in SseEmitter, ResponseBodyEmitter #35423
  • Detect Informix error codes as DuplicateKeyException #35400
  • Inconsistent nullability for String value arguments in ResponseCookie from*() factory methods #35377
  • Revisit taskTerminationTimeout semantics on SimpleAsyncTaskExecutor/Scheduler #35372
  • StandardEvaluationContext.setBeanResolver should allow @Nullable BeanResolver #35371

:lady_beetle: Bug Fixes

  • "mainThreadPrefix = null " Causing multiple background bean locks to be blocked #35409
  • Annotation not found on parameter in overridden method unless method is public #35349
  • Annotations on overridden methods not found in type hierarchy with unresolved generics #35342
  • Performance degradation when using singleton beans with Provider #35330
  • JettyClientHttpConnector buffer leak in Spring Framework 6.2 #35319
  • Spring application hangs on shutdown with @Scheduled(cron=…) when custom ScheduledExecutorService bean is defined (Java 19+) #35316

:notebook_with_decorative_cover: Documentation

  • Document potential need to use Mockito.doXxx() to stub a @MockitoSpyBean #35410
  • Fix links to Reactive Libraries and RestTemplate #35392
  • Fix broken link in WebDriver docs #35374
  • Document Web DataBinder support for RouterFunction #35367
  • Improve documentation for ApplicationEvents to clarify recommended usage #35335
  • Document terms and units in DataSize.parse() #35298
  • Refine @Contract Javadoc #35285
  • Correct the default value of nestedTransactionAllowed in JpaTransactionManager javadoc #35212

:hammer: Dependency Upgrades

  • Upgrade to Micrometer 1.14.11 #35455
  • Upgrade to Reactor 2024.0.10 #35454

:heart: Contributors

Thank you to all the contributors who worked on this release:

@​Dockerel, @​Kehrlann, @​acktsap, @​khj68, @​ngocnhan-tran1996, @​scordio, and @​sgflt

Commits
  • 4c13425 Release v6.2.11
  • d17601e Upgrade to Undertow 2.3.19, RxJava 3.1.11, Aalto 1.3.3
  • 5b38761 Clarify intended nestedTransactionAllowed default in JpaTransactionManager
  • 0e3e34b Find annotations on parameters in overridden non-public methods
  • 4745c7c Name local variables consistently
  • 275fb52 Upgrade to Reactor 2024.0.10 and Micrometer 1.14.11
  • 7f9aa39 Polishing
  • c788554 Avoid thread pinning in SseEmitter, ResponseBodyEmitter
  • 9e8c640 Make JsonPathAssertions#isEqualTo parameter nullable
  • ebb8e34 Upgrade to Jetty 12.0.26, Jetty Reactive HttpClient 4.0.11, Netty 4.1.127, Ht...
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-core from 2.19.2 to 2.20.0

Commits
  • ea0830a [maven-release-plugin] prepare release jackson-core-2.20.0
  • e16733a Prep for 2.20.0
  • 93deb38 Drop RC from version pre-2.20.0 release
  • f0bcc3c Handle deprecation warnings
  • 6e70d08 Fix #1462: deprecate JsonFactory.createParser(URL) (#1464)
  • 588cc76 Post release version bump
  • 018f9e1 [maven-release-plugin] prepare for next development iteration
  • 360e498 [maven-release-plugin] prepare release jackson-core-2.20.0-rc1
  • 538ac44 Prep for 2.20.0-rc1
  • dfbf47b Merge branch '2.19' into 2.x
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-annotations from 2.19.2 to 2.20.0

Updates com.fasterxml.jackson.core:jackson-databind from 2.19.2 to 2.20.0

Commits

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.19.2 to 2.20.0

Updates org.mockito:mockito-core from 5.19.0 to 5.20.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.20.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.20.0

Commits
  • 3a1a19e Add support for generic types in MockedConstruction and MockedStatic (#3729)
  • f3c957a Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 (#3730)
  • 3cfbd42 Bump graalvm/setup-graalvm from 1.3.6 to 1.3.7 (#3725)
  • 6f9a04b Bump com.gradle.develocity from 4.1.1 to 4.2 (#3726)
  • c75dfb8 Bump org.eclipse.platform:org.eclipse.osgi from 3.23.100 to 3.23.200 (#3720)
  • 54474fa Bump graalvm/setup-graalvm from 1.3.5 to 1.3.6 (#3719)
  • bc06f21 Use Assume.assumeThat for SequencedCollection tests (#3711)
  • a10aed0 Bump actions/setup-java from 4 to 5 (#3715)
  • 37bb3e5 Fix metadata generation on GraalVM (#3710)
  • ef2fd6f Bump com.gradle.develocity from 4.1 to 4.1.1 (#3713)
  • Additional commits viewable in compare view

Updates org.mockito:mockito-junit-jupiter from 5.19.0 to 5.20.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.20.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.20.0

Commits
  • 3a1a19e Add support for generic types in MockedConstruction and MockedStatic (#3729)
  • f3c957a Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 (#3730)
  • 3cfbd42 Bump graalvm/setup-graalvm from 1.3.6 to 1.3.7 (#3725)
  • 6f9a04b Bump com.gradle.develocity from 4.1.1 to 4.2 (#3726)
  • c75dfb8 Bump org.eclipse.platform:org.eclipse.osgi from 3.23.100 to 3.23.200 (#3720)
  • 54474fa Bump graalvm/setup-graalvm from 1.3.5 to 1.3.6 (#3719)
  • bc06f21 Use Assume.assumeThat for SequencedCollection tests (#3711)
  • a10aed0 Bump actions/setup-java from 4 to 5 (#3715)
  • 37bb3e5 Fix metadata generation on GraalVM (#3710)
  • ef2fd6f Bump com.gradle.develocity from 4.1 to 4.1.1 (#3713)
  • Additional commits viewable in compare view

Updates io.freefair.lombok from 8.14.2 to 9.0.0

Release notes

Sourced from io.freefair.lombok's releases.

9.0.0

What's Changed

Full Changelog: https://github.com/freefair/gradle-plugins/compare/8.14.2...9.0.0

9.0.0-rc2

Full Changelog: https://github.com/freefair/gradle-plugins/compare/9.0.0-rc1...9.0.0-rc2

9.0.0-rc1

... (truncated)

Commits
  • 786f564 Update to Spring Boot 3.5.6
  • fe43572 Merge branch '8.x' of github.com:freefair/gradle-plugins
  • 3da1f86 Bump org.mockito.kotlin:mockito-kotlin from 5.4.0 to 6.0.0 (#1469)
  • b39aef5 Bump org.mockito:mockito-core from 5.19.0 to 5.20.0 (#1487)
  • 4b0917a Merge branch '8.x' of github.com:freefair/gradle-plugins
  • d413a0a remove gradle build cache
  • f5e37df Update to Gradle 9.1.0
  • 10d1d3a Merge branch '8.x' of github.com:freefair/gradle-plugins
  • 047a17d Bump org.sonarsource.scanner.gradle:sonarqube-gradle-plugin (#1488)
  • fd0b3fa Bump org.assertj:assertj-core from 3.27.3 to 3.27.6 in /examples (#1491)
  • Additional commits viewable in compare view

Updates com.github.ben-manes.versions from 0.52.0 to 0.53.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
0
Files Changed:
0
Additions:
+0
Deletions:
-0
Package Dependencies
Package:
org.springframework:spring-web
Ecosystem:
maven
Version Change:
6.2.10 → 6.2.11
Update Type:
Patch
Package:
com.fasterxml.jackson.datatype:jackson-datatype-jsr310
Ecosystem:
maven
Version Change:
2.19.2 → 2.20.0
Update Type:
Minor
Package:
org.mockito:mockito-core
Ecosystem:
maven
Version Change:
5.19.0 → 5.20.0
Update Type:
Minor
Package:
com.fasterxml.jackson.core:jackson-core
Ecosystem:
maven
Version Change:
2.19.2 → 2.20.0
Update Type:
Minor
Package:
com.github.ben-manes.versions
Ecosystem:
maven
Version Change:
0.52.0 → 0.53.0
Update Type:
Minor
Package:
io.freefair.lombok
Ecosystem:
maven
Version Change:
8.14.2 → 9.0.0
Update Type:
Major
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 8696948
UUID: 3464364019
Node ID: PR_kwDOBM-Q_c6rEWeI
Host: GitHub
Repository: secureCodeBox/secureCodeBox