Skip to content

fix: Bump the gradle group with 10 updates - #38

Merged
goloroden merged 2 commits into
mainfrom
dependabot/gradle/gradle-3b9662e4a4
Nov 4, 2026
Merged

fix: Bump the gradle group with 10 updates#38
goloroden merged 2 commits into
mainfrom
dependabot/gradle/gradle-3b9662e4a4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the gradle group with 10 updates:

Package From To
com.google.errorprone:error_prone_core 2.50.0 2.51.0
org.jacoco:org.jacoco.agent 0.8.15 0.8.16
com.uber.nullaway:nullaway 0.14.2 0.14.3
com.palantir.javaformat:palantir-java-format 2.102.0 2.103.0
org.springframework.boot:spring-boot-dependencies 4.1.1 4.1.2
org.springframework.boot:spring-boot-configuration-processor 4.1.1 4.1.2
org.springframework.boot:spring-boot-jackson 4.1.1 4.1.2
org.springframework.boot:spring-boot-starter 4.1.1 4.1.2
org.springframework.boot:spring-boot-test 4.1.1 4.1.2
org.springframework.boot:spring-boot-testcontainers 4.1.1 4.1.2

Updates com.google.errorprone:error_prone_core from 2.50.0 to 2.51.0

Release notes

Sourced from com.google.errorprone:error_prone_core's releases.

Error Prone 2.51.0

New checks:

  • HashCodeInObjectsHash: Detect redundant hashCode() or Objects.hash() calls inside Objects.hash(...), and simplify single-argument Objects.hash(x) calls to Objects.hashCode(x).
  • LoopToTestParameter: Suggest migrating loops in unit tests to TestParameterInjector.
  • MissingJavadoc: Flag public types that are missing Javadoc comments (disabled by default).
  • PreferCharsetOverload: Prefer calling method and constructor overloads that accept a Charset over those that accept a String encoding name.
  • PreferPreconditions: Suggest using Guava's Preconditions instead of explicit if-throw statements for parameter validation (disabled by default).
  • RequireNonNullRefactoring: Refactor explicit if (x == null) { throw new NullPointerException(...); } checks to Objects.requireNonNull (disabled by default).
  • SimplifyTestParameter: Remove redundant explicit value lists on @TestParameter annotations for boolean and Enum types when all values are specified (disabled by default).
  • TraditionalJavadocToMarkdown: Convert traditional /** ... */ Javadoc comments into /// Markdown Javadoc comments (disabled by default).
  • ValueClassIdentity: Flag reliance on identity semantics (such as synchronization, WeakReference, IdentityHashMap, or System.identityHashCode) of value-based classes (disabled by default).

Other changes:

  • CompareToZero: Upgraded from warning to error, and expanded to flag non-relational operations, unary negation, and switch statements/expressions on compareTo and compare results without Integer.signum.
  • IfChainToSwitch: Enabled by default as a warning.
  • UndefinedEquals: Merged ArrayAsKeyOfSetOrMap and CollectionUndefinedEquality into UndefinedEquals (retaining their names as altNames), and generalized detection of types without well-defined equals or hashCode across direct equality, collection containment, and hash-based containers.
  • EqualsIncompatibleType / TruthIncompatibleType: Flag equality comparisons between distinct record types (#6107).
  • ReferenceEquality: Allow == comparisons on private classes whose type hierarchy does not override Object.equals (#5865), private static final sentinel fields, Thread (#5900), and com.sun.source.tree.Tree.
  • PatternMatchingInstanceof: Support while and for loops, parenthesized expressions (#5843), and replacing additional redundant casts when the instanceof already introduces a pattern variable.
  • DistinctVarargsChecker: Expanded to check Objects.hash, CompletableFuture.allOf/anyOf, EnumSet.of, Sets.union/intersection/difference, Stream.concat, Math.min/max, and additional JDK, Guava, Protobuf, Truth, and Mockito methods.
  • MustBeClosedChecker: Require java.lang.foreign.Arena.ofConfined and Arena.ofShared to be closed.
  • ImpossibleNullComparison: Flag null checks on the return value of Class.forName.
  • RestrictedApi / RestrictedInheritance: Added an allowedPaths attribute to allow calls or inheritance from matching file paths without a regular expression.
  • InlineMeInliner: Support substituting type arguments at call sites when inlining generic @InlineMe methods.
  • WellKnownKeep: Recognize Apache Beam DoFn annotations and retain open-source library annotations (Gson, Mockito, Guice, Objectify, TestParameterInjector, AutoFactory).
  • Per-check timing collection is now disabled by default, reducing Error Prone compile-time overhead by ~3–5%; pass -XepPrintTimings to print a timing report after compilation or -XepRecordTimings to record timings programmatically (#6079).
  • CompilationTestHelper now reports all lines with mismatched diagnostic expectations in a single test run rather than failing on the first mismatch (#6116).
  • Replaced the RE2/J dependency with SafeRE.

Closed issues: #4914, #5182, #5843, #5857, #5865, #5878, #5900, #6029, #6079, #6107, #6116, #6133

Full changelog: google/error-prone@v2.50.0...v2.51.0

Commits
  • 3e9c316 Release Error Prone 2.51.0
  • 4f83ec3 Add Maven 3.9.16 setup to release workflow
  • 47eb5be Exempt Apache Beam DoFn method annotations in WellKnownKeep
  • 7e2efea [IfChainToSwitch] Lower the minimum if-chain length from 5 to 4
  • 0a97086 [IfChainToSwitch] address issue where deleting trailing code can cause compil...
  • f61d405 [Reachability] drop skipLabel from visitContinue
  • 854665b Collapse duplicated package prefixes in _javac source jar paths.
  • 3588433 Introduce -XepOpt:Nullness:LikelyPublicApiOnly=true for annotating only API...
  • b8a8390 Merge CollectionUndefinedEquality and ArrayAsKeyOfSetOrMap into UndefinedEquals.
  • 59f98c3 Allow == comparisons on Tree instances.
  • Additional commits viewable in compare view

Updates org.jacoco:org.jacoco.agent from 0.8.15 to 0.8.16

Release notes

Sourced from org.jacoco:org.jacoco.agent's releases.

0.8.16

New Features

  • JaCoCo now officially supports Java 27 (GitHub #2287).
  • Experimental support for Java 28 class files (GitHub #2170, #2189).
  • To instrument classes loaded by the platform class loader, introduced in JDK 9 by JEP 261, the agent option inclbootstrapclasses=true is required (GitHub #2155).

Non-functional Changes

  • JaCoCo now depends on ASM 9.11.1 (GitHub #2299, #2304).
Commits

Updates com.uber.nullaway:nullaway from 0.14.2 to 0.14.3

Release notes

Sourced from com.uber.nullaway:nullaway's releases.

NullAway 0.14.3

Many bug fixes in this release. Thanks especially to @​vlsi and @​subhramit for all the contributions! As they are now committers, their many contributions are not credited individually below.

Two bug fixes of note are #2005 and #2003, which may lead to new warnings even outside JSpecify mode.

We have also added initial support for @PolyNull in library models in #1813. We will continue to enhance this support, but it should be helpful in removing some false positives from JSpecifyExperimental mode.

  • Allow configuring suppression-remover source encoding (#1894)
  • Compute a call's executable type once per generic inference by @​ericschlarmann (#1896)
  • Skip nested annotation restoration from raw source types (#1898)
  • Refine argument nullness after Objects.equals calls by @​Beluomini (#1900)
  • Keep nullable map values nullable after containsKey (#1902)
  • Read nullable fields from JSpecify JDK models into astubx (#1901)
  • Avoid initialization-check crashes in @NullMarked constructors by @​ZedingZhang (#1929)
  • Store types of implicit lambda parameters during inference (#1930)
  • Compute erasure before binary promotion (#1935)
  • Preserve captured type variables during constraint generation (#1941)
  • Cache conversion of MethodSymbols to MethodRefs (#1964)
  • Restore nullness annotations from implicit wildcard bounds (#1967)
  • Use call-specific generic inference variables (#1965)
  • Account for nullable map values in getOrDefault (#1985)
  • Fix crash in map callbacks after an unmarked or suppressed filter predicate (#1996)
  • Strip reference casts when computing access paths (#1997)
  • Handle negated null checks in multi-argument boolean contracts (#1998)
  • Skip parentheses around a lambda or method reference passed to unmarked code (#1999)
  • Fix crash on method references to annotated array types (#2000)
  • Skip a lower-bounded wildcard when restoring annotations on a call type (#2001)
  • Strip parentheses before handlers match stream callbacks and boolean literals (#2002)
  • Check explicitly typed lambda parameters against unmarked interface methods (#2003)
  • Add PolyNull library models and apply them to Optional.orElseGet and Map.computeIfAbsent (#1813)
  • Report unboxing of a @​Nullable operand inside a primitive conditional expression (#2005)
  • Report unboxing of a @​Nullable result inside a primitive switch expression (#2006)
  • Fix crash on null-marked code nested in unmarked lambdas and local classes (#2007)
  • Strip parentheses before the futures and gRPC handlers match an argument (#2010)
  • Recognize boolean constants behind a cast in EnsuresNonNullIf and stream filters (#2011)
  • Treat a parenthesized lambda or method reference like an unwrapped one in generics checks (#2012)
  • Recognize a cast null check in a boolean contract argument (#2013)
  • Keep the access path of a map key, call argument, or array index cast to its own type (#2014)
  • Check nested nullness of explicitly typed lambda parameters (#2015)
  • Keep distinct constant map keys and call arguments on distinct access paths (#2016)
  • Apply conditional library return models to method references (#1968)
  • Reject conflicting fixed parameter models regardless of PolyNull (#2025)
  • Keep the boxing wrapper in the identity of a variable map key (#2017)
  • Maintenance
    • Report diff coverage after each test run, quoting the changed lines the run did not execute and the branches it took one way, and writing the whole report to <module>/build/reports/diff-coverage/test.txt; a // diff-coverage: ignore comment moves a line out of that list without changing the counts (#1833)

... (truncated)

Changelog

Sourced from com.uber.nullaway:nullaway's changelog.

Version 0.14.3

Many bug fixes in this release. Thanks especially to @​vlsi and @​subhramit for all the contributions! As they are now committers, their many contributions are not credited individually below.

Two bug fixes of note are #2005 and #2003, which may lead to new warnings even outside JSpecify mode.

We have also added initial support for @PolyNull in library models in #1813. We will continue to enhance this support, but it should be helpful in removing some false positives from JSpecifyExperimental mode.

  • Allow configuring suppression-remover source encoding (#1894)
  • Compute a call's executable type once per generic inference by @​ericschlarmann (#1896)
  • Skip nested annotation restoration from raw source types (#1898)
  • Refine argument nullness after Objects.equals calls by @​Beluomini (#1900)
  • Keep nullable map values nullable after containsKey (#1902)
  • Read nullable fields from JSpecify JDK models into astubx (#1901)
  • Avoid initialization-check crashes in @NullMarked constructors by @​ZedingZhang (#1929)
  • Store types of implicit lambda parameters during inference (#1930)
  • Compute erasure before binary promotion (#1935)
  • Preserve captured type variables during constraint generation (#1941)
  • Cache conversion of MethodSymbols to MethodRefs (#1964)
  • Restore nullness annotations from implicit wildcard bounds (#1967)
  • Use call-specific generic inference variables (#1965)
  • Account for nullable map values in getOrDefault (#1985)
  • Fix crash in map callbacks after an unmarked or suppressed filter predicate (#1996)
  • Strip reference casts when computing access paths (#1997)
  • Handle negated null checks in multi-argument boolean contracts (#1998)
  • Skip parentheses around a lambda or method reference passed to unmarked code (#1999)
  • Fix crash on method references to annotated array types (#2000)
  • Skip a lower-bounded wildcard when restoring annotations on a call type (#2001)
  • Strip parentheses before handlers match stream callbacks and boolean literals (#2002)
  • Check explicitly typed lambda parameters against unmarked interface methods (#2003)
  • Add PolyNull library models and apply them to Optional.orElseGet and Map.computeIfAbsent (#1813)
  • Report unboxing of a @​Nullable operand inside a primitive conditional expression (#2005)
  • Report unboxing of a @​Nullable result inside a primitive switch expression (#2006)
  • Fix crash on null-marked code nested in unmarked lambdas and local classes (#2007)
  • Strip parentheses before the futures and gRPC handlers match an argument (#2010)
  • Recognize boolean constants behind a cast in EnsuresNonNullIf and stream filters (#2011)
  • Treat a parenthesized lambda or method reference like an unwrapped one in generics checks (#2012)
  • Recognize a cast null check in a boolean contract argument (#2013)
  • Keep the access path of a map key, call argument, or array index cast to its own type (#2014)
  • Check nested nullness of explicitly typed lambda parameters (#2015)
  • Keep distinct constant map keys and call arguments on distinct access paths (#2016)
  • Apply conditional library return models to method references (#1968)
  • Reject conflicting fixed parameter models regardless of PolyNull (#2025)
  • Keep the boxing wrapper in the identity of a variable map key (#2017)

... (truncated)

Commits
  • 4b19c42 Prepare for release 0.14.3.
  • e91ea4b Keep the boxing wrapper in the identity of a variable map key (#2017)
  • d9cd573 Enable zizmor job for merge queue (#2039)
  • 7f85800 Reject conflicting fixed parameter models regardless of PolyNull (#2025)
  • ef0ddbd Build third-party projects at pinned commits with patches until upstream merg...
  • 3035507 Apply conditional library return models to method references (#1968)
  • 5023d67 Pin oracle-actions/setup-java to the v1.5.0 tag (#2021)
  • 9555b20 Keep distinct constant map keys and call arguments on distinct access paths (...
  • 29b740d Check nested nullness of explicitly typed lambda parameters (#2015)
  • 10606a3 Keep the access path of a map key, call argument, or array index cast to its ...
  • Additional commits viewable in compare view

Updates com.palantir.javaformat:palantir-java-format from 2.102.0 to 2.103.0

Commits
  • 4891cee Release 2.103.0
  • b11ebb8 Excavator: Upgrade Jackson to the latest stable release (#1839)
  • 7201288 Excavator: Upgrade Java dependency com.palantir.gradle.jdkslatest:gradle-jdks...
  • 4d6d332 [High Priority] Excavator: Update gradle-jdks infrastructure plugins (#1837)
  • 99e69c0 [High Priority] Excavator: Update gradle-jdks infrastructure plugins (#1836)
  • d0327e1 Excavator: Upgrade Java dependency com.palantir.gradle.jdkslatest:gradle-jdks...
  • f48bc99 [High Priority] Excavator: Upgrade buildscript dependencies (#1828)
  • 6776878 Excavator: Upgrade Java dependency com.palantir.baseline:gradle-baseline-java...
  • 577e5d4 Excavator: Upgrade Java dependency com.github.ben-manes.caffeine:caffeine (#1...
  • 2072652 Excavator: Upgrade Java dependency com.palantir.baseline:gradle-baseline-java...
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-dependencies from 4.1.1 to 4.1.2

Release notes

Sourced from org.springframework.boot:spring-boot-dependencies's releases.

v4.1.2

⭐ New Features

  • Add TWENTY_SEVEN to JavaVersion enum #51426

🐞 Bug Fixes

  • OriginTrackedResource does not implement equals correctly #52267
  • OriginTrackedPropertiesLoader drops properties whose name starts with # or ! #52265
  • JWTs are rejected when issuer-uri is empty and jwk-set-uri is set #52260
  • Package manifest attributes are missing for nested jars without directory entries #52258
  • Logback ColorConverter unnecessarily parses its options for every log event #52228
  • Empty system property in TestPropertyValues is cleared instead of being restored to its empty value #52208
  • Graceful shutdown of Tomcat or Jetty may call back with REQUESTS_ACTIVE when stop is called immediately after shutDownGracefully on an idle server #52197
  • NettyWebServer stop may hang when called immediately after shutDownGracefully #52196
  • gRPC client 'grpc' load balancing fails to bind with a NullPointerException when no child policies are configured #52193
  • Prevent gRPC client properties from overriding user customizations #52175
  • MongoDB fails to connect when credentials contain a space #52168
  • Authentication fails when password configured in spring.elasticsearch.uris contains a colon #52166
  • Logging can be lost when a context is paused by the test context framework #52088
  • Docker Compose support for MongoDB fails to connect when credentials contain a character that requires URL encoding #52084
  • Jersey does not use the endpoint ObjectMapper when Actuator is running on a separate port #51982
  • Fractions of a second are handled incorrectly when configuring gRPC service config durations #51957
  • Configuration property descriptions may be lost when building incrementally with Gradle #51925
  • BasicJsonParser mishandles escaped characters in nested lists and maps #51908
  • Zero week value conversion fails with 'intValue cannot be extracted from WEEKS' exception #51894
  • App fails to start when using DevTools and manually configuring JDBC or R2DBC without spring-boot-jdbc or spring-boot-r2dbc #51890
  • Docker Compose support incorrectly recognizes MARIADB_ALLOW_EMPTY_PASSWORD instead of MARIADB_ALLOW_EMPTY_ROOT_PASSWORD #51888
  • Auto-configured Kotlinx Serialization JSON codec customization is not applied #51877
  • NullPointerException can be thrown when using uber jars due to a race condition in NestedJarFileResources #51745
  • DevTools does not detect a reactive web environment #51730
  • spring.http.clients.cookie-handling has no effect when using a reactive client backed by an HttpComponents connector #51724
  • Connection fails when rabbitmq Docker Compose service is configured to use SSL #51667
  • SBOM-related manifest attributes are missing from Maven-packaged wars #51651
  • When server.reactive.session.cookie.same-site is not set, session cookies have no SameSite attribute #51639
  • OAuth2 resource server ignores authorities-claim-delimiter when set on its own #51630
  • developmentOnly and testAndDevelopmentOnly configurations do not specify any attributes causing potential resolution problems #51623
  • In a reactive web application, Cloud Foundry security integration returns a 500 rather than a 503 when the cloud controller URL is unavailable #51614
  • Layer temp file is not deleted when layer creation fails #51581
  • Docker Compose integration for RabbitMQ skips credential fallbacks when an environment variable has no value #51578
  • Some assertion messages name the wrong parameter #51574
  • OAuth2ResourceServerProperties.Jwt has a setter that does not match its getter #51562
  • jarmode tools commands print stacktrace instead of an error message #51547
  • Docker Compose ProcessRunner can hang or leave orphan processes #51538
  • NestedByteChannel.read(ByteBuffer) incorrectly returns 0 when buffer could not be filled #51520
  • Customizer null checks in HTTP client builders assert the wrong attribute #51513
  • SSL host config customizations may be lost during Tomcat initialization #51511
  • SQL Server Docker Compose integration may duplicate the JDBC URL's encrypt parameter #51481
  • WritableJson.toByteArray() may corrupt supplementary characters #51464
  • SSL host config customizations are lost when reloading SSL bundles #51457

... (truncated)

Commits
  • 634e6fd Release 4.1.2
  • 6b43cf1 Upgrade to Spring WS 5.0.3
  • a73dfad Upgrade to Spring Security 7.1.2
  • 0485f1e Upgrade to Spring RESTDocs 4.0.2
  • de2c11a Upgrade to Spring Pulsar 2.0.8
  • 8d0359e Upgrade to Spring LDAP 4.1.2
  • f22c6e6 Upgrade to Spring Kafka 4.1.2
  • ed55709 Upgrade to Spring Integration 7.1.2
  • 2e88a38 Upgrade to Spring HATEOAS 3.1.3
  • 0d69ce5 Upgrade to Spring gRPC 1.1.2
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-configuration-processor from 4.1.1 to 4.1.2

Release notes

Sourced from org.springframework.boot:spring-boot-configuration-processor's releases.

v4.1.2

⭐ New Features

  • Add TWENTY_SEVEN to JavaVersion enum #51426

🐞 Bug Fixes

  • OriginTrackedResource does not implement equals correctly #52267
  • OriginTrackedPropertiesLoader drops properties whose name starts with # or ! #52265
  • JWTs are rejected when issuer-uri is empty and jwk-set-uri is set #52260
  • Package manifest attributes are missing for nested jars without directory entries #52258
  • Logback ColorConverter unnecessarily parses its options for every log event #52228
  • Empty system property in TestPropertyValues is cleared instead of being restored to its empty value #52208
  • Graceful shutdown of Tomcat or Jetty may call back with REQUESTS_ACTIVE when stop is called immediately after shutDownGracefully on an idle server #52197
  • NettyWebServer stop may hang when called immediately after shutDownGracefully #52196
  • gRPC client 'grpc' load balancing fails to bind with a NullPointerException when no child policies are configured #52193
  • Prevent gRPC client properties from overriding user customizations #52175
  • MongoDB fails to connect when credentials contain a space #52168
  • Authentication fails when password configured in spring.elasticsearch.uris contains a colon #52166
  • Logging can be lost when a context is paused by the test context framework #52088
  • Docker Compose support for MongoDB fails to connect when credentials contain a character that requires URL encoding #52084
  • Jersey does not use the endpoint ObjectMapper when Actuator is running on a separate port #51982
  • Fractions of a second are handled incorrectly when configuring gRPC service config durations #51957
  • Configuration property descriptions may be lost when building incrementally with Gradle #51925
  • BasicJsonParser mishandles escaped characters in nested lists and maps #51908
  • Zero week value conversion fails with 'intValue cannot be extracted from WEEKS' exception #51894
  • App fails to start when using DevTools and manually configuring JDBC or R2DBC without spring-boot-jdbc or spring-boot-r2dbc #51890
  • Docker Compose support incorrectly recognizes MARIADB_ALLOW_EMPTY_PASSWORD instead of MARIADB_ALLOW_EMPTY_ROOT_PASSWORD #51888
  • Auto-configured Kotlinx Serialization JSON codec customization is not applied #51877
  • NullPointerException can be thrown when using uber jars due to a race condition in NestedJarFileResources #51745
  • DevTools does not detect a reactive web environment #51730
  • spring.http.clients.cookie-handling has no effect when using a reactive client backed by an HttpComponents connector #51724
  • Connection fails when rabbitmq Docker Compose service is configured to use SSL #51667
  • SBOM-related manifest attributes are missing from Maven-packaged wars #51651
  • When server.reactive.session.cookie.same-site is not set, session cookies have no SameSite attribute #51639
  • OAuth2 resource server ignores authorities-claim-delimiter when set on its own #51630
  • developmentOnly and testAndDevelopmentOnly configurations do not specify any attributes causing potential resolution problems #51623
  • In a reactive web application, Cloud Foundry security integration returns a 500 rather than a 503 when the cloud controller URL is unavailable #51614
  • Layer temp file is not deleted when layer creation fails #51581
  • Docker Compose integration for RabbitMQ skips credential fallbacks when an environment variable has no value #51578
  • Some assertion messages name the wrong parameter #51574
  • OAuth2ResourceServerProperties.Jwt has a setter that does not match its getter #51562
  • jarmode tools commands print stacktrace instead of an error message #51547
  • Docker Compose ProcessRunner can hang or leave orphan processes #51538
  • NestedByteChannel.read(ByteBuffer) incorrectly returns 0 when buffer could not be filled #51520
  • Customizer null checks in HTTP client builders assert the wrong attribute #51513
  • SSL host config customizations may be lost during Tomcat initialization #51511
  • SQL Server Docker Compose integration may duplicate the JDBC URL's encrypt parameter #51481
  • WritableJson.toByteArray() may corrupt supplementary characters #51464
  • SSL host config customizations are lost when reloading SSL bundles #51457

... (truncated)

Commits
  • 634e6fd Release 4.1.2
  • 6b43cf1 Upgrade to Spring WS 5.0.3
  • a73dfad Upgrade to Spring Security 7.1.2
  • 0485f1e Upgrade to Spring RESTDocs 4.0.2
  • de2c11a Upgrade to Spring Pulsar 2.0.8
  • 8d0359e Upgrade to Spring LDAP 4.1.2
  • f22c6e6 Upgrade to Spring Kafka 4.1.2
  • ed55709 Upgrade to Spring Integration 7.1.2
  • 2e88a38 Upgrade to Spring HATEOAS 3.1.3
  • 0d69ce5 Upgrade to Spring gRPC 1.1.2
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-jackson from 4.1.1 to 4.1.2

Release notes

Sourced from org.springframework.boot:spring-boot-jackson's releases.

v4.1.2

⭐ New Features

  • Add TWENTY_SEVEN to JavaVersion enum #51426

🐞 Bug Fixes

  • OriginTrackedResource does not implement equals correctly #52267
  • OriginTrackedPropertiesLoader drops properties whose name starts with # or ! #52265
  • JWTs are rejected when issuer-uri is empty and jwk-set-uri is set #52260
  • Package manifest attributes are missing for nested jars without directory entries #52258
  • Logback ColorConverter unnecessarily parses its options for every log event #52228
  • Empty system property in TestPropertyValues is cleared instead of being restored to its empty value #52208
  • Graceful shutdown of Tomcat or Jetty may call back with REQUESTS_ACTIVE when stop is called immediately after shutDownGracefully on an idle server #52197
  • NettyWebServer stop may hang when called immediately after shutDownGracefully #52196
  • gRPC client 'grpc' load balancing fails to bind with a NullPointerException when no child policies are configured #52193
  • Prevent gRPC client properties from overriding user customizations #52175
  • MongoDB fails to connect when credentials contain a space #52168
  • Authentication fails when password configured in spring.elasticsearch.uris contains a colon #52166
  • Logging can be lost when a context is paused by the test context framework #52088
  • Docker Compose support for MongoDB fails to connect when credentials contain a character that requires URL encoding #52084
  • Jersey does not use the endpoint ObjectMapper when Actuator is running on a separate port #51982
  • Fractions of a second are handled incorrectly when configuring gRPC service config durations #51957
  • Configuration property descriptions may be lost when building incrementally with Gradle #51925
  • BasicJsonParser mishandles escaped characters in nested lists and maps #51908
  • Zero week value conversion fails with 'intValue cannot be extracted from WEEKS' exception #51894
  • App fails to start when using DevTools and manually configuring JDBC or R2DBC without spring-boot-jdbc or spring-boot-r2dbc #51890
  • Docker Compose support incorrectly recognizes MARIADB_ALLOW_EMPTY_PASSWORD instead of MARIADB_ALLOW_EMPTY_ROOT_PASSWORD #51888
  • Auto-configured Kotlinx Serialization JSON codec customization is not applied #51877
  • NullPointerException can be thrown when using uber jars due to a race condition in NestedJarFileResources #51745
  • DevTools does not detect a reactive web environment #51730
  • spring.http.clients.cookie-handling has no effect when using a reactive client backed by an HttpComponents connector #51724
  • Connection fails when rabbitmq Docker Compose service is configured to use SSL #51667
  • SBOM-related manifest attributes are missing from Maven-packaged wars #51651
  • When server.reactive.session.cookie.same-site is not set, session cookies have no SameSite attribute #51639
  • OAuth2 resource server ignores authorities-claim-delimiter when set on its own #51630
  • developmentOnly and testAndDevelopmentOnly configurations do not specify any attributes causing potential resolution problems #51623
  • In a reactive web application, Cloud Foundry security integration returns a 500 rather than a 503 when the cloud controller URL is unavailable #51614
  • Layer temp file is not deleted when layer creation fails #51581
  • Docker Compose integration for RabbitMQ skips credential fallbacks when an environment variable has no value #51578
  • Some assertion messages name the wrong parameter #51574
  • OAuth2ResourceServerProperties.Jwt has a setter that does not match its getter #51562
  • jarmode tools commands print stacktrace instead of an error message #51547
  • Docker Compose ProcessRunner can hang or leave orphan processes #51538
  • NestedByteChannel.read(ByteBuffer) incorrectly returns 0 when buffer could not be filled #51520
  • Customizer null checks in HTTP client builders assert the wrong attribute #51513
  • SSL host config customizations may be lost during Tomcat initialization #51511
  • SQL Server Docker Compose integration may duplicate the JDBC URL's encrypt parameter #51481
  • WritableJson.toByteArray() may corrupt supplementary characters #51464
  • SSL host config customizations are lost when reloading SSL bundles #51457

... (truncated)

Commits
  • 634e6fd Release 4.1.2
  • 6b43cf1 Upgrade to Spring WS 5.0.3
  • a73dfad Upgrade to Spring Security 7.1.2
  • 0485f1e Upgrade to Spring RESTDocs 4.0.2

@dependabot
fix: Bump the gradle group with 10 updates
ff1e924 
Bumps the gradle group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [com.google.errorprone:error_prone_core](https://github.com/google/error-prone) | `2.50.0` | `2.51.0` |
| [org.jacoco:org.jacoco.agent](https://github.com/jacoco/jacoco) | `0.8.15` | `0.8.16` |
| [com.uber.nullaway:nullaway](https://github.com/uber/NullAway) | `0.14.2` | `0.14.3` |
| [com.palantir.javaformat:palantir-java-format](https://github.com/palantir/palantir-java-format) | `2.102.0` | `2.103.0` |
| [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot:spring-boot-configuration-processor](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot:spring-boot-jackson](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot:spring-boot-starter](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot:spring-boot-test](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot:spring-boot-testcontainers](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |


Updates `com.google.errorprone:error_prone_core` from 2.50.0 to 2.51.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.50.0...v2.51.0)

Updates `org.jacoco:org.jacoco.agent` from 0.8.15 to 0.8.16
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.15...v0.8.16)

Updates `com.uber.nullaway:nullaway` from 0.14.2 to 0.14.3
- [Release notes](https://github.com/uber/NullAway/releases)
- [Changelog](https://github.com/uber/NullAway/blob/master/CHANGELOG.md)
- [Commits](uber/NullAway@v0.14.2...v0.14.3)

Updates `com.palantir.javaformat:palantir-java-format` from 2.102.0 to 2.103.0
- [Release notes](https://github.com/palantir/palantir-java-format/releases)
- [Commits](palantir/palantir-java-format@2.102.0...2.103.0)

Updates `org.springframework.boot:spring-boot-dependencies` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-configuration-processor` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-jackson` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-starter` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-test` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-testcontainers` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-configuration-processor` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-jackson` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-starter` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-test` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-testcontainers` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

---
updated-dependencies:
- dependency-name: com.google.errorprone:error_prone_core
  dependency-version: 2.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.jacoco:org.jacoco.agent
  dependency-version: 0.8.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: com.uber.nullaway:nullaway
  dependency-version: 0.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: com.palantir.javaformat:palantir-java-format
  dependency-version: 2.103.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: org.springframework.boot:spring-boot-configuration-processor
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: org.springframework.boot:spring-boot-jackson
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: org.springframework.boot:spring-boot-starter
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: org.springframework.boot:spring-boot-test
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: org.springframework.boot:spring-boot-testcontainers
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: org.springframework.boot:spring-boot-configuration-processor
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: org.springframework.boot:spring-boot-jackson
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: org.springframework.boot:spring-boot-starter
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: org.springframework.boot:spring-boot-test
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: org.springframework.boot:spring-boot-testcontainers
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner November 4, 2026 07:07
@goloroden
goloroden enabled auto-merge (squash) November 4, 2026 23:08
@goloroden
goloroden merged commit 1a2ab54 into main Nov 4, 2026
3 checks passed
@goloroden
goloroden deleted the dependabot/gradle/gradle-3b9662e4a4 branch November 4, 2026 23:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@goloroden goloroden goloroden approved these changes

Assignees

@goloroden goloroden

Labels

Dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@goloroden