Skip to content

Bump the minor-patch group in /ams-cap-bookshop with 8 updates#12

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/ams-cap-bookshop/minor-patch-fc8d2b8015
Open

Bump the minor-patch group in /ams-cap-bookshop with 8 updates#12
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/ams-cap-bookshop/minor-patch-fc8d2b8015

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Mar 16, 2026

Bumps the minor-patch group in /ams-cap-bookshop with 8 updates:

Package From To
com.sap.cds:cds-services-bom 4.7.0 4.8.0
com.sap.cds:cds-maven-plugin 4.7.0 4.8.0
com.sap.cloud.security.ams:ams-bom 4.0.5 4.0.6
com.sap.cloud.security:java-api 3.6.6 3.6.8
org.apache.maven.plugins:maven-compiler-plugin 3.14.0 3.15.0
org.apache.maven.plugins:maven-surefire-plugin 3.5.3 3.5.5
org.codehaus.mojo:flatten-maven-plugin 1.7.0 1.7.3
org.apache.maven.plugins:maven-enforcer-plugin 3.5.0 3.6.2

Updates com.sap.cds:cds-services-bom from 4.7.0 to 4.8.0

Updates com.sap.cds:cds-maven-plugin from 4.7.0 to 4.8.0

Updates com.sap.cloud.security.ams:ams-bom from 4.0.5 to 4.0.6

Commits

Updates com.sap.cloud.security:java-api from 3.6.6 to 3.6.8

Release notes

Sourced from com.sap.cloud.security:java-api's releases.

3.6.8

3.6.8

  • Fix hybrid authentication issue where IAS Configuration was incorrectly used for XSUAA token exchange instead of XSUAA Configuration in HybridIdentityServicesAutoConfiguration

Dependency upgrades

  • Bump org.eclipse.jetty:jetty-bom from 12.1.6 to 12.1.7

3.6.7

  • Fix FIPS compatibility by using default KeyManagerFactory algorithm instead of hardcoded "SunX509"
  • Fix "Connection pool shut down" exception by properly reusing cached SSL connections

Dependency upgrades

  • Bump org.eclipse.jetty:jetty-bom from 12.1.5 to 12.1.6
  • Bump io.projectreactor:reactor-core from 3.8.2 to 3.8.3
  • Bump io.projectreactor:reactor-test from 3.8.2 to 3.8.3
  • Bump org.mockito:mockito-core from 5.21.0 to 5.22.0
  • Bump org.assertj:assertj-core from 3.27.6 to 3.27.7
  • Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.4 to 3.5.5
Changelog

Sourced from com.sap.cloud.security:java-api's changelog.

3.6.8

  • Fix hybrid authentication issue where IAS Configuration was incorrectly used for XSUAA token exchange instead of XSUAA Configuration in HybridIdentityServicesAutoConfiguration

Dependency upgrades

  • Bump org.eclipse.jetty:jetty-bom from 12.1.6 to 12.1.7

3.6.7

  • Fix FIPS compatibility by using default KeyManagerFactory algorithm instead of hardcoded "SunX509"
  • Fix "Connection pool shut down" exception by properly reusing cached SSL connections

Dependency upgrades

  • Bump org.eclipse.jetty:jetty-bom from 12.1.5 to 12.1.6
  • Bump io.projectreactor:reactor-core from 3.8.2 to 3.8.3
  • Bump io.projectreactor:reactor-test from 3.8.2 to 3.8.3
  • Bump org.mockito:mockito-core from 5.21.0 to 5.22.0
  • Bump org.assertj:assertj-core from 3.27.6 to 3.27.7
  • Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.4 to 3.5.5
Commits

Updates com.sap.cds:cds-maven-plugin from 4.7.0 to 4.8.0

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 to 3.15.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.15.0

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

3.14.1

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

Commits
  • 9290cb3 [maven-release-plugin] prepare release maven-compiler-plugin-3.15.0
  • 3657d40 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness
  • 7bbf805 Bump plexusCompilerVersion from 2.16.1 to 2.16.2
  • 57fa938 Bump org.apache.maven.plugins:maven-plugins from 46 to 47
  • 385e3f2 Fix Java 25 compatibility during integration tests (#1020)
  • 6b34423 Bump org.apache.maven.plugins:maven-plugins from 45 to 46
  • aaeb9c6 [MCOMPILER-540] useIncrementalCompilation=false may add generated sources to ...
  • 6e3db9d Bump org.codehaus.plexus:plexus-java from 1.5.1 to 1.5.2
  • 0fe9b84 Remove declaration of "plexus-snapshots" repository (#1010)
  • 35f6800 Bump org.ow2.asm:asm from 9.9 to 9.9.1
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.3 to 3.5.5

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.5

🚀 New features and improvements

🐛 Bug Fixes

  • Use PowerShell instead of WMIC for detecting zombie process on Windows (#3258) @​jbliznak. Please note if you are using Windows with Java 8 and not PowerShell (you have options to: use Java 9+, install PowerShell or stay on Surefire 3.5.4)
  • Properly work with test failures caused during beforeAll phase (#3194) @​Frawless

📝 Documentation updates

  • Clarify how late placeholder replacement (@{...}) deals with (#3208) @​kwin

👻 Maintenance

🔧 Build

📦 Dependency updates

... (truncated)

Commits
  • 968cb38 [maven-release-plugin] prepare release surefire-3.5.5
  • 8e7dc41 Reapply "Replace runing external process and parsing output with simple Proce...
  • 4ced57c Revert "Replace runing external process and parsing output with simple Proces…"
  • 8496d9a Bump org.xmlunit:xmlunit-core from 2.10.4 to 2.11.0 (#3209)
  • 68265e5 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness (#3260)
  • 0b19014 Replace runing external process and parsing output with simple ProcessHandle ...
  • 688f8c4 Use PowerShell instead of WMIC for detecting zombie process on Windows (#3258)
  • e5c01a6 Build only by the latest Maven on Jenkins (#3255)
  • 9c99e97 Fix Jenkin badges in README (#3254)
  • 20930ea Bump parent from 44 to 47 (#3253)
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:flatten-maven-plugin from 1.7.0 to 1.7.3

Release notes

Sourced from org.codehaus.mojo:flatten-maven-plugin's releases.

1.7.3

🐛 Bug Fixes

  • Fixes condition-activated profiles not considered in effective model (#481) @​oldhen

📦 Dependency updates

1.7.2

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

  • Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#470) @dependabot[bot]
  • Bump mavenVersion from 3.9.10 to 3.9.11 (#467) @dependabot[bot]
  • Bump com.fasterxml.jackson.core:jackson-core from 2.3.3 to 2.15.0 in /src/it/projects/bom-flattenMode/bom (#464) @dependabot[bot]
  • Bump com.fasterxml.jackson.core:jackson-core from 2.13.0 to 2.15.0 in /src/it/projects/bom-pomElements/bom (#463) @dependabot[bot]

1.7.1

🐛 Bug Fixes

  • Fix #400 - Preserve POM content ordering (and formatting) on resolveCiFriendliesOnly flattenMode (#446) @​stechio
  • Fix FilteringValueSourceWrapper for a newer version of plexus-interpolation, Maven 3.9.10 (#453) @​slawekjaranowski

📝 Documentation updates

... (truncated)

Commits
  • bd7c560 [maven-release-plugin] prepare release 1.7.3
  • aee23ca Bump org.assertj:assertj-core from 3.27.4 to 3.27.5
  • 7da52c3 Fixes condition-activated profiles not considered in effective model (#481)
  • 7680ed4 Bump org.codehaus.mojo:mojo-parent from 92 to 93
  • deae474 Bump org.assertj:assertj-core from 3.27.3 to 3.27.4
  • 3189718 [maven-release-plugin] prepare for next development iteration
  • 9d80041 [maven-release-plugin] prepare release 1.7.2
  • 6c62863 Clarify example in usage about updatePomFile behavior
  • fc35f4c Add stale GitHub Action
  • 0fb1ea0 Add Maven 4 to build matrix on GitHub Actions (#474)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.5.0 to 3.6.2

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.6.2

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

  • Fix NPE when a classifier part is specified in bannedDependencies (#905) @​harrisric

📝 Documentation updates

👻 Maintenance

... (truncated)

Commits
  • 82ba770 [maven-release-plugin] prepare release enforcer-3.6.2
  • 5313c70 Bump m-invoker-p to 3.9.1
  • ee5abee Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0
  • 6c5a152 Bump org.assertj:assertj-core from 3.27.5 to 3.27.6
  • 89ccb70 Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 (#931)
  • 03ed82d Update Version Ranges link in site.xml (#926)
  • d282dc4 Fixes #920 - Remove usage of Stack
  • 27e1f46 Use SessionData for cache storage (#930)
  • a1bac9b Fix formatting typo in dependencyConvergence.apt.vm
  • 870a1ed Correct support parameters documentation for banned repositories rule
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-patch group in /ams-cap-bookshop with 8 updates:

| Package | From | To |
| --- | --- | --- |
| com.sap.cds:cds-services-bom | `4.7.0` | `4.8.0` |
| com.sap.cds:cds-maven-plugin | `4.7.0` | `4.8.0` |
| [com.sap.cloud.security.ams:ams-bom](https://github.com/SAP/cloud-identity-developer-guide) | `4.0.5` | `4.0.6` |
| [com.sap.cloud.security:java-api](https://github.com/SAP/cloud-security-xsuaa-integration) | `3.6.6` | `3.6.8` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.0` | `3.15.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.5` |
| [org.codehaus.mojo:flatten-maven-plugin](https://github.com/mojohaus/flatten-maven-plugin) | `1.7.0` | `1.7.3` |
| [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.5.0` | `3.6.2` |


Updates `com.sap.cds:cds-services-bom` from 4.7.0 to 4.8.0

Updates `com.sap.cds:cds-maven-plugin` from 4.7.0 to 4.8.0

Updates `com.sap.cloud.security.ams:ams-bom` from 4.0.5 to 4.0.6
- [Commits](https://github.com/SAP/cloud-identity-developer-guide/commits)

Updates `com.sap.cloud.security:java-api` from 3.6.6 to 3.6.8
- [Release notes](https://github.com/SAP/cloud-security-xsuaa-integration/releases)
- [Changelog](https://github.com/SAP/cloud-security-services-integration-library/blob/main/CHANGELOG.md)
- [Commits](SAP/cloud-security-services-integration-library@3.6.6...3.6.8)

Updates `com.sap.cds:cds-maven-plugin` from 4.7.0 to 4.8.0

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.0 to 3.15.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.0...maven-compiler-plugin-3.15.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.3 to 3.5.5
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.5)

Updates `org.codehaus.mojo:flatten-maven-plugin` from 1.7.0 to 1.7.3
- [Release notes](https://github.com/mojohaus/flatten-maven-plugin/releases)
- [Commits](mojohaus/flatten-maven-plugin@1.7.0...1.7.3)

Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.5.0 to 3.6.2
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](apache/maven-enforcer@enforcer-3.5.0...enforcer-3.6.2)

---
updated-dependencies:
- dependency-name: com.sap.cds:cds-services-bom
  dependency-version: 4.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: com.sap.cds:cds-maven-plugin
  dependency-version: 4.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: com.sap.cloud.security.ams:ams-bom
  dependency-version: 4.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: com.sap.cloud.security:java-api
  dependency-version: 3.6.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: com.sap.cds:cds-maven-plugin
  dependency-version: 4.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: org.codehaus.mojo:flatten-maven-plugin
  dependency-version: 1.7.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.6.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants