Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 31, 2025

Bumps the all-maven-dependencies group with 6 updates in the / directory:

Package From To
org.springframework.boot:spring-boot-starter-parent 3.5.3 3.5.4
com.sap.cds:cds-services-bom 4.1.1 4.2.0
com.sap.cds:cds-maven-plugin 4.1.1 4.2.0
com.sap.cloud.security:java-bom 3.6.0 3.6.1
org.codehaus.mojo:flatten-maven-plugin 1.7.1 1.7.2
org.apache.maven.plugins:maven-enforcer-plugin 3.6.0 3.6.1

Bumps the all-maven-dependencies group with 6 updates in the /srv directory:

Package From To
org.springframework.boot:spring-boot-starter-parent 3.5.3 3.5.4
com.sap.cds:cds-maven-plugin 4.1.1 4.2.0
com.sap.cds:cds-services-bom 4.1.1 4.2.0
com.sap.cloud.security:java-bom 3.6.0 3.6.1
org.codehaus.mojo:flatten-maven-plugin 1.7.1 1.7.2
org.apache.maven.plugins:maven-enforcer-plugin 3.6.0 3.6.1

Updates org.springframework.boot:spring-boot-starter-parent from 3.5.3 to 3.5.4

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.5.4

🐞 Bug Fixes

  • LambdaSafe.withFilter is not public #46474
  • Executable JAR application class encounters performance issues when used with Palo Alto Network Cortex XDR agent #46402
  • Runtime dependencies are missing from aotCompileClasspath and aotTestCompileClasspath when using Kotlin #46398
  • Additional fields for structured JSON logging incompatible with nested ecs logging in 3.5.x #46351
  • Change in DefaultErrorAttributes alters the shape of API validation error responses #46260
  • jdbc.connections.active and jdbc.connections.idle metrics are not available when using Hikari in a native image #46225
  • developmentOnly and testAndDevelopmentOnly dependencies may prevent implementation dependencies from being included in the uber-jar #46205
  • Hash calculation for uber archive entries that require unpacking is inefficient #46203
  • Permissions are applied inconsistently when building uber archives with Gradle #46194
  • Environment variables using legacy dash format can no longer be bound #46184
  • EmbeddedWebServerFactoryCustomizerAutoConfiguration fails when undertow-core is on the classpath and undertow-servlet is not #46180
  • Executable JAR application class encounters performance issues #46177
  • Executable JAR application class encounters performance issues #46176
  • Setting spring.reactor.context-propagation has no effect when lazy initialization is enabled #46174
  • Setting spring.netty.leak-detection has no effect when lazy initialization is enabled #46170
  • SslInfo does not use its Clock when checking certificate validity #46011

📔 Documentation

  • Fix description of spring.batch.job.enabled #46247
  • Fix broken Kotlin examples in reference documentation #46168
  • Add Logback Access Reactor Netty to community starters #46060

🔨 Dependency Upgrades

  • Upgrade to ActiveMQ 6.1.7 #46373
  • Upgrade to Caffeine 3.2.2 #46432
  • Upgrade to Couchbase Client 3.8.2 #46460
  • Upgrade to GraphQL Java 24.1 #46395
  • Upgrade to Groovy 4.0.28 #46516
  • Upgrade to Hibernate 6.6.22.Final #46492
  • Upgrade to HikariCP 6.3.1 #46493
  • Upgrade to Infinispan 15.2.5.Final #46461
  • Upgrade to Jackson Bom 2.19.2 #46494
  • Upgrade to Jetty 12.0.23 #46375
  • Upgrade to MariaDB 3.5.4 #46376
  • Upgrade to Maven Invoker Plugin 3.9.1 #46377
  • Upgrade to Micrometer 1.15.2 #46280
  • Upgrade to Micrometer Tracing 1.5.2 #46281
  • Upgrade to MSSQL JDBC 12.10.1.jre11 #46378
  • Upgrade to MySQL 9.3.0 #46371
  • Upgrade to Neo4j Java Driver 5.28.9 #46434
  • Upgrade to Netty 4.1.123.Final #46435
  • Upgrade to Prometheus Client 1.3.10 #46379
  • Upgrade to Reactor Bom 2024.0.8 #46282
  • Upgrade to RxJava3 3.1.11 #46380
  • Upgrade to Spring AMQP 3.2.6 #46283

... (truncated)

Commits
  • 925f9bc Release v3.5.4
  • d82fb35 Merge branch '3.4.x' into 3.5.x
  • 4b6064f Next development version (v3.4.9-SNAPSHOT)
  • a39c8f0 Merge branch '3.4.x' into 3.5.x
  • 99d53de Upgrade to Spring Integration 6.5.1
  • 1b4aad5 Upgrade to Groovy 4.0.28
  • 3f0f79b Upgrade to Spring Integration 6.4.6
  • ff8443c Upgrade to Groovy 4.0.28
  • aed8550 Merge branch '3.4.x' into 3.5.x
  • 5406976 Apply commercial input consistently
  • Additional commits viewable in compare view

Updates com.sap.cds:cds-services-bom from 4.1.1 to 4.2.0

Updates com.sap.cds:cds-maven-plugin from 4.1.1 to 4.2.0

Updates com.sap.cloud.security:java-bom from 3.6.0 to 3.6.1

Release notes

Sourced from com.sap.cloud.security:java-bom's releases.

3.6.1

  • Fix spring retry configuration for token service
  • added documentation of retry feature to README
  • Improve error message when client certificate for proof token validation is missing

Dependency upgrades

  • Bump org.eclipse.jetty.version from 12.0.21 to 12.0.22
  • bump caffeine version to 3.2.0
  • Bump org.mockito:mockito-core from 5.17.0 to 5.18.0
  • Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.4 to 5.5
  • Bump com.sap.cloud.environment.servicebinding:java-bom
  • Bump org.json:json from 20250107 to 20250517
  • Bump commons-io:commons-io from 2.18.0 to 2.19.0
  • Bump spring.core.version from 6.2.5 to 6.2.7
  • Bump io.github.hakky54:logcaptor from 2.10.2 to 2.11.0
  • Bump spring.security.version from 6.4.4 to 6.4.5
  • Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.3 to 5.4.4
  • Bump spring.boot.version from 3.4.4 to 3.4.5
  • Bump org.wiremock:wiremock-standalone from 3.12.1 to 3.13.0
  • Bump org.eclipse.jetty.version from 12.0.19 to 12.0.21
  • Bump io.projectreactor:reactor-test from 3.7.4 to 3.7.6
  • Bump io.projectreactor:reactor-core from 3.7.4 to 3.7.6
Changelog

Sourced from com.sap.cloud.security:java-bom's changelog.

3.6.1

  • Fix spring retry configuration for token service
  • added documentation of retry feature to README
  • Improve error message when client certificate for proof token validation is missing

Dependency upgrades

Bump org.eclipse.jetty.version from 12.0.21 to 12.0.22 bump caffeine version to 3.2.0 Bump org.mockito:mockito-core from 5.17.0 to 5.18.0 Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.4 to 5.5 Bump com.sap.cloud.environment.servicebinding:java-bom Bump org.json:json from 20250107 to 20250517 Bump commons-io:commons-io from 2.18.0 to 2.19.0 Bump spring.core.version from 6.2.5 to 6.2.7 Bump io.github.hakky54:logcaptor from 2.10.2 to 2.11.0 Bump spring.security.version from 6.4.4 to 6.4.5 Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.3 to 5.4.4 Bump spring.boot.version from 3.4.4 to 3.4.5 Bump org.wiremock:wiremock-standalone from 3.12.1 to 3.13.0 Bump org.eclipse.jetty.version from 12.0.19 to 12.0.21 Bump io.projectreactor:reactor-test from 3.7.4 to 3.7.6 Bump io.projectreactor:reactor-core from 3.7.4 to 3.7.6

Commits
  • 6b0e5f3 remove repository config for old sonatype plugin (#1821)
  • 594a6ec Maven central preparation (#1819)
  • e2eb108 added version references to POMs and other minor informations (#1815)
  • a52b788 Set release version to 3.6.1 (#1812)
  • 4d50c95 Bump com.github.spotbugs:spotbugs-maven-plugin from 4.9.3.0 to 4.9.3.1 (#1799)
  • f661cec Bump org.apache.maven.plugins:maven-pmd-plugin from 3.26.0 to 3.27.0 (#1800)
  • fb1de53 Bump spring.security.version from 6.5.0 to 6.5.1 (#1797)
  • db8bb45 Bump spring.boot.version from 3.5.0 to 3.5.3 (#1798)
  • 1244f0b Bump log4j2.version from 2.24.3 to 2.25.0 (#1796)
  • 0118972 Bump spring.core.version from 6.2.7 to 6.2.8 (#1795)
  • Additional commits viewable in compare view

Updates com.sap.cds:cds-maven-plugin from 4.1.1 to 4.2.0

Updates org.codehaus.mojo:flatten-maven-plugin from 1.7.1 to 1.7.2

Release notes

Sourced from org.codehaus.mojo:flatten-maven-plugin's releases.

1.7.2

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

  • Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#470) @dependabot[bot]
  • Bump mavenVersion from 3.9.10 to 3.9.11 (#467) @dependabot[bot]
  • Bump com.fasterxml.jackson.core:jackson-core from 2.3.3 to 2.15.0 in /src/it/projects/bom-flattenMode/bom (#464) @dependabot[bot]
  • Bump com.fasterxml.jackson.core:jackson-core from 2.13.0 to 2.15.0 in /src/it/projects/bom-pomElements/bom (#463) @dependabot[bot]
Commits
  • 9d80041 [maven-release-plugin] prepare release 1.7.2
  • 6c62863 Clarify example in usage about updatePomFile behavior
  • fc35f4c Add stale GitHub Action
  • 0fb1ea0 Add Maven 4 to build matrix on GitHub Actions (#474)
  • 35e0e0c Improve assertions in no-overwrite tests
  • e193a20 Add a missing plugin version in ITS
  • 87009a4 Add integration test for install and deploy flattened pom
  • e02117c Create missing target directories, use NIO for file block operations
  • f9289bf Bump commons-io:commons-io from 2.19.0 to 2.20.0
  • 227ae5e Bump mavenVersion from 3.9.10 to 3.9.11
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

  • Fix NPE when a classifier part is specified in bannedDependencies (#905) @​harrisric

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • 9b9b705 [maven-release-plugin] prepare release enforcer-3.6.1
  • 469f45c Move contributing information into README - fix cla link
  • fec424a Move contributing information into README
  • 3abe11d Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 (#910)
  • d58be76 Improve performance of transitive dependency checks (#904)
  • 1f7ac3c null analysis (#907)
  • 3bfbff8 Fix some typos
  • 8da0311 Remove unused javax.annotations dependency (#899)
  • 06bcf29 Remove unused methods (#900)
  • b25c800 Fix NPE when a classifier part is specified but an artifact classifier is nul...
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-parent from 3.5.3 to 3.5.4

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.5.4

🐞 Bug Fixes

  • LambdaSafe.withFilter is not public #46474
  • Executable JAR application class encounters performance issues when used with Palo Alto Network Cortex XDR agent #46402
  • Runtime dependencies are missing from aotCompileClasspath and aotTestCompileClasspath when using Kotlin #46398
  • Additional fields for structured JSON logging incompatible with nested ecs logging in 3.5.x #46351
  • Change in DefaultErrorAttributes alters the shape of API validation error responses #46260
  • jdbc.connections.active and jdbc.connections.idle metrics are not available when using Hikari in a native image #46225
  • developmentOnly and testAndDevelopmentOnly dependencies may prevent implementation dependencies from being included in the uber-jar #46205
  • Hash calculation for uber archive entries that require unpacking is inefficient #46203
  • Permissions are applied inconsistently when building uber archives with Gradle #46194
  • Environment variables using legacy dash format can no longer be bound #46184
  • EmbeddedWebServerFactoryCustomizerAutoConfiguration fails when undertow-core is on the classpath and undertow-servlet is not #46180
  • Executable JAR application class encounters performance issues #46177
  • Executable JAR application class encounters performance issues #46176
  • Setting spring.reactor.context-propagation has no effect when lazy initialization is enabled #46174
  • Setting spring.netty.leak-detection has no effect when lazy initialization is enabled #46170
  • SslInfo does not use its Clock when checking certificate validity #46011

📔 Documentation

  • Fix description of spring.batch.job.enabled #46247
  • Fix broken Kotlin examples in reference documentation #46168
  • Add Logback Access Reactor Netty to community starters #46060

🔨 Dependency Upgrades

  • Upgrade to ActiveMQ 6.1.7 #46373
  • Upgrade to Caffeine 3.2.2 #46432
  • Upgrade to Couchbase Client 3.8.2 #46460
  • Upgrade to GraphQL Java 24.1 #46395
  • Upgrade to Groovy 4.0.28 #46516
  • Upgrade to Hibernate 6.6.22.Final #46492
  • Upgrade to HikariCP 6.3.1 #46493
  • Upgrade to Infinispan 15.2.5.Final #46461
  • Upgrade to Jackson Bom 2.19.2 #46494
  • Upgrade to Jetty 12.0.23 #46375
  • Upgrade to MariaDB 3.5.4 #46376
  • Upgrade to Maven Invoker Plugin 3.9.1 #46377
  • Upgrade to Micrometer 1.15.2 #46280
  • Upgrade to Micrometer Tracing 1.5.2 #46281
  • Upgrade to MSSQL JDBC 12.10.1.jre11 #46378
  • Upgrade to MySQL 9.3.0 #46371
  • Upgrade to Neo4j Java Driver 5.28.9 #46434
  • Upgrade to Netty 4.1.123.Final #46435
  • Upgrade to Prometheus Client 1.3.10 #46379
  • Upgrade to Reactor Bom 2024.0.8 #46282
  • Upgrade to RxJava3 3.1.11 #46380
  • Upgrade to Spring AMQP 3.2.6 #46283

... (truncated)

Commits
  • 925f9bc Release v3.5.4
  • d82fb35 Merge branch '3.4.x' into 3.5.x
  • 4b6064f Next development version (v3.4.9-SNAPSHOT)
  • a39c8f0 Merge branch '3.4.x' into 3.5.x
  • 99d53de Upgrade to Spring Integration 6.5.1
  • 1b4aad5 Upgrade to Groovy 4.0.28
  • 3f0f79b Upgrade to Spring Integration 6.4.6
  • ff8443c Upgrade to Groovy 4.0.28
  • aed8550 Merge branch '3.4.x' into 3.5.x
  • 5406976 Apply commercial input consistently
  • Additional commits viewable in compare view

Updates com.sap.cds:cds-maven-plugin from 4.1.1 to 4.2.0

Updates com.sap.cds:cds-services-bom from 4.1.1 to 4.2.0

Updates com.sap.cloud.security:java-bom from 3.6.0 to 3.6.1

Release notes

Sourced from com.sap.cloud.security:java-bom's releases.

3.6.1

  • Fix spring retry configuration for token service
  • added documentation of retry feature to README
  • Improve error message when client certificate for proof token validation is missing

Dependency upgrades

  • Bump org.eclipse.jetty.version from 12.0.21 to 12.0.22
  • bump caffeine version to 3.2.0
  • Bump org.mockito:mockito-core from 5.17.0 to 5.18.0
  • Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.4 to 5.5
  • Bump com.sap.cloud.environment.servicebinding:java-bom
  • Bump org.json:json from 20250107 to 20250517
  • Bump commons-io:commons-io from 2.18.0 to 2.19.0
  • Bump spring.core.version from 6.2.5 to 6.2.7
  • Bump io.github.hakky54:logcaptor from 2.10.2 to 2.11.0
  • Bump spring.security.version from 6.4.4 to 6.4.5
  • Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.3 to 5.4.4
  • Bump spring.boot.version from 3.4.4 to 3.4.5
  • Bump org.wiremock:wiremock-standalone from 3.12.1 to 3.13.0
  • Bump org.eclipse.jetty.version from 12.0.19 to 12.0.21
  • Bump io.projectreactor:reactor-test from 3.7.4 to 3.7.6
  • Bump io.projectreactor:reactor-core from 3.7.4 to 3.7.6
Changelog

Sourced from com.sap.cloud.security:java-bom's changelog.

3.6.1

  • Fix spring retry configuration for token service
  • added documentation of retry feature to README
  • Improve error message when client certificate for proof token validation is missing

Dependency upgrades

Bump org.eclipse.jetty.version from 12.0.21 to 12.0.22 bump caffeine version to 3.2.0 Bump org.mockito:mockito-core from 5.17.0 to 5.18.0 Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.4 to 5.5 Bump com.sap.cloud.environment.servicebinding:java-bom Bump org.json:json from 20250107 to 20250517 Bump commons-io:commons-io from 2.18.0 to 2.19.0 Bump spring.core.version from 6.2.5 to 6.2.7 Bump io.github.hakky54:logcaptor from 2.10.2 to 2.11.0 Bump spring.security.version from 6.4.4 to 6.4.5 Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.3 to 5.4.4 Bump spring.boot.version from 3.4.4 to 3.4.5 Bump org.wiremock:wiremock-standalone from 3.12.1 to 3.13.0 Bump org.eclipse.jetty.version from 12.0.19 to 12.0.21 Bump io.projectreactor:reactor-test from 3.7.4 to 3.7.6 Bump io.projectreactor:reactor-core from 3.7.4 to 3.7.6

Commits
  • 6b0e5f3 remove repository config for old sonatype plugin (#1821)
  • 594a6ec Maven central preparation (#1819)
  • e2eb108 added version references to POMs and other minor informations (#1815)
  • a52b788 Set release version to 3.6.1 (#1812)
  • 4d50c95 Bump com.github.spotbugs:spotbugs-maven-plugin from 4.9.3.0 to 4.9.3.1 (#1799)
  • f661cec Bump org.apache.maven.plugins:maven-pmd-plugin from 3.26.0 to 3.27.0 (#1800)
  • fb1de53 Bump spring.security.version from 6.5.0 to 6.5.1 (#1797)
  • db8bb45 Bump spring.boot.version from 3.5.0 to 3.5.3 (#1798)
  • 1244f0b Bump log4j2.version from 2.24.3 to 2.25.0 (#1796)
  • 0118972 Bump spring.core.version from 6.2.7 to 6.2.8 (#1795)
  • Additional commits viewable in compare view

Updates com.sap.cds:cds-maven-plugin from 4.1.1 to 4.2.0

Updates org.codehaus.mojo:flatten-maven-plugin from 1.7.1 to 1.7.2

Release notes

Sourced from org.codehaus.mojo:flatten-maven-plugin's releases.

1.7.2

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

  • Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#470) @dependabot[bot]
  • Bump mavenVersion from 3.9.10 to 3.9.11 (#467) @dependabot[bot]
  • Bump com.fasterxml.jackson.core:jackson-core from 2.3.3 to 2.15.0 in /src/it/projects/bom-flattenMode/bom (#464) @dependabot[bot]
  • Bump com.fasterxml.jackson.core:jackson-core from 2.13.0 to 2.15.0 in /src/it/projects/bom-pomElements/bom (#463) @dependabot[bot]
Commits
  • 9d80041 [maven-release-plugin] prepare release 1.7.2
  • 6c62863 Clarify example in usage about updatePomFile behavior
  • fc35f4c Add stale GitHub Action
  • 0fb1ea0 Add Maven 4 to build matrix on GitHub Actions (#474)
  • 35e0e0c Improve assertions in no-overwrite tests
  • e193a20 Add a missing plugin version in ITS
  • 87009a4 Add integration test for install and deploy flattened pom
  • e02117c Create missing target directories, use NIO for file block operations
  • f9289bf Bump commons-io:commons-io from 2.19.0 to 2.20.0
  • 227ae5e Bump mavenVersion from 3.9.10 to 3.9.11
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

  • Fix NPE when a classifier part is specified in bannedDependencies (#905) @​harrisric

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • 9b9b705 [maven-release-plugin] prepare release enforcer-3.6.1
  • 469f45c Move contributing information into README - fix cla link
  • fec424a Move contributing information into README
  • 3abe11d Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 (#910)
  • d58be76 Improve performance of transitive dependency checks (#904)
  • 1f7ac3c null analysis (#907)
  • 3bfbff8 Fix some typos
  • 8da0311 Remove unused javax.annotations dependency (#899)
  • 06bcf29 Remove unused methods (#900)
  • b25c800 Fix NPE when a classifier part is specified but an artifact classifier is nul...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates

Bumps the all-maven-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `3.5.3` | `3.5.4` |
| com.sap.cds:cds-services-bom | `4.1.1` | `4.2.0` |
| com.sap.cds:cds-maven-plugin | `4.1.1` | `4.2.0` |
| [com.sap.cloud.security:java-bom](https://github.com/SAP/cloud-security-xsuaa-integration) | `3.6.0` | `3.6.1` |
| [org.codehaus.mojo:flatten-maven-plugin](https://github.com/mojohaus/flatten-maven-plugin) | `1.7.1` | `1.7.2` |
| [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.6.0` | `3.6.1` |

Bumps the all-maven-dependencies group with 6 updates in the /srv directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `3.5.3` | `3.5.4` |
| com.sap.cds:cds-maven-plugin | `4.1.1` | `4.2.0` |
| com.sap.cds:cds-services-bom | `4.1.1` | `4.2.0` |
| [com.sap.cloud.security:java-bom](https://github.com/SAP/cloud-security-xsuaa-integration) | `3.6.0` | `3.6.1` |
| [org.codehaus.mojo:flatten-maven-plugin](https://github.com/mojohaus/flatten-maven-plugin) | `1.7.1` | `1.7.2` |
| [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.6.0` | `3.6.1` |



Updates `org.springframework.boot:spring-boot-starter-parent` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.3...v3.5.4)

Updates `com.sap.cds:cds-services-bom` from 4.1.1 to 4.2.0

Updates `com.sap.cds:cds-maven-plugin` from 4.1.1 to 4.2.0

Updates `com.sap.cloud.security:java-bom` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/SAP/cloud-security-xsuaa-integration/releases)
- [Changelog](https://github.com/SAP/cloud-security-services-integration-library/blob/main/CHANGELOG.md)
- [Commits](SAP/cloud-security-services-integration-library@3.6.0...3.6.1)

Updates `com.sap.cds:cds-maven-plugin` from 4.1.1 to 4.2.0

Updates `org.codehaus.mojo:flatten-maven-plugin` from 1.7.1 to 1.7.2
- [Release notes](https://github.com/mojohaus/flatten-maven-plugin/releases)
- [Commits](mojohaus/flatten-maven-plugin@1.7.1...1.7.2)

Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](apache/maven-enforcer@enforcer-3.6.0...enforcer-3.6.1)

Updates `org.springframework.boot:spring-boot-starter-parent` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.3...v3.5.4)

Updates `com.sap.cds:cds-maven-plugin` from 4.1.1 to 4.2.0

Updates `com.sap.cds:cds-services-bom` from 4.1.1 to 4.2.0

Updates `com.sap.cloud.security:java-bom` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/SAP/cloud-security-xsuaa-integration/releases)
- [Changelog](https://github.com/SAP/cloud-security-services-integration-library/blob/main/CHANGELOG.md)
- [Commits](SAP/cloud-security-services-integration-library@3.6.0...3.6.1)

Updates `com.sap.cds:cds-maven-plugin` from 4.1.1 to 4.2.0

Updates `org.codehaus.mojo:flatten-maven-plugin` from 1.7.1 to 1.7.2
- [Release notes](https://github.com/mojohaus/flatten-maven-plugin/releases)
- [Commits](mojohaus/flatten-maven-plugin@1.7.1...1.7.2)

Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](apache/maven-enforcer@enforcer-3.6.0...enforcer-3.6.1)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-maven-dependencies
- dependency-name: com.sap.cds:cds-services-bom
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-maven-dependencies
- dependency-name: com.sap.cds:cds-maven-plugin
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-maven-dependencies
- dependency-name: com.sap.cloud.security:java-bom
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-maven-dependencies
- dependency-name: com.sap.cds:cds-maven-plugin
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-maven-dependencies
- dependency-name: org.codehaus.mojo:flatten-maven-plugin
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-maven-dependencies
- dependency-name: com.sap.cds:cds-maven-plugin
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-maven-dependencies
- dependency-name: com.sap.cds:cds-services-bom
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-maven-dependencies
- dependency-name: com.sap.cloud.security:java-bom
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-maven-dependencies
- dependency-name: com.sap.cds:cds-maven-plugin
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-maven-dependencies
- dependency-name: org.codehaus.mojo:flatten-maven-plugin
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jul 31, 2025
@beckermarc beckermarc merged commit c4c5a67 into main Jul 31, 2025
2 checks passed
@beckermarc beckermarc deleted the dependabot/maven/all-maven-dependencies-7d67be6f25 branch July 31, 2025 13:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants