Bump the all-maven-dependencies group across 2 directories with 2 updates

[dependabot]

Bumps the all-maven-dependencies group with 2 updates in the / directory: org.springframework.boot:spring-boot-starter-parent and com.sap.cds:cds-feature-attachments.
Bumps the all-maven-dependencies group with 2 updates in the /srv directory: org.springframework.boot:spring-boot-starter-parent and com.sap.cds:cds-feature-attachments.

Updates org.springframework.boot:spring-boot-starter-parent from 3.5.7 to 3.5.8

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.5.8

⚠️ Noteworthy changes

• This release contains a fix to get Testcontainers working with modern Docker versions. If this causes problems in your setup, you can downgrade the minimum Docker API, effectively reverting that change.

🐞 Bug Fixes

• Gradle war task does not exclude starter POMs from lib-provided #48196
• Testcontainers integration fails on Docker 29.0.0 #48192
• SslMeterBinder doesn't register metrics for dynamically added bundles if no bundles exist at bind time #48180
• Properties bound in the child management context ignore the parent's environment prefix #48176
• ssl.chain.expiry metrics doesn't update for dynamically registered SSL bundles #48153
• Auto-configuration exclusions are checked using a different class loader to the one that loads auto-configuration classes #48129
• New arm64 macbooks fail to bootBuildImage due to incorrect platform image #48127
• NullPointerException when using @ConditionalOnSingleCandidate with multiple manually registered singletons #48123
• Buildpack fails with recent Docker installs due to hardcoded version in URL #48102
• Image building may fail when specifying a platform if an image has already been built with a different platform #48098
• Undertow's ServletContext is destroy too early, making it unusable in @PreDestroy methods #48061
• PortInUseException incorrectly thrown on failure to bind port due to Netty IP misconfiguration #48058
• Auto-configured JCacheMetrics cannot be customized #48056
• WebSecurityCustomizer beans are excluded by WebMvcTest #48054
• Devtools Restarter does not work with a parameterless main method #47987
• Setting 'max-uri-tags' does not prevent unlimited meter growth on any AutoConfiguredCompositeMeterRegistry #47923
• Docker response 407 is not handled correctly resulting in no error message #47900
• spring-boot-maven-plugin process-aot goal does not find package-private main method #47780

📔 Documentation

• Revise AWS section of "Deploying to the Cloud" in reference manual #48156
• Fix typo in PortInUseException Javadoc #48133
• Correct section about required setters in "Type-safe Configuration Properties" #48130
• Document EndpointObjectMapper and management.endpoints.jackson.isolated-object-mapper #48114
• Document support for configuring servlet context init parameters using properties #48111
• Clarify how warnings about soon-to-expire SSL certificates are reported #48062
• Document how to use ContextPropagatingTaskDecorator for propagating trace context over thread boundaries #48052
• Use since attribute in configuration properties deprecation consistently #47980
• BootstrapContext#getOrElseThrow has incorrect reference to IllegalStateException #47905
• Clarify when BootstrapContext get methods may return null rather than throwing an exception or calling the fallback supplier #47898
• Document that Actuator endpoint may have at most one extension of each type #47873
• Limit Kotlin API documentation to Kotlin-specific APIs #47859
• Adapt AOTCache documentation to JEP 514 #47274

🔨 Dependency Upgrades

• Downgrade to Cassandra Driver 4.19.0 #47926
• Upgrade to AspectJ 1.9.25 #48005
• Upgrade to Caffeine 3.2.3 #48006
• Upgrade to Cassandra Driver 4.19.2 #48183
• Upgrade to DB2 JDBC 12.1.3.0 #48083
• Upgrade to Hibernate 6.6.36.Final #48148

... (truncated)

Commits

• 17f22c3 Release v3.5.8
• 4f03b44 Merge branch '3.4.x' into 3.5.x
• 3d15c13 Next development version (v3.4.13-SNAPSHOT)
• 3b539aa Merge branch '3.4.x' into 3.5.x
• ee70d55 Upgrade to Spring Framework 6.2.14
• f7b4a8b Merge branch '3.4.x' into 3.5.x
• 4a8d01d Exclude starter POMs from lib-provided when using Gradle
• 0bb0d53 Merge branch '3.4.x' into 3.5.x
• 4625534 Force Testcontainers Docker API version for Docker 29.0.0+ compatibility
• 7891ebf Merge branch '3.4.x' into 3.5.x
• Additional commits viewable in compare view

Updates com.sap.cds:cds-feature-attachments from 1.2.1 to 1.2.2

Release notes

Sourced from com.sap.cds:cds-feature-attachments's releases.

1.2.2

Version 1.2.2 - 2025-11-14

Changed

• Several version bumps

Fixed

• Deletion error when having "fiori": {"draft_messages": true } (#526)

Full Changelog: cap-java/cds-feature-attachments@1.2.1...1.2.2

Changelog

Sourced from com.sap.cds:cds-feature-attachments's changelog.

Version 1.2.2 - 2025-11-14

Changed

• Several version bumps

Fixed

• Deletion error when having "fiori": {"draft_messages": true } (#526)

Commits

• b7c9994 Change ActiveEntityModifier and add further checks to DraftCancelAttachmentsH...
• 8c22165 Bump the minor-patch group across 1 directory with 2 updates (#673)
• 8b94f25 Bump org.wiremock.integrations:wiremock-spring-boot from 3.10.6 to 4.0.6 (#674)
• dbc51a7 Bump the minor-patch group across 1 directory with 15 updates (#670)
• cba2fdb Bump com.sap.cloud.sdk:sdk-bom from 5.22.0 to 5.24.0 (#665)
• 182022b Bump actions/upload-artifact from 4 to 5 (#662)
• c7243e4 Bump actions/download-artifact from 5 to 6 (#661)
• af42a81 Bump software.amazon.awssdk.crt:aws-crt from 0.39.0 to 0.39.4 (#659)
• 291f364 Bump com.google.cloud:google-cloud-storage from 2.58.1 to 2.59.0 (#655)
• 2ed3b00 Bump ch.qos.logback:logback-classic from 1.5.19 to 1.5.20 (#653)
• Additional commits viewable in compare view

Updates com.sap.cds:cds-feature-attachments from 1.2.1 to 1.2.2

Release notes

Sourced from com.sap.cds:cds-feature-attachments's releases.

1.2.2

Version 1.2.2 - 2025-11-14

Changed

• Several version bumps

Fixed

• Deletion error when having "fiori": {"draft_messages": true } (#526)

Full Changelog: cap-java/cds-feature-attachments@1.2.1...1.2.2

Changelog

Sourced from com.sap.cds:cds-feature-attachments's changelog.

Version 1.2.2 - 2025-11-14

Changed

• Several version bumps

Fixed

• Deletion error when having "fiori": {"draft_messages": true } (#526)

Commits

• b7c9994 Change ActiveEntityModifier and add further checks to DraftCancelAttachmentsH...
• 8c22165 Bump the minor-patch group across 1 directory with 2 updates (#673)
• 8b94f25 Bump org.wiremock.integrations:wiremock-spring-boot from 3.10.6 to 4.0.6 (#674)
• dbc51a7 Bump the minor-patch group across 1 directory with 15 updates (#670)
• cba2fdb Bump com.sap.cloud.sdk:sdk-bom from 5.22.0 to 5.24.0 (#665)
• 182022b Bump actions/upload-artifact from 4 to 5 (#662)
• c7243e4 Bump actions/download-artifact from 5 to 6 (#661)
• af42a81 Bump software.amazon.awssdk.crt:aws-crt from 0.39.0 to 0.39.4 (#659)
• 291f364 Bump com.google.cloud:google-cloud-storage from 2.58.1 to 2.59.0 (#655)
• 2ed3b00 Bump ch.qos.logback:logback-classic from 1.5.19 to 1.5.20 (#653)
• Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-parent from 3.5.7 to 3.5.8

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.5.8

⚠️ Noteworthy changes

• This release contains a fix to get Testcontainers working with modern Docker versions. If this causes problems in your setup, you can downgrade the minimum Docker API, effectively reverting that change.

🐞 Bug Fixes

• Gradle war task does not exclude starter POMs from lib-provided #48196
• Testcontainers integration fails on Docker 29.0.0 #48192
• SslMeterBinder doesn't register metrics for dynamically added bundles if no bundles exist at bind time #48180
• Properties bound in the child management context ignore the parent's environment prefix #48176
• ssl.chain.expiry metrics doesn't update for dynamically registered SSL bundles #48153
• Auto-configuration exclusions are checked using a different class loader to the one that loads auto-configuration classes #48129
• New arm64 macbooks fail to bootBuildImage due to incorrect platform image #48127
• NullPointerException when using @ConditionalOnSingleCandidate with multiple manually registered singletons #48123
• Buildpack fails with recent Docker installs due to hardcoded version in URL #48102
• Image building may fail when specifying a platform if an image has already been built with a different platform #48098
• Undertow's ServletContext is destroy too early, making it unusable in @PreDestroy methods #48061
• PortInUseException incorrectly thrown on failure to bind port due to Netty IP misconfiguration #48058
• Auto-configured JCacheMetrics cannot be customized #48056
• WebSecurityCustomizer beans are excluded by WebMvcTest #48054
• Devtools Restarter does not work with a parameterless main method #47987
• Setting 'max-uri-tags' does not prevent unlimited meter growth on any AutoConfiguredCompositeMeterRegistry #47923
• Docker response 407 is not handled correctly resulting in no error message #47900
• spring-boot-maven-plugin process-aot goal does not find package-private main method #47780

📔 Documentation

• Revise AWS section of "Deploying to the Cloud" in reference manual #48156
• Fix typo in PortInUseException Javadoc #48133
• Correct section about required setters in "Type-safe Configuration Properties" #48130
• Document EndpointObjectMapper and management.endpoints.jackson.isolated-object-mapper #48114
• Document support for configuring servlet context init parameters using properties #48111
• Clarify how warnings about soon-to-expire SSL certificates are reported #48062
• Document how to use ContextPropagatingTaskDecorator for propagating trace context over thread boundaries #48052
• Use since attribute in configuration properties deprecation consistently #47980
• BootstrapContext#getOrElseThrow has incorrect reference to IllegalStateException #47905
• Clarify when BootstrapContext get methods may return null rather than throwing an exception or calling the fallback supplier #47898
• Document that Actuator endpoint may have at most one extension of each type #47873
• Limit Kotlin API documentation to Kotlin-specific APIs #47859
• Adapt AOTCache documentation to JEP 514 #47274

🔨 Dependency Upgrades

• Downgrade to Cassandra Driver 4.19.0 #47926
• Upgrade to AspectJ 1.9.25 #48005
• Upgrade to Caffeine 3.2.3 #48006
• Upgrade to Cassandra Driver 4.19.2 #48183
• Upgrade to DB2 JDBC 12.1.3.0 #48083
• Upgrade to Hibernate 6.6.36.Final #48148

... (truncated)

Commits

• 17f22c3 Release v3.5.8
• 4f03b44 Merge branch '3.4.x' into 3.5.x
• 3d15c13 Next development version (v3.4.13-SNAPSHOT)
• 3b539aa Merge branch '3.4.x' into 3.5.x
• ee70d55 Upgrade to Spring Framework 6.2.14
• f7b4a8b Merge branch '3.4.x' into 3.5.x
• 4a8d01d Exclude starter POMs from lib-provided when using Gradle
• 0bb0d53 Merge branch '3.4.x' into 3.5.x
• 4625534 Force Testcontainers Docker API version for Docker 29.0.0+ compatibility
• 7891ebf Merge branch '3.4.x' into 3.5.x
• Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-parent from 3.5.7 to 3.5.8

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.5.8

⚠️ Noteworthy changes

• This release contains a fix to get Testcontainers working with modern Docker versions. If this causes problems in your setup, you can downgrade the minimum Docker API, effectively reverting that change.

🐞 Bug Fixes

• Gradle war task does not exclude starter POMs from lib-provided #48196
• Testcontainers integration fails on Docker 29.0.0 #48192
• SslMeterBinder doesn't register metrics for dynamically added bundles if no bundles exist at bind time #48180
• Properties bound in the child management context ignore the parent's environment prefix #48176
• ssl.chain.expiry metrics doesn't update for dynamically registered SSL bundles #48153
• Auto-configuration exclusions are checked using a different class loader to the one that loads auto-configuration classes #48129
• New arm64 macbooks fail to bootBuildImage due to incorrect platform image #48127
• NullPointerException when using @ConditionalOnSingleCandidate with multiple manually registered singletons #48123
• Buildpack fails with recent Docker installs due to hardcoded version in URL #48102
• Image building may fail when specifying a platform if an image has already been built with a different platform #48098
• Undertow's ServletContext is destroy too early, making it unusable in @PreDestroy methods #48061
• PortInUseException incorrectly thrown on failure to bind port due to Netty IP misconfiguration #48058
• Auto-configured JCacheMetrics cannot be customized #48056
• WebSecurityCustomizer beans are excluded by WebMvcTest #48054
• Devtools Restarter does not work with a parameterless main method #47987
• Setting 'max-uri-tags' does not prevent unlimited meter growth on any AutoConfiguredCompositeMeterRegistry #47923
• Docker response 407 is not handled correctly resulting in no error message #47900
• spring-boot-maven-plugin process-aot goal does not find package-private main method #47780

📔 Documentation

• Revise AWS section of "Deploying to the Cloud" in reference manual #48156
• Fix typo in PortInUseException Javadoc #48133
• Correct section about required setters in "Type-safe Configuration Properties" #48130
• Document EndpointObjectMapper and management.endpoints.jackson.isolated-object-mapper #48114
• Document support for configuring servlet context init parameters using properties #48111
• Clarify how warnings about soon-to-expire SSL certificates are reported #48062
• Document how to use ContextPropagatingTaskDecorator for propagating trace context over thread boundaries #48052
• Use since attribute in configuration properties deprecation consistently #47980
• BootstrapContext#getOrElseThrow has incorrect reference to IllegalStateException #47905
• Clarify when BootstrapContext get methods may return null rather than throwing an exception or calling the fallback supplier #47898
• Document that Actuator endpoint may have at most one extension of each type #47873
• Limit Kotlin API documentation to Kotlin-specific APIs #47859
• Adapt AOTCache documentation to JEP 514 #47274

🔨 Dependency Upgrades

• Downgrade to Cassandra Driver 4.19.0 #47926
• Upgrade to AspectJ 1.9.25 #48005
• Upgrade to Caffeine 3.2.3 #48006
• Upgrade to Cassandra Driver 4.19.2 #48183
• Upgrade to DB2 JDBC 12.1.3.0 #48083
• Upgrade to Hibernate 6.6.36.Final #48148

... (truncated)

Commits

• 17f22c3 Release v3.5.8
• 4f03b44 Merge branch '3.4.x' into 3.5.x
• 3d15c13 Next development version (v3.4.13-SNAPSHOT)
• 3b539aa Merge branch '3.4.x' into 3.5.x
• ee70d55 Upgrade to Spring Framework 6.2.14
• f7b4a8b Merge branch '3.4.x' into 3.5.x
• 4a8d01d Exclude starter POMs from lib-provided when using Gradle
• 0bb0d53 Merge branch '3.4.x' into 3.5.x
• 4625534 Force Testcontainers Docker API version for Docker 29.0.0+ compatibility
• 7891ebf Merge branch '3.4.x' into 3.5.x
• Additional commits viewable in compare view

Updates com.sap.cds:cds-feature-attachments from 1.2.1 to 1.2.2

Release notes

Sourced from com.sap.cds:cds-feature-attachments's releases.

1.2.2

Version 1.2.2 - 2025-11-14

Changed

• Several version bumps

Fixed

• Deletion error when having "fiori": {"draft_messages": true } (#526)

Full Changelog: cap-java/cds-feature-attachments@1.2.1...1.2.2

Changelog

Sourced from com.sap.cds:cds-feature-attachments's changelog.

Version 1.2.2 - 2025-11-14

Changed

• Several version bumps

Fixed

• Deletion error when having "fiori": {"draft_messages": true } (#526)

Commits

• b7c9994 Change ActiveEntityModifier and add further checks to DraftCancelAttachmentsH...
• 8c22165 Bump the minor-patch group across 1 directory with 2 updates (#673)
• 8b94f25 Bump org.wiremock.integrations:wiremock-spring-boot from 3.10.6 to 4.0.6 (#674)
• dbc51a7 Bump the minor-patch group across 1 directory with 15 updates (#670)
• cba2fdb Bump com.sap.cloud.sdk:sdk-bom from 5.22.0 to 5.24.0 (#665)
• 182022b Bump actions/upload-artifact from 4 to 5 (#662)
• c7243e4 Bump actions/download-artifact from 5 to 6 (#661)
• af42a81 Bump software.amazon.awssdk.crt:aws-crt from 0.39.0 to 0.39.4 (#659)
• 291f364 Bump com.google.cloud:google-cloud-storage from 2.58.1 to 2.59.0 (#655)
• 2ed3b00 Bump ch.qos.logback:logback-classic from 1.5.19 to 1.5.20 (#653)
• Additional commits viewable in compare view

Updates com.sap.cds:cds-feature-attachments from 1.2.1 to 1.2.2

Release notes

Sourced from com.sap.cds:cds-feature-attachments's releases.

1.2.2

Version 1.2.2 - 2025-11-14

Changed

• Several version bumps

Fixed

• Deletion error when having "fiori": {"draft_messages": true } (#526)

Full Changelog: cap-java/cds-feature-attachments@1.2.1...1.2.2

Changelog

Sourced from com.sap.cds:cds-feature-attachments's changelog.

Version 1.2.2 - 2025-11-14

Changed

• Several version bumps

Fixed

• Deletion error when having "fiori": {"draft_messages": true } (#526)

Commits

• b7c9994 Change ActiveEntityModifier and add further checks to DraftCancelAttachmentsH...
• 8c22165 Bump the minor-patch group across 1 directory with 2 updates (#673)
• 8b94f25 Bump org.wiremock.integrations:wiremock-spring-boot from 3.10.6 to 4.0.6 (#674)
• dbc51a7 Bump the minor-patch group across 1 directory with 15 updates (#670)
• cba2fdb Bump com.sap.cloud.sdk:sdk-bom from 5.22.0 to 5.24.0 (#665)
• 182022b Bump actions/upload-artifact from 4 to 5 (#662)
• c7243e4 Bump actions/download-artifact from 5 to 6 (#661)
• af42a81 Bump software.amazon.awssdk.crt:aws-crt from 0.39.0 to 0.39.4 (#659)
• 291f364 Bump com.google.cloud:google-cloud-storage from 2.58.1 to 2.59.0 (#655)
• 2ed3b00 Bump ch.qos.logback:logback-classic from 1.5.19 to 1.5.20 (#653)
• Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-parent from 3.5.7 to 3.5.8

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.5.8

⚠️ Noteworthy changes

• This release contains a fix to get Testcontainers working with modern Docker versions. If this causes problems in your setup, you can downgrade the minimum Docker API, effectively reverting that change.

🐞 Bug Fixes

• Gradle war task does not exclude starter POMs from lib-provided #48196
• Testcontainers integration fails on Docker 29.0.0 #48192
• SslMeterBinder doesn't register metrics for dynamically added bundles if no bundles exist at bind time #48180
• Properties bound in the child management context ignore the parent's environment prefix #48176
• ssl.chain.expiry metrics doesn't update for dynamically registered SSL bundles #48153
• Auto-configuration exclusions are checked using a different class loader to the one that loads auto-configuration classes #48129
• New arm64 macbooks fail to bootBuildImage due to incorrect platform image #48127
• NullPointerException when using @ConditionalOnSingleCandidate with multiple manually registered singletons #48123
• Buildpack fails with recent Docker installs due to hardcoded version in URL #48102
• Image building may fail when specifying a platform if an image has already been built with a different platform #48098
• Undertow's ServletContext is destroy too early, making it unusable in @PreDestroy methods #48061
• PortInUseException incorrectly thrown on failure to bind port due to Netty IP misconfiguration #48058
• Auto-configured JCacheMetrics cannot be customized #48056
• WebSecurityCustomizer beans are excluded by WebMvcTest #48054
• Devtools Restarter does not work with a parameterless main method #47987
• Setting 'max-uri-tags' does not prevent unlimited meter growth on any AutoConfiguredCompositeMeterRegistry #47923
• Docker response 407 is not handled correctly resulting in no error message #47900
• spring-boot-maven-plugin process-aot goal does not find package-private main method #47780

📔 Documentation

• Revise AWS section of "Deploying to the Cloud" in reference manual #48156
• Fix typo in PortInUseException Javadoc #48133
• Correct section about required setters in "Type-safe Configuration Properties" #48130
• Document EndpointObjectMapper and management.endpoints.jackson.isolated-object-mapper #48114
• Document support for configuring servlet context init parameters using properties #48111
• Clarify how warnings about soon-to-expire SSL certificates are reported #48062
• Document how to use ContextPropagatingTaskDecorator for propagating trace context over thread boundaries #48052
• Use since attribute in configuration properties deprecation consistently #47980
• BootstrapContext#getOrElseThrow has incorrect reference to IllegalStateException #47905
• Clarify when BootstrapContext get methods may return null rather than throwing an exception or calling the fallback supplier #47898
• Document that Actuator endpoint may have at most one extension of each type #47873
• Limit Kotlin API documentation to Kotlin-specific APIs #47859
• Adapt AOTCache documentation to JEP 514 #47274

🔨 Dependency Upgrades

• Downgrade to Cassandra Driver 4.19.0 #47926
• Upgrade to AspectJ 1.9.25 #48005
• Upgrade to Caffeine 3.2.3 #48006
• Upgrade to Cassandra Driver 4.19.2 #48183
• Upgrade to DB2 JDBC 12.1.3.0 #48083
• Upgrade to Hibernate 6.6.36.Final #48148

... (truncated)

Commits

• 17f22c3 Release v3.5.8
• 4f03b44 Merge branch '3.4.x' into 3.5.x
• 3d15c13 Next development version (v3.4.13-SNAPSHOT)
• 3b539aa Merge branch '3.4.x' into 3.5.x
• ee70d55 Upgrade to Spring Framework 6.2.14
• f7b4a8b Merge branch '3.4.x' into 3.5.x
• 4a8d01d Exclude starter POMs from lib-provided when using Gradle
• 0bb0d53 Merge branch '3.4.x' into 3.5.x
• 4625534 Force Testcontainers Docker API version for Docker 29.0.0+ compatibility
• 7891ebf Merge branch '3.4.x' into 3.5.x
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
org.springframework.boot:spring-boot-starter-parent	[>= 4.a0, < 5]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions