Bump the all group across 2 directories with 15 updates #388

dependabot · 2025-12-29T00:34:33Z

Bumps the all group with 10 updates in the / directory:

Package	From	To
com.google.errorprone:error_prone_annotations	`2.44.0`	`2.45.0`
org.jetbrains.kotlin:kotlin-bom	`2.2.21`	`2.3.0`
org.apache.logging.log4j:log4j-bom	`0.0.0-SNAPSHOT`	`2.25.3`
org.apache.logging.log4j:log4j-core	`2.25.2`	`2.25.3`
org.springframework.boot:spring-boot-dependencies	`3.5.7`	`4.0.1`
org.springframework.boot:spring-boot-maven-plugin	`3.5.7`	`4.0.1`
org.springframework.cloud:spring-cloud-dependencies	`2025.0.0`	`2025.1.0`
org.aspectj:aspectjweaver	`1.9.25`	`1.9.25.1`
org.aspectj:aspectjrt	`1.9.25`	`1.9.25.1`
org.aspectj:aspectjtools	`1.9.25`	`1.9.25.1`

Bumps the all group with 6 updates in the /log4j-samples-graalvm directory:

Package	From	To
org.apache.logging.log4j:log4j-bom	`2.25.2`	`2.25.3`
ch.qos.logback:logback-classic	`1.5.20`	`1.5.23`
org.json:json	`20250517`	`20251224`
net.javacrumbs.json-unit:json-unit-assertj	`5.0.0`	`5.1.0`
org.graalvm.buildtools:native-maven-plugin	`0.11.2`	`0.11.3`
org.codehaus.mojo:exec-maven-plugin	`3.6.2`	`3.6.3`

Updates com.google.errorprone:error_prone_annotations from 2.44.0 to 2.45.0

Release notes

Sourced from com.google.errorprone:error_prone_annotations's releases.

Error Prone 2.45.0

Changes:

Improved compatibility with latest JDK 26 EA builds.

New checks:

AssertSameIncompatible: Detect calls to assertSame and similar assertions, where the calls are guaranteed to either succeed or fail.

FormatStringShouldUsePlaceholders: Suggests using a format string instead of string concatenation operations on format methods

Closed issues: #5335

Full changelog: google/error-prone@v2.44.0...v2.45.0

Commits

c862815 Release Error Prone 2.45.0
7027d9f Add negative test cases for AlwaysThrows with non-literal arguments.
8669adb Fix parameter name handling of enum constructor arguments
679c4ac Update end position handling
dc1279e AssertSameIncompatible: flag calls to assertSame/etc where the calls are guar...
24387de Internal change
5300dc6 Disable an InvalidLink test for a javadoc bug on JDK >= 26
75dcd53 Fix the Optional wrapping in the description of NonCanonicalStaticMemberImport.
10f5424 FormatStringShouldUsePlaceholders shouldn't rewrite calls with a pass-through...
3ef3d79 The verb form of "recursion" is "to recur", not "to recurse". Quoting my CS p...
Additional commits viewable in compare view

Updates org.jetbrains.kotlin:kotlin-bom from 2.2.21 to 2.3.0

Release notes

Sourced from org.jetbrains.kotlin:kotlin-bom's releases.

Kotlin 2.3.0

Changelog

Analysis API

KT-80082 K2. False positive "Cannot resolve method" for self-bounded generic with wildcard return type in Java interop

KT-80303 Move :native:analysis-api-klib-reader to :libraries:tools

Analysis API. Code Compilation

KT-70860 K2 IDE / Kotlin Debugger: CCE “java.lang.String cannot be cast to java.lang.Void” on evaluating not-null variable on the line with assigning null to that var

KT-78554 K2 IDE / Kotlin Debugger: ISE “No override for FUN IR_EXTERNAL_DECLARATION_STUB” on calling toString() for local class instance during evaluation

KT-73201 K2 IDE: Error while evaluating expressions with local classes

Analysis API. FIR

KT-81378 Expected expression 'FirFunctionCallImpl' to be resolved caused by suspend {}

KT-80473 Add events for tracking LL activities

KT-46375 Analysis API: Support cross-file class redeclaration checks using indices

KT-80471 Analysis API: Deduplicate equivalent call candidates in resolveToCallCandidates

KT-79653 [Analysis API] ContextCollector: BODY context of enum classes doesn't contain enum entries

KT-75858 K2 AA: False positive 'property must be initialized' on incremental analysis with 'field' usage and semicolon in setter

KT-80231 AnnotationArgumentsStateKeepers doesn't restore the initial annotation in some cases

KT-80233 Pull mutation out of AnnotationArgumentsStateKeepers

KT-71466 LLFirBuiltinsSessionFactory uses createCompositeSymbolProvider

KT-76432 JavaClassUseSiteMemberScope: Expected FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl

Analysis API. Infrastructure

KT-80717 Support IntelliJ Bazel build in the Kotlin Coop development mode

Analysis API. Light Classes

KT-80656 Duplicate no-args constructor in PSI

KT-60490 Symbol Light Classes: Property accessors from a delegated interface don't present in the delegating class

KT-79689 SymbolLightClassForClassLike.toString() causes PSI tree loading

KT-80690 Private interface functions are not present in light classes

KT-80256 K2: Certain actions in JPA code causes infinite PIEAE: "Element class CompositeElement of type REFERENCE_EXPRESSION (class KtNameReferenceExpressionElementType)"

KT-79012 Add a high-level overview of light classes

Analysis API. Providers and Caches

Fixes

KT-81476 Analysis API: AlreadyDisposedException from low-memory cache cleanup

KT-80911 Analysis API: Execute session invalidation in a non-cancelable section

KT-81242 Analysis API: Add UUID/lifetime properties to LL FIR session structure logging

KT-80622 Analysis API: Visualise LL FIR session structure & weight

KT-80904 Analysis API: "Invalid dangling file module" exception during session invalidation

KT-78882 K2 AA: Calling containingSymbol on getProgressionLastElement causes exception

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin:kotlin-bom's changelog.

2.3.0

Analysis API

KT-80082 K2. False positive "Cannot resolve method" for self-bounded generic with wildcard return type in Java interop

KT-80303 Move :native:analysis-api-klib-reader to :libraries:tools

Analysis API. Code Compilation

KT-70860 K2 IDE / Kotlin Debugger: CCE “java.lang.String cannot be cast to java.lang.Void” on evaluating not-null variable on the line with assigning null to that var

KT-78554 K2 IDE / Kotlin Debugger: ISE “No override for FUN IR_EXTERNAL_DECLARATION_STUB” on calling toString() for local class instance during evaluation

KT-73201 K2 IDE: Error while evaluating expressions with local classes

Analysis API. FIR

KT-81378 Expected expression 'FirFunctionCallImpl' to be resolved caused by suspend {}

KT-80473 Add events for tracking LL activities

KT-46375 Analysis API: Support cross-file class redeclaration checks using indices

KT-80471 Analysis API: Deduplicate equivalent call candidates in resolveToCallCandidates

KT-79653 [Analysis API] ContextCollector: BODY context of enum classes doesn't contain enum entries

KT-75858 K2 AA: False positive 'property must be initialized' on incremental analysis with 'field' usage and semicolon in setter

KT-80231 AnnotationArgumentsStateKeepers doesn't restore the initial annotation in some cases

KT-80233 Pull mutation out of AnnotationArgumentsStateKeepers

KT-71466 LLFirBuiltinsSessionFactory uses createCompositeSymbolProvider

KT-76432 JavaClassUseSiteMemberScope: Expected FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl

Analysis API. Infrastructure

KT-80717 Support IntelliJ Bazel build in the Kotlin Coop development mode

Analysis API. Light Classes

KT-80656 Duplicate no-args constructor in PSI

KT-60490 Symbol Light Classes: Property accessors from a delegated interface don't present in the delegating class

KT-79689 SymbolLightClassForClassLike.toString() causes PSI tree loading

KT-80690 Private interface functions are not present in light classes

KT-80256 K2: Certain actions in JPA code causes infinite PIEAE: "Element class CompositeElement of type REFERENCE_EXPRESSION (class KtNameReferenceExpressionElementType)"

KT-79012 Add a high-level overview of light classes

Analysis API. Providers and Caches

Fixes

KT-81476 Analysis API: AlreadyDisposedException from low-memory cache cleanup

KT-80911 Analysis API: Execute session invalidation in a non-cancelable section

KT-81242 Analysis API: Add UUID/lifetime properties to LL FIR session structure logging

KT-80622 Analysis API: Visualise LL FIR session structure & weight

KT-80904 Analysis API: "Invalid dangling file module" exception during session invalidation

KT-78882 K2 AA: Calling containingSymbol on getProgressionLastElement causes exception

KT-58325 Analysis API: Combine LLKotlinStubBasedLibrarySymbolProviders in session dependencies (optimization)

... (truncated)

Commits

f95cb2f Add ChangeLog for 2.3.0-RC3
9d65a2e KT-82901: Fix issue with converting Long.MIN_VALUE to Duration
35a9a82 FE: Postpone DiscriminateSuspendInOverloadResolution
e0b7eea FE: Add tests for KT-82869
e66298c Add ChangeLog for 2.3.0-RC2
e490802 [K/JS] Introduce a compiler argument to enable export of suspend functions
585094b FIR2IR: Avoid generation of incorrect suspend adapter for custom implementation
c69adc7 FIR2IR: Rename and clarify contracts for suspicious utility function
b4bb8bf FIR2IR: Pass original expected type to applySuspendConversionIfNeeded
4718830 FIR2IR: Add tests for KT-82590
Additional commits viewable in compare view

Updates org.apache.logging.log4j:log4j-bom from 0.0.0-SNAPSHOT to 2.25.3

Release notes

Sourced from org.apache.logging.log4j:log4j-bom's releases.

2.25.3

This patch release addresses issues detailed in the changelog below. In particular, it includes an important fix for the host name verification in SSL/TLS configuration. This is used by Socket Appender.

Changed

Optimize DefaultThreadContextMap.getCopy() performance by avoiding megamorphic calls in HashMap constructor (#3935, #3939)

Fixed

Fix GraalVM metadata for nested classes to use binary names instead of canonical names (#3871, #3996)

Fix failures caused by null SslConfiguration (#3947, #3953)

Fix incorrect handling of the host name verification in SSL/TLS configuration, which is used by Socket Appender when SSL/TLS is enabled (#4002)

Removed

Remove the com.github.spotbugs:spotbugs-annotations dependency (#3984, #3985)

2.25.2

This patch release addresses certain minor issues detailed in the changelog.

Fixed

Fix potential memory leak involving LogBuilder in Log4j API to Logback bridge (#3819, #3824)

Prevent unnecessary warnings in AbstractDriverManagerConnectionSource (#3828, #3831)

Fix missing newlines in default logging configuration for log4j-core (#3835, #3851)

Fix missing default Target value in Console Appender (#3852)

Discard the sub-second part while obtaining the initial time (i.e., creation time) of a file in RollingFileManager (#3068, #3872)

Fix Pattern Layout exception stack trace converters to no longer prepend newlines based on context (#3873, #3919)

Fix the com.google.errorprone:error_prone_annotations dependency whose version property gets erased due to flattening (#3779, #3785, #3822, #3905)

Fix detection of Throwable converters inside nested Pattern Layout patterns when applying alwaysWriteExceptions (#3920)

Fix parsing and merging of literals in InstantPatternDynamicFormatter (#3930, #3932)

2.25.1

This patch release addresses a dozen bugs in version 2.25.0, in particular:

Resolves a concurrency issue in the new unified datetime formatter.

Fixes build failures affecting Gradle users.

Restores backward compatibility with Spring Boot’s common logging configuration.

Improves handling of edge cases in GraalVM support.

Fixed

Fix detection of the Disruptor major version in environments with non-standard thread context classloader. (#3706)

Downgrade spotbugs-annotations to resolve Gradle build failures. (#3754)

Fix incorrect version resolution of jspecify and error_prone_annotations dependencies in published POM files. (#3758, #3779)

Restore compatibility with Spring Boot by allowing reconfiguration using the LoggerContext.start method. (#3770)

Allow omission of the -Alog4j.graalvm.groupId and -Alog4j.graalvm.artifactId arguments when building Log4j plugins. (#3771)

Broaden the OSGi manifest's Import-Package constraints to support Jakarta Servlet API up to version 6. (#3787)

Enable the resource: protocol for configuration files by default when running on GraalVM. (#3790)

Fix timestamp formatting concurrency issue, when log4j2.enabledThreadlocals is true. (#3792)

... (truncated)

Commits

See full diff in compare view

Updates org.apache.logging.log4j:log4j-core from 2.25.2 to 2.25.3

Updates org.springframework.boot:spring-boot-dependencies from 3.5.7 to 4.0.1

Release notes

Sourced from org.springframework.boot:spring-boot-dependencies's releases.

v4.0.1

⚠️ Noteworthy changes

Hibernate has been upgraded to 7.2.0.Final in response to Hibernate 7.1 moving to limited support

spring-boot-starter-kotlin-serialization has been renamed to to spring-boot-starter-kotlinx-serialization-json and spring-boot-starter-kotlin-serialization-test has been renamed to spring-boot-starter-kotlinx-serialization-json-test. This change aligns the starters' names with those of their respective modules

Using TestRestTemplate now requires a dependency on spring-boot-restclient

🐞 Bug Fixes

JsonMixinModuleEntriesBeanRegistrationAotProcessor does not handle deprecated code #48564

JdbcSessionAutoConfiguration may not match when using the auto-configured DataSource #48552

@ServiceConnection for LgtmStackContainer fails when logging endpoint is configured due to multiple OtlpLoggingConnectionDetails beans #48536

WebApplicationType does not consider modules when deduced from classpath #48517

Spring Session auto-configuration fails in a war deployment as ServerProperties is not available #48493

Opentelemetry logging export requires actuator module #48488

RabbitHealthIndicator reports an error when version is missing from the connection's server properties #48487

Actuator Info class has inconsistent nullability annotations and cannot be built with null value #48480

Profiles retained during AOT processing are not configured in a native image #48476

Security matchers and WebServerNamespace resolution can fail with NoClassDefFoundError when used in a traditional WAR deployment #48388

HealthEndpointGroupMembershipValidator does not consider reactive health indicators causing NoSuchHealthContributorException to be thrown #48387

spring.jackson.default-property-inclusion is not applied to content inclusion #48343

TestRestTemplate.getRootUri() returns empty string #48330

Redis health check reports an error when redis_version is missing from the INFO response #48328

Parent's MeterRegistry beans are closed when child context closes #48325

HttpMessageConverters picks up converter beans for both client and server #48310

Conditions to auto-configure a RestClient are outdated with the modularization #48308

A custom JwtTypeValidator that replaces the default can no longer be configured #48301

PropertiesRestClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #48296

SpringBootTest.UseMainMethod.WHEN_AVAILABLE and ALWAYS are incompatible with package-private or parameter-less main method #48275

Conditions to auto-configure RestClient-based HTTP service clients are outdated with the modularization #48274

Starter for Kotlinx Serialization Json is misnamed #48262

ApplicationServletEnvironment is no longer configured in war deployments #48254

RestClient.Builder bean present in @SpringBootTest due to spring-boot-starter-webmvc-test, but missing at runtime without restclient starter #48253

ProblemDetail is rendered to XML incorrectly #48222

📔 Documentation

Harmonize Kotlin example for HTTP Service client support #48577

Document HttpMessageConverters detection changes in 4.0.1 #48574

Improve javadoc for when to use class names rather than class references #48569

Documentation has an outdated reference to the Jackson Kotlin Module #48534

Caching documentation should clarify how to use a no-op implementation to run a test suite #48532

Document that the default rolling policy for Log4j2 requires logging.file.path to be set #48527

Review documentation and migration guide about changes in @AutoConfigureCache #48522

License header in build samples is displayed in the reference documentation #48478

Configuring Two DataSources How-To code sample is inconsistent #48449

Fix links to source files on GitHub #48398

Documentation contains broken links to GitHub source files #48394

Document that org.aspectj.weaver.Advice must be on the classpath to enable support for Micrometer's annotations #48360

Correct the annotation in the Kotlin @ConfigurationPropertiesSource example #48357

Polish TestRestTemplate examples in the reference guide #48336

... (truncated)

Commits

b2bc463 Release v4.0.1
252b218 Correct renaming of Kotlinx Serialization JSON starters
2fa73c2 Merge pull request #48577 from jwalter
3e68988 Polish "Harmonize Kotlin example for HTTP Service client support"
423373b Harmonize Kotlin example for HTTP Service client support
f61ac29 Document HttpMessageConverters detection changes
2519a5d Merge branch '3.5.x'
4fc3ca3 Next development version (v3.5.10-SNAPSHOT)
aaf66f4 Merge branch '3.5.x'
08e2cab Polish javadoc for when to use class names rather than class references
Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-maven-plugin from 3.5.7 to 4.0.1

Release notes

Sourced from org.springframework.boot:spring-boot-maven-plugin's releases.

v4.0.1

⚠️ Noteworthy changes

Hibernate has been upgraded to 7.2.0.Final in response to Hibernate 7.1 moving to limited support

spring-boot-starter-kotlin-serialization has been renamed to to spring-boot-starter-kotlinx-serialization-json and spring-boot-starter-kotlin-serialization-test has been renamed to spring-boot-starter-kotlinx-serialization-json-test. This change aligns the starters' names with those of their respective modules

Using TestRestTemplate now requires a dependency on spring-boot-restclient

🐞 Bug Fixes

JsonMixinModuleEntriesBeanRegistrationAotProcessor does not handle deprecated code #48564

JdbcSessionAutoConfiguration may not match when using the auto-configured DataSource #48552

@ServiceConnection for LgtmStackContainer fails when logging endpoint is configured due to multiple OtlpLoggingConnectionDetails beans #48536

WebApplicationType does not consider modules when deduced from classpath #48517

Spring Session auto-configuration fails in a war deployment as ServerProperties is not available #48493

Opentelemetry logging export requires actuator module #48488

RabbitHealthIndicator reports an error when version is missing from the connection's server properties #48487

Actuator Info class has inconsistent nullability annotations and cannot be built with null value #48480

Profiles retained during AOT processing are not configured in a native image #48476

Security matchers and WebServerNamespace resolution can fail with NoClassDefFoundError when used in a traditional WAR deployment #48388

HealthEndpointGroupMembershipValidator does not consider reactive health indicators causing NoSuchHealthContributorException to be thrown #48387

spring.jackson.default-property-inclusion is not applied to content inclusion #48343

TestRestTemplate.getRootUri() returns empty string #48330

Redis health check reports an error when redis_version is missing from the INFO response #48328

Parent's MeterRegistry beans are closed when child context closes #48325

HttpMessageConverters picks up converter beans for both client and server #48310

Conditions to auto-configure a RestClient are outdated with the modularization #48308

A custom JwtTypeValidator that replaces the default can no longer be configured #48301

PropertiesRestClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #48296

SpringBootTest.UseMainMethod.WHEN_AVAILABLE and ALWAYS are incompatible with package-private or parameter-less main method #48275

Conditions to auto-configure RestClient-based HTTP service clients are outdated with the modularization #48274

Starter for Kotlinx Serialization Json is misnamed #48262

ApplicationServletEnvironment is no longer configured in war deployments #48254

RestClient.Builder bean present in @SpringBootTest due to spring-boot-starter-webmvc-test, but missing at runtime without restclient starter #48253

ProblemDetail is rendered to XML incorrectly #48222

📔 Documentation

Harmonize Kotlin example for HTTP Service client support #48577

Document HttpMessageConverters detection changes in 4.0.1 #48574

Improve javadoc for when to use class names rather than class references #48569

Documentation has an outdated reference to the Jackson Kotlin Module #48534

Caching documentation should clarify how to use a no-op implementation to run a test suite #48532

Document that the default rolling policy for Log4j2 requires logging.file.path to be set #48527

Review documentation and migration guide about changes in @AutoConfigureCache #48522

License header in build samples is displayed in the reference documentation #48478

Configuring Two DataSources How-To code sample is inconsistent #48449

Fix links to source files on GitHub #48398

Documentation contains broken links to GitHub source files #48394

Document that org.aspectj.weaver.Advice must be on the classpath to enable support for Micrometer's annotations #48360

Correct the annotation in the Kotlin @ConfigurationPropertiesSource example #48357

Polish TestRestTemplate examples in the reference guide #48336

... (truncated)

Commits

b2bc463 Release v4.0.1
252b218 Correct renaming of Kotlinx Serialization JSON starters
2fa73c2 Merge pull request #48577 from jwalter
3e68988 Polish "Harmonize Kotlin example for HTTP Service client support"
423373b Harmonize Kotlin example for HTTP Service client support
f61ac29 Document HttpMessageConverters detection changes
2519a5d Merge branch '3.5.x'
4fc3ca3 Next development version (v3.5.10-SNAPSHOT)
aaf66f4 Merge branch '3.5.x'
08e2cab Polish javadoc for when to use class names rather than class references
Additional commits viewable in compare view

Updates org.springframework.cloud:spring-cloud-dependencies from 2025.0.0 to 2025.1.0

Commits

fad431d Update SNAPSHOT to 2025.1.0
922da91 Merge pull request #444 from spring-cloud/dependabot/github_actions/main/acti...
56207f4 Bump actions/checkout from 5 to 6
f9e1a3a Updates GenerateReleaseTrainDocs to use property from bom for boot version.
36f42b2 Removes spring-cloud-starter-parent
250329c Bumping versions
ef9f533 Updates boot to 4.0.0
3c1ebc0 Bumping versions
35cf36e Going back to snapshots
bd1fc81 Update SNAPSHOT to 2025.1.0-RC1
Additional commits viewable in compare view

Updates org.apache.logging.log4j:log4j-core from 2.25.2 to 2.25.3

Updates org.springframework.boot:spring-boot-maven-plugin from 3.5.7 to 4.0.1

Release notes

Sourced from org.springframework.boot:spring-boot-maven-plugin's releases.

v4.0.1

⚠️ Noteworthy changes

Hibernate has been upgraded to 7.2.0.Final in response to Hibernate 7.1 moving to limited support

spring-boot-starter-kotlin-serialization has been renamed to to spring-boot-starter-kotlinx-serialization-json and spring-boot-starter-kotlin-serialization-test has been renamed to spring-boot-starter-kotlinx-serialization-json-test. This change aligns the starters' names with those of their respective modules

Using TestRestTemplate now requires a dependency on spring-boot-restclient

🐞 Bug Fixes

JsonMixinModuleEntriesBeanRegistrationAotProcessor does not handle deprecated code #48564

JdbcSessionAutoConfiguration may not match when using the auto-configured DataSource #48552

@ServiceConnection for LgtmStackContainer fails when logging endpoint is configured due to multiple OtlpLoggingConnectionDetails beans #48536

WebApplicationType does not consider modules when deduced from classpath #48517

Spring Session auto-configuration fails in a war deployment as ServerProperties is not available #48493

Opentelemetry logging export requires actuator module #48488

RabbitHealthIndicator reports an error when version is missing from the connection's server properties #48487

Actuator Info class has inconsistent nullability annotations and cannot be built with null value #48480

Profiles retained during AOT processing are not configured in a native image #48476

Security matchers and WebServerNamespace resolution can fail with NoClassDefFoundError when used in a traditional WAR deployment #48388

HealthEndpointGroupMembershipValidator does not consider reactive health indicators causing NoSuchHealthContributorException to be thrown #48387

spring.jackson.default-property-inclusion is not applied to content inclusion #48343

TestRestTemplate.getRootUri() returns empty string #48330

Redis health check reports an error when redis_version is missing from the INFO response #48328

Parent's MeterRegistry beans are closed when child context closes #48325

HttpMessageConverters picks up converter beans for both client and server #48310

Conditions to auto-configure a RestClient are outdated with the modularization #48308

A custom JwtTypeValidator that replaces the default can no longer be configured #48301

PropertiesRestClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #48296

SpringBootTest.UseMainMethod.WHEN_AVAILABLE and ALWAYS are incompatible with package-private or parameter-less main method #48275

Conditions to auto-configure RestClient-based HTTP service clients are outdated with the modularization #48274

Starter for Kotlinx Serialization Json is misnamed #48262

ApplicationServletEnvironment is no longer configured in war deployments #48254

RestClient.Builder bean present in @SpringBootTest due to spring-boot-starter-webmvc-test, but missing at runtime without restclient starter #48253

ProblemDetail is rendered to XML incorrectly #48222

📔 Documentation

Harmonize Kotlin example for HTTP Service client support #48577

Document HttpMessageConverters detection changes in 4.0.1 #48574

Improve javadoc for when to use class names rather than class references #48569

Documentation has an outdated reference to the Jackson Kotlin Module #48534

Caching documentation should clarify how to use a no-op implementation to run a test suite #48532

Document that the default rolling policy for Log4j2 requires logging.file.path to be set #48527

Review documentation and migration guide about changes in @AutoConfigureCache #48522

License header in build samples is displayed in the reference documentation #48478

Configuring Two DataSources How-To code sample is inconsistent #48449

Fix links to source files on GitHub #48398

Documentation contains broken links to GitHub source files #48394

Document that org.aspectj.weaver.Advice must be on the classpath to enable support for Micrometer's annotations #48360

Correct the annotation in the Kotlin @ConfigurationPropertiesSource example #48357

Polish TestRestTemplate examples in the reference guide #48336

... (truncated)

Commits

b2bc463 Release v4.0.1
252b218 Correct renaming of Kotlinx Serialization JSON starters
2fa73c2 Merge pull request #48577 from jwalter
3e68988 Polish "Harmonize Kotlin example for HTTP Service client support"
423373b Harmonize Kotlin example for HTTP Service client support
f61ac29 Document HttpMessageConverters detection changes
2519a5d Merge branch '3.5.x'
4fc3ca3 Next development version (v3.5.10-SNAPSHOT)
aaf66f4 Merge branch '3.5.x'
08e2cab Polish javadoc for when to use class names rather than class references
Additional commits viewable in compare view

Updates org.aspectj:aspectjweaver from 1.9.25 to 1.9.25.1

Release notes

Sourced from org.aspectj:aspectjweaver's releases.

1.9.25.1

Full Changelog: eclipse-aspectj/aspectj@V1_9_25...V1_9_25_1

Commits

See full diff in compare view

Updates org.aspectj:aspectjrt from 1.9.25 to 1.9.25.1

Release notes

Sourced from org.aspectj:aspectjrt's releases.

1.9.25.1

Full Changelog: eclipse-aspectj/aspectj@V1_9_25...V1_9_25_1

Commits

See full diff in compare view

Updates org.aspectj:aspectjtools from 1.9.25 to 1.9.25.1

Release notes

Sourced from org.aspectj:aspectjtools's releases.

1.9.25.1

Full Changelog: eclipse-aspectj/aspectj@V1_9_25...V1_9_25_1

Commits

See full diff in compare view

Updates org.aspectj:aspectjrt from 1.9.25 to 1.9.25.1

Release notes

Sourced from org.aspectj:aspectjrt's releases.

1.9.25.1

Full Changelog: eclipse-aspectj/aspectj@V1_9_25...V1_9_25_1

Commits

See full diff in compare view

Updates org.aspectj:aspectjtools from 1.9.25 to 1.9.25.1

Release notes

Sourced from org.aspectj:aspectjtools's releases.

1.9.25.1

Full Changelog: eclipse-aspectj/aspectj@V1_9_25...V1_9_25_1

Commits

See full diff in compare view

Updates org.apache.logging.log4j:log4j-core from 2.25.2 to 2.25.3

Updates org.apache.logging.log4j:log4j-bom from 2.25.2 to 2.25.3

Release notes

Sourced from org.apache.logging.log4j:log4j-bom's releases.

2.25.3

This patch release addresses issues detailed in the changelog below. In particular, it includes an important fix for the host name verification in SSL/TLS configuration. This is used by Socket Appender.

Changed

Optimize DefaultThreadContextMap.getCopy() performance by avoiding megamorphic calls in HashMap constructor (#3935, #3939)

Fixed

Fix GraalVM metadata for nested classes to use binary names instead of canonical names (#3871, #3996)

Fix failures caused by null SslConfiguration (#3947, #3953)

Fix incorrect handling of the host name verification in SSL/TLS configuration, which is used by Socket Appender when SSL/TLS is enabled (#4002)

Removed

Remove the com.github.spotbugs:spotbugs-annotations dependency (#3984, #3985)

2.25.2

This patch release addresses certain minor issues detailed in the changelog.

Fixed

Fix potential memory leak involving LogBuilder in Log4j API to Logback bridge (#3819, #3824)

Prevent unnecessary warnings in AbstractDriverManagerConnectionSource (#3828, #3831)

Fix missing newlines in default logging configuration for log4j-core (#3835, #3851)

Fix missing default Target value in Console Appender (

Bumps the all group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [com.google.errorprone:error_prone_annotations](https://github.com/google/error-prone) | `2.44.0` | `2.45.0` | | [org.jetbrains.kotlin:kotlin-bom](https://github.com/JetBrains/kotlin) | `2.2.21` | `2.3.0` | | [org.apache.logging.log4j:log4j-bom](https://github.com/apache/logging-log4j2) | `0.0.0-SNAPSHOT` | `2.25.3` | | org.apache.logging.log4j:log4j-core | `2.25.2` | `2.25.3` | | [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) | `3.5.7` | `4.0.1` | | [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) | `3.5.7` | `4.0.1` | | [org.springframework.cloud:spring-cloud-dependencies](https://github.com/spring-cloud/spring-cloud-release) | `2025.0.0` | `2025.1.0` | | [org.aspectj:aspectjweaver](https://github.com/eclipse/org.aspectj) | `1.9.25` | `1.9.25.1` | | [org.aspectj:aspectjrt](https://github.com/eclipse/org.aspectj) | `1.9.25` | `1.9.25.1` | | [org.aspectj:aspectjtools](https://github.com/eclipse/org.aspectj) | `1.9.25` | `1.9.25.1` | Bumps the all group with 6 updates in the /log4j-samples-graalvm directory: | Package | From | To | | --- | --- | --- | | [org.apache.logging.log4j:log4j-bom](https://github.com/apache/logging-log4j2) | `2.25.2` | `2.25.3` | | [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.20` | `1.5.23` | | [org.json:json](https://github.com/douglascrockford/JSON-java) | `20250517` | `20251224` | | [net.javacrumbs.json-unit:json-unit-assertj](https://github.com/lukas-krecan/JsonUnit) | `5.0.0` | `5.1.0` | | [org.graalvm.buildtools:native-maven-plugin](https://github.com/graalvm/native-build-tools) | `0.11.2` | `0.11.3` | | [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.6.2` | `3.6.3` | Updates `com.google.errorprone:error_prone_annotations` from 2.44.0 to 2.45.0 - [Release notes](https://github.com/google/error-prone/releases) - [Commits](google/error-prone@v2.44.0...v2.45.0) Updates `org.jetbrains.kotlin:kotlin-bom` from 2.2.21 to 2.3.0 - [Release notes](https://github.com/JetBrains/kotlin/releases) - [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md) - [Commits](JetBrains/kotlin@v2.2.21...v2.3.0) Updates `org.apache.logging.log4j:log4j-bom` from 0.0.0-SNAPSHOT to 2.25.3 - [Release notes](https://github.com/apache/logging-log4j2/releases) - [Changelog](https://github.com/apache/logging-log4j2/blob/2.x/RELEASE-NOTES.adoc) - [Commits](https://github.com/apache/logging-log4j2/commits/rel/2.25.3) Updates `org.apache.logging.log4j:log4j-core` from 2.25.2 to 2.25.3 Updates `org.springframework.boot:spring-boot-dependencies` from 3.5.7 to 4.0.1 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.7...v4.0.1) Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.5.7 to 4.0.1 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.7...v4.0.1) Updates `org.springframework.cloud:spring-cloud-dependencies` from 2025.0.0 to 2025.1.0 - [Release notes](https://github.com/spring-cloud/spring-cloud-release/releases) - [Commits](spring-cloud/spring-cloud-release@v2025.0.0...v2025.1.0) Updates `org.apache.logging.log4j:log4j-core` from 2.25.2 to 2.25.3 Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.5.7 to 4.0.1 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.7...v4.0.1) Updates `org.aspectj:aspectjweaver` from 1.9.25 to 1.9.25.1 - [Release notes](https://github.com/eclipse/org.aspectj/releases) - [Commits](https://github.com/eclipse/org.aspectj/commits) Updates `org.aspectj:aspectjrt` from 1.9.25 to 1.9.25.1 - [Release notes](https://github.com/eclipse/org.aspectj/releases) - [Commits](https://github.com/eclipse/org.aspectj/commits) Updates `org.aspectj:aspectjtools` from 1.9.25 to 1.9.25.1 - [Release notes](https://github.com/eclipse/org.aspectj/releases) - [Commits](https://github.com/eclipse/org.aspectj/commits) Updates `org.aspectj:aspectjrt` from 1.9.25 to 1.9.25.1 - [Release notes](https://github.com/eclipse/org.aspectj/releases) - [Commits](https://github.com/eclipse/org.aspectj/commits) Updates `org.aspectj:aspectjtools` from 1.9.25 to 1.9.25.1 - [Release notes](https://github.com/eclipse/org.aspectj/releases) - [Commits](https://github.com/eclipse/org.aspectj/commits) Updates `org.apache.logging.log4j:log4j-core` from 2.25.2 to 2.25.3 Updates `org.apache.logging.log4j:log4j-bom` from 2.25.2 to 2.25.3 - [Release notes](https://github.com/apache/logging-log4j2/releases) - [Changelog](https://github.com/apache/logging-log4j2/blob/2.x/RELEASE-NOTES.adoc) - [Commits](https://github.com/apache/logging-log4j2/commits/rel/2.25.3) Updates `org.apache.logging.log4j:log4j-bom` from 2.25.2 to 2.25.3 - [Release notes](https://github.com/apache/logging-log4j2/releases) - [Changelog](https://github.com/apache/logging-log4j2/blob/2.x/RELEASE-NOTES.adoc) - [Commits](https://github.com/apache/logging-log4j2/commits/rel/2.25.3) Updates `ch.qos.logback:logback-classic` from 1.5.20 to 1.5.23 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](qos-ch/logback@v_1.5.20...v_1.5.23) Updates `org.json:json` from 20250517 to 20251224 - [Release notes](https://github.com/douglascrockford/JSON-java/releases) - [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md) - [Commits](https://github.com/douglascrockford/JSON-java/commits) Updates `net.javacrumbs.json-unit:json-unit-assertj` from 5.0.0 to 5.1.0 - [Changelog](https://github.com/lukas-krecan/JsonUnit/blob/master/RELEASES.md) - [Commits](lukas-krecan/JsonUnit@json-unit-parent-5.0.0...json-unit-parent-5.1.0) Updates `org.graalvm.buildtools:native-maven-plugin` from 0.11.2 to 0.11.3 - [Release notes](https://github.com/graalvm/native-build-tools/releases) - [Commits](graalvm/native-build-tools@0.11.2...0.11.3) Updates `org.codehaus.mojo:exec-maven-plugin` from 3.6.2 to 3.6.3 - [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases) - [Commits](mojohaus/exec-maven-plugin@3.6.2...3.6.3) --- updated-dependencies: - dependency-name: com.google.errorprone:error_prone_annotations dependency-version: 2.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: org.jetbrains.kotlin:kotlin-bom dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: org.apache.logging.log4j:log4j-bom dependency-version: 2.25.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all - dependency-name: org.apache.logging.log4j:log4j-core dependency-version: 2.25.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: org.springframework.boot:spring-boot-dependencies dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all - dependency-name: org.springframework.boot:spring-boot-maven-plugin dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all - dependency-name: org.springframework.cloud:spring-cloud-dependencies dependency-version: 2025.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: org.apache.logging.log4j:log4j-core dependency-version: 2.25.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: org.springframework.boot:spring-boot-maven-plugin dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all - dependency-name: org.aspectj:aspectjweaver dependency-version: 1.9.25.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: org.aspectj:aspectjrt dependency-version: 1.9.25.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: org.aspectj:aspectjtools dependency-version: 1.9.25.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: org.aspectj:aspectjrt dependency-version: 1.9.25.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: org.aspectj:aspectjtools dependency-version: 1.9.25.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: org.apache.logging.log4j:log4j-core dependency-version: 2.25.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: org.apache.logging.log4j:log4j-bom dependency-version: 2.25.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: org.apache.logging.log4j:log4j-bom dependency-version: 2.25.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.5.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: org.json:json dependency-version: '20251224' dependency-type: direct:production update-type: version-update:semver-major dependency-group: all - dependency-name: net.javacrumbs.json-unit:json-unit-assertj dependency-version: 5.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: org.graalvm.buildtools:native-maven-plugin dependency-version: 0.11.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: org.codehaus.mojo:exec-maven-plugin dependency-version: 3.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-01-12T00:44:11Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Dec 29, 2025

dependabot bot closed this Jan 12, 2026

dependabot bot deleted the dependabot/maven/all-7587624dcb branch January 12, 2026 00:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the all group across 2 directories with 15 updates #388

Bump the all group across 2 directories with 15 updates #388

dependabot bot commented on behalf of github Dec 29, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Jan 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the all group across 2 directories with 15 updates #388

Bump the all group across 2 directories with 15 updates #388

Conversation

dependabot bot commented on behalf of github Dec 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Error Prone 2.45.0

Kotlin 2.3.0

Changelog

Analysis API

Analysis API. Code Compilation

Analysis API. FIR

Analysis API. Infrastructure

Analysis API. Light Classes

Analysis API. Providers and Caches

Fixes

2.3.0

Analysis API

Analysis API. Code Compilation

Analysis API. FIR

Analysis API. Infrastructure

Analysis API. Light Classes

Analysis API. Providers and Caches

Fixes

2.25.3

Changed

Fixed

Removed

2.25.2

Fixed

2.25.1

Fixed

v4.0.1

⚠️ Noteworthy changes

🐞 Bug Fixes

📔 Documentation

v4.0.1

⚠️ Noteworthy changes

🐞 Bug Fixes

📔 Documentation

v4.0.1

⚠️ Noteworthy changes

🐞 Bug Fixes

📔 Documentation

1.9.25.1

1.9.25.1

1.9.25.1

1.9.25.1

1.9.25.1

2.25.3

Changed

Fixed

Removed

2.25.2

Fixed

Uh oh!

dependabot bot commented on behalf of github Jan 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Dec 29, 2025 •

edited

Loading