Skip to content

fix(deps): bump the prod-deps group across 1 directory with 3 updates - #134

Open
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/maven/prod-deps-4ad1593ea0
Open

fix(deps): bump the prod-deps group across 1 directory with 3 updates#134
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/maven/prod-deps-4ad1593ea0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 30, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod-deps group with 3 updates in the / directory: org.springframework.boot:spring-boot-starter-parent, org.mapstruct:mapstruct and org.mapstruct:mapstruct-processor.

Updates org.springframework.boot:spring-boot-starter-parent from 4.0.2 to 4.0.5

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.0.5

🐞 Bug Fixes

  • Test starter for Spring Integration does not include Spring Integration test module #49784
  • Some sliced tests that import TransactionAutoConfiguration do not import TransactionManagerCustomizationAutoConfiguration #49782
  • WebSocket messaging's task executors are only auto-configured and stompWebSocketHandlerMapping is only forced to be eager when using Jackson #49753
  • WebSocket app fails to start when Jackson is on the classpath but there's no JsonMapper bean #49749
  • Metadata annotation processor ignores method-level @NestedConfigurationProperty when using constructor binding #49738
  • Override of property in external 'application.properties' or 'application.yaml' is ignored #49731
  • NativeImageResourceProvider does not find Flyway migration scripts in subdirectories #49706
  • Add @ConditionalOnWebApplication to NettyReactiveWebServerAutoConfiguration #49695
  • @GraphQlTest does not include @ControllerAdvice #49672

📔 Documentation

  • Fix incorrect indefinite articles in Javadoc #49727
  • Add some more Kotlin examples and trivial style fixes #49714
  • Overhaul Spring Session documentation following modularization #49704

🔨 Dependency Upgrades

  • Upgrade to Brave 6.3.1 #49763
  • Upgrade to Jackson 2 Bom 2.21.2 #49764
  • Upgrade to jOOQ 3.19.31 #49765
  • Upgrade to Netty 4.2.12.Final #49794
  • Upgrade to Tomcat 11.0.20 #49767
  • Upgrade to Zipkin Reporter 3.5.3 #49762

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, @​deejay1, @​dlwldnjs1009, @​kwondh5217, @​ljrmorgan, and @​quaff

v4.0.4

⚠️ Attention Required

  • OpenTelemetry's ZipkinSpanExporter has been deprecated and its support will be removed in Spring Boot 4.2. #49453
  • Jackson 2 has been upgraded to 2.21.1 in response to the Jackson team ending support for Jackson 2.20.x. #49389
  • Jackson has been upgraded to 3.1.0 in response to the Jackson team ending support for Jackson 3.0.x. #49383
  • The default value for server.tomcat.max-part-count has been increased from 10 to 50. This aligns it with Tomcat's own default and the default in Spring Boot 3.x. #49311

🐞 Bug Fixes

  • EndpointRequest request matcher for health groups is too complex #49649
  • "/cloudfoundryapplication" web path is not limited to Actuator #49646
  • Fix EndpointRequest.toLinks() when base-path is '/' #49617
  • Docker fails when a 'tcp://' address ends with a slash (for example 'tcp://docker:2375/') #49596
  • RSocket exposes duplicate endpoint for websocket setups #49593
  • Failure analysis for a missing mail sender is misleading #49582

... (truncated)

Commits
  • fe74b31 Release v4.0.5
  • e1d6e5a Merge branch '3.5.x' into 4.0.x
  • 6c9e52a Next development version (v3.5.14-SNAPSHOT)
  • a413e95 Upgrade to Netty 4.2.12.Final
  • c1694b5 Add missing Spring Integration test module to the relevant starter
  • 51ffdc6 Merge branch '3.5.x' into 4.0.x
  • 696a60e Full auto-configure transaction management in slice tests
  • ba70d41 Upgrade to Tomcat 11.0.20
  • fd94ca0 Upgrade to Netty 4.2.11.Final
  • 7e6833b Upgrade to jOOQ 3.19.31
  • Additional commits viewable in compare view

Updates org.mapstruct:mapstruct from 1.6.2 to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct's releases.

1.6.3

Bugs

  • Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
  • Stackoverflow with Immutables custom builder (#3370)
  • Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

  • Add section to README.md comparing mapstruct with Java Records (#3751)
Commits
  • b4e25e4 Releasing version 1.6.3
  • 772fae4 Prepare release notes for 1.6.3
  • efdf435 #3751 Improve readme to include support for Java 16+ records
  • c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
  • 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
  • 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
  • 26c5bcd Update readme with 1.6.2
  • 4e0d73d Next version 1.7.0-SNAPSHOT
  • See full diff in compare view

Updates org.mapstruct:mapstruct-processor from 1.6.2 to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct-processor's releases.

1.6.3

Bugs

  • Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
  • Stackoverflow with Immutables custom builder (#3370)
  • Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

  • Add section to README.md comparing mapstruct with Java Records (#3751)
Commits
  • b4e25e4 Releasing version 1.6.3
  • 772fae4 Prepare release notes for 1.6.3
  • efdf435 #3751 Improve readme to include support for Java 16+ records
  • c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
  • 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
  • 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
  • 26c5bcd Update readme with 1.6.2
  • 4e0d73d Next version 1.7.0-SNAPSHOT
  • See full diff in compare view

Updates org.mapstruct:mapstruct-processor from 1.6.2 to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct-processor's releases.

1.6.3

Bugs

  • Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
  • Stackoverflow with Immutables custom builder (#3370)
  • Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

  • Add section to README.md comparing mapstruct with Java Records (#3751)
Commits
  • b4e25e4 Releasing version 1.6.3
  • 772fae4 Prepare release notes for 1.6.3
  • efdf435 #3751 Improve readme to include support for Java 16+ records
  • c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
  • 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
  • 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
  • 26c5bcd Update readme with 1.6.2
  • 4e0d73d Next version 1.7.0-SNAPSHOT
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-deps group with 3 updates in the / directory: [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot), [org.mapstruct:mapstruct](https://github.com/mapstruct/mapstruct) and [org.mapstruct:mapstruct-processor](https://github.com/mapstruct/mapstruct).


Updates `org.springframework.boot:spring-boot-starter-parent` from 4.0.2 to 4.0.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.2...v4.0.5)

Updates `org.mapstruct:mapstruct` from 1.6.2 to 1.6.3
- [Release notes](https://github.com/mapstruct/mapstruct/releases)
- [Commits](mapstruct/mapstruct@1.6.2...1.6.3)

Updates `org.mapstruct:mapstruct-processor` from 1.6.2 to 1.6.3
- [Release notes](https://github.com/mapstruct/mapstruct/releases)
- [Commits](mapstruct/mapstruct@1.6.2...1.6.3)

Updates `org.mapstruct:mapstruct-processor` from 1.6.2 to 1.6.3
- [Release notes](https://github.com/mapstruct/mapstruct/releases)
- [Commits](mapstruct/mapstruct@1.6.2...1.6.3)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.mapstruct:mapstruct
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.mapstruct:mapstruct-processor
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.mapstruct:mapstruct-processor
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 30, 2026
@sonarqubecloud

sonarqubecloud Bot commented Apr 3, 2026

Copy link
Copy Markdown

@alexanderkurash alexanderkurash removed the AI label Apr 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants