Skip to content

[Tech] Bump the non-major-dependencies group in /backend with 20 updates #2589

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Tech] Bump the non-major-dependencies group in /backend with 20 updates #2589

wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 1, 2025

Bumps the non-major-dependencies group in /backend with 20 updates:

Package From To
org.springframework.boot:spring-boot-dependencies 3.5.6 3.5.7
org.flywaydb:flyway-core 11.13.2 11.15.0
org.flywaydb:flyway-database-postgresql 11.13.2 11.15.0
com.fasterxml.jackson.module:jackson-module-kotlin 2.20.0 2.20.1
io.ktor:ktor-client-core 3.3.0 3.3.1
io.ktor:ktor-client-java 3.3.0 3.3.1
io.ktor:ktor-client-content-negotiation 3.3.0 3.3.1
io.ktor:ktor-serialization-kotlinx-json 3.3.0 3.3.1
io.ktor:ktor-client-mock 3.3.0 3.3.1
io.sentry:sentry 8.23.0 8.25.0
io.sentry:sentry-log4j2 8.23.0 8.25.0
com.github.ben-manes.caffeine:caffeine 3.2.2 3.2.3
com.squareup.okhttp3:mockwebserver 5.1.0 5.3.0
org.springframework.boot 3.5.6 3.5.7
jvm 2.2.20 2.2.21
plugin.spring 2.2.20 2.2.21
plugin.allopen 2.2.20 2.2.21
plugin.noarg 2.2.20 2.2.21
plugin.jpa 2.2.20 2.2.21
plugin.serialization 2.2.20 2.2.21

Updates org.springframework.boot:spring-boot-dependencies from 3.5.6 to 3.5.7

Release notes

Sourced from org.springframework.boot:spring-boot-dependencies's releases.

v3.5.7

⭐ New Features

  • Add TWENTY_FIVE to JavaVersion enum #47609

🐞 Bug Fixes

  • Signed jar verification fails when nested in an uber war running on an Oracle JVM #47771
  • In an uber war, value of the Sbom-Location manifest attribute does not match the SBOM's actual location #47737
  • Homebrew formula for the CLI should use libexec #47722
  • When virtual threads are enabled, embedded Jetty does not use recommended virtual thread configuration #47717
  • ClientHttpRequestFactoryRuntimeHints is missing timeout methods with Duration overloads #47678
  • OnBeanCondition no longer correctly finds annotations on scoped target proxy beans #47635
  • JavaVersion doesn't work reliably in native-image #47620
  • LiquibaseEndpoint always uses defaultSchema instead of liquibaseSchema #47346
  • Launcher fails to find main method when it is parameterless #47311
  • Package private Main class using Java 25 is not found by build plugins #47309
  • Bitnami legacy images are not automatically detected #47275
  • Maven plugin does not provide an easy way to exclude optional dependencies from uber jar #25403

📔 Documentation

  • Some spring.test.* properties are not documented #47775
  • Dependency management for Maven AntRun Plugin is missing changelog link #47744
  • Developing Your First Spring Boot Application has outdated tools #47700
  • Include deprecated configuration properties in the reference documentation #47669
  • Aggregated Javadoc should link to the proper version of JakartaEE #47593
  • Update javadoc of TestRestTemplate following change to redirect behavior #47474
  • Use non-deprecated syntax to configure sourceCompatibility #47343
  • Fix link to Framework's @Bean annotation #47330
  • Update managed dependency version override examples in documentation #47306

🔨 Dependency Upgrades

  • Upgrade to ActiveMQ 6.1.8 #47767
  • Upgrade to Angus Mail 2.0.5 #47525
  • Upgrade to AssertJ 3.27.6 #47526
  • Upgrade to Byte Buddy 1.17.8 #47527
  • Upgrade to Cassandra Driver 4.19.1 #47768
  • Upgrade to Classmate 1.7.1 #47528
  • Upgrade to Elasticsearch Client 8.18.8 #47671
  • Upgrade to Glassfish JAXB 4.0.6 #47529
  • Upgrade to GraphQL Java 24.3 #47755
  • Upgrade to Groovy 4.0.29 #47713
  • Upgrade to Hibernate 6.6.33.Final #47530
  • Upgrade to HttpClient5 5.5.1 #47531
  • Upgrade to HttpCore5 5.3.6 #47532
  • Upgrade to Jakarta Mail 2.1.5 #47533
  • Upgrade to Jakarta XML Bind 4.0.4 #47242
  • Upgrade to Jetty 12.0.29 #47728

... (truncated)

Commits
  • d3152ea Release v3.5.7
  • af07358 Merge branch '3.4.x' into 3.5.x
  • b0bef35 Document missing spring.test.* properties
  • 6683d0f Merge branch '3.4.x' into 3.5.x
  • 5ba3642 Next development version (v3.4.12-SNAPSHOT)
  • 59aba4e Merge branch '3.4.x' into 3.5.x
  • 4525a0c Merge pull request #47284 from DKARAGODIN
  • 43d91ae Write signature files to uber wars for Oracle Java 17 verification
  • eaad688 Upgrade to Spring Batch 5.2.4
  • edee2de Upgrade to Cassandra Driver 4.19.1
  • Additional commits viewable in compare view

Updates org.flywaydb:flyway-core from 11.13.2 to 11.15.0

Release notes

Sourced from org.flywaydb:flyway-core's releases.

Flyway 11.15.0

See release notes here

Flyway 11.14.1

See release notes here

Flyway 11.14.0

See release notes here

Flyway 11.13.3

See release notes here

Commits

Updates org.flywaydb:flyway-database-postgresql from 11.13.2 to 11.15.0

Updates org.flywaydb:flyway-database-postgresql from 11.13.2 to 11.15.0

Updates com.fasterxml.jackson.module:jackson-module-kotlin from 2.20.0 to 2.20.1

Commits
  • 7602d41 [maven-release-plugin] prepare release jackson-module-kotlin-2.20.1
  • a3e110c Prep for 2.20.1 release
  • 2613d4f Merge branch '2.19' into 2.20
  • 35aa6ab Post-release dep version bump
  • c71ae67 [maven-release-plugin] prepare for next development iteration
  • f475369 [maven-release-plugin] prepare release jackson-module-kotlin-2.19.4
  • 1c832b0 Prep for 2.19.4 release
  • d7ffcd3 Update README.md
  • 613f938 Merge branch '2.19' into 2.20
  • 30f83b1 Post-release dep version bump
  • Additional commits viewable in compare view

Updates io.ktor:ktor-client-core from 3.3.0 to 3.3.1

Release notes

Sourced from io.ktor:ktor-client-core's releases.

3.3.1

Published 8 October 2025

Improvements

  • Add a note about SSE session lifetime in KDoc (KTOR-8440)
  • Update Kotlin to 2.2.20 (KTOR-8896)

Bugfixes

  • NumberFormatException when Content-Length header value contains null bytes (KTOR-4828)
  • SerializationException: Serializer for class 'ClientSSESession' is not found when server responds with JSON (KTOR-7631)
  • Netty: loadConfiguration missing enableHttp2 and enableH2c properties (KTOR-8898)
  • Netty: EmbeddedServer.stop always blocks for twice of shutdownGracePeriod (KTOR-8770)
  • shutdownGracePeriod is used instead of shutdownTimeout in EmbeddedServer.stop() (KTOR-8771)
  • Support serving static resources within bootJar (KTOR-8592)
Changelog

Sourced from io.ktor:ktor-client-core's changelog.

3.3.1

Published 8 October 2025

Improvements

  • Add a note about SSE session lifetime in KDoc (KTOR-8440)
  • Update Kotlin to 2.2.20 (KTOR-8896)

Bugfixes

  • NumberFormatException when Content-Length header value contains null bytes (KTOR-4828)
  • SerializationException: Serializer for class 'ClientSSESession' is not found when server responds with JSON (KTOR-7631)
  • Netty: loadConfiguration missing enableHttp2 and enableH2c properties (KTOR-8898)
  • Netty: EmbeddedServer.stop always blocks for twice of shutdownGracePeriod (KTOR-8770)
  • shutdownGracePeriod is used instead of shutdownTimeout in EmbeddedServer.stop() (KTOR-8771)
  • Support serving static resources within bootJar (KTOR-8592)
Commits
  • 49fb2bf Add changelog for 3.3.1 (#5120)
  • f905acf Release 3.3.1 (#5117)
  • 57ad521 KTOR-4828 Fix NumberFormatException when Content-Length value is invalid (#5110)
  • cd423ef KTOR-8898: add netty config load: enableHttp2 and enableH2c
  • c21922b KTOR-8440 Add a note about SSE session lifetime in KDoc (#5107)
  • 5ef7cb2 KTOR-8770 Fix double shutdownGracePeriod on Netty (#5102)
  • a3bef60 KTOR-8740 Fill in missing attributes for HTMX DSL (#5097)
  • afe1593 KTOR-8790 Remove apiCheck task (#5096)
  • 8c5903f Resolve flaky test issues with JS (#5098)
  • 2f512cf KTOR-7631 Fix SerializationException when ContentNegotiation installed before...
  • Additional commits viewable in compare view

Updates io.ktor:ktor-client-java from 3.3.0 to 3.3.1

Release notes

Sourced from io.ktor:ktor-client-java's releases.

3.3.1

Published 8 October 2025

Improvements

  • Add a note about SSE session lifetime in KDoc (KTOR-8440)
  • Update Kotlin to 2.2.20 (KTOR-8896)

Bugfixes

  • NumberFormatException when Content-Length header value contains null bytes (KTOR-4828)
  • SerializationException: Serializer for class 'ClientSSESession' is not found when server responds with JSON (KTOR-7631)
  • Netty: loadConfiguration missing enableHttp2 and enableH2c properties (KTOR-8898)
  • Netty: EmbeddedServer.stop always blocks for twice of shutdownGracePeriod (KTOR-8770)
  • shutdownGracePeriod is used instead of shutdownTimeout in EmbeddedServer.stop() (KTOR-8771)
  • Support serving static resources within bootJar (KTOR-8592)
Changelog

Sourced from io.ktor:ktor-client-java's changelog.

3.3.1

Published 8 October 2025

Improvements

  • Add a note about SSE session lifetime in KDoc (KTOR-8440)
  • Update Kotlin to 2.2.20 (KTOR-8896)

Bugfixes

  • NumberFormatException when Content-Length header value contains null bytes (KTOR-4828)
  • SerializationException: Serializer for class 'ClientSSESession' is not found when server responds with JSON (KTOR-7631)
  • Netty: loadConfiguration missing enableHttp2 and enableH2c properties (KTOR-8898)
  • Netty: EmbeddedServer.stop always blocks for twice of shutdownGracePeriod (KTOR-8770)
  • shutdownGracePeriod is used instead of shutdownTimeout in EmbeddedServer.stop() (KTOR-8771)
  • Support serving static resources within bootJar (KTOR-8592)
Commits
  • 49fb2bf Add changelog for 3.3.1 (#5120)
  • f905acf Release 3.3.1 (#5117)
  • 57ad521 KTOR-4828 Fix NumberFormatException when Content-Length value is invalid (#5110)
  • cd423ef KTOR-8898: add netty config load: enableHttp2 and enableH2c
  • c21922b KTOR-8440 Add a note about SSE session lifetime in KDoc (#5107)
  • 5ef7cb2 KTOR-8770 Fix double shutdownGracePeriod on Netty (#5102)
  • a3bef60 KTOR-8740 Fill in missing attributes for HTMX DSL (#5097)
  • afe1593 KTOR-8790 Remove apiCheck task (#5096)
  • 8c5903f Resolve flaky test issues with JS (#5098)
  • 2f512cf KTOR-7631 Fix SerializationException when ContentNegotiation installed before...
  • Additional commits viewable in compare view

Updates io.ktor:ktor-client-content-negotiation from 3.3.0 to 3.3.1

Release notes

Sourced from io.ktor:ktor-client-content-negotiation's releases.

3.3.1

Published 8 October 2025

Improvements

  • Add a note about SSE session lifetime in KDoc (KTOR-8440)
  • Update Kotlin to 2.2.20 (KTOR-8896)

Bugfixes

  • NumberFormatException when Content-Length header value contains null bytes (KTOR-4828)
  • SerializationException: Serializer for class 'ClientSSESession' is not found when server responds with JSON (KTOR-7631)
  • Netty: loadConfiguration missing enableHttp2 and enableH2c properties (KTOR-8898)
  • Netty: EmbeddedServer.stop always blocks for twice of shutdownGracePeriod (KTOR-8770)
  • shutdownGracePeriod is used instead of shutdownTimeout in EmbeddedServer.stop() (KTOR-8771)
  • Support serving static resources within bootJar (KTOR-8592)
Changelog

Sourced from io.ktor:ktor-client-content-negotiation's changelog.

3.3.1

Published 8 October 2025

Improvements

  • Add a note about SSE session lifetime in KDoc (KTOR-8440)
  • Update Kotlin to 2.2.20 (KTOR-8896)

Bugfixes

  • NumberFormatException when Content-Length header value contains null bytes (KTOR-4828)
  • SerializationException: Serializer for class 'ClientSSESession' is not found when server responds with JSON (KTOR-7631)
  • Netty: loadConfiguration missing enableHttp2 and enableH2c properties (KTOR-8898)
  • Netty: EmbeddedServer.stop always blocks for twice of shutdownGracePeriod (KTOR-8770)
  • shutdownGracePeriod is used instead of shutdownTimeout in EmbeddedServer.stop() (KTOR-8771)
  • Support serving static resources within bootJar (KTOR-8592)
Commits
  • 49fb2bf Add changelog for 3.3.1 (#5120)
  • f905acf Release 3.3.1 (#5117)
  • 57ad521 KTOR-4828 Fix NumberFormatException when Content-Length value is invalid (#5110)
  • cd423ef KTOR-8898: add netty config load: enableHttp2 and enableH2c
  • c21922b KTOR-8440 Add a note about SSE session lifetime in KDoc (#5107)
  • 5ef7cb2 KTOR-8770 Fix double shutdownGracePeriod on Netty (#5102)
  • a3bef60 KTOR-8740 Fill in missing attributes for HTMX DSL (#5097)
  • afe1593 KTOR-8790 Remove apiCheck task (#5096)
  • 8c5903f Resolve flaky test issues with JS (#5098)
  • 2f512cf KTOR-7631 Fix SerializationException when ContentNegotiation installed before...
  • Additional commits viewable in compare view

Updates io.ktor:ktor-serialization-kotlinx-json from 3.3.0 to 3.3.1

Release notes

Sourced from io.ktor:ktor-serialization-kotlinx-json's releases.

3.3.1

Published 8 October 2025

Improvements

  • Add a note about SSE session lifetime in KDoc (KTOR-8440)
  • Update Kotlin to 2.2.20 (KTOR-8896)

Bugfixes

  • NumberFormatException when Content-Length header value contains null bytes (KTOR-4828)
  • SerializationException: Serializer for class 'ClientSSESession' is not found when server responds with JSON (KTOR-7631)
  • Netty: loadConfiguration missing enableHttp2 and enableH2c properties (KTOR-8898)
  • Netty: EmbeddedServer.stop always blocks for twice of shutdownGracePeriod (KTOR-8770)
  • shutdownGracePeriod is used instead of shutdownTimeout in EmbeddedServer.stop() (KTOR-8771)
  • Support serving static resources within bootJar (KTOR-8592)
Changelog

Sourced from io.ktor:ktor-serialization-kotlinx-json's changelog.

3.3.1

Published 8 October 2025

Improvements

  • Add a note about SSE session lifetime in KDoc (KTOR-8440)
  • Update Kotlin to 2.2.20 (KTOR-8896)

Bugfixes

  • NumberFormatException when Content-Length header value contains null bytes (KTOR-4828)
  • SerializationException: Serializer for class 'ClientSSESession' is not found when server responds with JSON (KTOR-7631)
  • Netty: loadConfiguration missing enableHttp2 and enableH2c properties (KTOR-8898)
  • Netty: EmbeddedServer.stop always blocks for twice of shutdownGracePeriod (KTOR-8770)
  • shutdownGracePeriod is used instead of shutdownTimeout in EmbeddedServer.stop() (KTOR-8771)
  • Support serving static resources within bootJar (KTOR-8592)
Commits
  • 49fb2bf Add changelog for 3.3.1 (#5120)
  • f905acf Release 3.3.1 (#5117)
  • 57ad521 KTOR-4828 Fix NumberFormatException when Content-Length value is invalid (#5110)
  • cd423ef KTOR-8898: add netty config load: enableHttp2 and enableH2c
  • c21922b KTOR-8440 Add a note about SSE session lifetime in KDoc (#5107)
  • 5ef7cb2 KTOR-8770 Fix double shutdownGracePeriod on Netty (#5102)
  • a3bef60 KTOR-8740 Fill in missing attributes for HTMX DSL (#5097)
  • afe1593 KTOR-8790 Remove apiCheck task (#5096)
  • 8c5903f Resolve flaky test issues with JS (#5098)
  • 2f512cf KTOR-7631 Fix SerializationException when ContentNegotiation installed before...
  • Additional commits viewable in compare view

Updates io.ktor:ktor-client-mock from 3.3.0 to 3.3.1

Release notes

Sourced from io.ktor:ktor-client-mock's releases.

3.3.1

Published 8 October 2025

Improvements

  • Add a note about SSE session lifetime in KDoc (KTOR-8440)
  • Update Kotlin to 2.2.20 (KTOR-8896)

Bugfixes

  • NumberFormatException when Content-Length header value contains null bytes (KTOR-4828)
  • SerializationException: Serializer for class 'ClientSSESession' is not found when server responds with JSON (KTOR-7631)
  • Netty: loadConfiguration missing enableHttp2 and enableH2c properties (KTOR-8898)
  • Netty: EmbeddedServer.stop always blocks for twice of shutdownGracePeriod (KTOR-8770)
  • shutdownGracePeriod is used instead of shutdownTimeout in EmbeddedServer.stop() (KTOR-8771)
  • Support serving static resources within bootJar (KTOR-8592)
Changelog

Sourced from io.ktor:ktor-client-mock's changelog.

3.3.1

Published 8 October 2025

Improvements

  • Add a note about SSE session lifetime in KDoc (KTOR-8440)
  • Update Kotlin to 2.2.20 (KTOR-8896)

Bugfixes

  • NumberFormatException when Content-Length header value contains null bytes (KTOR-4828)
  • SerializationException: Serializer for class 'ClientSSESession' is not found when server responds with JSON (KTOR-7631)
  • Netty: loadConfiguration missing enableHttp2 and enableH2c properties (KTOR-8898)
  • Netty: EmbeddedServer.stop always blocks for twice of shutdownGracePeriod (KTOR-8770)
  • shutdownGracePeriod is used instead of shutdownTimeout in EmbeddedServer.stop() (KTOR-8771)
  • Support serving static resources within bootJar (KTOR-8592)
Commits
  • 49fb2bf Add changelog for 3.3.1 (#5120)
  • f905acf Release 3.3.1 (#5117)
  • 57ad521 KTOR-4828 Fix NumberFormatException when Content-Length value is invalid (#5110)
  • cd423ef KTOR-8898: add netty config load: enableHttp2 and enableH2c
  • c21922b KTOR-8440 Add a note about SSE session lifetime in KDoc (#5107)
  • 5ef7cb2 KTOR-8770 Fix double shutdownGracePeriod on Netty (#5102)
  • a3bef60 KTOR-8740 Fill in missing attributes for HTMX DSL (#5097)
  • afe1593 KTOR-8790 Remove apiCheck task (#5096)
  • 8c5903f Resolve flaky test issues with JS (#5098)
  • 2f512cf KTOR-7631 Fix SerializationException when ContentNegotiation installed before...
  • Additional commits viewable in compare view

Updates io.ktor:ktor-client-java from 3.3.0 to 3.3.1

Release notes

Sourced from io.ktor:ktor-client-java's releases.

3.3.1

Published 8 October 2025

Improvements

  • Add a note about SSE session lifetime in KDoc (KTOR-8440)
  • Update Kotlin to 2.2.20 (KTOR-8896)

Bugfixes

  • NumberFormatException when Content-Length header value contains null bytes (KTOR-4828)
  • SerializationException: Serializer for class 'ClientSSESession' is not found when server responds with JSON (KTOR-7631)
  • Netty: loadConfiguration missing enableHttp2 and enableH2c properties (KTOR-8898)
  • Netty: EmbeddedServer.stop always blocks for twice of shutdownGracePeriod (KTOR-8770)
  • shutdownGracePeriod is used instead of shutdownTimeout in EmbeddedServer.stop() (KTOR-8771)
  • Support serving static resources within bootJar (KTOR-8592)
Changelog

Sourced from io.ktor:ktor-client-java's changelog.

3.3.1

Published 8 October 2025

Improvements

  • Add a note about SSE session lifetime in KDoc (KTOR-8440)
  • Update Kotlin to 2.2.20 (KTOR-8896)

Bugfixes

  • NumberFormatException when Content-Length header value contains null bytes (KTOR-4828)
  • SerializationException: Serializer for class 'ClientSSESession' is not found when server responds with JSON (KTOR-7631)
  • Netty: loadConfiguration missing enableHttp2 and enableH2c properties (KTOR-8898)
  • Netty: EmbeddedServer.stop always blocks for twice of shutdownGracePeriod (KTOR-8770)
  • shutdownGracePeriod is used instead of shutdownTimeout in EmbeddedServer.stop() (KTOR-8771)
  • Support serving static resources within bootJar (KTOR-8592)
Commits
  • 49fb2bf Add changelog for 3.3.1 (#5120)
  • f905acf Release 3.3.1 (#5117)
  • 57ad521 KTOR-4828 Fix NumberFormatException when Content-Length value is invalid (#5110)
  • cd423ef KTOR-8898: add netty config load: enableHttp2 and enableH2c
  • c21922b KTOR-8440 Add a note about SSE session lifetime in KDoc (#5107)
  • 5ef7cb2 KTOR-8770 Fix double shutdownGracePeriod on Netty (#5102)
  • a3bef60 KTOR-8740 Fill in missing attributes for HTMX DSL (#5097)
  • afe1593 KTOR-8790 Remove apiCheck task (#5096)
  • 8c5903f Resolve flaky test issues with JS (#5098)
  • 2f512cf KTOR-7631 Fix SerializationException when ContentNegotiation installed before...
  • Additional commits viewable in compare view

Updates io.ktor:ktor-client-content-negotiation from 3.3.0 to 3.3.1

Release notes

Sourced from io.ktor:ktor-client-content-negotiation's releases.

3.3.1

Published 8 October 2025

Improvements

  • Add a note about SSE session lifetime in KDoc (KTOR-8440)
  • Update Kotlin to 2.2.20 (KTOR-8896)

Bugfixes

  • NumberFormatException when Content-Length header value contains null bytes (KTOR-4828)
  • SerializationException: Serializer for class 'ClientSSESession' is not found when server responds with JSON (KTOR-7631)
  • Netty: loadConfiguration missing enableHttp2 and enableH2c properties (KTOR-8898)
  • Netty: EmbeddedServer.stop always blocks for twice of shutdownGracePeriod (KTOR-8770)
  • shutdownGracePeriod is used instead of shutdownTimeout in EmbeddedServer.stop() (KTOR-8771)
  • Support serving static resources within bootJar (KTOR-8592)
Changelog

Sourced from io.ktor:ktor-client-content-negotiation's changelog.

3.3.1

Published 8 October 2025

Improvements

  • Add a note about SSE session lifetime in KDoc (KTOR-8440)
  • Update Kotlin to 2.2.20 (KTOR-8896)

Bugfixes

  • NumberFormatException when Content-Length header value contains null bytes (KTOR-4828)
  • SerializationException: Serializer for class 'ClientSSESession' is not found when server responds with JSON (KTOR-7631)
  • Netty: loadConfiguration missing enableHttp2 and enableH2c properties (KTOR-8898)
  • Netty: EmbeddedServer.stop always blocks for twice of shutdownGracePeriod (KTOR-8770)
  • shutdownGracePeriod is used instead of shutdownTimeout in EmbeddedServer.stop() (KTOR-8771)
  • Support serving static resources within bootJar (KTOR-8592)
Commits
  • 49fb2bf Add changelog for 3.3.1 (#5120)
  • f905acf Release 3.3.1 (#5117)
  • 57ad521 KTOR-4828 Fix NumberFormatException when Content-Length value is invalid (#5110)
  • cd423ef KTOR-8898: add netty config load: enableHttp2 and enableH2c
  • c21922b KTOR-8440 Add a note about SSE session lifetime in KDoc (#5107)
  • 5ef7cb2 KTOR-8770 Fix double shutdownGracePeriod on Netty (#5102)
  • a3bef60 KTOR-8740 Fill in missing attributes for HTMX DSL (#5097)
  • afe1593 KTOR-8790 Remove apiCheck task (#5096)
  • 8c5903f Resolve flaky test issues with JS (#5098)
  • 2f512cf KTOR-7631 Fix SerializationException when ContentNegotiation installed before...
  • Additional commits viewable in compare view

Updates io.ktor:ktor-serialization-kotlinx-json from 3.3.0 to 3.3.1

Release notes

Sourced from io.ktor:ktor-serialization-kotlinx-json's releases.

3.3.1

Published 8 October 2025

Improvements

  • Add a note about SSE session lifetime in KDoc (KTOR-8440)
  • Update Kotlin to 2.2.20 (KTOR-8896)

Bugfixes

  • NumberFormatException when Content-Length header value contains null bytes (KTOR-4828)
  • SerializationException: Serializer for class 'ClientSSESession' is not found when server responds with JSON (KTOR-7631)
  • Netty: loadConfiguration missing enableHttp2 and enableH2c properties (KTOR-8898)
  • Netty: EmbeddedServer.stop always blocks for twice of shutdownGracePeriod (KTOR-8770)
  • shutdownGracePeriod is used instead of shutdownTimeout in EmbeddedServer.stop() (KTOR-8771)
  • Support serving static resources within bootJar (KTOR-8592)
Changelog

Sourced from io.ktor:ktor-serialization-kotlinx-json's changelog.

3.3.1

Published 8 October 2025

Improvements

  • Add a note about SSE session lifetime in KDoc (KTOR-8440)
  • Update Kotlin to 2.2.20 (KTOR-8896)

Bugfixes

  • NumberFormatException when Content-Length header value contains null bytes (KTOR-4828)
  • SerializationException: Serializer for class 'ClientSSESession' is not found when server responds with JSON (KTOR-7631)
  • Netty: loadConfiguration missing enableHttp2 and enableH2c properties (KTOR-8898)
  • Netty: EmbeddedServer.stop always blocks for twice of shutdownGracePeriod (KTOR-8770)
  • shutdownGracePeriod is used instead of shutdownTimeout in EmbeddedServer.stop() (KTOR-8771)
  • Support serving static resources within bootJar (KTOR-8592)
Commits
  • 49fb2bf Add changelog for 3.3.1 (#5120)
  • f905acf Release 3.3.1 (#5117)
  • 57ad521 KTOR-4828 Fix NumberFormatException when Content-Length value is invalid (#5110)
  • cd423ef KTOR-8898: add netty config load: enableHttp2 and enableH2c
  • c21922b KTOR-8440 Add a note about SSE session lifetime in KDoc (#5107)
  • 5ef7cb2 KTOR-8770 Fix double shutdownGracePeriod on Netty (#5102)
  • a3bef60 KTOR-8740 Fill in missing attributes for HTMX DSL (#5097)
  • afe1593 KTOR-8790 Remove apiCheck task (#5096)
  • 8c5903f Resolve flaky test issues with JS (#5098)
  • 2f512cf KTOR-7631 Fix SerializationException when ContentNegotiation installed before...
  • Additional commits viewable in compare view

Updates io.sentry:sentry from 8.23.0 to 8.25.0

Release notes

Sourced from io.sentry:sentry's releases.

8.25.0

Fixes

  • [ANR] Removed AndroidTransactionProfiler lock (#4817)
  • Avoid ExecutorService for DefaultCompositePerformanceCollector timeout (#4841)
    • This avoids infinite data collection for never stopped transactions, leading to OOMs
  • Fix wrong .super() call in SentryTimberTree (#4844)

Improvements

  • [ANR] Defer some class availability checks (#4825)
  • Collect PerformanceCollectionData only for sampled transactions (#4834)
    • Breaking change: Transactions with a deferred sampling decision (sampled == null) won't be collecting any performance data anymore (CPU, RAM, slow/frozen frames).

Dependencies

8.24.0

Features

  • Attach MDC properties to logs as attributes (#4786)
    • MDC properties set using supported logging frameworks (Logback, Log4j2, java.util.Logging) are now attached to structured logs as attributes.
    • The attribute reflected on the log is mdc.<key>, where <key> is the original key in the MDC.
    • This means that you will be able to filter/aggregate logs in the product based on these properties.
    • Only properties with keys matching the configured contextTags are sent as log attributes.
      • You can configure which properties are sent using options.setContextTags if initalizing manually, or by specifying a comma-separated list of keys with a context-tags entry in sentry.properties or sentry.context-tags in application.properties.
      • Note that keys containing spaces are not supported.
  • Add experimental Sentry Android Distribution module for integrating with Sentry Build Distribution to check for and install updates (#4804)
  • Allow passing a different Handler to SystemEventsBreadcrumbsIntegration and AndroidConnectionStatusProvider so their callbacks are deliver to that handler (#4808)
  • Session Replay: Add new experimental Canvas Capture Strategy (#4777)
    • A new screenshot capture strategy that uses Android's Canvas API for more accurate and reliable text and image masking
    • Any .drawText() or .drawBitmap() calls are replaced by rectangles, ensuring no text or images are present in the resulting output
    • Note: If this strategy is used, all text and images will be masked, regardless of any masking configuration
    • To enable this feature, set the screenshotStrategy, either via code: 
      SentryAndroid.init(context) { options ->
  options.sessionReplay.screenshotStrategy = ScreenshotStrategyType.CANVAS
}
      or AndroidManifest.xml: 
      <application>
  <meta-data android:name="io.sentry.session-replay.screenshot-strategy" android:value="canvas" />
</application>

Fixes

... (truncated)

Changelog

Sourced from io.sentry:sentry's changelog.

8.25.0

Fixes

  • [ANR] Removed AndroidTransactionProfiler lock (#4817)
  • Avoid ExecutorService for DefaultCompositePerformanceCollector timeout (#4841)
    • This avoids infinite data collection for never stopped transactions, leading to OOMs
  • Fix wrong .super() call in SentryTimberTree (#4844)

Improvements

  • [ANR] Defer some class availability checks (#4825)
  • Collect PerformanceCollectionData only for sampled transactions (#4834)
    • Breaking change: Transactions with a deferred sampling decision (sampled == null) won't be collecting any performance data anymore (CPU, RAM, slow/frozen frames).

Dependencies

8.24.0

Features

  • Attach MDC properties to logs as attributes (

@dependabot
[Tech] Bump the non-major-dependencies group in /backend with 20 updates
e945db2 
Bumps the non-major-dependencies group in /backend with 20 updates:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) | `3.5.6` | `3.5.7` |
| [org.flywaydb:flyway-core](https://github.com/flyway/flyway) | `11.13.2` | `11.15.0` |
| org.flywaydb:flyway-database-postgresql | `11.13.2` | `11.15.0` |
| [com.fasterxml.jackson.module:jackson-module-kotlin](https://github.com/FasterXML/jackson-module-kotlin) | `2.20.0` | `2.20.1` |
| [io.ktor:ktor-client-core](https://github.com/ktorio/ktor) | `3.3.0` | `3.3.1` |
| [io.ktor:ktor-client-java](https://github.com/ktorio/ktor) | `3.3.0` | `3.3.1` |
| [io.ktor:ktor-client-content-negotiation](https://github.com/ktorio/ktor) | `3.3.0` | `3.3.1` |
| [io.ktor:ktor-serialization-kotlinx-json](https://github.com/ktorio/ktor) | `3.3.0` | `3.3.1` |
| [io.ktor:ktor-client-mock](https://github.com/ktorio/ktor) | `3.3.0` | `3.3.1` |
| [io.sentry:sentry](https://github.com/getsentry/sentry-java) | `8.23.0` | `8.25.0` |
| [io.sentry:sentry-log4j2](https://github.com/getsentry/sentry-java) | `8.23.0` | `8.25.0` |
| [com.github.ben-manes.caffeine:caffeine](https://github.com/ben-manes/caffeine) | `3.2.2` | `3.2.3` |
| [com.squareup.okhttp3:mockwebserver](https://github.com/square/okhttp) | `5.1.0` | `5.3.0` |
| [org.springframework.boot](https://github.com/spring-projects/spring-boot) | `3.5.6` | `3.5.7` |
| [jvm](https://github.com/JetBrains/kotlin) | `2.2.20` | `2.2.21` |
| [plugin.spring](https://github.com/JetBrains/kotlin) | `2.2.20` | `2.2.21` |
| [plugin.allopen](https://github.com/JetBrains/kotlin) | `2.2.20` | `2.2.21` |
| [plugin.noarg](https://github.com/JetBrains/kotlin) | `2.2.20` | `2.2.21` |
| [plugin.jpa](https://github.com/JetBrains/kotlin) | `2.2.20` | `2.2.21` |
| [plugin.serialization](https://github.com/JetBrains/kotlin) | `2.2.20` | `2.2.21` |


Updates `org.springframework.boot:spring-boot-dependencies` from 3.5.6 to 3.5.7
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v3.5.7)

Updates `org.flywaydb:flyway-core` from 11.13.2 to 11.15.0
- [Release notes](https://github.com/flyway/flyway/releases)
- [Commits](flyway/flyway@flyway-11.13.2...flyway-11.15.0)

Updates `org.flywaydb:flyway-database-postgresql` from 11.13.2 to 11.15.0

Updates `org.flywaydb:flyway-database-postgresql` from 11.13.2 to 11.15.0

Updates `com.fasterxml.jackson.module:jackson-module-kotlin` from 2.20.0 to 2.20.1
- [Commits](FasterXML/jackson-module-kotlin@jackson-module-kotlin-2.20.0...jackson-module-kotlin-2.20.1)

Updates `io.ktor:ktor-client-core` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.3.0...3.3.1)

Updates `io.ktor:ktor-client-java` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.3.0...3.3.1)

Updates `io.ktor:ktor-client-content-negotiation` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.3.0...3.3.1)

Updates `io.ktor:ktor-serialization-kotlinx-json` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.3.0...3.3.1)

Updates `io.ktor:ktor-client-mock` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.3.0...3.3.1)

Updates `io.ktor:ktor-client-java` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.3.0...3.3.1)

Updates `io.ktor:ktor-client-content-negotiation` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.3.0...3.3.1)

Updates `io.ktor:ktor-serialization-kotlinx-json` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.3.0...3.3.1)

Updates `io.sentry:sentry` from 8.23.0 to 8.25.0
- [Release notes](https://github.com/getsentry/sentry-java/releases)
- [Changelog](https://github.com/getsentry/sentry-java/blob/main/CHANGELOG.md)
- [Commits](getsentry/sentry-java@8.23.0...8.25.0)

Updates `io.sentry:sentry-log4j2` from 8.23.0 to 8.25.0
- [Release notes](https://github.com/getsentry/sentry-java/releases)
- [Changelog](https://github.com/getsentry/sentry-java/blob/main/CHANGELOG.md)
- [Commits](getsentry/sentry-java@8.23.0...8.25.0)

Updates `io.sentry:sentry-log4j2` from 8.23.0 to 8.25.0
- [Release notes](https://github.com/getsentry/sentry-java/releases)
- [Changelog](https://github.com/getsentry/sentry-java/blob/main/CHANGELOG.md)
- [Commits](getsentry/sentry-java@8.23.0...8.25.0)

Updates `com.github.ben-manes.caffeine:caffeine` from 3.2.2 to 3.2.3
- [Release notes](https://github.com/ben-manes/caffeine/releases)
- [Commits](ben-manes/caffeine@v3.2.2...v3.2.3)

Updates `io.ktor:ktor-client-mock` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.3.0...3.3.1)

Updates `com.squareup.okhttp3:mockwebserver` from 5.1.0 to 5.3.0
- [Changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md)
- [Commits](square/okhttp@parent-5.1.0...parent-5.3.0)

Updates `org.springframework.boot` from 3.5.6 to 3.5.7
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v3.5.7)

Updates `jvm` from 2.2.20 to 2.2.21
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.20...v2.2.21)

Updates `plugin.spring` from 2.2.20 to 2.2.21
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.20...v2.2.21)

Updates `plugin.allopen` from 2.2.20 to 2.2.21
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.20...v2.2.21)

Updates `plugin.noarg` from 2.2.20 to 2.2.21
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.20...v2.2.21)

Updates `plugin.jpa` from 2.2.20 to 2.2.21
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.20...v2.2.21)

Updates `plugin.serialization` from 2.2.20 to 2.2.21
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.20...v2.2.21)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 3.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: org.flywaydb:flyway-core
  dependency-version: 11.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: org.flywaydb:flyway-database-postgresql
  dependency-version: 11.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: org.flywaydb:flyway-database-postgresql
  dependency-version: 11.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: com.fasterxml.jackson.module:jackson-module-kotlin
  dependency-version: 2.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: io.ktor:ktor-client-core
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: io.ktor:ktor-client-java
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: io.ktor:ktor-client-content-negotiation
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: io.ktor:ktor-serialization-kotlinx-json
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: io.ktor:ktor-client-mock
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: io.ktor:ktor-client-java
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: io.ktor:ktor-client-content-negotiation
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: io.ktor:ktor-serialization-kotlinx-json
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: io.sentry:sentry
  dependency-version: 8.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: io.sentry:sentry-log4j2
  dependency-version: 8.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: io.sentry:sentry-log4j2
  dependency-version: 8.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: com.github.ben-manes.caffeine:caffeine
  dependency-version: 3.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: io.ktor:ktor-client-mock
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: com.squareup.okhttp3:mockwebserver
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: org.springframework.boot
  dependency-version: 3.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: jvm
  dependency-version: 2.2.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: plugin.spring
  dependency-version: 2.2.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: plugin.allopen
  dependency-version: 2.2.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: plugin.noarg
  dependency-version: 2.2.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: plugin.jpa
  dependency-version: 2.2.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: plugin.serialization
  dependency-version: 2.2.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies tech. enhancement technical enhancement labels Nov 1, 2025
@tristanrobert
Copy link
Contributor

tristanrobert commented Nov 1, 2025

✅ Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@sonarqubecloud
Copy link

sonarqubecloud bot commented Nov 1, 2025

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@maximeperraultdev maximeperraultdev

Labels

dependencies tech. enhancement technical enhancement

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@tristanrobert @maximeperraultdev