Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 1, 2026

Bumps the non-major-dependencies group with 21 updates in the /backend directory:

Package From To
org.springframework.cloud:spring-cloud-gateway-mvc 4.3.2 4.3.3
io.hypersistence:hypersistence-utils-hibernate-63 3.12.0 3.15.1
org.jetbrains.kotlinx:kotlinx-serialization-json 1.9.0 1.10.0
com.fasterxml.jackson.module:jackson-module-kotlin 2.20.1 2.21.0
io.ktor:ktor-client-core 3.3.2 3.4.0
io.ktor:ktor-client-java 3.3.2 3.4.0
io.ktor:ktor-client-content-negotiation 3.3.2 3.4.0
io.ktor:ktor-serialization-kotlinx-json 3.3.2 3.4.0
io.ktor:ktor-client-mock 3.3.2 3.4.0
io.sentry:sentry 8.26.0 8.31.0
io.sentry:sentry-log4j2 8.26.0 8.31.0
org.apache.poi:poi 5.4.1 5.5.1
org.assertj:assertj-core 3.27.6 3.27.7
com.squareup.okhttp3:mockwebserver 5.3.0 5.3.2
io.mockk:mockk 1.14.6 1.14.9
jvm 2.2.21 2.3.0
plugin.spring 2.2.21 2.3.0
plugin.allopen 2.2.21 2.3.0
plugin.noarg 2.2.21 2.3.0
plugin.jpa 2.2.21 2.3.0
plugin.serialization 2.2.21 2.3.0

Updates org.springframework.cloud:spring-cloud-gateway-mvc from 4.3.2 to 4.3.3

Release notes

Sourced from org.springframework.cloud:spring-cloud-gateway-mvc's releases.

4.3.3

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​dependabot[bot]

What's Changed

New Contributors

Full Changelog: spring-cloud/spring-cloud-gateway@v4.3.2...v4.3.3

Commits
  • 57773e4 Update SNAPSHOT to 4.3.3
  • a922e3f Merge branch '4.2.x' into 4.3.x
  • 5312b66 Updates test to work with new framework changes. (#4018)
  • 6f61579 Bumping versions
  • c5a7f9d Fixing tests after merge
  • e99210e Merge branch '4.2.x' into 4.3.x
  • 9fa9985 Fix test and add security configuration
  • c7bcc73 Unwrap request to put attributes on underlying request
  • 65ea4d3 Bumping versions
  • 78a294b Bumping versions
  • Additional commits viewable in compare view

Updates io.hypersistence:hypersistence-utils-hibernate-63 from 3.12.0 to 3.15.1

Changelog

Sourced from io.hypersistence:hypersistence-utils-hibernate-63's changelog.

Version 3.15.1 - January 28, 2026

Add support for KotlinModule in the hypersistence-utils-hibernate-73 module #832

JsonType should not support non-Serializable attribute mappings #831

Version 3.15.0 - January 27, 2026

Add support for Hibernate ORM 7.3 and Jackson 3 #810

Version 3.14.1 - December 17, 2025

Deprecate all ArrayTypes, with the exception of the EnumArrayType #823

Version 3.14.0 - December 16, 2025

The Hibernate SessionFactory cannot be built due to a ClassCastException after upgrading to 3.13.3 #821

Add support for Hibernate 7.2.0.CR4

Version 3.13.3 - December 12, 2025

ArrayType causes org.hibernate.tool.schema.spi.SchemaManagementException: Schema-validation: wrong column type encountered in column found (Types#ARRAY), but expecting (Types#OTHER) #697

Version 3.13.2 - December 03, 2025

Change SQLStatementCountMismatchException to extend AssertionError #820

Version 3.13.1 - December 01, 2025

Change the signature of the SequenceOptimizerGenerator.configure method for Hibernate 7.1 #818

Add a null check for the XProperty JsonType parameter #814

Version 3.13.0 - December 01, 2025

Add SequenceOptimizer as an alternative to the deprecated GenericGenerator #817

Add support for registering the Jackson KotlinModule when using Kotlin #816

Commits
  • 32aac07 [maven-release-plugin] prepare release hypersistence-utils-parent-3.15.1
  • 556a4c4 Update changelog for the 3.15.1 release
  • ae44778 Add support for KotlinModule in the hypersistence-utils-hibernate-73 module #832
  • c342591 JsonType should not support Serializable attribute mappings #831
  • 64eb113 Bump version up
  • 12bbb72 [maven-release-plugin] prepare for next development iteration
  • 385829e [maven-release-plugin] prepare release hypersistence-utils-parent-3.15.0
  • c9f3fd3 Update changelog for the 3.15.0 release
  • 733fdde Add support for Hibernate ORM 7.3 and Jackson 3
  • bb6c3f6 Bump version up
  • Additional commits viewable in compare view

Updates org.jetbrains.kotlinx:kotlinx-serialization-json from 1.9.0 to 1.10.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's releases.

1.10.0

This release is based on Kotlin 2.3.0 and contains all of the changes from 1.10.0-RC. The only additional change is a fix for ProtoBuf packing of Kotlin unsigned types (#3079). Big thanks to KosmX for contributing the fix.

For your convenience, the changelog for 1.10.0-RC is duplicated below:

Stabilization of APIs

kotlinx-serialization 1.10 and subsequent releases will be focused on stabilization of existing APIs. The following APIs and configuration options are no longer experimental because they're widely used without any known major issues:

  • Json configuration options: decodeEnumsCaseInsensitive, allowTrailingComma, allowComments, and prettyPrintIndent. (#3100)
  • @EncodeDefault annotation and its modes. (#3106)
  • JsonUnquotedLiteral constructor function (#2900)
  • JsonPrimitive constructor function overloads that accept unsigned types. (#3117)
  • JSON DSL functions on JsonElement with Nothing? overloads. (#3117)

Readiness for return value checker

Kotlin 2.3.0 introduces a new feature aimed at helping you to catch bugs related to the accidentally ignored return value of the function. kotlinx-serialization 1.10.0-RC code is fully marked for this feature, meaning that you can get warnings for unused function calls like Json.encodeToString(...). To get the warnings, the feature has to be enabled in your project as described here.

Polymorphism improvements

Polymorphic serialization received a couple of improvements in this release:

New subclassesOfSealed utility to automatically register sealed subclasses serializers in polymorphic modules (#2201).

Use it in your SerializersModule when configuring a polymorphic hierarchy which contains both abstract and sealed classes. For example, when root of your hierarchy is an interface, but most of your inheritors are sealed classes. The new function will register all known sealed subclasses for you, so you don’t need to list them one by one. This makes writing your SerializerModules much faster and simpler. Big thanks to Paul de Vrieze for contributing this feature.

Class discriminator conflict check rework (#3105).

If a payload already contains a property with the same name as the configured discriminator (for example, type), it is called a class discriminator conflict. To produce a correct output and allow more inputs to be deserialized at the same time, the following changes were made:

  • Conflicts introduced by JsonNamingStrategy transformations are now detected during serialization as well and will cause SerializationException. It also affects non-polymorphic classes.
  • Conflicts from ClassDisciminatorMode.ALL_JSON_OBJECTS and SerializersModuleBuilder.polymorphicDefaultSerializer are also detected.
  • It is allowed to deserialize such a conflicting key for both sealed and open polymorphic hierarchies. Previously, it was possible in the sealed hierarchies alone due to missing assertion. See #1664 for details.

General improvements

  • Add .serialName to MissingFieldException for clearer diagnostics. (#3114)
  • Generate unique Automatic-Module-Name entries for metadata JARs. (#3109)
  • Revised ProGuard rules and added R8 tests. (#3041)
  • CBOR: Improved error message when a byte string/array type mismatch is encountered. (#3052)

Bugfixes

... (truncated)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's changelog.

1.10.0 / 2026-01-21

This release is based on Kotlin 2.3.0 and contains all of the changes from 1.10.0-RC. The only additional change is a fix for ProtoBuf packing of Kotlin unsigned types (#3079). Big thanks to KosmX for contributing the fix.

For your convenience, the changelog for 1.10.0-RC is duplicated below:

Stabilization of APIs

kotlinx-serialization 1.10 and subsequent releases will be focused on stabilization of existing APIs. The following APIs and configuration options are no longer experimental because they're widely used without any known major issues:

  • Json configuration options: decodeEnumsCaseInsensitive, allowTrailingComma, allowComments, and prettyPrintIndent. (#3100)
  • @EncodeDefault annotation and its modes. (#3106)
  • JsonUnquotedLiteral constructor function (#2900)
  • JsonPrimitive constructor function overloads that accept unsigned types. (#3117)
  • JSON DSL functions on JsonElement with Nothing? overloads. (#3117)

Readiness for return value checker

Kotlin 2.3.0 introduces a new feature aimed at helping you to catch bugs related to the accidentally ignored return value of the function. kotlinx-serialization 1.10.0-RC code is fully marked for this feature, meaning that you can get warnings for unused function calls like Json.encodeToString(...). To get the warnings, the feature has to be enabled in your project as described here.

Polymorphism improvements

Polymorphic serialization received a couple of improvements in this release:

New subclassesOfSealed utility to automatically register sealed subclasses serializers in polymorphic modules (#2201). Use it in your SerializersModule when configuring a polymorphic hierarchy which contains both abstract and sealed classes. For example, when root of your hierarchy is an interface, but most of your inheritors are sealed classes. The new function will register all known sealed subclasses for you, so you don’t need to list them one by one. This makes writing your SerializerModules much faster and simpler. Big thanks to Paul de Vrieze for contributing this feature.

Class discriminator conflict check rework (#3105). If a payload already contains a property with the same name as the configured discriminator (for example, type), it is called a class discriminator conflict. To produce a correct output and allow more inputs to be deserialized at the same time, the following changes were made:

  • Conflicts introduced by JsonNamingStrategy transformations are now detected during serialization as well and will cause SerializationException. It also affects non-polymorphic classes.
  • Conflicts from ClassDisciminatorMode.ALL_JSON_OBJECTS and SerializersModuleBuilder.polymorphicDefaultSerializer are also detected.
  • It is allowed to deserialize such a conflicting key for both sealed and open polymorphic hierarchies. Previously, it was possible in the sealed hierarchies alone due to missing assertion. See #1664 for details.

General improvements

... (truncated)

Commits
  • 370c4e3 Prepare 1.10.0 release (#3142)
  • eaa4b0b Merge remote-tracking branch 'origin/master' into dev
  • 0311f16 Fix ProtoBuf packing for kotlin unsigned types (#3079)
  • a19df8c Add a disclaimer to "Other community-supported formats" section and slightly ...
  • 2f8a874 Add JSON5 to community-supported formats (#3134)
  • 975af2c Actualize releasing process document
  • e8be81f Prepare 1.10.0-RC release
  • e334d1c [CBOR] Fix various bugs in the decoder implementation
  • d7ca108 Merge remote-tracking branch 'origin/master' into dev
  • a5a3c97 IR inliner: Enable intra-module mode for kotlinx.serialization (#3128)
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.module:jackson-module-kotlin from 2.20.1 to 2.21.0

Commits
  • c349ed8 [maven-release-plugin] prepare release jackson-module-kotlin-2.21.0
  • 36af3c4 Prep for 2.21.0 release
  • 6d9db9d Merge pull request #1085 from k163377/feat/1063
  • 32bf8b5 Update release notes wrt #1085
  • dcdff9d Added addMixIn function for generic MapperBuilder
  • bd1d864 Merge pull request #1075 from k163377/fix-sup
  • e0269b1 Remove unnecessary suppression
  • 277a562 Merge pull request #1071 from k163377/update-docs
  • 8a14ebf Fix and update Jackson version in docs
  • 9d67d92 Merge pull request #1067 from k163377/upd-ci
  • Additional commits viewable in compare view

Updates io.ktor:ktor-client-core from 3.3.2 to 3.4.0

Release notes

Sourced from io.ktor:ktor-client-core's releases.

3.4.0

Published 22 January 2026

Features

  • KTOR-8316 Support OpenAPI specification for the Ktor Client and Server Application
    • KTOR-9085 Read OpenAPI security details from authentication plugin
    • KTOR-8993 Use runtime-generated spec for OpenAPI / Swagger plugins
    • KTOR-9086 Read OpenAPI default content type information from ContentNegotiation plugin
    • KTOR-8859 Routing documentation compiler plugin
    • KTOR-8936 Routing documentation runtime API
    • KTOR-9087 Generate JSON schema for type references when using Jackson and Gson
  • KTOR-7075 Zstd support
  • KTOR-9209 Support Jackson 3
  • KTOR-9198 Auth/Bearer: Make BearerAuthProvider detect disguised Bearer scheme
  • KTOR-8927 Support for respondResource
  • KTOR-9162 Auth API key plugin
  • KTOR-7882 Support HTTP QUERY method
  • KTOR-8195 Partial HTML response
  • KTOR-8985 EngineMain: Support reading trust store settings from the configuration
  • KTOR-9066 Add duplex streaming for OkHttpClient
  • KTOR-8180 Auth: Provide control over tokens to user code
  • KTOR-8273 iOS native interop for WebRTC client
  • KTOR-8956 DI: Allow file configuration
  • KTOR-9157 Support SIGINT on web and SIGTERM on Native

Improvements

  • KTOR-8890 Rename target jsAndWasmShared to web
  • KTOR-9242 Upgrade to Kotlin 2.3
  • KTOR-9243 Update libcurl to 8.18.0
  • KTOR-9014 Deprecate DarwinLegacy engine
  • KTOR-8931 Test iOS target of the WebRTC Client in Ktor-Chat
  • KTOR-9199 Make HttpHeaders strings const
  • KTOR-9208 Expose plusIsSpace in parseUrlEncodedParameters
  • KTOR-2404 Ktor Oauth2 feature sends 401 response when the client secret is invalid
  • KTOR-9097 Java: Use HTTP/2 by default
  • KTOR-8740 HTMX: Missing DSL for some attributes
  • KTOR-9171 Redesign ByteReadChannel.readUTF8Line API
  • KTOR-4219 Make readUTF8LineTo return number of read symbols instead of boolean
  • KTOR-6761 Apache5: Simplify configuration of ConnectionManager
  • KTOR-9037 Multipart/form-data: Make formData's block inline
  • KTOR-9126 Missing function ByteReadChannel.readTo(sink: RawSink, byteCount: Long)
  • KTOR-9026 Introduce/reuse interfaces for logging selectors
  • KTOR-6766 Deprecate Apache 4 engine
  • KTOR-8642 Excessive memory allocations while writing bytes into write channel of TCP/IP socket
  • KTOR-9137 ByteReadChannel.readUTF8Line is inefficient for long lines
  • KTOR-8657 Remove kotlinx-datetime from ktor-server-default-headers dependencies
  • KTOR-8941 Add override DI conflict policy

Bugfixes

... (truncated)

Changelog

Sourced from io.ktor:ktor-client-core's changelog.

3.4.0

Published 22 January 2026

Features

  • KTOR-8316 Support OpenAPI specification for the Ktor Client and Server Application
    • KTOR-9085 Read OpenAPI security details from authentication plugin
    • KTOR-8993 Use runtime-generated spec for OpenAPI / Swagger plugins
    • KTOR-9086 Read OpenAPI default content type information from ContentNegotiation plugin
    • KTOR-8859 Routing documentation compiler plugin
    • KTOR-8936 Routing documentation runtime API
    • KTOR-9087 Generate JSON schema for type references when using Jackson and Gson
  • KTOR-7075 Zstd support
  • KTOR-9209 Support Jackson 3
  • KTOR-9198 Auth/Bearer: Make BearerAuthProvider detect disguised Bearer scheme
  • KTOR-8927 Support for respondResource
  • KTOR-9162 Auth API key plugin
  • KTOR-7882 Support HTTP QUERY method
  • KTOR-8195 Partial HTML response
  • KTOR-8985 EngineMain: Support reading trust store settings from the configuration
  • KTOR-9066 Add duplex streaming for OkHttpClient
  • KTOR-8180 Auth: Provide control over tokens to user code
  • KTOR-8273 iOS native interop for WebRTC client
  • KTOR-8956 DI: Allow file configuration
  • KTOR-9157 Support SIGINT on web and SIGTERM on Native

Improvements

  • KTOR-8890 Rename target jsAndWasmShared to web
  • KTOR-9242 Upgrade to Kotlin 2.3
  • KTOR-9243 Update libcurl to 8.18.0
  • KTOR-9014 Deprecate DarwinLegacy engine
  • KTOR-8931 Test iOS target of the WebRTC Client in Ktor-Chat
  • KTOR-9199 Make HttpHeaders strings const
  • KTOR-9208 Expose plusIsSpace in parseUrlEncodedParameters
  • KTOR-2404 Ktor Oauth2 feature sends 401 response when the client secret is invalid
  • KTOR-9097 Java: Use HTTP/2 by default
  • KTOR-8740 HTMX: Missing DSL for some attributes
  • KTOR-9171 Redesign ByteReadChannel.readUTF8Line API
  • KTOR-4219 Make readUTF8LineTo return number of read symbols instead of boolean
  • KTOR-6761 Apache5: Simplify configuration of ConnectionManager
  • KTOR-9037 Multipart/form-data: Make formData's block inline
  • KTOR-9126 Missing function ByteReadChannel.readTo(sink: RawSink, byteCount: Long)
  • KTOR-9026 Introduce/reuse interfaces for logging selectors
  • KTOR-6766 Deprecate Apache 4 engine
  • KTOR-8642 Excessive memory allocations while writing bytes into write channel of TCP/IP socket
  • KTOR-9137 ByteReadChannel.readUTF8Line is inefficient for long lines
  • KTOR-8657 Remove kotlinx-datetime from ktor-server-default-headers dependencies
  • KTOR-8941 Add override DI conflict policy

Bugfixes

... (truncated)

Commits
  • bf25bb9 Release 3.4.0 (#5325)
  • 1178f8a Update "Report a problem" links (#5322)
  • f99d0af KTOR-9258 Add headers member function to DefaultRequestBuilder to prevent sil...
  • 7452420 Yaml config. Resolve references only once. (#5320)
  • 3798824 WebSockets. Added frame queues backpressure configuration. (#5274)
  • 761eeac KTOR-9235: Ignore exceptions when parsing cookie expires date (#5288)
  • b8817e5 KTOR-9210 Migrate Zstd into standalone module (#5318)
  • f5e2864 Merge pull request #5316 from ktorio/zibet27/fix-auth-binary-compatibility
  • cbcdc39 Auth. Fix binary compatibility.
  • 95a7734 Fix RETURN_IN_FUNCTION_WITH_EXPRESSION_BODY_AND_IMPLICIT_TYPE
  • Additional commits viewable in compare view

Updates io.ktor:ktor-client-java from 3.3.2 to 3.4.0

Release notes

Sourced from io.ktor:ktor-client-java's releases.

3.4.0

Published 22 January 2026

Features

  • KTOR-8316 Support OpenAPI specification for the Ktor Client and Server Application
    • KTOR-9085 Read OpenAPI security details from authentication plugin
    • KTOR-8993 Use runtime-generated spec for OpenAPI / Swagger plugins
    • KTOR-9086 Read OpenAPI default content type information from ContentNegotiation plugin
    • KTOR-8859 Routing documentation compiler plugin
    • KTOR-8936 Routing documentation runtime API
    • KTOR-9087 Generate JSON schema for type references when using Jackson and Gson
  • KTOR-7075 Zstd support
  • KTOR-9209 Support Jackson 3
  • KTOR-9198 Auth/Bearer: Make BearerAuthProvider detect disguised Bearer scheme
  • KTOR-8927 Support for respondResource
  • KTOR-9162 Auth API key plugin
  • KTOR-7882 Support HTTP QUERY method
  • KTOR-8195 Partial HTML response
  • KTOR-8985 EngineMain: Support reading trust store settings from the configuration
  • KTOR-9066 Add duplex streaming for OkHttpClient
  • KTOR-8180 Auth: Provide control over tokens to user code
  • KTOR-8273 iOS native interop for WebRTC client
  • KTOR-8956 DI: Allow file configuration
  • KTOR-9157 Support SIGINT on web and SIGTERM on Native

Improvements

  • KTOR-8890 Rename target jsAndWasmShared to web
  • KTOR-9242 Upgrade to Kotlin 2.3
  • KTOR-9243 Update libcurl to 8.18.0
  • KTOR-9014 Deprecate DarwinLegacy engine
  • KTOR-8931 Test iOS target of the WebRTC Client in Ktor-Chat
  • KTOR-9199 Make HttpHeaders strings const
  • KTOR-9208 Expose plusIsSpace in parseUrlEncodedParameters
  • KTOR-2404 Ktor Oauth2 feature sends 401 response when the client secret is invalid
  • KTOR-9097 Java: Use HTTP/2 by default
  • KTOR-8740 HTMX: Missing DSL for some attributes
  • KTOR-9171 Redesign ByteReadChannel.readUTF8Line API
  • KTOR-4219 Make readUTF8LineTo return number of read symbols instead of boolean
  • KTOR-6761 Apache5: Simplify configuration of ConnectionManager
  • KTOR-9037 Multipart/form-data: Make formData's block inline
  • KTOR-9126 Missing function ByteReadChannel.readTo(sink: RawSink, byteCount: Long)
  • KTOR-9026 Introduce/reuse interfaces for logging selectors
  • KTOR-6766 Deprecate Apache 4 engine
  • KTOR-8642 Excessive memory allocations while writing bytes into write channel of TCP/IP socket
  • KTOR-9137 ByteReadChannel.readUTF8Line is inefficient for long lines
  • KTOR-8657 Remove kotlinx-datetime from ktor-server-default-headers dependencies
  • KTOR-8941 Add override DI conflict policy

Bugfixes

... (truncated)

Changelog

Sourced from io.ktor:ktor-client-java's changelog.

3.4.0

Published 22 January 2026

Features

  • KTOR-8316 Support OpenAPI specification for the Ktor Client and Server Application
    • KTOR-9085 Read OpenAPI security details from authentication plugin
    • KTOR-8993 Use runtime-generated spec for OpenAPI / Swagger plugins
    • KTOR-9086 Read OpenAPI default content type information from ContentNegotiation plugin
    • KTOR-8859 Routing documentation compiler plugin
    • KTOR-8936 Routing documentation runtime API
    • KTOR-9087 Generate JSON schema for type references when using Jackson and Gson
  • KTOR-7075 Zstd support
  • KTOR-9209 Support Jackson 3
  • KTOR-9198 Auth/Bearer: Make BearerAuthProvider detect disguised Bearer scheme
  • KTOR-8927 Support for respondResource
  • KTOR-9162 Auth API key plugin
  • KTOR-7882 Support HTTP QUERY method
  • KTOR-8195 Partial HTML response
  • KTOR-8985 EngineMain: Support reading trust store settings from the configuration
  • KTOR-9066 Add duplex streaming for OkHttpClient
  • KTOR-8180 Auth: Provide control over tokens to user code
  • KTOR-8273 iOS native interop for WebRTC client
  • KTOR-8956 DI: Allow file configuration
  • KTOR-9157 Support SIGINT on web and SIGTERM on Native

Improvements

  • KTOR-8890 Rename target jsAndWasmShared to web
  • KTOR-9242 Upgrade to Kotlin 2.3
  • KTOR-9243 Update libcurl to 8.18.0
  • KTOR-9014 Deprecate DarwinLegacy engine
  • KTOR-8931 Test iOS target of the WebRTC Client in Ktor-Chat
  • KTOR-9199 Make HttpHeaders strings const
  • KTOR-9208 Expose plusIsSpace in parseUrlEncodedParameters
  • KTOR-2404 Ktor Oauth2 feature sends 401 response when the client secret is invalid
  • KTOR-9097 Java: Use HTTP/2 by default
  • KTOR-8740 HTMX: Missing DSL for some attributes
  • KTOR-9171 Redesign ByteReadChannel.readUTF8Line API
  • KTOR-4219 Make readUTF8LineTo return number of read symbols instead of boolean
  • KTOR-6761 Apache5: Simplify configuration of ConnectionManager
  • KTOR-9037 Multipart/form-data: Make formData's block inline
  • KTOR-9126 Missing function ByteReadChannel.readTo(sink: RawSink, byteCount: Long)
  • KTOR-9026 Introduce/reuse interfaces for logging selectors
  • KTOR-6766 Deprecate Apache 4 engine
  • KTOR-8642 Excessive memory allocations while writing bytes into write channel of TCP/IP socket
  • KTOR-9137 ByteReadChannel.readUTF8Line is inefficient for long lines
  • KTOR-8657 Remove kotlinx-datetime from ktor-server-default-headers dependencies
  • KTOR-8941 Add override DI conflict policy

Bugfixes

... (truncated)

Commits
  • bf25bb9 Release 3.4.0 (#5325)
  • 1178f8a Update "Report a problem" links (#5322)
  • f99d0af KTOR-9258 Add headers member function to DefaultRequestBuilder to prevent sil...
  • 7452420 Yaml config. Resolve references only once. (#5320)
  • 3798824 WebSockets. Added frame queues backpressure configuration. (#5274)
  • 761eeac KTOR-9235: Ignore exceptions when parsing cookie expires date (#5288)
  • b8817e5 KTOR-9210 Migrate Zstd into standalone module (#5318)
  • f5e2864 Merge pull request #5316 from ktorio/zibet27/fix-auth-binary-compatibility
  • cbcdc39 Auth. Fix binary compatibility.
  • 95a7734 Fix RETURN_IN_FUNCTION_WITH_EXPRESSION_BODY_AND_IMPLICIT_TYPE
  • Additional commits viewable in compare view

Updates io.ktor:ktor-client-content-negotiation from 3.3.2 to 3.4.0

Release notes

Sourced from io.ktor:ktor-client-content-negotiation's releases.

3.4.0

Published 22 January 2026

Features

  • KTOR-8316 Support OpenAPI specification for the Ktor Client and Server Application
    • KTOR-9085 Read OpenAPI security details from authentication plugin
    • KTOR-8993 Use runtime-generated spec for OpenAPI / Swagger plugins
    • KTOR-9086 Read OpenAPI default content type information from ContentNegotiation plugin
    • KTOR-8859 Routing documentation compiler plugin
    • KTOR-8936 Routing documentation runtime API
    • KTOR-9087 Generate JSON schema for type references when using Jackson and Gson
  • KTOR-7075 Zstd support
  • KTOR-9209 Support Jackson 3
  • KTOR-9198 Auth/Bearer: Make BearerAuthProvider detect disguised Bearer scheme
  • KTOR-8927 Support for respondResource
  • KTOR-9162 Auth API key plugin
  • KTOR-7882 Support HTTP QUERY method
  • KTOR-8195 Partial HTML response
  • KTOR-8985 EngineMain: Support reading trust store settings from the configuration
  • KTOR-9066 Add duplex streaming for OkHttpClient
  • KTOR-8180 Auth: Provide control over tokens to user code
  • KTOR-8273 iOS native interop for WebRTC client
  • KTOR-8956 DI: Allow file configuration
  • KTOR-9157 Support SIGINT on web and SIGTERM on Native

Improvements

  • KTOR-8890 Rename target jsAndWasmShared to web
  • KTOR-9242 Upgrade to Kotlin 2.3
  • KTOR-9243 Update libcurl to 8.18.0
  • KTOR-9014 Deprecate DarwinLegacy engine
  • KTOR-8931 Test iOS target of the WebRTC Client in Ktor-Chat
  • KTOR-9199 Make HttpHeaders strings const
  • KTOR-9208 Expose plusIsSpace in parseUrlEncodedParameters
  • KTOR-2404 Ktor Oauth2 feature sends 401 response when the client secret is invalid
  • KTOR-9097 Java: Use HTTP/2 by default
  • KTOR-8740 HTMX: Missing DSL for some attributes
  • KTOR-9171 Redesign ByteReadChannel.readUTF8Line API
  • KTOR-4219 Make readUTF8LineTo return number of read symbols instead of boolean
  • KTOR-6761 Apache5: Simplify configuration of ConnectionManager
  • KTOR-9037 Multipart/form-data: Make formData's block inline
  • KTOR-9126 Missing function ByteReadChannel.readTo(sink: RawSink, byteCount: Long)
  • KTOR-9026 Introduce/reuse interfaces for logging selectors
  • KTOR-6766 Deprecate Apache 4 engine
  • KTOR-8642 Excessive memory allocations while writing bytes into write channel of TCP/IP socket
  • KTOR-9137 ByteReadChannel.readUTF8Line is inefficient for long lines
  • KTOR-8657 Remove kotlinx-datetime from ktor-server-default-headers dependencies
  • KTOR-8941 Add override DI conflict policy

Bugfixes

... (truncated)

Changelog

Sourced from io.ktor:ktor-client-content-negotiation's changelog.

3.4.0

Published 22 January 2026

Features

  • KTOR-8316 Support OpenAPI specification for the Ktor Client and Server Application
    • KTOR-9085 Read OpenAPI security details from authentication plugin
    • KTOR-8993 Use runtime-generated spec for OpenAPI / Swagger plugins
    • KTOR-9086 Read OpenAPI default content type information from ContentNegotiation plugin
    • KTOR-8859 Routing documentation compiler plugin
    • KTOR-8936 Routing documentation runtime API
    • KTOR-9087 Generate JSON schema for type references when using Jackson and Gson
  • KTOR-7075 Zstd support
  • KTOR-9209 Support Jackson 3
  • KTOR-9198 Auth/Bearer: Make BearerAuthProvider detect disguised Bearer scheme
  • KTOR-8927 Support for respondResource
  • KTOR-9162 Auth API key plugin
  • KTOR-7882 Support HTTP QUERY method
  • KTOR-8195 Partial HTML response
  • KTOR-8985 EngineMain: Support reading trust store settings from the configuration
  • KTOR-9066 Add duplex streaming for OkHttpClient
  • KTOR-8180 Auth: Provide control over tokens to user code
  • KTOR-8273 iOS native interop for WebRTC client
  • KTOR-8956 DI: Allow file configuration
  • KTOR-9157 Support SIGINT on web and SIGTERM on Native

Improvements

  • KTOR-8890 Rename target jsAndWasmShared to web
  • KTOR-9242 Upgrade to Kotlin 2.3
  • KTOR-9243 Update libcurl to 8.18.0
  • KTOR-9014 Deprecate DarwinLegacy engine
  • KTOR-8931 Test iOS target of the WebRTC Client in Ktor-Chat
  • KTOR-9199 Make HttpHeaders strings const
  • KTOR-9208 Expose plusIsSpace in parseUrlEncodedParameters
  • KTOR-2404 Ktor Oauth2 feature sends 401 response when the client secret is invalid
  • KTOR-9097 Java: Use HTTP/2 by default
  • KTOR-8740 HTMX: Missing DSL for some attributes
  • KTOR-9171 Redesign ByteReadChannel.readUTF8Line API
  • KTOR-4219 Make readUTF8LineTo return number of read symbols instead of boolean
  • KTOR-6761 Apache5: Simplify configuration of ConnectionManager
  • KTOR-9037 Multipart/form-data: Make formData's block inline
  • KTOR-9126 Missing function ByteReadChannel.readTo(sink: RawSink, byteCount: Long)
  • KTOR-9026 Introduce/reuse interfaces for logging selectors
  • KTOR-6766 Deprecate Apache 4 engine
  • KTOR-8642 Excessive memory allocations while writing bytes into write channel of TCP/IP socket
  • KTOR-9137 ByteReadChannel.readUTF8Line is inefficient for long lines
  • KTOR-8657 Remove kotlinx-datetime from ktor-server-default-heade...

    Description has been truncated

…22 updates

Bumps the non-major-dependencies group with 21 updates in the /backend directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.cloud:spring-cloud-gateway-mvc](https://github.com/spring-cloud/spring-cloud-gateway) | `4.3.2` | `4.3.3` |
| [io.hypersistence:hypersistence-utils-hibernate-63](https://github.com/vladmihalcea/hypersistence-utils) | `3.12.0` | `3.15.1` |
| [org.jetbrains.kotlinx:kotlinx-serialization-json](https://github.com/Kotlin/kotlinx.serialization) | `1.9.0` | `1.10.0` |
| [com.fasterxml.jackson.module:jackson-module-kotlin](https://github.com/FasterXML/jackson-module-kotlin) | `2.20.1` | `2.21.0` |
| [io.ktor:ktor-client-core](https://github.com/ktorio/ktor) | `3.3.2` | `3.4.0` |
| [io.ktor:ktor-client-java](https://github.com/ktorio/ktor) | `3.3.2` | `3.4.0` |
| [io.ktor:ktor-client-content-negotiation](https://github.com/ktorio/ktor) | `3.3.2` | `3.4.0` |
| [io.ktor:ktor-serialization-kotlinx-json](https://github.com/ktorio/ktor) | `3.3.2` | `3.4.0` |
| [io.ktor:ktor-client-mock](https://github.com/ktorio/ktor) | `3.3.2` | `3.4.0` |
| [io.sentry:sentry](https://github.com/getsentry/sentry-java) | `8.26.0` | `8.31.0` |
| [io.sentry:sentry-log4j2](https://github.com/getsentry/sentry-java) | `8.26.0` | `8.31.0` |
| org.apache.poi:poi | `5.4.1` | `5.5.1` |
| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.27.6` | `3.27.7` |
| [com.squareup.okhttp3:mockwebserver](https://github.com/square/okhttp) | `5.3.0` | `5.3.2` |
| [io.mockk:mockk](https://github.com/mockk/mockk) | `1.14.6` | `1.14.9` |
| [jvm](https://github.com/JetBrains/kotlin) | `2.2.21` | `2.3.0` |
| [plugin.spring](https://github.com/JetBrains/kotlin) | `2.2.21` | `2.3.0` |
| [plugin.allopen](https://github.com/JetBrains/kotlin) | `2.2.21` | `2.3.0` |
| [plugin.noarg](https://github.com/JetBrains/kotlin) | `2.2.21` | `2.3.0` |
| [plugin.jpa](https://github.com/JetBrains/kotlin) | `2.2.21` | `2.3.0` |
| [plugin.serialization](https://github.com/JetBrains/kotlin) | `2.2.21` | `2.3.0` |



Updates `org.springframework.cloud:spring-cloud-gateway-mvc` from 4.3.2 to 4.3.3
- [Release notes](https://github.com/spring-cloud/spring-cloud-gateway/releases)
- [Commits](spring-cloud/spring-cloud-gateway@v4.3.2...v4.3.3)

Updates `io.hypersistence:hypersistence-utils-hibernate-63` from 3.12.0 to 3.15.1
- [Changelog](https://github.com/vladmihalcea/hypersistence-utils/blob/master/changelog.txt)
- [Commits](vladmihalcea/hypersistence-utils@hypersistence-utils-parent-3.12.0...hypersistence-utils-parent-3.15.1)

Updates `org.jetbrains.kotlinx:kotlinx-serialization-json` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/Kotlin/kotlinx.serialization/releases)
- [Changelog](https://github.com/Kotlin/kotlinx.serialization/blob/master/CHANGELOG.md)
- [Commits](Kotlin/kotlinx.serialization@v1.9.0...v1.10.0)

Updates `com.fasterxml.jackson.module:jackson-module-kotlin` from 2.20.1 to 2.21.0
- [Commits](FasterXML/jackson-module-kotlin@jackson-module-kotlin-2.20.1...jackson-module-kotlin-2.21.0)

Updates `io.ktor:ktor-client-core` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.3.2...3.4.0)

Updates `io.ktor:ktor-client-java` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.3.2...3.4.0)

Updates `io.ktor:ktor-client-content-negotiation` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.3.2...3.4.0)

Updates `io.ktor:ktor-serialization-kotlinx-json` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.3.2...3.4.0)

Updates `io.ktor:ktor-client-mock` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.3.2...3.4.0)

Updates `io.ktor:ktor-client-java` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.3.2...3.4.0)

Updates `io.ktor:ktor-client-content-negotiation` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.3.2...3.4.0)

Updates `io.ktor:ktor-serialization-kotlinx-json` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.3.2...3.4.0)

Updates `io.sentry:sentry` from 8.26.0 to 8.31.0
- [Release notes](https://github.com/getsentry/sentry-java/releases)
- [Changelog](https://github.com/getsentry/sentry-java/blob/main/CHANGELOG.md)
- [Commits](getsentry/sentry-java@8.26.0...8.31.0)

Updates `io.sentry:sentry-log4j2` from 8.26.0 to 8.31.0
- [Release notes](https://github.com/getsentry/sentry-java/releases)
- [Changelog](https://github.com/getsentry/sentry-java/blob/main/CHANGELOG.md)
- [Commits](getsentry/sentry-java@8.26.0...8.31.0)

Updates `io.sentry:sentry-log4j2` from 8.26.0 to 8.31.0
- [Release notes](https://github.com/getsentry/sentry-java/releases)
- [Changelog](https://github.com/getsentry/sentry-java/blob/main/CHANGELOG.md)
- [Commits](getsentry/sentry-java@8.26.0...8.31.0)

Updates `org.apache.poi:poi` from 5.4.1 to 5.5.1

Updates `org.apache.poi:poi-ooxml` from 5.4.1 to 5.5.1

Updates `org.assertj:assertj-core` from 3.27.6 to 3.27.7
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.27.6...assertj-build-3.27.7)

Updates `io.ktor:ktor-client-mock` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.3.2...3.4.0)

Updates `com.squareup.okhttp3:mockwebserver` from 5.3.0 to 5.3.2
- [Changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md)
- [Commits](square/okhttp@parent-5.3.0...parent-5.3.2)

Updates `io.mockk:mockk` from 1.14.6 to 1.14.9
- [Release notes](https://github.com/mockk/mockk/releases)
- [Commits](mockk/mockk@1.14.6...1.14.9)

Updates `jvm` from 2.2.21 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.21...v2.3.0)

Updates `plugin.spring` from 2.2.21 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.21...v2.3.0)

Updates `plugin.allopen` from 2.2.21 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.21...v2.3.0)

Updates `plugin.noarg` from 2.2.21 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.21...v2.3.0)

Updates `plugin.jpa` from 2.2.21 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.21...v2.3.0)

Updates `plugin.serialization` from 2.2.21 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.21...v2.3.0)

---
updated-dependencies:
- dependency-name: org.springframework.cloud:spring-cloud-gateway-mvc
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: io.hypersistence:hypersistence-utils-hibernate-63
  dependency-version: 3.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: org.jetbrains.kotlinx:kotlinx-serialization-json
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: com.fasterxml.jackson.module:jackson-module-kotlin
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: io.ktor:ktor-client-core
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: io.ktor:ktor-client-java
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: io.ktor:ktor-client-content-negotiation
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: io.ktor:ktor-serialization-kotlinx-json
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: io.ktor:ktor-client-mock
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: io.ktor:ktor-client-java
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: io.ktor:ktor-client-content-negotiation
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: io.ktor:ktor-serialization-kotlinx-json
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: io.sentry:sentry
  dependency-version: 8.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: io.sentry:sentry-log4j2
  dependency-version: 8.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: io.sentry:sentry-log4j2
  dependency-version: 8.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: org.apache.poi:poi
  dependency-version: 5.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: org.apache.poi:poi-ooxml
  dependency-version: 5.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: io.ktor:ktor-client-mock
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: com.squareup.okhttp3:mockwebserver
  dependency-version: 5.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: io.mockk:mockk
  dependency-version: 1.14.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: jvm
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: plugin.spring
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: plugin.allopen
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: plugin.noarg
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: plugin.jpa
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: plugin.serialization
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@tristanrobert
Copy link
Contributor

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@sonarqubecloud
Copy link

sonarqubecloud bot commented Feb 1, 2026

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants