Bump the dependencies-backend-production group in /app with 19 updates by dependabot[bot] · Pull Request #116 · Breus/SnapChef

dependabot · 2026-04-01T17:56:56Z

Bumps the dependencies-backend-production group in /app with 19 updates:

Package	From	To
gradle-wrapper	`9.1.0`	`9.4.1`
org.assertj:assertj-core	`3.27.6`	`3.27.7`
com.google.errorprone:error_prone_core	`2.46.0`	`2.48.0`
org.mockito:mockito-junit-jupiter	`5.21.0`	`5.23.0`
com.uber.nullaway:nullaway	`0.12.15`	`0.13.1`
io.quarkus:quarkus-arc	`3.31.1`	`3.34.1`
io.quarkus:quarkus-elytron-security	`3.31.1`	`3.34.1`
io.quarkus:quarkus-flyway	`3.31.1`	`3.34.1`
io.quarkus:quarkus-hibernate-orm-panache	`3.31.1`	`3.34.1`
io.quarkus:quarkus-hibernate-validator	`3.31.1`	`3.34.1`
io.quarkus:quarkus-jdbc-postgresql	`3.31.1`	`3.34.1`
io.quarkus:quarkus-junit5	`3.31.1`	`3.34.1`
io.quarkus:quarkus-rest	`3.31.1`	`3.34.1`
io.quarkus:quarkus-rest-jackson	`3.31.1`	`3.34.1`
io.quarkus:quarkus-smallrye-jwt	`3.31.1`	`3.34.1`
io.quarkus	`3.31.1`	`3.34.1`
io.quarkiverse.quinoa:quarkus-quinoa	`2.7.1`	`2.8.0`
net.ltgt.errorprone	`4.4.0`	`5.1.0`
com.diffplug.spotless	`8.1.0`	`8.4.0`

Updates gradle-wrapper from 9.1.0 to 9.4.1

Release notes

Sourced from gradle-wrapper's releases.

9.4.1

The Gradle team is excited to announce Gradle 9.4.1.

Here are the highlights of this release:

Java 26 support

Non-class-based JVM tests

Enhanced console progress bar

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: akankshaa-00, Attila Kelemen, Björn Kautler, dblood, Dennis Rieks, duvvuvenkataramana, John Burns, Julian, kevinstembridge, Niels Doucet, Philip Wedemann, ploober, Richard Hernandez, Roberto Perez Alcolea, Sebastian Lövdahl, stephan2405, Stephane Landelle, Ujwal Suresh Vanjare, Victor Merkulov, Vincent Potuček, Vladimir Sitnikov.

Upgrade instructions

Switch your build to use Gradle 9.4.1 by updating your wrapper:
./gradlew wrapper --gradle-version=9.4.1 && ./gradlew wrapper
See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

... (truncated)

Commits

2d63270 Ignore test (#37180)
4c15906 Ignore test
9759ac1 Make console/SIGINT test deterministic (#37178)
aaf6ed4 Make console/SIGINT test deterministic
47cb783 Fix OSC 9;4 progress bar not cleared on SIGINT (#37038)
ef03f1d Fix order-dependent assertion in CrossBuildScriptCachingIntegrationSpec
fd26fd3 Fix OSC 9;4 taskbar progress bar not cleared on build end or SIGINT
0a84d67 Release notes for 9.4.1 (#37148)
e569c31 cleanup
9f227de cleanup
Additional commits viewable in compare view

Updates org.assertj:assertj-core from 3.27.6 to 3.27.7

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.7

🔒 Security

Core

Fix XXE vulnerability in isXmlEqualTo assertion (CVE-2026-24400)

See GHSA-rqfh-9r24-8c9r for details; many thanks to @wxt201 and @Song-Li for responsibly reporting it!

🚫 Deprecated

Core

Deprecate XmlStringPrettyFormatter with no replacement

🐛 Bug Fixes

Guava

Navigation to assertj-core or guava types from assertj-guava Javadoc site has unnecessary header #3478

🔨 Dependency Upgrades

Core

Upgrade to Byte Buddy 1.18.3

Upgrade to JUnit BOM 5.14.1

Guava

Upgrade to Guava 33.5.0-jre

Commits

e840716 [maven-release-plugin] prepare release assertj-build-3.27.7
85ca7eb Deprecate XmlStringPrettyFormatter
77081dc Merge commit from fork
b68fc24 Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...
0cf5bb6 Bump kotlin.version from 2.1.0 to 2.2.21
d393ef1 Abort tests when symbolic links cannot be created (#3788)
2212433 Add IntelliJ custom inspection for test class names
5717d02 Update JetBrains icon
a8ec20b Add icon for JetBrains products
c05fb3d Bump Maven to 3.9.12 and Wrapper to 3.3.4
Additional commits viewable in compare view

Updates com.google.errorprone:error_prone_core from 2.46.0 to 2.48.0

Release notes

Sourced from com.google.errorprone:error_prone_core's releases.

Error Prone 2.48.0

Changes:

Added support for passing flags with command-line argument files (@-files) (google/error-prone@8e84edf)

New checks:

AvoidValueSetter

UnnecessarySemicolon

Closed issues: #5529, #5537, #5522, #5521

Full changelog: google/error-prone@v2.47.0...v2.48.0

Error Prone 2.47.0

New checks:

InterruptedInCatchBlock: Detect accidental calls to Thread.interrupted() inside of catch(InterruptedException e) blocks.

RefactorSwitch: Refactorings to simplify arrow switches

UnnamedVariable: Rename unused variables to _

Closed issues: #1811, #4168, #5459, #5460

Full changelog: google/error-prone@v2.46.0...v2.47.0

Commits

7cec0a0 Release Error Prone 2.48.0
01c603a Extend MissingTestCall to check for member references.
3d817b0 Handle var in UnnecessaryBoxedVariable
ad26f3e Add ConcurrentHashMap.keys() and ConcurrentHashMap.elements() to `JdkObso...
7926dbc Fix MustBeClosedChecker crash on flexible constructors.
d08f003 Check for jakarta annotations in DI checks
171448c Add android internal GuardedBy to ACCEPTED_GUARDED_BY_ANNOTATIONS
5cb6075 Remove the MissingTestCall:MatchGraphVerify flag.
ab81681 Improve crash messages for fixes that don't apply
fe9bb21 Add a test to confirm that TimeUnitMismatch catches `seconds * 1000 + nanos /...
Additional commits viewable in compare view

Updates org.mockito:mockito-junit-jupiter from 5.21.0 to 5.23.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.23.0

NOTE: Breaking change for Android

The mockito-android artifact has a breaking change: tests now require a device or emulator based on API 28+ (Android P). This is to enable new support for mocking Kotlin classes. See #3788 for more details.

Changelog generated by Shipkit Changelog Gradle Plugin

5.23.0

2026-03-11 - 6 commit(s) by Brice Dutheil, Joshua Selbo, Philippe Kernevez

Replace mockito-android mock maker implementation with dexmaker-mockito-inline [(#3792)](mockito/mockito#3792)

Fix StackOverflowError with AbstractList after using mockSingleton [(#3790)](mockito/mockito#3790)

Mark parameters of Mockito.when @Nullable [(#3503)](mockito/mockito#3503)

v5.22.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.22.0

2026-02-27 - 6 commit(s) by Joshua Selbo, NiMv1, Rafael Winterhalter, dependabot[bot], eunbin son

Avoid mocking of internal static utilities [(#3785)](mockito/mockito#3785)

Bump graalvm/setup-graalvm from 1.4.4 to 1.4.5 [(#3780)](mockito/mockito#3780)

Static mocking of UUID.class corrupted under JDK 25 [(#3778)](mockito/mockito#3778)

Bump actions/upload-artifact from 5 to 6 [(#3774)](mockito/mockito#3774)

docs: clarify RETURNS_MOCKS behavior with sealed abstract enums (Java 15+) [(#3773)](mockito/mockito#3773)

Add tests for Sets utility class [(#3771)](mockito/mockito#3771)

Add core API to enable Kotlin singleton mocking [(#3762)](mockito/mockito#3762)

Stubbing Kotlin object singletons [(#3652)](mockito/mockito#3652)

Incorrect documentation for RETURNS_MOCKS [(#3285)](mockito/mockito#3285)

Commits

a231205 Fix StackOverflowError with AbstractList after using mockSingleton (#3790)
f6a91a6 Replace mockito-android mock maker implementation with dexmaker-mockito-inlin...
aa2298a fix: make spotless happy
a6729d6 chore: update BDDMockito with jspecify annotation
bb83c92 chore: move jspecify as a compile only dependency
47a4695 chore: add jspecify with minimal change. Fixes #3503
25f1395 Add core API to enable Kotlin singleton mocking (#3762)
ef9ee55 Avoids mocking private static methods, as well as package-private static meth...
d16fcfc Bump graalvm/setup-graalvm from 1.4.4 to 1.4.5 (#3780)
27eb8a3 Clarify RETURNS_MOCKS behavior with sealed abstract enums (Java 15+) (#3773)
Additional commits viewable in compare view

Updates com.uber.nullaway:nullaway from 0.12.15 to 0.13.1

Release notes

Sourced from com.uber.nullaway:nullaway's releases.

NullAway 0.13.1

Improve verification of !null -> !null contracts (#1441)

Substitute inferred @NonNull types for generic method inference (#1445)

Better support for some contracts with boolean argument constraints (#1447)

Maintenance

Add junit-framework as another integration test (#1446)

NullAway 0.13.0

NullAway now requires a minimum of JDK 17 and Error Prone 2.36.0 to run; we bump the version to 0.13.0 to reflect these updated requirements. There are also many improvements to JSpecify mode support, and several nice changes and improvements from first-time contributors.

Support added for JUnit's @TempDir by @romainmoreau (#1387)

Use OptimizedLibraryModels for method type variable upper bounds (#1388)

Add @InjectWireMock as known excluded field annotation (#1391)

Require JDK 17 to run NullAway (#1394)

Support adding nested nullability annotations in library models (#1407)

Add library model for AtomicReferenceFieldUpdater (#1409)

Correctly get parameter types for a lambda whose type was inferred (#1348)

Add Mockito annotations to default excluded field annotations by @murdos (#1418)

Properly identify annotations directly on the array element type of a Symbol (#1419)

Update to Checker Framework 3.53.0 (#1429)

JSpecify: Apply annotations on type variables to lambdas in more cases (#1428)

Migrate AutoValue to Records by @rishikraj990 (#1415)

Bump minimum Error Prone version to 2.36.0, and add detection of nullable dereference by switch expressions (#1427)

JSpecify: Improve handling of method references (#1430)

Allow suppressing nullaway on individual parameters by @jackwickham (#1436)

Update jdk-javac-plugin to contain nested annotations by @haewiful (#1432)

Maintenance

Delete code to generate library models from source (#1385)

Refactor: Migration to Version Catalog completed by @vitinh0z (#1386)

Bump Gradle to 9.2.1 (#1392)

Update to Error Prone 2.45.0 (#1401)

Stop matching switch expression kind using strings (#1404)

Refactoring: clarify docs and naming for RestoreNullnessAnnotationsVisitor (#1406)

Refactoring: rename method and field (#1405)

Run NullAway on jdk-javac-plugin code (#1408)

Clarify comment in test (#1411)

Enable PatternMatchingInstanceOf check and fix all warnings (#1412)

Enable StatementSwitchToExpressionSwitch check and fix all warnings (#1413)

bump and remove some dependencies (#1414)

Update minimum supported Error Prone version to 2.25.0 (#1421)

Update CI to run builds on JDK 25 (#1422)

Various cleanups suggested by IntelliJ (#1423)

Convert test data in main NullAway tests to use text blocks (#1424)

Refactor CoreTests and UnannotatedTests to use addSourceLines and inline test data by @cobayo (#1426)

Refactor ContractsTests to use Java text blocks by @cobayo (#1435)

Update Error Prone and errorprone-plugin versions (#1434)

Changelog

Sourced from com.uber.nullaway:nullaway's changelog.

Version 0.13.1

Improve verification of !null -> !null contracts (#1441)

Substitute inferred @NonNull types for generic method inference (#1445)

Better support for some contracts with boolean argument constraints (#1447)

Maintenance

Add junit-framework as another integration test (#1446)

Version 0.13.0

NullAway now requires a minimum of JDK 17 and Error Prone 2.36.0 to run; we bump the version to 0.13.0 to reflect these updated requirements. There are also many improvements to JSpecify mode support, and several nice changes and improvements from first-time contributors.

Support added for JUnit's @TempDir by @romainmoreau (#1387)

Use OptimizedLibraryModels for method type variable upper bounds (#1388)

Add @InjectWireMock as known excluded field annotation (#1391)

Require JDK 17 to run NullAway (#1394)

Support adding nested nullability annotations in library models (#1407)

Add library model for AtomicReferenceFieldUpdater (#1409)

Correctly get parameter types for a lambda whose type was inferred (#1348)

Add Mockito annotations to default excluded field annotations by @murdos (#1418)

Properly identify annotations directly on the array element type of a Symbol (#1419)

Update to Checker Framework 3.53.0 (#1429)

JSpecify: Apply annotations on type variables to lambdas in more cases (#1428)

Migrate AutoValue to Records by @rishikraj990 (#1415)

Bump minimum Error Prone version to 2.36.0, and add detection of nullable dereference by switch expressions (#1427)

JSpecify: Improve handling of method references (#1430)

Allow suppressing nullaway on individual parameters by @jackwickham (#1436)

Update jdk-javac-plugin to contain nested annotations by @haewiful (#1432)

Maintenance

Delete code to generate library models from source (#1385)

Refactor: Migration to Version Catalog completed by @vitinh0z (#1386)

Bump Gradle to 9.2.1 (#1392)

Update to Error Prone 2.45.0 (#1401)

Stop matching switch expression kind using strings (#1404)

Refactoring: clarify docs and naming for RestoreNullnessAnnotationsVisitor (#1406)

Refactoring: rename method and field (#1405)

Run NullAway on jdk-javac-plugin code (#1408)

Clarify comment in test (#1411)

Enable PatternMatchingInstanceOf check and fix all warnings (#1412)

Enable StatementSwitchToExpressionSwitch check and fix all warnings (#1413)

bump and remove some dependencies (#1414)

Update minimum supported Error Prone version to 2.25.0 (#1421)

Update CI to run builds on JDK 25 (#1422)

Various cleanups suggested by IntelliJ (#1423)

Convert test data in main NullAway tests to use text blocks (#1424)

Refactor CoreTests and UnannotatedTests to use addSourceLines and inline test data by @cobayo (#1426)

... (truncated)

Commits

cc9dab8 Prepare for release 0.13.1.
99025e4 Changelog for release 0.13.1 (#1449)
b27f13d Better support for some contracts with boolean argument constraints (#1447)
4c619e8 Add junit-framework as another integration test (#1446)
c27f3f4 Substitute inferred @NonNull types for generic method inference (#1445)
fc6d956 Improve verification of !null -> !null contracts (#1441)
7f8bbca Prepare next development version.
36403f3 Prepare for release 0.13.0.
12fe2a1 Changelog for release 0.13.0 (#1439)
32febbd Update jdk-javac-plugin to contain nested annotations (#1432)
Additional commits viewable in compare view

Updates io.quarkus:quarkus-arc from 3.31.1 to 3.34.1

Updates io.quarkus:quarkus-elytron-security from 3.31.1 to 3.34.1

Updates io.quarkus:quarkus-flyway from 3.31.1 to 3.34.1

Updates io.quarkus:quarkus-hibernate-orm-panache from 3.31.1 to 3.34.1

Updates io.quarkus:quarkus-hibernate-validator from 3.31.1 to 3.34.1

Updates io.quarkus:quarkus-jdbc-postgresql from 3.31.1 to 3.34.1

Updates io.quarkus:quarkus-junit5 from 3.31.1 to 3.34.1

Updates io.quarkus:quarkus-rest from 3.31.1 to 3.34.1

Updates io.quarkus:quarkus-rest-jackson from 3.31.1 to 3.34.1

Updates io.quarkus:quarkus-smallrye-jwt from 3.31.1 to 3.34.1

Updates io.quarkus from 3.31.1 to 3.34.1

Updates io.quarkus:quarkus-elytron-security from 3.31.1 to 3.34.1

Updates io.quarkus:quarkus-flyway from 3.31.1 to 3.34.1

Updates io.quarkus:quarkus-hibernate-orm-panache from 3.31.1 to 3.34.1

Updates io.quarkus:quarkus-hibernate-validator from 3.31.1 to 3.34.1

Updates io.quarkus:quarkus-jdbc-postgresql from 3.31.1 to 3.34.1

Updates io.quarkus:quarkus-junit5 from 3.31.1 to 3.34.1

Updates io.quarkiverse.quinoa:quarkus-quinoa from 2.7.1 to 2.8.0

Release notes

Sourced from io.quarkiverse.quinoa:quarkus-quinoa's releases.

2.8.0

What's Changed

docs: add jedla97 as a contributor for code, and bug by @allcontributors[bot] in quarkiverse/quarkus-quinoa#973

Bump rollup from 4.40.0 to 4.59.0 in /runtime/src/main/codestarts/quarkus/quinoa-codestart/base/src/main/webui by @dependabot[bot] in quarkiverse/quarkus-quinoa#971

Bump rollup from 2.79.2 to 2.80.0 in /integration-tests/src/main/ui-react by @dependabot[bot] in quarkiverse/quarkus-quinoa#974

Bump immutable from 5.1.1 to 5.1.5 in /integration-tests/src/main/ui-angular-esbuild by @dependabot[bot] in quarkiverse/quarkus-quinoa#976

Bump immutable from 4.3.4 to 4.3.8 in /integration-tests/src/main/ui-angular by @dependabot[bot] in quarkiverse/quarkus-quinoa#977

Bump io.quarkiverse.playwright:quarkus-playwright from 2.3.2 to 2.3.3 in the quarkiverse group by @dependabot[bot] in quarkiverse/quarkus-quinoa#982

Bump flatted from 3.2.9 to 3.4.2 in /integration-tests/src/main/ui-angular by @dependabot[bot] in quarkiverse/quarkus-quinoa#985

Bump flatted from 3.2.9 to 3.4.2 in /integration-tests/src/main/ui-vue by @dependabot[bot] in quarkiverse/quarkus-quinoa#986

Bump flatted from 3.2.9 to 3.4.2 in /integration-tests/src/main/ui-react by @dependabot[bot] in quarkiverse/quarkus-quinoa#983

Remove usage of dcarbone/install-yq-action by @gastaldi in quarkiverse/quarkus-quinoa#987

Bump yaml from 1.10.2 to 1.10.3 in /integration-tests/src/main/ui-react by @dependabot[bot] in quarkiverse/quarkus-quinoa#988

Bump picomatch from 2.3.1 to 2.3.2 in /integration-tests/src/main/ui-lit by @dependabot[bot] in quarkiverse/quarkus-quinoa#990

Bump picomatch from 2.3.1 to 2.3.2 in /integration-tests/src/main/ui-angular by @dependabot[bot] in quarkiverse/quarkus-quinoa#989

Bump node-forge from 1.3.2 to 1.4.0 in /integration-tests/src/main/ui-react by @dependabot[bot] in quarkiverse/quarkus-quinoa#992

Bump node-forge from 1.3.2 to 1.4.0 in /integration-tests/src/main/ui-angular by @dependabot[bot] in quarkiverse/quarkus-quinoa#993

Bump node-forge from 1.3.1 to 1.4.0 in /integration-tests/src/main/ui-angular-esbuild by @dependabot[bot] in quarkiverse/quarkus-quinoa#991

Bump brace-expansion in /integration-tests/src/main/ui-react by @dependabot[bot] in quarkiverse/quarkus-quinoa#996

Bump path-to-regexp from 0.1.12 to 0.1.13 in /integration-tests/src/main/ui-react by @dependabot[bot] in quarkiverse/quarkus-quinoa#997

Bump Quarkus to 3.27.3 LTS and fix ForwardedDevModeTest by @ia3andy in quarkiverse/quarkus-quinoa#998

Update current version to 2.8.0 by @melloware in quarkiverse/quarkus-quinoa#999

Full Changelog: quarkiverse/quarkus-quinoa@2.7.2...2.8.0

2.7.2

What's Changed

Bump actions/cache from 4 to 5 by @dependabot[bot] in quarkiverse/quarkus-quinoa#942

Bump io.quarkiverse.playwright:quarkus-playwright from 2.3.0 to 2.3.1 in the quarkiverse group by @dependabot[bot] in quarkiverse/quarkus-quinoa#944

Bump com.github.eirslett:frontend-plugin-core from 1.15.4 to 2.0.0 in the dependencies group by @dependabot[bot] in quarkiverse/quarkus-quinoa#945

Bump qs and express in /integration-tests/src/main/ui-react by @dependabot[bot] in quarkiverse/quarkus-quinoa#946

Bump io.quarkiverse.playwright:quarkus-playwright from 2.3.1 to 2.3.2 in the quarkiverse group by @dependabot[bot] in quarkiverse/quarkus-quinoa#950

Bump qs, body-parser and express in /integration-tests/src/main/ui-angular-esbuild by @dependabot[bot] in quarkiverse/quarkus-quinoa#951

Bump lodash from 4.17.21 to 4.17.23 in /integration-tests/src/main/ui-angular by @dependabot[bot] in quarkiverse/quarkus-quinoa#952

Clarify Node.js installation directory comment by @ia3andy in quarkiverse/quarkus-quinoa#953

Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 in the dependencies group by @dependabot[bot] in quarkiverse/quarkus-quinoa#954

docs: clarify Quinoa frontend packaging (refs #873) by @simontiffert in quarkiverse/quarkus-quinoa#956

Bump org.apache.maven.plugins:maven-compiler-plugin from 3.14.1 to 3.15.0 in the dependencies group by @dependabot[bot] in quarkiverse/quarkus-quinoa#957

Bump qs from 6.14.1 to 6.14.2 in /integration-tests/src/main/ui-angular-esbuild by @dependabot[bot] in quarkiverse/quarkus-quinoa#963

Bump webpack from 5.94.0 to 5.105.2 in /integration-tests/src/main/ui-react by @dependabot[bot] in quarkiverse/quarkus-quinoa#964

Bump io.quarkiverse:quarkiverse-parent from 20 to 21 in the quarkiverse group by @dependabot[bot] in quarkiverse/quarkus-quinoa#966

Bump ajv from 6.12.6 to 6.14.0 in /integration-tests/src/main/ui-react by @dependabot[bot] in quarkiverse/quarkus-quinoa#967

Update uiDir Javadoc with re-augmentation note by @ia3andy in quarkiverse/quarkus-quinoa#959

Bump minimatch in /integration-tests/src/main/ui-react by @dependabot[bot] in quarkiverse/quarkus-quinoa#968

Switch from QuarkusConsole.IS_WINDOWS to smallrye OS.WINDOWS by @jedla97 in quarkiverse/quarkus-quinoa#970

Update current version to 2.7.2 by @melloware in quarkiverse/quarkus-quinoa#972

New Contributors

@simontiffert made their first contribution in quarkiverse/quarkus-quinoa#956

... (truncated)

Commits

ba6b5eb [maven-release-plugin] prepare release 2.8.0
daf55ee Update the latest release version 2.8.0 in documentation
786d419 Update current version to 2.8.0 (#999)
8d38bee Update Quarkus badge versions in README.md
33bf2b5 Bump Quarkus to 3.27.3 LTS and fix ForwardedDevModeTest (#998)
5da41c3 Bump path-to-regexp in /integration-tests/src/main/ui-react (#997)
86f78f4 Bump brace-expansion in /integration-tests/src/main/ui-react (#996)
9d553a9 Bump node-forge in /integration-tests/src/main/ui-angular-esbuild (#991)
5541dd7 Bump node-forge in /integration-tests/src/main/ui-angular (#993)
d5793cb Bump node-forge in /integration-tests/src/main/ui-react (#992)
Additional commits viewable in compare view

Updates io.quarkus:quarkus-rest from 3.31.1 to 3.34.1

Updates io.quarkus:quarkus-rest-jackson from 3.31.1 to 3.34.1

Updates io.quarkus:quarkus-smallrye-jwt from 3.31.1 to 3.34.1

Updates net.ltgt.errorprone from 4.4.0 to 5.1.0

Updates io.quarkus from 3.31.1 to 3.34.1

Updates com.diffplug.spotless from 8.1.0 to 8.4.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies-backend-production group in /app with 19 updates: | Package | From | To | | --- | --- | --- | | [gradle-wrapper](https://github.com/gradle/gradle) | `9.1.0` | `9.4.1` | | [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.27.6` | `3.27.7` | | [com.google.errorprone:error_prone_core](https://github.com/google/error-prone) | `2.46.0` | `2.48.0` | | [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) | `5.21.0` | `5.23.0` | | [com.uber.nullaway:nullaway](https://github.com/uber/NullAway) | `0.12.15` | `0.13.1` | | io.quarkus:quarkus-arc | `3.31.1` | `3.34.1` | | io.quarkus:quarkus-elytron-security | `3.31.1` | `3.34.1` | | io.quarkus:quarkus-flyway | `3.31.1` | `3.34.1` | | io.quarkus:quarkus-hibernate-orm-panache | `3.31.1` | `3.34.1` | | io.quarkus:quarkus-hibernate-validator | `3.31.1` | `3.34.1` | | io.quarkus:quarkus-jdbc-postgresql | `3.31.1` | `3.34.1` | | io.quarkus:quarkus-junit5 | `3.31.1` | `3.34.1` | | io.quarkus:quarkus-rest | `3.31.1` | `3.34.1` | | io.quarkus:quarkus-rest-jackson | `3.31.1` | `3.34.1` | | io.quarkus:quarkus-smallrye-jwt | `3.31.1` | `3.34.1` | | io.quarkus | `3.31.1` | `3.34.1` | | [io.quarkiverse.quinoa:quarkus-quinoa](https://github.com/quarkiverse/quarkus-quinoa) | `2.7.1` | `2.8.0` | | net.ltgt.errorprone | `4.4.0` | `5.1.0` | | com.diffplug.spotless | `8.1.0` | `8.4.0` | Updates `gradle-wrapper` from 9.1.0 to 9.4.1 - [Release notes](https://github.com/gradle/gradle/releases) - [Commits](gradle/gradle@v9.1.0...v9.4.1) Updates `org.assertj:assertj-core` from 3.27.6 to 3.27.7 - [Release notes](https://github.com/assertj/assertj/releases) - [Commits](assertj/assertj@assertj-build-3.27.6...assertj-build-3.27.7) Updates `com.google.errorprone:error_prone_core` from 2.46.0 to 2.48.0 - [Release notes](https://github.com/google/error-prone/releases) - [Commits](google/error-prone@v2.46.0...v2.48.0) Updates `org.mockito:mockito-junit-jupiter` from 5.21.0 to 5.23.0 - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](mockito/mockito@v5.21.0...v5.23.0) Updates `com.uber.nullaway:nullaway` from 0.12.15 to 0.13.1 - [Release notes](https://github.com/uber/NullAway/releases) - [Changelog](https://github.com/uber/NullAway/blob/master/CHANGELOG.md) - [Commits](uber/NullAway@v0.12.15...v0.13.1) Updates `io.quarkus:quarkus-arc` from 3.31.1 to 3.34.1 Updates `io.quarkus:quarkus-elytron-security` from 3.31.1 to 3.34.1 Updates `io.quarkus:quarkus-flyway` from 3.31.1 to 3.34.1 Updates `io.quarkus:quarkus-hibernate-orm-panache` from 3.31.1 to 3.34.1 Updates `io.quarkus:quarkus-hibernate-validator` from 3.31.1 to 3.34.1 Updates `io.quarkus:quarkus-jdbc-postgresql` from 3.31.1 to 3.34.1 Updates `io.quarkus:quarkus-junit5` from 3.31.1 to 3.34.1 Updates `io.quarkus:quarkus-rest` from 3.31.1 to 3.34.1 Updates `io.quarkus:quarkus-rest-jackson` from 3.31.1 to 3.34.1 Updates `io.quarkus:quarkus-smallrye-jwt` from 3.31.1 to 3.34.1 Updates `io.quarkus` from 3.31.1 to 3.34.1 Updates `io.quarkus:quarkus-elytron-security` from 3.31.1 to 3.34.1 Updates `io.quarkus:quarkus-flyway` from 3.31.1 to 3.34.1 Updates `io.quarkus:quarkus-hibernate-orm-panache` from 3.31.1 to 3.34.1 Updates `io.quarkus:quarkus-hibernate-validator` from 3.31.1 to 3.34.1 Updates `io.quarkus:quarkus-jdbc-postgresql` from 3.31.1 to 3.34.1 Updates `io.quarkus:quarkus-junit5` from 3.31.1 to 3.34.1 Updates `io.quarkiverse.quinoa:quarkus-quinoa` from 2.7.1 to 2.8.0 - [Release notes](https://github.com/quarkiverse/quarkus-quinoa/releases) - [Commits](quarkiverse/quarkus-quinoa@2.7.1...2.8.0) Updates `io.quarkus:quarkus-rest` from 3.31.1 to 3.34.1 Updates `io.quarkus:quarkus-rest-jackson` from 3.31.1 to 3.34.1 Updates `io.quarkus:quarkus-smallrye-jwt` from 3.31.1 to 3.34.1 Updates `net.ltgt.errorprone` from 4.4.0 to 5.1.0 Updates `io.quarkus` from 3.31.1 to 3.34.1 Updates `com.diffplug.spotless` from 8.1.0 to 8.4.0 --- updated-dependencies: - dependency-name: gradle-wrapper dependency-version: 9.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: org.assertj:assertj-core dependency-version: 3.27.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies-backend-production - dependency-name: com.google.errorprone:error_prone_core dependency-version: 2.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: org.mockito:mockito-junit-jupiter dependency-version: 5.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: com.uber.nullaway:nullaway dependency-version: 0.13.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkus:quarkus-arc dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkus:quarkus-elytron-security dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkus:quarkus-flyway dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkus:quarkus-hibernate-orm-panache dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkus:quarkus-hibernate-validator dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkus:quarkus-jdbc-postgresql dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkus:quarkus-junit5 dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkus:quarkus-rest dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkus:quarkus-rest-jackson dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkus:quarkus-smallrye-jwt dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkus dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkus:quarkus-elytron-security dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkus:quarkus-flyway dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkus:quarkus-hibernate-orm-panache dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkus:quarkus-hibernate-validator dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkus:quarkus-jdbc-postgresql dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkus:quarkus-junit5 dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkiverse.quinoa:quarkus-quinoa dependency-version: 2.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkus:quarkus-rest dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkus:quarkus-rest-jackson dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: io.quarkus:quarkus-smallrye-jwt dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: net.ltgt.errorprone dependency-version: 5.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies-backend-production - dependency-name: io.quarkus dependency-version: 3.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production - dependency-name: com.diffplug.spotless dependency-version: 8.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-backend-production ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-04-01T17:59:45Z

Test Results

14 tests ±0 14 ✅ ±0 14s ⏱️ +10s
4 suites ±0 0 💤 ±0
4 files ±0 0 ❌ ±0

Results for commit 83923cb. ± Comparison against base commit 2f5873e.

dependabot bot assigned Breus and EmielBoss Apr 1, 2026

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Apr 1, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the dependencies-backend-production group in /app with 19 updates#116

Bump the dependencies-backend-production group in /app with 19 updates#116
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/gradle/app/dependencies-backend-production-5a101ab792

dependabot bot commented on behalf of github Apr 1, 2026

Uh oh!

github-actions bot commented Apr 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot bot commented on behalf of github Apr 1, 2026

9.4.1

Upgrade instructions

Reporting problems

v3.27.7

🔒 Security

Core

🚫 Deprecated

Core

🐛 Bug Fixes

Guava

🔨 Dependency Upgrades

Core

Guava

Error Prone 2.48.0

Error Prone 2.47.0

v5.23.0

NOTE: Breaking change for Android

5.23.0

v5.22.0

5.22.0

NullAway 0.13.1

NullAway 0.13.0

Version 0.13.1

Version 0.13.0

2.8.0

What's Changed

2.7.2

What's Changed

New Contributors

Uh oh!

github-actions bot commented Apr 1, 2026

Test Results

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants