Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 16, 2025

Bumps the all group in /tickethub/server/springboot with 4 updates: jakarta.xml.bind:jakarta.xml.bind-api, org.hibernate:hibernate-core, com.styra:opa and org.springframework.boot.

Updates jakarta.xml.bind:jakarta.xml.bind-api from 4.0.2 to 4.0.4

Commits
  • 1df980a Update API version of : to 4.0.4
  • 5548633 fix #315
  • b44c5ca activation-api 2.1.4
  • b106241 Create TCK challenge template
  • d91e825 Merge pull request #322 from jakartaee/4.0.3-RELEASE
  • 85e2fb6 Update API version of : to 4.0.4-SNAPSHOT
  • cae8cae Update API version of : to 4.0.3
  • 256b24e fix: Unmarshalling hexBinary with leading whitespaces yields null (#313)
  • 57884ff Fix #316, Unable to override JAXBContextFactory through properties (#317)
  • 3cb177a Handle empty string input for parseBase64Binary instead of throwing IllegalAr...
  • Additional commits viewable in compare view

Updates org.hibernate:hibernate-core from 7.0.5.Final to 7.1.1.Final

Release notes

Sourced from org.hibernate:hibernate-core's releases.

Hibernate ORM 7.1.1.Final released

Today, we published a new release of Hibernate ORM 7.1: 7.1.1.Final.

You can find the full list of 7.1.1.Final changes here.

What's new

  • See the website for requirements and compatibilities.
  • See the What's New guide for details about new features and capabilities.
  • See the Migration Guide for details about migration from version 7.0 to 7.1.

Conclusion

For additional details, see:

See also the following resources related to supported APIs:

Visit the website for details on getting in touch with us.

Hibernate ORM 7.1.0.Final released

Today, we published a new release of Hibernate ORM 7.1: 7.1.0.Final.

You can find the full list of 7.1.0.Final changes here.

What's new

  • See the website for requirements and compatibilities.
  • See the What's New guide for details about new features and capabilities.
  • See the Migration Guide for details about migration from version 7.0 to 7.1.

Conclusion

For additional details, see:

... (truncated)

Changelog

Sourced from org.hibernate:hibernate-core's changelog.

Changes in 7.1.1.Final (September 14, 2025)

https://hibernate.atlassian.net/projects/HHH/versions/34792

** Bug * [HHH-19756] - Invalid SQL generated when using treat() with joined = discriminator inheritance and same attribute names * [HHH-19753] - SelfRenderingSqmFunction equals/hashCode implementation not consistent with literals * [HHH-19750] - org.hibernate.sql.exec.ExecutionException when running CriteriaUpdate with specific attribute/parameter configuration * [HHH-19747] - Hibernate Envers can not handle @​EnumeratedValue annotation * [HHH-19745] - Equals implementation for SqmPath affects previous identity sensitive checks * [HHH-19740] - Collection table deletion for table per class subclass entity fails with UnknownTableReferenceException * [HHH-19738] - JDBC password logged when specified via jakarta.persistence.jdbc.password * [HHH-19734] - Cache hit of bytecode enhanced proxy with shallow query cache layout fails * [HHH-19732] - @​OnDelete on owning collection reset when mapping bidirectional * [HHH-19729] - Column check constraint not correctly hoisted to table level * [HHH-19721] - Jakarta Data is missing from hibernate-platform (BOM) * [HHH-19719] - org.hibernate.query.sqm.function.SelfRenderingSqmWindowFunction#appendHqlString throws IndexOutOfBoundsException when has no arguments * [HHH-19716] - Collection event listeners may be missing collection owners in the persistent collection (PersistentCollection#getOwner==null) * [HHH-19712] - Column deduplication leads to wrong alias calculation for native query alias expansion * [HHH-19707] - Include value column name in TableStructure InitCommand
* [HHH-19703] - NativeQueryImpl#addScalar(String, Class) fails when no JavaType is registered * [HHH-19699] - String JSON document writer code only runs with assertions * [HHH-19695] - Invalid SQL generated for FETCH FIRST/NEXT clause * [HHH-19688] - @​IdClass is ignored for classes that have a single id field * [HHH-19687] - Criteria query with lazy @​OneToOne and @​EmbeddedId throws exception * [HHH-19648] - Recursive @​Embeddable mapping leads to stack overflow * [HHH-19605] - Session.isDirty might return true when batch fetching entity with CacheConcurrencyStrategy.READ_WRITE * [HHH-19589] - @​Converter does not take precedence over @​TypeRegistration * [HHH-19453] - sequence support not working on db2 As400 7.3 * [HHH-19326] - Jakarta Data CrudRepository is generated without Types in UpdateAll, InsertAll and SaveAll Methods * [HHH-19201] - BlobProxy with InputStream reads whole stream into a byte array * [HHH-18686] - org.hibernate.tool.hbm2ddl.SchemaExport does not call orderColumns * [HHH-17522] - Support correlation of CTEs

** Improvement * [HHH-19701] - MariaDB: "drop sequence" should add "if exists" * [HHH-19697] - Use case-insensitive Dialect query pattern matching * [HHH-19696] - Do not iterate over validated path in the TraversableResolver unless necessary

** Task * [HHH-19692] - Drop org.hibernate.boot.jaxb.spi.XmlSource

Changes in 7.1.0.Final (August 08, 2025)

https://hibernate.atlassian.net/projects/HHH/versions/34726

** Improvement

... (truncated)

Commits
  • 5143ad4 Pre-steps for release : 7.1.1.Final
  • a4abfb6 HHH-19756 Improve sub-part resolution when specifying a treat type
  • 4274b7c HHH-19756 Add test for issue
  • cf67bf4 HHH-19745 Use identity-sensitive collections for criteria query params
  • 9455a42 HHH-19201 Avoid materializing byte[]/String for Blob/Clob when possible.
  • c496a1b HHH-19589 If property is annotated with @​Convert do not check for (registered...
  • 1adbcfa HHH-19589 : Test demonstrating that @​Converter is ignored when @​TypeRegistrat...
  • 2f1b47d HHH-19745 Use identity sensitive collections/operations where necessary after...
  • 279a206 Misc fixes for timestamp related intermittent test failures
  • 15f3ef2 Enable weekly maintenance releases for 7.1
  • Additional commits viewable in compare view

Updates com.styra:opa from 2.0.3 to 2.1.1

Release notes

Sourced from com.styra:opa's releases.

java - v2.1.1 - 2025-04-24 18:33:07

Generated by Speakeasy CLI

2025-04-24 18:26:03

Changes

Based on:

Generated

  • [java v2.1.1] .

Releases

java - v2.1.0 - 2025-04-24 17:26:36

Generated by Speakeasy CLI

2025-04-24 00:26:52

Changes

Based on:

Generated

  • [java v2.1.0] .

Releases

Commits
  • 82968bc Merge pull request #85 from StyraInc/speakeasy-sdk-regen-1745519178
  • 6974ad7 post-generation for speakeasy-sdk-regen-1745519178 at Thu Apr 24 18:27:39 UTC...
  • 02cb7ea empty commit to trigger [run-tests] workflow
  • f4c10ce ci: regenerated with OpenAPI Doc , Speakeasy CLI 1.538.0
  • 66fc8d5 Update group and artifactId that's generated by speakeasy which is now used b...
  • 68fefb1 Merge pull request #84 from StyraInc/speakeasy-sdk-regen-1744299558
  • 997d31f post-generation for speakeasy-sdk-regen-1744299558 at Thu Apr 24 00:28:22 UTC...
  • 714429a empty commit to trigger [run-tests] workflow
  • f044e36 ci: regenerated with OpenAPI Doc , Speakeasy CLI 1.538.0
  • aa73d24 Prepare for migrating to Sonatype central
  • See full diff in compare view

Updates org.springframework.boot from 3.5.3 to 3.5.5

Release notes

Sourced from org.springframework.boot's releases.

v3.5.5

🐞 Bug Fixes

  • Hazelcast health indicator reports the wrong status when Hazelcast has shut down due to an out-of-memory error #46909
  • Performance critical tracing code has high overhead due to the use of the Stream API #46844
  • SpringLiquibaseCustomizer is exposed outside its defined visibility scope #46758
  • Race condition in OutputCapture can result in stale data #46721
  • Auto-configured WebClient no longer uses context's ReactorResourceFactory #46673
  • Default value not detected for a field annoted with @Name #46666
  • Missing metadata when using @Name with a constructor-bound property #46663
  • Missing property for Spring Authorization Server's PAR endpoint #46641
  • Property name is incorrect when reporting a mis-configured OAuth 2 Resource Server JWT public key location #46636
  • Memory not freed on context restart in JpaMetamodel#CACHE with spring.main.lazy-initialization=true #46634
  • Auto-configured MockMvc ignores @FilterRegistration annotation #46605
  • Failure to discover default value for a primitive should not lead to document its default value #46561

📔 Documentation

  • Kotlin samples for configuration metadata are in the wrong package #46857
  • Observability examples in the reference guide are missing the Kotlin version #46798
  • Align method descriptions for SslOptions getCiphers and getEnabledProtocols with @returns #46769
  • Tracing samples in the reference guide are missing the Kotlin version #46767
  • Improve Virtual Threads section to mention the changes in Java 24 #46610
  • spring.test.webtestclient.timeout is not documented #46588
  • spring-boot-test-autoconfigure should use the configuration properties annotation processor like other modules #46585
  • Adapt deprecation level for management.health.influxdb.enabled #46580
  • spring.test.mockmvc properties are not documented #46578

🔨 Dependency Upgrades

  • Upgrade to Angus Mail 2.0.4 #46725
  • Upgrade to AssertJ 3.27.4 #46726
  • Upgrade to Byte Buddy 1.17.7 #46883
  • Upgrade to Couchbase Client 3.8.3 #46794
  • Upgrade to Elasticsearch Client 8.18.5 #46830
  • Upgrade to Hibernate 6.6.26.Final #46884
  • Upgrade to Hibernate Validator 8.0.3.Final #46728
  • Upgrade to HikariCP 6.3.2 #46729
  • Upgrade to Jersey 3.1.11 #46730
  • Upgrade to Jetty 12.0.25 #46831
  • Upgrade to Jetty Reactive HTTPClient 4.0.11 #46885
  • Upgrade to jOOQ 3.19.25 #46808
  • Upgrade to MariaDB 3.5.5 #46779
  • Upgrade to Maven Javadoc Plugin 3.11.3 #46886
  • Upgrade to Micrometer 1.15.3 #46701
  • Upgrade to Micrometer Tracing 1.5.3 #46702
  • Upgrade to MySQL 9.4.0 #46732
  • Upgrade to Netty 4.1.124.Final #46832
  • Upgrade to Pulsar 4.0.6 #46733
  • Upgrade to Reactor Bom 2024.0.9 #46703

... (truncated)

Commits
  • 3537d25 Release v3.5.5
  • a22e28e Merge branch '3.4.x' into 3.5.x
  • 4cb8c8a Next development version (v3.4.10-SNAPSHOT)
  • 9d205e2 Merge branch '3.4.x' into 3.5.x
  • 47b0632 Merge pull request #46927 from izeye
  • 8b71458 Adapt checkstyle rules for 3.4.x
  • fb99bad Remove redundant suppressions from Checkstyle configuration
  • 8af836a Upgrade to Spring RESTDocs 3.0.5
  • ae6c6a5 Merge branch '3.4.x' into 3.5.x
  • b6bae9f Upgrade to Spring RESTDocs 3.0.5
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group in /tickethub/server/springboot with 4 updates: [jakarta.xml.bind:jakarta.xml.bind-api](https://github.com/jakartaee/jaxb-api), [org.hibernate:hibernate-core](https://github.com/hibernate/hibernate-orm), [com.styra:opa](https://github.com/styrainc/opa-java) and [org.springframework.boot](https://github.com/spring-projects/spring-boot).


Updates `jakarta.xml.bind:jakarta.xml.bind-api` from 4.0.2 to 4.0.4
- [Release notes](https://github.com/jakartaee/jaxb-api/releases)
- [Commits](jakartaee/jaxb-api@4.0.2...4.0.4)

Updates `org.hibernate:hibernate-core` from 7.0.5.Final to 7.1.1.Final
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.1.1/changelog.txt)
- [Commits](hibernate/hibernate-orm@7.0.5...7.1.1)

Updates `com.styra:opa` from 2.0.3 to 2.1.1
- [Release notes](https://github.com/styrainc/opa-java/releases)
- [Changelog](https://github.com/open-policy-agent/opa-java/blob/main/CHANGELOG.md)
- [Commits](open-policy-agent/opa-java@v2.0.3...v2.1.1)

Updates `org.springframework.boot` from 3.5.3 to 3.5.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.3...v3.5.5)

---
updated-dependencies:
- dependency-name: jakarta.xml.bind:jakarta.xml.bind-api
  dependency-version: 4.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: org.hibernate:hibernate-core
  dependency-version: 7.1.1.Final
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: com.styra:opa
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: org.springframework.boot
  dependency-version: 3.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/gradle/tickethub/server/springboot/all-c170459d07 branch from c130300 to fd39b9e Compare September 22, 2025 11:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant