Skip to content

Bump the maven-dependencies group with 9 updates - #475

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/maven/maven-dependencies-47f4f317f5
Nov 1, 2026
Merged

Bump the maven-dependencies group with 9 updates#475
github-actions[bot] merged 1 commit into
mainfrom
dependabot/maven/maven-dependencies-47f4f317f5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-dependencies group with 9 updates:

Package From To
io.axoniq.framework:axoniq-framework-bom 5.4.0 5.4.1
org.springframework.boot:spring-boot-dependencies 4.1.1 4.1.2
org.springframework.boot:spring-boot-maven-plugin 4.1.1 4.1.2
org.springframework.boot:spring-boot-starter 4.1.1 4.1.2
org.springframework.boot:spring-boot-docker-compose 4.1.1 4.1.2
io.projectreactor:reactor-core 3.8.7 3.8.8
org.hibernate:hibernate-core 7.4.13.Final 7.4.14.Final
org.apache.maven.plugins:maven-surefire-plugin 3.6.0 3.6.1
org.apache.maven.plugins:maven-failsafe-plugin 3.6.0 3.6.1

Updates io.axoniq.framework:axoniq-framework-bom from 5.4.0 to 5.4.1

Release notes

Sourced from io.axoniq.framework:axoniq-framework-bom's releases.

Axoniq Framework v5.4.1

⭐ Features

📈 Enhancements

🪲 Bug Fixes

📖 Documentation

🛠️ Dependency Upgrades

❤️ Contributors

A heartfelt thank you to all contributors who worked on this section:

Commits
  • 7af9477 [maven-release-plugin] prepare release axoniq-5.4.1
  • a1f7713 Drop docker:// invocation to pick regular action flow
  • a2772cf Merge pull request #696 from AxonIQ/backport-695-to-axoniq-5.4.x
  • 9c76909 Start the persistent stream IT's streams at the tail
  • 6b58594 Merge pull request #694 from AxonIQ/backport-691-to-axoniq-5.4.x
  • f16628e Allow customizing persistent stream ids per tenant
  • 592a8d9 Merge pull request #692 from AxonIQ/dependency-upgrade/af-5.4.1
  • c4f0f88 Register all TopologyChangeListeners in the core enhancer
  • fbb1ce4 Upgrade Axon Framework to 5.4.1
  • c94623f Merge pull request #690 from AxonIQ/backport-689-to-axoniq-5.4.x
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-dependencies from 4.1.1 to 4.1.2

Release notes

Sourced from org.springframework.boot:spring-boot-dependencies's releases.

v4.1.2

⭐ New Features

  • Add TWENTY_SEVEN to JavaVersion enum #51426

🐞 Bug Fixes

  • OriginTrackedResource does not implement equals correctly #52267
  • OriginTrackedPropertiesLoader drops properties whose name starts with # or ! #52265
  • JWTs are rejected when issuer-uri is empty and jwk-set-uri is set #52260
  • Package manifest attributes are missing for nested jars without directory entries #52258
  • Logback ColorConverter unnecessarily parses its options for every log event #52228
  • Empty system property in TestPropertyValues is cleared instead of being restored to its empty value #52208
  • Graceful shutdown of Tomcat or Jetty may call back with REQUESTS_ACTIVE when stop is called immediately after shutDownGracefully on an idle server #52197
  • NettyWebServer stop may hang when called immediately after shutDownGracefully #52196
  • gRPC client 'grpc' load balancing fails to bind with a NullPointerException when no child policies are configured #52193
  • Prevent gRPC client properties from overriding user customizations #52175
  • MongoDB fails to connect when credentials contain a space #52168
  • Authentication fails when password configured in spring.elasticsearch.uris contains a colon #52166
  • Logging can be lost when a context is paused by the test context framework #52088
  • Docker Compose support for MongoDB fails to connect when credentials contain a character that requires URL encoding #52084
  • Jersey does not use the endpoint ObjectMapper when Actuator is running on a separate port #51982
  • Fractions of a second are handled incorrectly when configuring gRPC service config durations #51957
  • Configuration property descriptions may be lost when building incrementally with Gradle #51925
  • BasicJsonParser mishandles escaped characters in nested lists and maps #51908
  • Zero week value conversion fails with 'intValue cannot be extracted from WEEKS' exception #51894
  • App fails to start when using DevTools and manually configuring JDBC or R2DBC without spring-boot-jdbc or spring-boot-r2dbc #51890
  • Docker Compose support incorrectly recognizes MARIADB_ALLOW_EMPTY_PASSWORD instead of MARIADB_ALLOW_EMPTY_ROOT_PASSWORD #51888
  • Auto-configured Kotlinx Serialization JSON codec customization is not applied #51877
  • NullPointerException can be thrown when using uber jars due to a race condition in NestedJarFileResources #51745
  • DevTools does not detect a reactive web environment #51730
  • spring.http.clients.cookie-handling has no effect when using a reactive client backed by an HttpComponents connector #51724
  • Connection fails when rabbitmq Docker Compose service is configured to use SSL #51667
  • SBOM-related manifest attributes are missing from Maven-packaged wars #51651
  • When server.reactive.session.cookie.same-site is not set, session cookies have no SameSite attribute #51639
  • OAuth2 resource server ignores authorities-claim-delimiter when set on its own #51630
  • developmentOnly and testAndDevelopmentOnly configurations do not specify any attributes causing potential resolution problems #51623
  • In a reactive web application, Cloud Foundry security integration returns a 500 rather than a 503 when the cloud controller URL is unavailable #51614
  • Layer temp file is not deleted when layer creation fails #51581
  • Docker Compose integration for RabbitMQ skips credential fallbacks when an environment variable has no value #51578
  • Some assertion messages name the wrong parameter #51574
  • OAuth2ResourceServerProperties.Jwt has a setter that does not match its getter #51562
  • jarmode tools commands print stacktrace instead of an error message #51547
  • Docker Compose ProcessRunner can hang or leave orphan processes #51538
  • NestedByteChannel.read(ByteBuffer) incorrectly returns 0 when buffer could not be filled #51520
  • Customizer null checks in HTTP client builders assert the wrong attribute #51513
  • SSL host config customizations may be lost during Tomcat initialization #51511
  • SQL Server Docker Compose integration may duplicate the JDBC URL's encrypt parameter #51481
  • WritableJson.toByteArray() may corrupt supplementary characters #51464
  • SSL host config customizations are lost when reloading SSL bundles #51457

... (truncated)

Commits
  • 634e6fd Release 4.1.2
  • 6b43cf1 Upgrade to Spring WS 5.0.3
  • a73dfad Upgrade to Spring Security 7.1.2
  • 0485f1e Upgrade to Spring RESTDocs 4.0.2
  • de2c11a Upgrade to Spring Pulsar 2.0.8
  • 8d0359e Upgrade to Spring LDAP 4.1.2
  • f22c6e6 Upgrade to Spring Kafka 4.1.2
  • ed55709 Upgrade to Spring Integration 7.1.2
  • 2e88a38 Upgrade to Spring HATEOAS 3.1.3
  • 0d69ce5 Upgrade to Spring gRPC 1.1.2
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-maven-plugin from 4.1.1 to 4.1.2

Release notes

Sourced from org.springframework.boot:spring-boot-maven-plugin's releases.

v4.1.2

⭐ New Features

  • Add TWENTY_SEVEN to JavaVersion enum #51426

🐞 Bug Fixes

  • OriginTrackedResource does not implement equals correctly #52267
  • OriginTrackedPropertiesLoader drops properties whose name starts with # or ! #52265
  • JWTs are rejected when issuer-uri is empty and jwk-set-uri is set #52260
  • Package manifest attributes are missing for nested jars without directory entries #52258
  • Logback ColorConverter unnecessarily parses its options for every log event #52228
  • Empty system property in TestPropertyValues is cleared instead of being restored to its empty value #52208
  • Graceful shutdown of Tomcat or Jetty may call back with REQUESTS_ACTIVE when stop is called immediately after shutDownGracefully on an idle server #52197
  • NettyWebServer stop may hang when called immediately after shutDownGracefully #52196
  • gRPC client 'grpc' load balancing fails to bind with a NullPointerException when no child policies are configured #52193
  • Prevent gRPC client properties from overriding user customizations #52175
  • MongoDB fails to connect when credentials contain a space #52168
  • Authentication fails when password configured in spring.elasticsearch.uris contains a colon #52166
  • Logging can be lost when a context is paused by the test context framework #52088
  • Docker Compose support for MongoDB fails to connect when credentials contain a character that requires URL encoding #52084
  • Jersey does not use the endpoint ObjectMapper when Actuator is running on a separate port #51982
  • Fractions of a second are handled incorrectly when configuring gRPC service config durations #51957
  • Configuration property descriptions may be lost when building incrementally with Gradle #51925
  • BasicJsonParser mishandles escaped characters in nested lists and maps #51908
  • Zero week value conversion fails with 'intValue cannot be extracted from WEEKS' exception #51894
  • App fails to start when using DevTools and manually configuring JDBC or R2DBC without spring-boot-jdbc or spring-boot-r2dbc #51890
  • Docker Compose support incorrectly recognizes MARIADB_ALLOW_EMPTY_PASSWORD instead of MARIADB_ALLOW_EMPTY_ROOT_PASSWORD #51888
  • Auto-configured Kotlinx Serialization JSON codec customization is not applied #51877
  • NullPointerException can be thrown when using uber jars due to a race condition in NestedJarFileResources #51745
  • DevTools does not detect a reactive web environment #51730
  • spring.http.clients.cookie-handling has no effect when using a reactive client backed by an HttpComponents connector #51724
  • Connection fails when rabbitmq Docker Compose service is configured to use SSL #51667
  • SBOM-related manifest attributes are missing from Maven-packaged wars #51651
  • When server.reactive.session.cookie.same-site is not set, session cookies have no SameSite attribute #51639
  • OAuth2 resource server ignores authorities-claim-delimiter when set on its own #51630
  • developmentOnly and testAndDevelopmentOnly configurations do not specify any attributes causing potential resolution problems #51623
  • In a reactive web application, Cloud Foundry security integration returns a 500 rather than a 503 when the cloud controller URL is unavailable #51614
  • Layer temp file is not deleted when layer creation fails #51581
  • Docker Compose integration for RabbitMQ skips credential fallbacks when an environment variable has no value #51578
  • Some assertion messages name the wrong parameter #51574
  • OAuth2ResourceServerProperties.Jwt has a setter that does not match its getter #51562
  • jarmode tools commands print stacktrace instead of an error message #51547
  • Docker Compose ProcessRunner can hang or leave orphan processes #51538
  • NestedByteChannel.read(ByteBuffer) incorrectly returns 0 when buffer could not be filled #51520
  • Customizer null checks in HTTP client builders assert the wrong attribute #51513
  • SSL host config customizations may be lost during Tomcat initialization #51511
  • SQL Server Docker Compose integration may duplicate the JDBC URL's encrypt parameter #51481
  • WritableJson.toByteArray() may corrupt supplementary characters #51464
  • SSL host config customizations are lost when reloading SSL bundles #51457

... (truncated)

Commits
  • 634e6fd Release 4.1.2
  • 6b43cf1 Upgrade to Spring WS 5.0.3
  • a73dfad Upgrade to Spring Security 7.1.2
  • 0485f1e Upgrade to Spring RESTDocs 4.0.2
  • de2c11a Upgrade to Spring Pulsar 2.0.8
  • 8d0359e Upgrade to Spring LDAP 4.1.2
  • f22c6e6 Upgrade to Spring Kafka 4.1.2
  • ed55709 Upgrade to Spring Integration 7.1.2
  • 2e88a38 Upgrade to Spring HATEOAS 3.1.3
  • 0d69ce5 Upgrade to Spring gRPC 1.1.2
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter from 4.1.1 to 4.1.2

Release notes

Sourced from org.springframework.boot:spring-boot-starter's releases.

v4.1.2

⭐ New Features

  • Add TWENTY_SEVEN to JavaVersion enum #51426

🐞 Bug Fixes

  • OriginTrackedResource does not implement equals correctly #52267
  • OriginTrackedPropertiesLoader drops properties whose name starts with # or ! #52265
  • JWTs are rejected when issuer-uri is empty and jwk-set-uri is set #52260
  • Package manifest attributes are missing for nested jars without directory entries #52258
  • Logback ColorConverter unnecessarily parses its options for every log event #52228
  • Empty system property in TestPropertyValues is cleared instead of being restored to its empty value #52208
  • Graceful shutdown of Tomcat or Jetty may call back with REQUESTS_ACTIVE when stop is called immediately after shutDownGracefully on an idle server #52197
  • NettyWebServer stop may hang when called immediately after shutDownGracefully #52196
  • gRPC client 'grpc' load balancing fails to bind with a NullPointerException when no child policies are configured #52193
  • Prevent gRPC client properties from overriding user customizations #52175
  • MongoDB fails to connect when credentials contain a space #52168
  • Authentication fails when password configured in spring.elasticsearch.uris contains a colon #52166
  • Logging can be lost when a context is paused by the test context framework #52088
  • Docker Compose support for MongoDB fails to connect when credentials contain a character that requires URL encoding #52084
  • Jersey does not use the endpoint ObjectMapper when Actuator is running on a separate port #51982
  • Fractions of a second are handled incorrectly when configuring gRPC service config durations #51957
  • Configuration property descriptions may be lost when building incrementally with Gradle #51925
  • BasicJsonParser mishandles escaped characters in nested lists and maps #51908
  • Zero week value conversion fails with 'intValue cannot be extracted from WEEKS' exception #51894
  • App fails to start when using DevTools and manually configuring JDBC or R2DBC without spring-boot-jdbc or spring-boot-r2dbc #51890
  • Docker Compose support incorrectly recognizes MARIADB_ALLOW_EMPTY_PASSWORD instead of MARIADB_ALLOW_EMPTY_ROOT_PASSWORD #51888
  • Auto-configured Kotlinx Serialization JSON codec customization is not applied #51877
  • NullPointerException can be thrown when using uber jars due to a race condition in NestedJarFileResources #51745
  • DevTools does not detect a reactive web environment #51730
  • spring.http.clients.cookie-handling has no effect when using a reactive client backed by an HttpComponents connector #51724
  • Connection fails when rabbitmq Docker Compose service is configured to use SSL #51667
  • SBOM-related manifest attributes are missing from Maven-packaged wars #51651
  • When server.reactive.session.cookie.same-site is not set, session cookies have no SameSite attribute #51639
  • OAuth2 resource server ignores authorities-claim-delimiter when set on its own #51630
  • developmentOnly and testAndDevelopmentOnly configurations do not specify any attributes causing potential resolution problems #51623
  • In a reactive web application, Cloud Foundry security integration returns a 500 rather than a 503 when the cloud controller URL is unavailable #51614
  • Layer temp file is not deleted when layer creation fails #51581
  • Docker Compose integration for RabbitMQ skips credential fallbacks when an environment variable has no value #51578
  • Some assertion messages name the wrong parameter #51574
  • OAuth2ResourceServerProperties.Jwt has a setter that does not match its getter #51562
  • jarmode tools commands print stacktrace instead of an error message #51547
  • Docker Compose ProcessRunner can hang or leave orphan processes #51538
  • NestedByteChannel.read(ByteBuffer) incorrectly returns 0 when buffer could not be filled #51520
  • Customizer null checks in HTTP client builders assert the wrong attribute #51513
  • SSL host config customizations may be lost during Tomcat initialization #51511
  • SQL Server Docker Compose integration may duplicate the JDBC URL's encrypt parameter #51481
  • WritableJson.toByteArray() may corrupt supplementary characters #51464
  • SSL host config customizations are lost when reloading SSL bundles #51457

... (truncated)

Commits
  • 634e6fd Release 4.1.2
  • 6b43cf1 Upgrade to Spring WS 5.0.3
  • a73dfad Upgrade to Spring Security 7.1.2
  • 0485f1e Upgrade to Spring RESTDocs 4.0.2
  • de2c11a Upgrade to Spring Pulsar 2.0.8
  • 8d0359e Upgrade to Spring LDAP 4.1.2
  • f22c6e6 Upgrade to Spring Kafka 4.1.2
  • ed55709 Upgrade to Spring Integration 7.1.2
  • 2e88a38 Upgrade to Spring HATEOAS 3.1.3
  • 0d69ce5 Upgrade to Spring gRPC 1.1.2
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-docker-compose from 4.1.1 to 4.1.2

Release notes

Sourced from org.springframework.boot:spring-boot-docker-compose's releases.

v4.1.2

⭐ New Features

  • Add TWENTY_SEVEN to JavaVersion enum #51426

🐞 Bug Fixes

  • OriginTrackedResource does not implement equals correctly #52267
  • OriginTrackedPropertiesLoader drops properties whose name starts with # or ! #52265
  • JWTs are rejected when issuer-uri is empty and jwk-set-uri is set #52260
  • Package manifest attributes are missing for nested jars without directory entries #52258
  • Logback ColorConverter unnecessarily parses its options for every log event #52228
  • Empty system property in TestPropertyValues is cleared instead of being restored to its empty value #52208
  • Graceful shutdown of Tomcat or Jetty may call back with REQUESTS_ACTIVE when stop is called immediately after shutDownGracefully on an idle server #52197
  • NettyWebServer stop may hang when called immediately after shutDownGracefully #52196
  • gRPC client 'grpc' load balancing fails to bind with a NullPointerException when no child policies are configured #52193
  • Prevent gRPC client properties from overriding user customizations #52175
  • MongoDB fails to connect when credentials contain a space #52168
  • Authentication fails when password configured in spring.elasticsearch.uris contains a colon #52166
  • Logging can be lost when a context is paused by the test context framework #52088
  • Docker Compose support for MongoDB fails to connect when credentials contain a character that requires URL encoding #52084
  • Jersey does not use the endpoint ObjectMapper when Actuator is running on a separate port #51982
  • Fractions of a second are handled incorrectly when configuring gRPC service config durations #51957
  • Configuration property descriptions may be lost when building incrementally with Gradle #51925
  • BasicJsonParser mishandles escaped characters in nested lists and maps #51908
  • Zero week value conversion fails with 'intValue cannot be extracted from WEEKS' exception #51894
  • App fails to start when using DevTools and manually configuring JDBC or R2DBC without spring-boot-jdbc or spring-boot-r2dbc #51890
  • Docker Compose support incorrectly recognizes MARIADB_ALLOW_EMPTY_PASSWORD instead of MARIADB_ALLOW_EMPTY_ROOT_PASSWORD #51888
  • Auto-configured Kotlinx Serialization JSON codec customization is not applied #51877
  • NullPointerException can be thrown when using uber jars due to a race condition in NestedJarFileResources #51745
  • DevTools does not detect a reactive web environment #51730
  • spring.http.clients.cookie-handling has no effect when using a reactive client backed by an HttpComponents connector #51724
  • Connection fails when rabbitmq Docker Compose service is configured to use SSL #51667
  • SBOM-related manifest attributes are missing from Maven-packaged wars #51651
  • When server.reactive.session.cookie.same-site is not set, session cookies have no SameSite attribute #51639
  • OAuth2 resource server ignores authorities-claim-delimiter when set on its own #51630
  • developmentOnly and testAndDevelopmentOnly configurations do not specify any attributes causing potential resolution problems #51623
  • In a reactive web application, Cloud Foundry security integration returns a 500 rather than a 503 when the cloud controller URL is unavailable #51614
  • Layer temp file is not deleted when layer creation fails #51581
  • Docker Compose integration for RabbitMQ skips credential fallbacks when an environment variable has no value #51578
  • Some assertion messages name the wrong parameter #51574
  • OAuth2ResourceServerProperties.Jwt has a setter that does not match its getter #51562
  • jarmode tools commands print stacktrace instead of an error message #51547
  • Docker Compose ProcessRunner can hang or leave orphan processes #51538
  • NestedByteChannel.read(ByteBuffer) incorrectly returns 0 when buffer could not be filled #51520
  • Customizer null checks in HTTP client builders assert the wrong attribute #51513
  • SSL host config customizations may be lost during Tomcat initialization #51511
  • SQL Server Docker Compose integration may duplicate the JDBC URL's encrypt parameter #51481
  • WritableJson.toByteArray() may corrupt supplementary characters #51464
  • SSL host config customizations are lost when reloading SSL bundles #51457

... (truncated)

Commits
  • 634e6fd Release 4.1.2
  • 6b43cf1 Upgrade to Spring WS 5.0.3
  • a73dfad Upgrade to Spring Security 7.1.2
  • 0485f1e Upgrade to Spring RESTDocs 4.0.2
  • de2c11a Upgrade to Spring Pulsar 2.0.8
  • 8d0359e Upgrade to Spring LDAP 4.1.2
  • f22c6e6 Upgrade to Spring Kafka 4.1.2
  • ed55709 Upgrade to Spring Integration 7.1.2
  • 2e88a38 Upgrade to Spring HATEOAS 3.1.3
  • 0d69ce5 Upgrade to Spring gRPC 1.1.2
  • Additional commits viewable in compare view

Updates io.projectreactor:reactor-core from 3.8.7 to 3.8.8

Release notes

Sourced from io.projectreactor:reactor-core's releases.

v3.8.8

Reactor Core 3.8.8 is part of the 2025.0.8 Release Train.

What's Changed

⚠️ Update considerations and deprecations

  • Upgrade NullAway to 0.14.2 and Error Prone Gradle plugin to 5.1.1 by @​chemicL in #4434

✨ New features and improvements

  • Bump Byte Buddy to 1.18.14 and adjust shading by @​chemicL in #4432
  • Bump Micrometer to 1.16.8 by @​chemicL in fbc03a4334b4ceb437ed2f64083496d83d8e8027
  • Bump Micrometer Tracing to 1.6.8 by @​chemicL in fbc03a4334b4ceb437ed2f64083496d83d8e8027
  • Bump BlockHound to 1.0.18.RELEASE by @​chemicL in fbc03a4334b4ceb437ed2f64083496d83d8e8027
  • Remove sun.misc for OSGi imports on Java 11 or newer by @​rombert in 15014b1370d8b962fbeb34de1248403d2d20b6fa

New Contributors

  • @​rombert made their first contribution in 15014b1370d8b962fbeb34de1248403d2d20b6fa

Full Changelog: reactor/reactor-core@v3.8.7...v3.8.8

Commits
  • fbc03a4 [release] Prepare and release 3.8.8
  • 2ea3aa1 Prepare release/3.8.8 branch
  • fd20856 Prepare 3.8.x-internal branch
  • 84e8e27 Bump ruby/setup-ruby from 1.328.0 to 1.329.0 in /.github/workflows (#4438)
  • 15014b1 fix: remove sun.misc for OSGi imports on Java 11 or newer
  • e876ee1 Upgrade NullAway to 0.14.2 and Error Prone Gradle plugin to 5.1.1 (#4434)
  • 8e0e1ab Bump org.jspecify:jspecify from 1.0.0 to 1.0.1 (#4342)
  • 9bfeffe Bump brace-expansion from 5.0.6 to 5.0.12 in /docs
  • 850ca36 Bump @​antora/pdf-extension from 1.0.0 to 1.0.1 in /docs in the docs group (#4...
  • 7770e25 Bump com.diffplug.spotless from 8.10.3 to 8.10.4 (#4428)
  • Additional commits viewable in compare view

Updates org.hibernate:hibernate-core from 7.4.13.Final to 7.4.14.Final

Release notes

Sourced from org.hibernate:hibernate-core's releases.

Release 7.4.14

Hibernate ORM 7.4.14.Final released

Today, we published a new release of Hibernate ORM 7.4: 7.4.14.Final.

You can find the full list of 7.4.14.Final changes here.

What's new

  • See the website for requirements and compatibilities.
  • See the What's New guide for details about new features and capabilities.
  • See the Migration Guide for details about migration.

Conclusion

For additional details, see:

See also the following resources related to supported APIs:

Visit the website for details on getting in touch with us.

Changelog

Sourced from org.hibernate:hibernate-core's changelog.

Changes in 7.4.14.Final (October 25, 2026)

https://hibernate.atlassian.net/projects/HHH/versions/40492

** Bug * HHH-20976 Follow-on locking doesn't work with scrollable results * HHH-20934 SQL Server date_trunc() emulation for versions before 2022 (16.x) issues * HHH-20931 Unnesting array, JSON or XML with HANA in subquery fails * HHH-20850 MySQL enum column gets ALTERed on every startup with hbm2ddl.auto=update, even with no schema change * HHH-20818 Missing join on parent class table in criteria * HHH-20787 NPEs in criteria multiselect when producing enum parameters * HHH-20646 ClassCastException when selecting an entity from a lateral derived table * HHH-19959 default-cascade in hbm.xml is ignored in Hibernate 7 * HHH-14702 NPE in JPA Criteria when use selectCase that return an enumerated * HHH-12184 NPE selectCase LiteralExpression enumerated value

Commits
  • 86b6190 [Jenkins release job] Preparing release 7.4.14.Final
  • 68b06b1 [Jenkins release job] changelog.txt updated by release build 7.4.14.Final
  • ccc3d86 Bump postgis images to PostGIS 3.6 (Debian Trixie) for pgvector support
  • 1a2b6bd HHH-20646 Make EntityValuedSelectionInDerivedTableAndCteTest portable to Syba...
  • b065dee HHH-20646 HHH-20225 Allow selecting the root entity of a derived table or CTE
  • 4460b34 HHH-20995 - Javadoc for JpaComplianceSettings incorrectly states default value
  • 86d76ae HHH-20818 - Missing join on parent class table in criteria
  • 489da51 HHH-20818 - Missing join on parent class table in criteria
  • f9c9719 HHH-19959 Retain full cascade style semantics of hbm.xml
  • df14716 HHH-19959 map default-cascade attribute in hbm.xml files
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

  • Fix IllegalAccessError when the main module requires JUnit (#3532) (#3538) @​olamy
  • Fix groups and excludedGroups being ignored when TestNG is on the classpath (#3534) @​olamy
  • Don't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530) @​olamy
  • Fix groups and excludedGroups for Spock and Jupiter tests when JUnit 4 is on the classpath (#3468) (

@dependabot
Bump the maven-dependencies group with 9 updates
ecc8616 
Bumps the maven-dependencies group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [io.axoniq.framework:axoniq-framework-bom](https://github.com/AxonIQ/AxoniqFramework) | `5.4.0` | `5.4.1` |
| [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot:spring-boot-starter](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot:spring-boot-docker-compose](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [io.projectreactor:reactor-core](https://github.com/reactor/reactor-core) | `3.8.7` | `3.8.8` |
| [org.hibernate:hibernate-core](https://github.com/hibernate/hibernate-orm) | `7.4.13.Final` | `7.4.14.Final` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` |


Updates `io.axoniq.framework:axoniq-framework-bom` from 5.4.0 to 5.4.1
- [Release notes](https://github.com/AxonIQ/AxoniqFramework/releases)
- [Commits](AxonIQ/axoniq-framework@axoniq-5.4.0...axoniq-5.4.1)

Updates `org.springframework.boot:spring-boot-dependencies` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-starter` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-docker-compose` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `io.projectreactor:reactor-core` from 3.8.7 to 3.8.8
- [Release notes](https://github.com/reactor/reactor-core/releases)
- [Commits](reactor/reactor-core@v3.8.7...v3.8.8)

Updates `org.hibernate:hibernate-core` from 7.4.13.Final to 7.4.14.Final
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.14/changelog.txt)
- [Commits](hibernate/hibernate-orm@7.4.13...7.4.14)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.springframework.boot:spring-boot-dependencies` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-starter` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.springframework.boot:spring-boot-docker-compose` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

---
updated-dependencies:
- dependency-name: io.axoniq.framework:axoniq-framework-bom
  dependency-version: 5.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-docker-compose
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: io.projectreactor:reactor-core
  dependency-version: 3.8.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.hibernate:hibernate-core
  dependency-version: 7.4.14.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-docker-compose
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from smcvb as a code owner November 1, 2026 04:53
@github-actions
github-actions Bot enabled auto-merge November 1, 2026 04:53
@github-actions
github-actions Bot merged commit 31842a8 into main Nov 1, 2026
4 checks passed
@github-actions
github-actions Bot deleted the dependabot/maven/maven-dependencies-47f4f317f5 branch November 1, 2026 04:57
@smcvb smcvb self-assigned this Nov 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes
@smcvb smcvb Awaiting requested review from smcvb smcvb is a code owner

Assignees

@smcvb smcvb

Labels

Priority 1: Must Type: Dependency Upgrade

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@smcvb