Bump the maven-dependencies group with 3 updates by dependabot[bot] · Pull Request #477 · AxonIQ/code-samples

dependabot · 2026-11-08T04:52:55Z

Bumps the maven-dependencies group with 3 updates: io.axoniq.framework:axoniq-framework-bom, org.springframework.boot:spring-boot-dependencies and org.springframework.boot:spring-boot-maven-plugin.

Updates io.axoniq.framework:axoniq-framework-bom from 5.4.0 to 5.4.1

Release notes

Sourced from io.axoniq.framework:axoniq-framework-bom's releases.

Axoniq Framework v5.4.1

⭐ Features

Expand replay support for DeadLetteringEventHandlingComponent (#515, [PR #649](AxonIQ/axoniq-framework#649), by @smcvb)

Allow customizing persistent stream ids per tenant ([PR #694](AxonIQ/axoniq-framework#694), by @hatzlj)

📈 Enhancements

Name aggregate deadline commands after the aggregate type and deadline name (#657, [PR #659](AxonIQ/axoniq-framework#659), by @hatzlj)

Deadline review follow-ups: delivery tests, Quartz job failures and small fixes ([PR #645](AxonIQ/axoniq-framework#645), by @hatzlj)

Legacy deadline follow-ups and cleanup ([PR #679](AxonIQ/axoniq-framework#679), by @hatzlj)

Clean-up copyright header ([PR #681](AxonIQ/axoniq-framework#681), by @smcvb)

Allow to use an axoniq-license provided via the AXONIQ_LICENSE env for the shared Axon Server testcontainer ([PR #654](AxonIQ/axoniq-framework#654), by @hatzlj)

Rename secret from AXON_SERVER_LICENSE to AXONIQ_LICENSE ([PR #647](AxonIQ/axoniq-framework#647), by @smcvb)

Start the persistent stream IT's streams at the tail ([PR #696](AxonIQ/axoniq-framework#696), by @hatzlj)

🪲 Bug Fixes

Read Void-typed empty command results from Axon Server as null ([PR #637](AxonIQ/axoniq-framework#637), [PR #641](AxonIQ/axoniq-framework#641), by @MateuszNaKodach)

Read empty query results from Axon Server as null ([PR #648](AxonIQ/axoniq-framework#648), by @hatzlj)

Disable the single-round-trip snapshotted-source RPC by default ([PR #678](AxonIQ/axoniq-framework#678), by @hjohn)

Ensure FlowControlledResponseSender invokes hasNextAvailable once, preventing a lost query response when the handler result arrives mid-check (#666, [PR #685](AxonIQ/axoniq-framework#685), by @smcvb)

Fix lost responses and double completion in the Spring Cloud query drains ([PR #686](AxonIQ/axoniq-framework#686), by @MateuszNaKodach)

Tracing Micrometer: preserve spans across WebFlux context switches ([PR #688](AxonIQ/axoniq-framework#688), by @MateuszNaKodach)

📖 Documentation

Replace page aliases for the deadlines guide with a redirect in the library-site ([PR #684](AxonIQ/axoniq-framework#684), by @hatzlj)

🛠️ Dependency Upgrades

Upgrade Axon Server Connector for Java to 2026.1.1 ([PR #690](AxonIQ/axoniq-framework#690), by @smcvb)

Upgrade Axon Framework to 5.4.1 ([PR #692](AxonIQ/axoniq-framework#692), by @smcvb)

❤️ Contributors

A heartfelt thank you to all contributors who worked on this section:

@hatzlj

@hjohn

@MateuszNaKodach

@smcvb

Commits

7af9477 [maven-release-plugin] prepare release axoniq-5.4.1
a1f7713 Drop docker:// invocation to pick regular action flow
a2772cf Merge pull request #696 from AxonIQ/backport-695-to-axoniq-5.4.x
9c76909 Start the persistent stream IT's streams at the tail
6b58594 Merge pull request #694 from AxonIQ/backport-691-to-axoniq-5.4.x
f16628e Allow customizing persistent stream ids per tenant
592a8d9 Merge pull request #692 from AxonIQ/dependency-upgrade/af-5.4.1
c4f0f88 Register all TopologyChangeListeners in the core enhancer
fbb1ce4 Upgrade Axon Framework to 5.4.1
c94623f Merge pull request #690 from AxonIQ/backport-689-to-axoniq-5.4.x
Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-dependencies from 4.1.1 to 4.1.2

Release notes

Sourced from org.springframework.boot:spring-boot-dependencies's releases.

v4.1.2

⭐ New Features

Add TWENTY_SEVEN to JavaVersion enum #51426

🐞 Bug Fixes

OriginTrackedResource does not implement equals correctly #52267

OriginTrackedPropertiesLoader drops properties whose name starts with # or ! #52265

JWTs are rejected when issuer-uri is empty and jwk-set-uri is set #52260

Package manifest attributes are missing for nested jars without directory entries #52258

Logback ColorConverter unnecessarily parses its options for every log event #52228

Empty system property in TestPropertyValues is cleared instead of being restored to its empty value #52208

Graceful shutdown of Tomcat or Jetty may call back with REQUESTS_ACTIVE when stop is called immediately after shutDownGracefully on an idle server #52197

NettyWebServer stop may hang when called immediately after shutDownGracefully #52196

gRPC client 'grpc' load balancing fails to bind with a NullPointerException when no child policies are configured #52193

Prevent gRPC client properties from overriding user customizations #52175

MongoDB fails to connect when credentials contain a space #52168

Authentication fails when password configured in spring.elasticsearch.uris contains a colon #52166

Logging can be lost when a context is paused by the test context framework #52088

Docker Compose support for MongoDB fails to connect when credentials contain a character that requires URL encoding #52084

Jersey does not use the endpoint ObjectMapper when Actuator is running on a separate port #51982

Fractions of a second are handled incorrectly when configuring gRPC service config durations #51957

Configuration property descriptions may be lost when building incrementally with Gradle #51925

BasicJsonParser mishandles escaped characters in nested lists and maps #51908

Zero week value conversion fails with 'intValue cannot be extracted from WEEKS' exception #51894

App fails to start when using DevTools and manually configuring JDBC or R2DBC without spring-boot-jdbc or spring-boot-r2dbc #51890

Docker Compose support incorrectly recognizes MARIADB_ALLOW_EMPTY_PASSWORD instead of MARIADB_ALLOW_EMPTY_ROOT_PASSWORD #51888

Auto-configured Kotlinx Serialization JSON codec customization is not applied #51877

NullPointerException can be thrown when using uber jars due to a race condition in NestedJarFileResources #51745

DevTools does not detect a reactive web environment #51730

spring.http.clients.cookie-handling has no effect when using a reactive client backed by an HttpComponents connector #51724

Connection fails when rabbitmq Docker Compose service is configured to use SSL #51667

SBOM-related manifest attributes are missing from Maven-packaged wars #51651

When server.reactive.session.cookie.same-site is not set, session cookies have no SameSite attribute #51639

OAuth2 resource server ignores authorities-claim-delimiter when set on its own #51630

developmentOnly and testAndDevelopmentOnly configurations do not specify any attributes causing potential resolution problems #51623

In a reactive web application, Cloud Foundry security integration returns a 500 rather than a 503 when the cloud controller URL is unavailable #51614

Layer temp file is not deleted when layer creation fails #51581

Docker Compose integration for RabbitMQ skips credential fallbacks when an environment variable has no value #51578

Some assertion messages name the wrong parameter #51574

OAuth2ResourceServerProperties.Jwt has a setter that does not match its getter #51562

jarmode tools commands print stacktrace instead of an error message #51547

Docker Compose ProcessRunner can hang or leave orphan processes #51538

NestedByteChannel.read(ByteBuffer) incorrectly returns 0 when buffer could not be filled #51520

Customizer null checks in HTTP client builders assert the wrong attribute #51513

SSL host config customizations may be lost during Tomcat initialization #51511

SQL Server Docker Compose integration may duplicate the JDBC URL's encrypt parameter #51481

WritableJson.toByteArray() may corrupt supplementary characters #51464

SSL host config customizations are lost when reloading SSL bundles #51457

... (truncated)

Commits

634e6fd Release 4.1.2
6b43cf1 Upgrade to Spring WS 5.0.3
a73dfad Upgrade to Spring Security 7.1.2
0485f1e Upgrade to Spring RESTDocs 4.0.2
de2c11a Upgrade to Spring Pulsar 2.0.8
8d0359e Upgrade to Spring LDAP 4.1.2
f22c6e6 Upgrade to Spring Kafka 4.1.2
ed55709 Upgrade to Spring Integration 7.1.2
2e88a38 Upgrade to Spring HATEOAS 3.1.3
0d69ce5 Upgrade to Spring gRPC 1.1.2
Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-maven-plugin from 4.1.1 to 4.1.2

Release notes

Sourced from org.springframework.boot:spring-boot-maven-plugin's releases.

v4.1.2

⭐ New Features

Add TWENTY_SEVEN to JavaVersion enum #51426

🐞 Bug Fixes

OriginTrackedResource does not implement equals correctly #52267

OriginTrackedPropertiesLoader drops properties whose name starts with # or ! #52265

JWTs are rejected when issuer-uri is empty and jwk-set-uri is set #52260

Package manifest attributes are missing for nested jars without directory entries #52258

Logback ColorConverter unnecessarily parses its options for every log event #52228

Empty system property in TestPropertyValues is cleared instead of being restored to its empty value #52208

Graceful shutdown of Tomcat or Jetty may call back with REQUESTS_ACTIVE when stop is called immediately after shutDownGracefully on an idle server #52197

NettyWebServer stop may hang when called immediately after shutDownGracefully #52196

gRPC client 'grpc' load balancing fails to bind with a NullPointerException when no child policies are configured #52193

Prevent gRPC client properties from overriding user customizations #52175

MongoDB fails to connect when credentials contain a space #52168

Authentication fails when password configured in spring.elasticsearch.uris contains a colon #52166

Logging can be lost when a context is paused by the test context framework #52088

Docker Compose support for MongoDB fails to connect when credentials contain a character that requires URL encoding #52084

Jersey does not use the endpoint ObjectMapper when Actuator is running on a separate port #51982

Fractions of a second are handled incorrectly when configuring gRPC service config durations #51957

Configuration property descriptions may be lost when building incrementally with Gradle #51925

BasicJsonParser mishandles escaped characters in nested lists and maps #51908

Zero week value conversion fails with 'intValue cannot be extracted from WEEKS' exception #51894

App fails to start when using DevTools and manually configuring JDBC or R2DBC without spring-boot-jdbc or spring-boot-r2dbc #51890

Docker Compose support incorrectly recognizes MARIADB_ALLOW_EMPTY_PASSWORD instead of MARIADB_ALLOW_EMPTY_ROOT_PASSWORD #51888

Auto-configured Kotlinx Serialization JSON codec customization is not applied #51877

NullPointerException can be thrown when using uber jars due to a race condition in NestedJarFileResources #51745

DevTools does not detect a reactive web environment #51730

spring.http.clients.cookie-handling has no effect when using a reactive client backed by an HttpComponents connector #51724

Connection fails when rabbitmq Docker Compose service is configured to use SSL #51667

SBOM-related manifest attributes are missing from Maven-packaged wars #51651

When server.reactive.session.cookie.same-site is not set, session cookies have no SameSite attribute #51639

OAuth2 resource server ignores authorities-claim-delimiter when set on its own #51630

developmentOnly and testAndDevelopmentOnly configurations do not specify any attributes causing potential resolution problems #51623

In a reactive web application, Cloud Foundry security integration returns a 500 rather than a 503 when the cloud controller URL is unavailable #51614

Layer temp file is not deleted when layer creation fails #51581

Docker Compose integration for RabbitMQ skips credential fallbacks when an environment variable has no value #51578

Some assertion messages name the wrong parameter #51574

OAuth2ResourceServerProperties.Jwt has a setter that does not match its getter #51562

jarmode tools commands print stacktrace instead of an error message #51547

Docker Compose ProcessRunner can hang or leave orphan processes #51538

NestedByteChannel.read(ByteBuffer) incorrectly returns 0 when buffer could not be filled #51520

Customizer null checks in HTTP client builders assert the wrong attribute #51513

SSL host config customizations may be lost during Tomcat initialization #51511

SQL Server Docker Compose integration may duplicate the JDBC URL's encrypt parameter #51481

WritableJson.toByteArray() may corrupt supplementary characters #51464

SSL host config customizations are lost when reloading SSL bundles #51457

... (truncated)

Commits

634e6fd Release 4.1.2
6b43cf1 Upgrade to Spring WS 5.0.3
a73dfad Upgrade to Spring Security 7.1.2
0485f1e Upgrade to Spring RESTDocs 4.0.2
de2c11a Upgrade to Spring Pulsar 2.0.8
8d0359e Upgrade to Spring LDAP 4.1.2
f22c6e6 Upgrade to Spring Kafka 4.1.2
ed55709 Upgrade to Spring Integration 7.1.2
2e88a38 Upgrade to Spring HATEOAS 3.1.3
0d69ce5 Upgrade to Spring gRPC 1.1.2
Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-maven-plugin from 4.1.1 to 4.1.2

Release notes

Sourced from org.springframework.boot:spring-boot-maven-plugin's releases.

v4.1.2

⭐ New Features

Add TWENTY_SEVEN to JavaVersion enum #51426

🐞 Bug Fixes

OriginTrackedResource does not implement equals correctly #52267

OriginTrackedPropertiesLoader drops properties whose name starts with # or ! #52265

JWTs are rejected when issuer-uri is empty and jwk-set-uri is set #52260

Package manifest attributes are missing for nested jars without directory entries #52258

Logback ColorConverter unnecessarily parses its options for every log event #52228

Empty system property in TestPropertyValues is cleared instead of being restored to its empty value #52208

Graceful shutdown of Tomcat or Jetty may call back with REQUESTS_ACTIVE when stop is called immediately after shutDownGracefully on an idle server #52197

NettyWebServer stop may hang when called immediately after shutDownGracefully #52196

gRPC client 'grpc' load balancing fails to bind with a NullPointerException when no child policies are configured #52193

Prevent gRPC client properties from overriding user customizations #52175

MongoDB fails to connect when credentials contain a space #52168

Authentication fails when password configured in spring.elasticsearch.uris contains a colon #52166

Logging can be lost when a context is paused by the test context framework #52088

Docker Compose support for MongoDB fails to connect when credentials contain a character that requires URL encoding #52084

Jersey does not use the endpoint ObjectMapper when Actuator is running on a separate port #51982

Fractions of a second are handled incorrectly when configuring gRPC service config durations #51957

Configuration property descriptions may be lost when building incrementally with Gradle #51925

BasicJsonParser mishandles escaped characters in nested lists and maps #51908

Zero week value conversion fails with 'intValue cannot be extracted from WEEKS' exception #51894

App fails to start when using DevTools and manually configuring JDBC or R2DBC without spring-boot-jdbc or spring-boot-r2dbc #51890

Docker Compose support incorrectly recognizes MARIADB_ALLOW_EMPTY_PASSWORD instead of MARIADB_ALLOW_EMPTY_ROOT_PASSWORD #51888

Auto-configured Kotlinx Serialization JSON codec customization is not applied #51877

NullPointerException can be thrown when using uber jars due to a race condition in NestedJarFileResources #51745

DevTools does not detect a reactive web environment #51730

spring.http.clients.cookie-handling has no effect when using a reactive client backed by an HttpComponents connector #51724

Connection fails when rabbitmq Docker Compose service is configured to use SSL #51667

SBOM-related manifest attributes are missing from Maven-packaged wars #51651

When server.reactive.session.cookie.same-site is not set, session cookies have no SameSite attribute #51639

OAuth2 resource server ignores authorities-claim-delimiter when set on its own #51630

developmentOnly and testAndDevelopmentOnly configurations do not specify any attributes causing potential resolution problems #51623

In a reactive web application, Cloud Foundry security integration returns a 500 rather than a 503 when the cloud controller URL is unavailable #51614

Layer temp file is not deleted when layer creation fails #51581

Docker Compose integration for RabbitMQ skips credential fallbacks when an environment variable has no value #51578

Some assertion messages name the wrong parameter #51574

OAuth2ResourceServerProperties.Jwt has a setter that does not match its getter #51562

jarmode tools commands print stacktrace instead of an error message #51547

Docker Compose ProcessRunner can hang or leave orphan processes #51538

NestedByteChannel.read(ByteBuffer) incorrectly returns 0 when buffer could not be filled #51520

Customizer null checks in HTTP client builders assert the wrong attribute #51513

SSL host config customizations may be lost during Tomcat initialization #51511

SQL Server Docker Compose integration may duplicate the JDBC URL's encrypt parameter #51481

WritableJson.toByteArray() may corrupt supplementary characters #51464

SSL host config customizations are lost when reloading SSL bundles #51457

... (truncated)

Commits

634e6fd Release 4.1.2
6b43cf1 Upgrade to Spring WS 5.0.3
a73dfad Upgrade to Spring Security 7.1.2
0485f1e Upgrade to Spring RESTDocs 4.0.2
de2c11a Upgrade to Spring Pulsar 2.0.8
8d0359e Upgrade to Spring LDAP 4.1.2
f22c6e6 Upgrade to Spring Kafka 4.1.2
ed55709 Upgrade to Spring Integration 7.1.2
2e88a38 Upgrade to Spring HATEOAS 3.1.3
0d69ce5 Upgrade to Spring gRPC 1.1.2
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven-dependencies group with 3 updates: [io.axoniq.framework:axoniq-framework-bom](https://github.com/AxonIQ/AxoniqFramework), [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) and [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot). Updates `io.axoniq.framework:axoniq-framework-bom` from 5.4.0 to 5.4.1 - [Release notes](https://github.com/AxonIQ/AxoniqFramework/releases) - [Commits](AxonIQ/axoniq-framework@axoniq-5.4.0...axoniq-5.4.1) Updates `org.springframework.boot:spring-boot-dependencies` from 4.1.1 to 4.1.2 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2) Updates `org.springframework.boot:spring-boot-maven-plugin` from 4.1.1 to 4.1.2 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2) Updates `org.springframework.boot:spring-boot-maven-plugin` from 4.1.1 to 4.1.2 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2) --- updated-dependencies: - dependency-name: io.axoniq.framework:axoniq-framework-bom dependency-version: 5.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.springframework.boot:spring-boot-dependencies dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.springframework.boot:spring-boot-maven-plugin dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.springframework.boot:spring-boot-maven-plugin dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from smcvb as a code owner November 8, 2026 04:52

dependabot Bot added Priority 1: Must Type: Dependency Upgrade labels Nov 8, 2026

github-actions Bot approved these changes Nov 8, 2026

View reviewed changes

github-actions Bot enabled auto-merge November 8, 2026 04:53

github-actions Bot merged commit eef7718 into main Nov 8, 2026
4 checks passed

github-actions Bot deleted the dependabot/maven/maven-dependencies-0ec997736b branch November 8, 2026 04:57

smcvb self-assigned this Nov 9, 2026

Navigation Menu

Repository navigation

Bump the maven-dependencies group with 3 updates - #477

Bump the maven-dependencies group with 3 updates#477
github-actions[bot] merged 1 commit into
mainfrom
dependabot/maven/maven-dependencies-0ec997736b

dependabot Bot commented on behalf of github Nov 8, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 8, 2026

Axoniq Framework v5.4.1

⭐ Features

📈 Enhancements

🪲 Bug Fixes

📖 Documentation

🛠️ Dependency Upgrades

❤️ Contributors

v4.1.2

⭐ New Features

🐞 Bug Fixes

v4.1.2

⭐ New Features

🐞 Bug Fixes

v4.1.2

⭐ New Features

🐞 Bug Fixes

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant