Skip to content

chore(deps): update playground dependencies - #311

Merged
dtoxvanilla1991 merged 1 commit into
mainfrom
renovate/playground-dependencies
Oct 22, 2026
Merged

chore(deps): update playground dependencies#311
dtoxvanilla1991 merged 1 commit into
mainfrom
renovate/playground-dependencies

Conversation

@renovate

@renovate renovate Bot commented Oct 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
org.projectlombok:lombok (source) 1.18.46 → 1.18.48 age confidence
org.slf4j:jcl-over-slf4j (source, changelog) 2.0.18 → 2.0.20 age confidence
org.apache.maven.plugins:maven-surefire-plugin (source) 3.5.6 → 3.6.0 age confidence
org.eclipse.jetty.ee10:jetty-ee10-maven-plugin (source) 12.1.12 → 12.1.14 age confidence
org.apache.maven.plugins:maven-compiler-plugin (source) 3.15.0 → 3.16.0 age confidence
org.mockito:mockito-junit-jupiter 5.23.0 → 5.24.0 age confidence
org.mockito:mockito-core 5.23.0 → 5.24.0 age confidence
org.slf4j:slf4j-simple (source, changelog) 2.0.18 → 2.0.20 age confidence
org.slf4j:slf4j-api (source, changelog) 2.0.18 → 2.0.20 age confidence
org.springframework.security:spring-security-bom (source) 7.1.0 → 7.1.1 age confidence
org.springframework.boot:spring-boot-maven-plugin (source) 4.1.0 → 4.1.1 age confidence
org.springframework.boot:spring-boot-dependencies (source) 4.1.0 → 4.1.1 age confidence
com.nimbusds:nimbus-jose-jwt 10.9.1 → 10.10 age confidence

Release Notes

projectlombok/lombok (org.projectlombok:lombok)

v1.18.48

Compare Source

mockito/mockito (org.mockito:mockito-junit-jupiter)

v5.24.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.24.0
  • 2026-09-23 - 27 commit(s) by Andrei Solntsev, DragonFSKY, Hünkar Can Tunç, Joshua Selbo, M. Minot, Markus Gaisbauer, Mirko Alicastro, Vinod Kumar M ( codingkiddo ), dependabot[bot]
  • Fix Mockito docs for -javaagent flag with Gradle (#​3866)
  • Kotlin example for adding Mockito as an agent is incorrect (#​3864)
  • Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 (#​3862)
  • Bump gradle/actions from 6.2.0 to 6.3.0 (#​3852)
  • Bump gradle/actions from 5 to 6.2.0 (#​3851)
  • Preserve method parameters when clearing inline mocks (#​3847)
  • Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 (#​3845)
  • Print object fields via reflection when toString() is not implemented (#​3844)
  • Migrate extensions-tests to JUnit Jupiter (#​3840)
  • Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 (#​3839)
  • docs(when-verify): fixes to explanations about redundancy (#​3838)
  • Confusing inconsistency in example method calls in “stubbing and verifying is redundant” note of “when” and “verify” Javadoc (#​3837)
  • Bump actions/checkout from 6 to 7 (#​3836)
  • Fixes #​2740 : Add mockMaker option to @Spy annotation (#​3835)
  • Bump graalvm/setup-graalvm from 1.5.5 to 1.5.6 (#​3834)
  • Bump graalvm/setup-graalvm from 1.5.4 to 1.5.5 (#​3833)
  • Bump codecov/codecov-action from 6 to 7 (#​3831)
  • Bump graalvm/setup-graalvm from 1.4.5 to 1.5.4 (#​3830)
  • Fix clearInlineMocks not de-registering singleton mocks (#​3829)
  • Fix NotAMockException when using mockSingleton with MockitoJUnit (#​3827)
  • NotAMockException when using mockSingleton with MockitoSession or MockitoJUnit (#​3826)
  • Improve Gradle agent docs for configuration cache (#​3823)
  • Gradle documentation for setting up instrumentation with Gradle configuration cache (#​3822)
  • Fixes #​3818 : Fix data race in InvocationContainerImpl.invocationForStubbing (#​3819)
  • Data race on invocationForPotentialStubbing (#​3818)
  • Fixes #​3814 : implement package-level clinit suppression (#​3815)
  • Package-level clinit suppression (#​3814)
  • Upgrade Android Gradle Plugin to 8.13.2 (#​3812)
  • Replaces raw generic types with type parameters (#​3806)
  • Fixes #​2398 : Implement global suppress static initialization leveraging java agent (#​3801)
  • Bump codecov/codecov-action from 5 to 6 (#​3800)
  • Fix non-deterministic AssertionError when using MockMakers.SUBCLASS (#​3406, #​2823) (#​3795)
  • Fixes #​3536 : Implement SpyStatic API (#​3794)
  • The class's MethodParameters are removed after clearAllCaches is invoked (#​3763)
  • [FeatureRequest / Idea] Create Mockito.spyStatic (#​3536)
  • Add option to specify mockmaker for @Spy (#​2740)
  • How can I suppress static initializer? (#​2398)
spring-projects/spring-security (org.springframework.security:spring-security-bom)

v7.1.1

Compare Source

⭐ New Features
  • Fix Broken DefaultLoginPageGeneratingFilter Javadoc Link #​19252
  • Remove BeanResolver Null Checks #​19209
  • Remove Unnecessary AuthorizationDecision Cast #​19283
  • Update One-Time Token Docs for Renamed APIs #​19274
🪲 Bug Fixes
🔨 Dependency Upgrades
  • Bump @springio/antora-extensions from 1.14.12 to 1.14.13 in /docs #​19503
  • Bump actions/checkout from 6.0.3 to 7.0.0 #​19351
  • Bump actions/checkout from 7.0.0 to 7.0.1 #​19464
  • Bump actions/setup-java from 5.2.0 to 5.3.0 #​19352
  • Bump actions/setup-java from 5.3.0 to 5.4.0 #​19380
  • Bump actions/setup-java from 5.4.0 to 5.5.0 #​19430
  • Bump actions/setup-java from 5.5.0 to 5.6.0 #​19453
  • Bump actions/setup-java from 5.6.0 to 5.7.0 #​19501
  • Bump antora from 3.2.0-alpha.12 to 3.2.0-rc.2 in /docs #​19385
  • Bump ch.qos.logback:logback-classic from 1.5.34 to 1.5.35 #​19374
  • Bump ch.qos.logback:logback-classic from 1.5.35 to 1.5.36 #​19389
  • Bump ch.qos.logback:logback-classic from 1.5.36 to 1.5.37 #​19396
  • Bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38 #​19431
  • Bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.0 #​19467
  • Bump ch.qos.logback:logback-classic from 1.6.0 to 1.6.1 #​19476
  • Bump ch.qos.logback:logback-classic from 1.6.1 to 1.6.2 #​19556
  • Bump ch.qos.logback:logback-classic from 1.6.2 to 1.6.3 #​19564
  • Bump com.fasterxml.jackson:jackson-bom from 2.22.0 to 2.22.1 #​19419
  • Bump com.fasterxml.jackson:jackson-bom from 2.22.1 to 2.22.2 #​19566
  • Bump com.nimbusds:oauth2-oidc-sdk from 11.37.2 to 11.38.1 #​19439
  • Bump com.nimbusds:oauth2-oidc-sdk from 11.38.1 to 11.38.2 #​19525
  • Bump com.unboundid:unboundid-ldapsdk from 7.0.4 to 7.0.5 #​19322
  • Bump com.webauthn4j:webauthn4j-core from 0.31.6.RELEASE to 0.31.7.RELEASE #​19313
  • Bump com.webauthn4j:webauthn4j-core from 0.31.7.RELEASE to 0.31.8.RELEASE #​19409
  • Bump com.webauthn4j:webauthn4j-core from 0.31.8.RELEASE to 0.31.9.RELEASE #​19496
  • Bump gradle-wrapper from 9.5.1 to 9.6.0 #​19360
  • Bump gradle-wrapper from 9.6.0 to 9.6.1 #​19393
  • Bump gradle-wrapper from 9.6.1 to 9.7.0 #​19516
  • Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.13 to 0.0.14 #​19378
  • Bump org-bouncycastle from 1.84 to 1.85 #​19437
  • Bump org-jetbrains-kotlin from 2.4.0 to 2.4.10 #​19447
  • Bump org-opensaml5 from 5.2.2 to 5.2.3 #​19358
  • Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.1 to 5.6.2 #​19401
  • Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.2 to 5.6.3 #​19495
  • Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.3 to 5.6.4 #​19538
  • Bump org.apache.kerby:kerb-simplekdc from 2.1.1 to 2.1.2 #​19387
  • Bump org.hibernate.orm:hibernate-core from 7.4.0.Final to 7.4.1.Final #​19312
  • Bump org.hibernate.orm:hibernate-core from 7.4.1.Final to 7.4.2.Final #​19364
  • Bump org.hibernate.orm:hibernate-core from 7.4.2.Final to 7.4.3.Final #​19402
  • Bump org.hibernate.orm:hibernate-core from 7.4.3.Final to 7.4.4.Final #​19416
  • Bump org.hibernate.orm:hibernate-core from 7.4.4.Final to 7.4.5.Final #​19443
  • Bump org.junit:junit-bom from 6.1.0 to 6.1.1 #​19395
  • Bump org.junit:junit-bom from 6.1.1 to 6.1.2 #​19442
  • Bump org.junit:junit-bom from 6.1.2 to 6.1.3 #​19524
  • Bump org.junit:junit-bom from 6.1.2 to 6.1.3 #​19519
  • Bump org.seleniumhq.selenium:htmlunit3-driver from 4.43.0 to 4.45.0 #​19365
  • Bump org.seleniumhq.selenium:selenium-java from 4.43.0 to 4.45.0 #​19344
  • Bump tools.jackson:jackson-bom from 3.2.0 to 3.2.1 #​19438
  • Bump tools.jackson:jackson-bom from 3.2.1 to 3.2.2 #​19562
  • Release 7.1.1 #​19310
  • Upgrade to Micrometer 1.17.1 #​19489
  • Upgrade to Reactor 2025.0.7 #​19488
  • Upgrade to Spring Framework 7.0.9 #​19487
  • Upgrade to Spring LDAP 4.1.1 #​19491
spring-projects/spring-boot (org.springframework.boot:spring-boot-maven-plugin)

v4.1.1

Compare Source

⚠️ Attention Required

  • Spring Boot's Gradle plugin no longer automatically configures gRPC when the Protobuf plugin is applied. This behavior caused problems for those using Protobuf without gRPC. To opt in to the configuration of gRPC, configure the protobuf extension with the grpc plugin using an empty block. The Spring Boot Gradle plugin will then automatically configure the use of protoc-gen-grpc-java as before. #​50822

🐞 Bug Fixes

  • Kafka consumer-specific security protocol is not taken into account #​51369
  • Structured logging: a failed JSON encode corrupts the next log event written on the same thread #​51156
  • Micrometer registries pin the application context #​51135
  • Temporary file is not deleted when ExportedImageTar construction fails #​51132
  • Metadata annotation processor ignores getter-level @NestedConfigurationProperty for records #​51098
  • spring-boot-h2-console pulls servlet-api as transitive dependency #​51095
  • PropertiesLauncher does not log nested archive paths #​51089
  • Methods that return the result of Map#remove are not declared with a @Nullable return type #​51087
  • NativeImageResourceProvider flattens Flyway migration paths in subdirectories #​50964
  • Fix ordering of Kotlinx Serialization CodecCustomizer #​50961
  • JarFile is not closed when finding main class from archive #​50959
  • Application-managed JUL bridge handler should only be removed if installed #​50950
  • CloudFoundry reactive auto-configuration should not require a WebClient.Builder bean to be defined #​50944
  • Context refresh fails on reactive Cloud Foundry when using Actuator without spring-boot-health #​50942
  • Resources are not cleaned up when resolving an image that is not yet present in the builder #​50941
  • GraphQlWebMvcAutoConfiguration should apply customizers in order #​50914
  • Auto-configured RedisMessageListenerContainer does not use virtual threads when spring.threads.virtual.enabled is true #​50884
  • Context refresh fails when using Actuator on Jersey without spring-boot-health #​50872
  • Context refresh fails on Cloud Foundry when using Actuator without spring-boot-health #​50871
  • IllegalStateException when binding properties to a @Validated class that contains a map whose value type is a wildcard #​50856
  • High number of connections due to Mongo health indicator #​50852
  • Inconsistent handling of empty string values of spring.security.oauth2.resourceserver.jwt issuer-uri and jwk-set-uri #​50849
  • Return type nullability of ApplicationContextAssert's getBean methods does not indicate that bean may be null #​50845
  • PropertiesWebClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #​50843
  • Exposing gRPC test server port should backoff if gRPC is not present #​50825
  • JpaBaseConfiguration#entityManagerConfiguration can cause a dependency loop on beans declaring AsyncTaskExecutor #​50801
  • spring.grpc.server.health.include-overall-health is not taken into account #​50799
  • Setting 'server.servlet.session.cookie.partitioned' to false still emits the 'Partitioned' cookie attribute #​50790
  • Managed version of Prometheus Client is not aligned with Micrometer's micrometer-registry-prometheus #​50780
  • Map properties bound from empty strings fail with ConverterNotFoundException #​50773
  • Protobuf Common Protos should not be a managed dependency #​50772
  • An application that depends on spring-boot-security-oauth2-resource-server may fail to start with a ClassNotFoundException when Reactor is on the classpath but WebFlux is not #​50764
  • W3CHeaderParser's decoding is not compliant with RFC 3986 #​50650

📔 Documentation

  • Description of spring.graphql.websocket.connection-init-timeout does not render correctly in the reference guide #​51348
  • spring.profiles.group should have a 'spring-profile-name' hint provider #​51284
  • Remove reference to removed InfluxDB auto-configuration #​51176
  • Use JacksonJsonSerde in Kafka Streams documentation #​51161
  • Document alternatives to HttpMessageConverters #​51129
  • Fix stale type reference for OTLP logging transport metadata #​51119
  • Metadata for spring.test.mockmvc.htmlunit.url declares the wrong type #​51115
  • Caching documentation refers to AutoConfigureCache by its pre-4.0 package #​51113
  • Fix examples in Metadata Format documentation chapter #​51102
  • Improve discoverability of the AOT Cache How-to guides #​51000
  • Table of auto-configured HealthIndicators lists the wrong key for MongoHealthIndicator #​50940
  • Update OpenTelemetryResourceAttributes documentation #​50874
  • Fix @Value placeholder syntax in external config docs #​50873
  • Polish gRPC documentation #​50863
  • Fix duplicate word typos in documentation #​50850
  • Fix forwarded headers property in cloud deployment docs #​50848
  • Refer to spring-boot-starter-webmvc, not deprecated spring-boot-starter-web #​50847
  • Fix documentation inconsistencies #​50800
  • Add Spring gRPC properties to Common Application Properties referrence #​50789
  • Document OTLP SSL service connections #​50782
  • Update docs for changes to optional property binding and JPA repositories bootstrap mode #​50759

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​DragonFSKY, @​LordKay-sudo, @​MacAlsandair, @​SJvaca30, @​SebTardif, @​SimonVerhoeven, @​codingkiddo, @​dhruv-15-03, @​dlwldnjs1009, @​dmitrysulman, @​doehyunbaek, @​filiphr, @​msridhar, @​ngocnhan-tran1996, @​nosan, @​ns3154, @​quaff, @​scordio, @​seonwooj0810, @​skdas20, @​vipi-n, @​vvzvvv, @​wantaekchoi, @​xfocus3, and @​yamamoto-ehhMH

connect2id/nimbus-jose-jwt (com.nimbusds:nimbus-jose-jwt)

v10.10

Compare Source

Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • "before 6am on the first day of the month"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner October 21, 2026 03:47
@coderabbitai

coderabbitai Bot commented Oct 21, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository: kinde-oss/kinde-java-sdk/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: f734d86d-00e2-47f7-ab07-b14c7f12e361

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@codecov

codecov Bot commented Oct 21, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@dtoxvanilla1991 dtoxvanilla1991 self-assigned this Oct 22, 2026
@dtoxvanilla1991
dtoxvanilla1991 merged commit 29c7cea into main Oct 22, 2026
5 checks passed
@renovate
renovate Bot deleted the renovate/playground-dependencies branch October 22, 2026 00:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@dtoxvanilla1991 dtoxvanilla1991 dtoxvanilla1991 approved these changes

Assignees

@dtoxvanilla1991 dtoxvanilla1991

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@dtoxvanilla1991