From 6a78db7f5944aa3b24ac7614734038e639e72586 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 9 Sep 2026 04:55:02 +0000 Subject: [PATCH] build(deps): Bump the dev-dependencies group with 10 updates Bumps the dev-dependencies group with 10 updates: | Package | From | To | | --- | --- | --- | | [com.gradleup.nmcp.settings](https://github.com/gradleup/nmcp) | `1.6.1` | `1.6.2` | | [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j) | `0.31.9.RELEASE` | `0.31.10.RELEASE` | | org.flywaydb:flyway-core | `13.4.0` | `13.5.0` | | org.flywaydb:flyway-database-postgresql | `13.4.0` | `13.5.0` | | software.amazon.awssdk:dynamodb | `2.54.7` | `2.54.13` | | software.amazon.awssdk:dynamodb-enhanced | `2.54.7` | `2.54.13` | | org.slf4j:slf4j-api | `2.0.18` | `2.0.19` | | [com.h2database:h2](https://github.com/h2database/h2database) | `2.4.240` | `2.5.250` | | [com.diffplug.spotless:spotless-plugin-gradle](https://github.com/diffplug/spotless) | `8.10.1` | `8.10.2` | | com.diffplug.spotless | `8.10.1` | `8.10.2` | Updates `com.gradleup.nmcp.settings` from 1.6.1 to 1.6.2 - [Release notes](https://github.com/gradleup/nmcp/releases) - [Changelog](https://github.com/GradleUp/nmcp/blob/main/CHANGELOG.md) - [Commits](https://github.com/gradleup/nmcp/compare/v1.6.1...v1.6.2) Updates `com.webauthn4j:webauthn4j-core` from 0.31.9.RELEASE to 0.31.10.RELEASE - [Release notes](https://github.com/webauthn4j/webauthn4j/releases) - [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.31.9.RELEASE...0.31.10.RELEASE) Updates `org.flywaydb:flyway-core` from 13.4.0 to 13.5.0 Updates `org.flywaydb:flyway-database-postgresql` from 13.4.0 to 13.5.0 Updates `org.flywaydb:flyway-database-postgresql` from 13.4.0 to 13.5.0 Updates `software.amazon.awssdk:dynamodb` from 2.54.7 to 2.54.13 Updates `software.amazon.awssdk:dynamodb-enhanced` from 2.54.7 to 2.54.13 Updates `software.amazon.awssdk:dynamodb-enhanced` from 2.54.7 to 2.54.13 Updates `org.slf4j:slf4j-api` from 2.0.18 to 2.0.19 Updates `com.h2database:h2` from 2.4.240 to 2.5.250 - [Release notes](https://github.com/h2database/h2database/releases) - [Commits](https://github.com/h2database/h2database/compare/version-2.4.240...version-2.5.250) Updates `com.diffplug.spotless:spotless-plugin-gradle` from 8.10.1 to 8.10.2 - [Release notes](https://github.com/diffplug/spotless/releases) - [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md) - [Commits](https://github.com/diffplug/spotless/compare/gradle/8.10.1...gradle/8.10.2) Updates `com.diffplug.spotless` from 8.10.1 to 8.10.2 Updates `com.diffplug.spotless` from 8.10.1 to 8.10.2 --- updated-dependencies: - dependency-name: com.gradleup.nmcp.settings dependency-version: 1.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: com.webauthn4j:webauthn4j-core dependency-version: 0.31.10.RELEASE dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: org.flywaydb:flyway-core dependency-version: 13.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: org.flywaydb:flyway-database-postgresql dependency-version: 13.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: org.flywaydb:flyway-database-postgresql dependency-version: 13.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: software.amazon.awssdk:dynamodb dependency-version: 2.54.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: software.amazon.awssdk:dynamodb-enhanced dependency-version: 2.54.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: software.amazon.awssdk:dynamodb-enhanced dependency-version: 2.54.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: org.slf4j:slf4j-api dependency-version: 2.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: com.h2database:h2 dependency-version: 2.5.250 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: com.diffplug.spotless:spotless-plugin-gradle dependency-version: 8.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: com.diffplug.spotless dependency-version: 8.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: com.diffplug.spotless dependency-version: 8.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] --- gradle/libs.versions.toml | 12 ++++++------ settings.gradle.kts | 2 +- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml index e8bcb514..7233a2c7 100644 --- a/gradle/libs.versions.toml +++ b/gradle/libs.versions.toml @@ -15,30 +15,30 @@ java = "21" # intermittently fail class loading on Gradle 9 / JDK 21 under a *cached* build, which is why the # Gradle build cache stays disabled (see gradle.properties) — `./gradlew check` itself runs clean # on 8.x. The earlier 7.x pin (and its dependabot ignore) has been retired. -spotless = "8.10.1" +spotless = "8.10.2" errorprone-plugin = "5.1.1" errorprone-core = "2.50.0" google-java-format = "1.25.2" jspecify = "1.0.1" # Runtime — pk-auth-core -webauthn4j = "0.31.9.RELEASE" +webauthn4j = "0.31.10.RELEASE" nimbus-jose-jwt = "10.9.1" jackson = "3.2.2" jackson-annotations = "2.22" caffeine = "3.2.4" micrometer = "1.17.1" -slf4j = "2.0.18" +slf4j = "2.0.19" # Alt-flow modules argon2-jvm = "2.12" # Persistence jdbi = "3.54.0" -flyway = "13.4.0" +flyway = "13.5.0" postgresql = "42.7.13" hikaricp = "7.1.0" -aws-sdk = "2.54.7" +aws-sdk = "2.54.13" testcontainers = "1.21.4" # Spring Boot adapter (Phase 8). Spring Boot 4 / Spring Security 7. Spring Boot 4 standardized @@ -50,7 +50,7 @@ spring-boot = "4.1.1" spring-security = "7.1.1" # H2 in the demo so reviewers can run the spring-boot-demo without an external Postgres. # Confined to the demo's runtime; the starter does not pull it in. -h2 = "2.4.240" +h2 = "2.5.250" # Micronaut adapter (Phase 10). Micronaut 4.x line per brief §6.12. 4.10.23 is the current # latest 4.x. We avoid Micronaut Security entirely — its `SecurityRule>` diff --git a/settings.gradle.kts b/settings.gradle.kts index 30a4b2a0..db4df02a 100644 --- a/settings.gradle.kts +++ b/settings.gradle.kts @@ -10,7 +10,7 @@ plugins { // Maven Central publishing via Sonatype Central Portal. The aggregation plugin is auto-applied // to subprojects with `maven-publish` — `./gradlew publishAggregationToCentralPortal` uploads // every signed publication to the Central Portal in a single bundle. - id("com.gradleup.nmcp.settings") version "1.6.1" + id("com.gradleup.nmcp.settings") version "1.6.2" } rootProject.name = "pk-auth"