chore(deps): Update oracle-cloud to v3.95.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
com.oracle.oci.sdk:oci-java-sdk-common-httpclient-jersey3 (source)	3.90.0 → 3.95.1
com.oracle.oci.sdk:oci-java-sdk-objectstorage (source)	3.90.0 → 3.95.1

---

Release Notes

oracle/oci-java-sdk (com.oracle.oci.sdk:oci-java-sdk-common-httpclient-jersey3)

v3.95.1

Added

• Support for the Cluster Health service
• Support for scheduling and canceling maintenance window changes after provisioning Autonomous Database Serverless instances in the Database service
• Support for quick launches of BaseDB Database systems in the Database service
• Support for IoT Flow Runtime (Node-RED) resources in the OCI Internet of Things (OCI IoT) service

v3.95.0

Added

• Support for blue/green deployments in the MySQL HeatWave service
• Support for capacity reservations, capacity reservation configurations, and associating reservations when creating instances in the Big Data service
• Support for Zero Trust Packet Routing (ZPR) security attributes on recovery subnets in the Autonomous Recovery service
• Support for network firewall as a Virtual Test Access Points (VTAP) source in the Networking service
• Support for NL2SQL model selection, annotation, background mode and delta enrichment in the Generative AI service
• Support for NL2SQL model selection, annotation, background mode and delta enrichment in the Generative AI Data service
• Support for B200, B300, L40S, and MI300X dedicated AI cluster unit shapes in the Generative AI service  

Breaking Changes

• Class com.oracle.bmc.generativeaidata.CancelEnrichmentJob has been removed from the Generative AI Data service
• Class com.oracle.bmc.generativeaidata.CancelEnrichmentJobClient$Builder has been removed from the Generative AI Data service
• Class com.oracle.bmc.generativeaidata.GenerateEnrichmentJob has been removed from the Generative AI Data service
• Class com.oracle.bmc.generativeaidata.GenerateEnrichmentJobClient$Builder has been removed from the Generative AI Data service
• Class com.oracle.bmc.generativeaidata.GenerateSqlFromNlJob has been removed from the Generative AI Data service
• Class com.oracle.bmc.generativeaidata.GenerateSqlFromNlJobClient$Builder has been removed from the Generative AI Data service
• Class com.oracle.bmc.generativeaidata.GetEnrichmentJob has been removed from the Generative AI Data service
• Class com.oracle.bmc.generativeaidata.GetEnrichmentJobClient$Builder has been removed from the Generative AI Data service
• Class com.oracle.bmc.generativeaidata.GetEnrichmentJobWaiters has been removed from the Generative AI Data service
• Class com.oracle.bmc.generativeaidata.ListEnrichmentJobs has been removed from the Generative AI Data service
• Class com.oracle.bmc.generativeaidata.ListEnrichmentJobsClient$Builder has been removed from the Generative AI Data service
• Class com.oracle.bmc.generativeaidata.ListEnrichmentJobsPaginators has been removed from the Generative AI Data service

Changed

• Updated jackson-core and jackson-databind to version 2.21.5 to address CVE-2026-54515

v3.94.2

Added

• Support for creating databases from another database with additional input fields and source encryption-key location details in the Database service
• Support for IPv6 dual-stack endpoints in the Compute Instance Agent service

Changed

• Updated jackson-core to 2.21.4 to address GHSA-r7wm-3cxj-wff9

v3.94.1

Added

• Support for the OCI Device Data FHIR (Fast Healthcare Interoperability Resources) Service
• Support for the Globally Distributed Database service
• Support for availability domain selection during and after provisioning of autonomous databases in the Database service
• Support for system tags in virtual cloud networks and subnets in the Networking service
• Support for local time zones in the Resource Scheduler service
• Support for IPv6 dual-stack endpoints in the Object Storage service
• Support for B300 unit shapes in the Generative AI service
• Support for retrieving work request log entries and their content in the Resource Manager service
• Support for quick-recycle settings in compute host groups in the Compute service

v3.94.0

Added

• Support for cloning autonomous container databases from backups by timestamp and retrieving backup details in the Database service
• Support for managing automatic failover for existing data guard configurations with multiple standby databases in the Database service
• Support for creating and managing private-offer quotes and quote attachments in the Marketplace Private Offer service
• Support for usage-based SaaS listings, subscription usage reporting, and subscription cancellation in the Service Enablement Lifecycle Framework service
• Support for network security group IDs on private endpoints during open search cluster updates in the OpenSearch service
• Support for database tools MCP server, DB API gateway configuration, and IAM authentication APIs in the Database Tools service   

Breaking Changes

• The return type of method public com.oracle.bmc.self.model.PricingPlan$BillingFrequency getBillingFrequency() has been changed to com.oracle.bmc.self.model.BillingFrequency in the model com.oracle.bmc.self.model.PricingPlan in the Service Enablement Lifecycle Framework service
• The return type of method public com.oracle.bmc.self.model.BillingDetails getBillingDetails() has been changed to java.util.List in the model com.oracle.bmc.self.model.SubscriptionDetails in the Service Enablement Lifecycle Framework service
• Class com.oracle.bmc.self.model.PricingPlan$BillingFrequency has been removed from the Service Enablement Lifecycle Framework service
• Enum value SelfTokenId has been removed from the enum class SortBy in request classes com.oracle.bmc.self.requests.ListSubscriptionsRequest and com.oracle.bmc.self.requests.ListingSubscriptionsRequest in the Service Enablement Lifecycle Framework service

v3.93.0

Added

• Support for retention locks for block backups in the Block Volume service
• Support for Data Guard creation with Azure encryption keys and changing encryption key locations to Azure in the Database service
• Support for registering and unregistering PKCS for Exadata Database Service on Dedicated Infrastructure VM clusters in the Database service
• Support for Exadata DomU OS live updates in Exadata Cloud and Exadata Cloud@​Customer in the Database service
• Support for Oracle Base Database Cloud@​Customer VM clusters in the Database service
• Support for autonomous database and two-level approver groups in the Oracle API Access Control service
• Support for creating virtual circuits with AWS as the provider in the Networking service
• Support for listing available provider regions in the Networking service
• Support for Oracle Exadata Exascale, Oracle Exadata Exascale at Azure, and Oracle Exadata Exascale at Google Cloud connection technology types in the GoldenGate service
• Support for Google Cloud Managed Service for Apache Kafka connection technology types in the GoldenGate service
• Support for AI model connections in the GoldenGate service
• Support for listing supported AI models by provider, region, and tenancy in the GoldenGate service
• Support for NEEDS_ATTENTION lifecycle state for connection resources in the GoldenGate service
• Support for connectionType metadata and connectionTypeNotEqualTo filtering on connection assignment resources in the GoldenGate service
• Support for H100_X16 and H100_X32 Dedicated AI Cluster shapes for model import in the Generative AI service

Breaking Changes

• The field compartmentId has been made required in the requests ListApiMetadataByEntityTypesRequest, ListApiMetadataRequest, ListPrivilegedApiControlsRequest, ListPrivilegedApiRequestsRequest, and ListWorkRequestsRequest in the Oracle API Access Control service
• The field compartmentId has been made required in the model CreatePrivilegedApiRequestDetails in the Oracle API Access Control service
• Apache configurator add-ons now propagate SSLInitializationException when TLS initialization fails instead of silently registering a plaintext socket factory for https. Applications that require plaintext transport must explicitly provide a connection manager; see PlainConnectionSocketFactoryExample.java and PlainConnectionSocketFactoryExample.java (Jersey 3)

v3.92.1

Added

• Support for multiple FastConnect enhancements in the Networking service
• Support for updating a Letter of Authority for a cross-connect in the Networking service
• Support for creating, updating, deleting, getting, and listing Analytics instance resource groups in the Analytics Cloud service
• Support for reporting snapshot-exclusive bytes for compartment-level quota tracking in the File Storage service

v3.92.0

Added

• Support for the Oracle Data Infrastructure Cloud@​Customer service
• Support for AI Agents features in the AI Data Platform service
• Support for Hosted Application IAM resources in the Generative AI service
• Support for File Storage Service (FSS) volumes in the Container Instances service
• Support for Linux file system group security contexts for volumes in the Container Instances service
• Support for Zero Trust Packet Routing (ZPR) security attributes on private endpoints in the Digital Assistant service
• Support for placement constraints on compute clusters in the Compute service
• Support for GPU memory cluster configurations in instance pools in the Compute service
• Support for target database groups in target alert policy associations in the Data Safe service
• Support for pagination when generating and scheduling reports in the Data Safe service
• Support for refreshing audit policies in the Data Safe service
• Support for single report generation for target database group security assessments in the Data Safe service
• Support for Zero Trust Packet Routing (ZPR) security attributes on private endpoints in the Data Safe service
• Support for IPv6 endpoints in the OS Management Hub service  

Breaking Changes

• The return type of method public com.oracle.bmc.generativeai.model.HostedApplication$LifecycleState getLifecycleState() has been changed to com.oracle.bmc.generativeai.model.HostedApplicationBase$LifecycleState in the model com.oracle.bmc.generativeai.model.HostedApplicationSummary in the Generative AI service
• The return type of method public com.oracle.bmc.generativeai.model.HostedApplication$LifecycleState getLifecycleState() has been changed to com.oracle.bmc.generativeai.model.HostedApplicationBase$LifecycleState in the request class com.oracle.bmc.generativeai.requests.ListHostedApplicationsRequest in the Generative AI service

v3.91.1

Added

• Support for DAC hardware shapes for self-hosted models in the Generative AI service

v3.91.0

Added

• Support for Bitbucket Cloud email and API token configuration source providers in the Resource Manager service
• Support for configurable randomization windows for schedules in the Data Science service
• Support for partner-provided Windows licensing in the Compute service
• Support for Key Management service (KMS) bucket key in the Object Storage service
• Support for Point-In-Time Recovery (PITR) in the PostgreSQL service  

Breaking Changes

• The models BitbucketCloudUsernameAppPasswordConfigurationSourceProviderSummary, BitbucketCloudUsernameAppPasswordConfigurationSourceProvider, CreateBitbucketCloudUsernameAppPasswordConfigurationSourceProviderDetails, and UpdateBitbucketCloudUsernameAppPasswordConfigurationSourceProviderDetails were removed in the Resource Manager service

v3.90.1

Added

• Support for static redirect paths in OAuth2 and OpenID Connect authentication policies in the API Gateway service
• Support for returning SDK resources and etags during SDK updates in the API Gateway service
• Support for virtual node pool cycling in the Kubernetes Engine service
• Support for access types on Autonomous AI Database Serverless instances in the Database service
• Support for external logical zones on Autonomous AI Database Serverless instances and local Autonomous Data Guard standby databases in the Database service
• Support for scheduled backups of Autonomous Database Dedicated resources in the Resource Scheduler service
• Support for action-type filtering of resource types in the Resource Scheduler service
• Support for Log Analytics log groups on Oracle Process Automation (OPA) instances attached to Integration instances in the Integration service
• Support for Zero Trust Packet Routing (ZPR) security attributes on DNS resolver endpoints in the DNS service
• Support for free-form and defined tags on DNS resolver endpoints in the DNS service
• Support for resolver, private endpoint, and VNIC identifiers in DNS resolver endpoint responses in the DNS service
• Support for the UPDATING lifecycle state on DNS steering policies in the DNS service

---

Configuration

📅 Schedule: (in timezone Asia/Seoul)

• Branch creation
  • "before 10am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

Claude finished @renovate[bot]'s task in 1m 45s —— View job

---

🤖 Claude 의존성 영향도 분석

📦 변경점 요약

• oci-java-sdk-objectstorage 3.90.0 → 3.95.1 (minor, 5단계 점프)
• oci-java-sdk-common-httpclient-jersey3 3.90.0 → 3.95.1 (minor, 동반 업그레이드)

주요 변경 내용 (release notes 발췌):

• v3.94.0: jackson-core/jackson-databind → 2.21.5로 업데이트 (CVE-2026-54515 대응)
• v3.94.2: jackson-core → 2.21.4로 업데이트 (GHSA-r7wm-3cxj-wff9 대응)
• v3.94.1: Object Storage에 IPv6 dual-stack 엔드포인트 지원 추가 (기능 추가, 무영향)
• v3.93.0: Apache/Jersey configurator가 TLS 초기화 실패 시 기존의 무시 대신 SSLInitializationException 전파로 변경

Breaking changes 해당 여부:

• v3.95.0, v3.94.0, v3.93.0, v3.92.0, v3.91.0에 각각 breaking change가 있으나 전부 Generative AI Data / Oracle API Access Control / Service Enablement Lifecycle Framework / Resource Manager 서비스 대상 — q-asker에서 사용하지 않는 패키지

Transitive 의존성: 현재 lockfile이 아직 3.90.0 고정 상태 (하단 ⚠️ 참조)

---

🎯 Q-Asker 영향도: 🟢 LOW

사용처:

• modules/oci/impl/.../config/OciObjectStorageConfig.java — ObjectStorageClient, ConfigFileAuthenticationDetailsProvider, UploadManager 빈 설정
• modules/oci/impl/.../service/OciObjectStorageServiceImpl.java — PutObjectRequest, UploadRequest로 이미지·PDF S3 업로드 수행

예상 영향:

• ObjectStorage API(PutObjectRequest, UploadManager, ObjectStorageClient.builder()) 관련 breaking change 없음 — 사용 중인 API 시그니처 영향 없음
• SSLInitializationException 전파 변경(v3.93.0): OciObjectStorageConfig가 ~/.oci/config 기반 TLS 인증을 사용하므로 정상 구성 환경에서는 무영향. 단, OCI config 파일이 잘못된 경우 기존에는 조용히 HTTP로 fallback했으나 이제는 예외로 시작 실패 가능
• 보안 개선: jackson-core/jackson-databind CVE 패치 포함 — 업데이트 자체가 보안 측면에서 권장됨

---

⚠️ 머지 전 필수 확인: Lockfile 미업데이트

Renovate가 gradle.lockfile artifact 업데이트에 실패했습니다. 현재 lockfile은 3.90.0으로 고정되어 있어, libs.versions.toml의 3.95.1과 불일치 상태입니다. 이 상태로 머지하면 compileJava 시 lockfile 불일치로 빌드가 실패합니다.

실패 원인: Renovate 샌드박스에서 com.vanniktech.dependency.graph.generator:0.8.0 플러그인을 찾지 못함

해결 방법:

# 이 브랜치를 로컬 체크아웃 후
git checkout renovate/oracle-cloud
./gradlew resolveAndLockAll --write-locks
git add **/gradle.lockfile
git commit -m "chore: update gradle lockfiles for oracle-cloud 3.95.1"
git push

---

✅ 권장 액션

• Lockfile 재생성 후 푸시 (위 커맨드 참조) — 머지 전 필수
• CI green 확인 (재생성 후)
• OCI 파일 업로드 기능(POST /upload-doc, 이미지 업로드) 로컬 스모크 테스트 선택적 수행

📋 참고

• Release Notes: PR 본문 참조
• 분석 모델: claude-sonnet-4-6
• Renovate artifact 실패 이슈: PR 코멘트 참조

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: gradle/libs.versions.toml

Command failed: ./gradlew -Dorg.gradle.jvmargs=-Xms512m -Xmx512m --console=plain --dependency-verification lenient -q properties

FAILURE: Build failed with an exception.

* Where:
Build file '/tmp/renovate/repos/github/q-asker/api/build.gradle' line: 3

* What went wrong:
Plugin [id: 'com.vanniktech.dependency.graph.generator', version: '0.8.0'] was not found in any of the following sources:

- Gradle Core Plugins (plugin is not in 'org.gradle' namespace)
- Included Builds (No included builds contain this plugin)
- Plugin Repositories (could not resolve plugin artifact 'com.vanniktech.dependency.graph.generator:com.vanniktech.dependency.graph.generator.gradle.plugin:0.8.0')
  Searched in the following repositories:
    Gradle Central Plugin Repository

* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Run with --scan to get full insights.
> Get more help at https://help.gradle.org.

BUILD FAILED in 16s