Skip to content

build(deps): bump the maven group across 3 directories with 3 updates#29

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/e2e-tests/maven-96f13e8c45
Open

build(deps): bump the maven group across 3 directories with 3 updates#29
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/e2e-tests/maven-96f13e8c45

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 12, 2026

Copy link
Copy Markdown

Bumps the maven group with 1 update in the /e2e-tests directory: org.assertj:assertj-core.
Bumps the maven group with 1 update in the /event-rest-client-kafka directory: com.fasterxml.jackson.core:jackson-databind.
Bumps the maven group with 1 update in the /model-kafka directory: org.springframework.kafka:spring-kafka.

Updates org.assertj:assertj-core from 3.25.1 to 3.27.7

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.7

🔒 Security

Core

🚫 Deprecated

Core

  • Deprecate XmlStringPrettyFormatter with no replacement

🐛 Bug Fixes

Guava

  • Navigation to assertj-core or guava types from assertj-guava Javadoc site has unnecessary header #3478

🔨 Dependency Upgrades

Core

  • Upgrade to Byte Buddy 1.18.3
  • Upgrade to JUnit BOM 5.14.1

Guava

  • Upgrade to Guava 33.5.0-jre

v3.27.6

🐛 Bug Fixes

Core

  • Add missing export for org.assertj.core.annotation #3951

❤️ Contributors

Thanks to all the contributors who worked on this release:

@​duponter

v3.27.5

⚡ Improvements

Core

  • ByteBuddy in AssertJ 3.27.4 not compatible with Java 25 #3946

... (truncated)

Commits
  • e840716 [maven-release-plugin] prepare release assertj-build-3.27.7
  • 85ca7eb Deprecate XmlStringPrettyFormatter
  • 77081dc Merge commit from fork
  • b68fc24 Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...
  • 0cf5bb6 Bump kotlin.version from 2.1.0 to 2.2.21
  • d393ef1 Abort tests when symbolic links cannot be created (#3788)
  • 2212433 Add IntelliJ custom inspection for test class names
  • 5717d02 Update JetBrains icon
  • a8ec20b Add icon for JetBrains products
  • c05fb3d Bump Maven to 3.9.12 and Wrapper to 3.3.4
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.9.9.3 to 2.12.7.1

Commits

Updates org.springframework.kafka:spring-kafka from 3.3.11 to 3.3.16

Release notes

Sourced from org.springframework.kafka:spring-kafka's releases.

v3.3.16

⭐ New Features

  • make the method setBackOffFunction work for the batch processing as well #4472

🐞 Bug Fixes

  • Require exact package match for trusted header types #4498
  • Harden retry topic headers decoding in Spring Kafka #4494
  • Fix unbounded cache in DelegatingDeserializer #4492
  • Different behavior for value serializer mappings for different classloaders #4462
  • NPE when properties are not defined for StreamsBuilderFactoryBean #4453
  • Inconsistent handling of non-string values in Properties argument passed to DefaultConsumerFactory::createKafkaConsumer #4420

🔨 Dependency Upgrades

  • Bump org.springframework.retry:spring-retry from 2.0.12 to 2.0.13 #4484
  • Bump org.springframework:spring-framework-bom from 6.2.18 to 6.2.19 #4482
  • Bump io.projectreactor:reactor-bom from 2024.0.17 to 2024.0.18 #4479
  • Bump com.fasterxml.jackson:jackson-bom from 2.18.7 to 2.18.8 #4459
  • Bump gradle-wrapper from 8.14.4 to 8.14.5 #4441
  • Bump com.fasterxml.jackson:jackson-bom from 2.18.6 to 2.18.7 #4424

v3.3.15

🐞 Bug Fixes

  • Async Processing (and out of order commits) with FilteringMessageListenerAdapter #4415

🔨 Dependency Upgrades

  • Bump org.springframework:spring-framework-bom from 6.2.17 to 6.2.18 #4410
  • Bump io.projectreactor:reactor-bom from 2024.0.16 to 2024.0.17 #4405

v3.3.14

🐞 Bug Fixes

  • Listener with async acks pauses indefinitely #4343
  • Observations for filtered messages are leaked, filling memory #4335
  • assertTopic validation breaks meta-annotated @KafkaListener with programmatic topic resolution #4312

🔨 Dependency Upgrades

  • Bump org.springframework:spring-framework-bom from 6.2.16 to 6.2.17 #4351
  • Bump io.projectreactor:reactor-bom from 2024.0.15 to 2024.0.16 #4345
  • Bump com.fasterxml.jackson:jackson-bom from 2.18.5 to 2.18.6 #4318

v3.3.13

🐞 Bug Fixes

  • KafkaMessageListenerContainer.getAssignedPartitions can throw ConcurrentModificationException #4275

... (truncated)

Commits
  • 87c4b04 [CI/CD] Release version 3.3.16
  • 64c8c64 Fix DefaultKafkaHeaderMapperTests
  • bd3cca1 GH-4496: Require exact package match for trusted header types
  • fb8f16c GH-4493: Harden retry topic headers decoding
  • 5275405 GH-4489: Fix unbounded cache in DelegatingDeserializer
  • 5730d50 Bump org.springframework:spring-framework-bom from 6.2.18 to 6.2.19 (#4482)
  • 489f0e4 Bump org.springframework.retry:spring-retry from 2.0.12 to 2.0.13 (#4484)
  • 315cae3 Bump io.projectreactor:reactor-bom from 2024.0.17 to 2024.0.18 (#4479)
  • 8afd782 GH-4471: Manage junit-jupiter-params explicitly
  • 9a74846 GH-4455: Fix BackOffFunction for batch listeners
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the maven group with 1 update in the /e2e-tests directory: [org.assertj:assertj-core](https://github.com/assertj/assertj).
Bumps the maven group with 1 update in the /event-rest-client-kafka directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson).
Bumps the maven group with 1 update in the /model-kafka directory: [org.springframework.kafka:spring-kafka](https://github.com/spring-projects/spring-kafka).


Updates `org.assertj:assertj-core` from 3.25.1 to 3.27.7
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.25.1...assertj-build-3.27.7)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.9.9.3 to 2.12.7.1
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `org.springframework.kafka:spring-kafka` from 3.3.11 to 3.3.16
- [Release notes](https://github.com/spring-projects/spring-kafka/releases)
- [Commits](spring-projects/spring-kafka@v3.3.11...v3.3.16)

---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.7
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.12.7.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.springframework.kafka:spring-kafka
  dependency-version: 3.3.16
  dependency-type: direct:production
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jun 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants