Skip to content

Bump the java group across 1 directory with 38 updates - #26

Closed
dependabot[bot] wants to merge 1 commit into
2026.3from
dependabot/maven/2026.3/java-8b6769db3e
Closed

Bump the java group across 1 directory with 38 updates#26
dependabot[bot] wants to merge 1 commit into
2026.3from
dependabot/maven/2026.3/java-8b6769db3e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the java group with 38 updates in the / directory:

Package From To
org.springframework.boot:spring-boot-dependencies 4.1.0 4.1.1
org.springframework.boot:spring-boot-maven-plugin 4.1.0 4.1.1
org.mongodb:bson 5.9.1 5.10.0
org.mongodb:bson-record-codec 5.9.1 5.10.0
org.mongodb:mongodb-driver-core 5.9.1 5.10.0
org.mongodb:mongodb-driver-sync 5.9.1 5.10.0
redis.clients:jedis 7.5.3 8.0.0
org.json:json 20260719 20260814
org.apache.commons:commons-collections4 4.5.0 4.6.0
org.xerial:sqlite-jdbc 3.53.2.1 3.53.4.0
org.jsoup:jsoup 1.23.1 1.23.2
com.google.guava:guava 33.6.0-jre 33.7.1-jre
org.apache.tika:tika-core 3.3.2 4.0.0
org.apache.tika:tika-parsers 3.3.2 4.0.0
org.apache.tika:tika-parser-pdf-module 3.3.2 4.0.0
org.apache.tika:tika-parser-text-module 3.3.2 4.0.0
org.apache.tika:tika-parser-ocr-module 3.3.2 4.0.0
org.apache.tika:tika-parser-microsoft-module 3.3.2 4.0.0
org.apache.lucene:lucene-core 10.5.0 10.5.1
org.apache.lucene:lucene-analysis-common 10.5.0 10.5.1
org.apache.lucene:lucene-queryparser 10.5.0 10.5.1
org.apache.lucene:lucene-queries 10.5.0 10.5.1
org.apache.lucene:lucene-facet 10.5.0 10.5.1
org.apache.lucene:lucene-highlighter 10.5.0 10.5.1
org.apache.lucene:lucene-memory 10.5.0 10.5.1
org.apache.lucene:lucene-suggest 10.5.0 10.5.1
co.elastic.clients:elasticsearch-java 9.5.0 9.5.2
org.elasticsearch.client:elasticsearch-rest-client 9.5.0 9.5.2
com.squareup.okhttp3:okhttp-jvm 5.4.0 5.5.0
org.springframework.ai:spring-ai-bom 2.0.0 2.0.1
net.javacrumbs.shedlock:shedlock-spring 7.7.0 7.9.0
net.javacrumbs.shedlock:shedlock-provider-hazelcast4 7.7.0 7.9.0
com.openai:openai-java-client-okhttp 4.50.0 4.52.0
com.anthropic:anthropic-java-client-okhttp 2.52.0 2.59.0
software.amazon.awssdk:bedrockagentruntime 2.51.2 2.54.6
org.apache.groovy:groovy 5.0.8 5.1.1
org.apache.groovy:groovy-json 5.0.8 5.1.1
org.liquibase:liquibase-maven-plugin 5.0.3 5.0.4

Updates org.springframework.boot:spring-boot-dependencies from 4.1.0 to 4.1.1

Release notes

Sourced from org.springframework.boot:spring-boot-dependencies's releases.

v4.1.1

⚠️ Attention Required

  • Spring Boot's Gradle plugin no longer automatically configures gRPC when the Protobuf plugin is applied. This behavior caused problems for those using Protobuf without gRPC. To opt in to the configuration of gRPC, configure the protobuf extension with the grpc plugin using an empty block. The Spring Boot Gradle plugin will then automatically configure the use of protoc-gen-grpc-java as before. #50822

🐞 Bug Fixes

  • Kafka consumer-specific security protocol is not taken into account #51369
  • Structured logging: a failed JSON encode corrupts the next log event written on the same thread #51156
  • Micrometer registries pin the application context #51135
  • Temporary file is not deleted when ExportedImageTar construction fails #51132
  • Metadata annotation processor ignores getter-level @NestedConfigurationProperty for records #51098
  • spring-boot-h2-console pulls servlet-api as transitive dependency #51095
  • PropertiesLauncher does not log nested archive paths #51089
  • Methods that return the result of Map#remove are not declared with a @Nullable return type #51087
  • NativeImageResourceProvider flattens Flyway migration paths in subdirectories #50964
  • Fix ordering of Kotlinx Serialization CodecCustomizer #50961
  • JarFile is not closed when finding main class from archive #50959
  • Application-managed JUL bridge handler should only be removed if installed #50950
  • CloudFoundry reactive auto-configuration should not require a WebClient.Builder bean to be defined #50944
  • Context refresh fails on reactive Cloud Foundry when using Actuator without spring-boot-health #50942
  • Resources are not cleaned up when resolving an image that is not yet present in the builder #50941
  • GraphQlWebMvcAutoConfiguration should apply customizers in order #50914
  • Auto-configured RedisMessageListenerContainer does not use virtual threads when spring.threads.virtual.enabled is true #50884
  • Context refresh fails when using Actuator on Jersey without spring-boot-health #50872
  • Context refresh fails on Cloud Foundry when using Actuator without spring-boot-health #50871
  • IllegalStateException when binding properties to a @Validated class that contains a map whose value type is a wildcard #50856
  • High number of connections due to Mongo health indicator #50852
  • Inconsistent handling of empty string values of spring.security.oauth2.resourceserver.jwt issuer-uri and jwk-set-uri #50849
  • Return type nullability of ApplicationContextAssert's getBean methods does not indicate that bean may be null #50845
  • PropertiesWebClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #50843
  • Exposing gRPC test server port should backoff if gRPC is not present #50825
  • JpaBaseConfiguration#entityManagerConfiguration can cause a dependency loop on beans declaring AsyncTaskExecutor #50801
  • spring.grpc.server.health.include-overall-health is not taken into account #50799
  • Setting 'server.servlet.session.cookie.partitioned' to false still emits the 'Partitioned' cookie attribute #50790
  • Managed version of Prometheus Client is not aligned with Micrometer's micrometer-registry-prometheus #50780
  • Map properties bound from empty strings fail with ConverterNotFoundException #50773
  • Protobuf Common Protos should not be a managed dependency #50772
  • An application that depends on spring-boot-security-oauth2-resource-server may fail to start with a ClassNotFoundException when Reactor is on the classpath but WebFlux is not #50764
  • W3CHeaderParser's decoding is not compliant with RFC 3986 #50650

📔 Documentation

  • Description of spring.graphql.websocket.connection-init-timeout does not render correctly in the reference guide #51348
  • spring.profiles.group should have a 'spring-profile-name' hint provider #51284
  • Remove reference to removed InfluxDB auto-configuration #51176
  • Use JacksonJsonSerde in Kafka Streams documentation #51161
  • Document alternatives to HttpMessageConverters #51129
  • Fix stale type reference for OTLP logging transport metadata #51119
  • Metadata for spring.test.mockmvc.htmlunit.url declares the wrong type #51115

... (truncated)

Commits
  • 6fdf67e Release 4.1.1
  • fde599b Upgrade to Spring Pulsar 2.0.7
  • 9daa58f Upgrade to Spring HATEOAS 3.1.2
  • 353993e Upgrade to Spring Data Bom 2026.0.1
  • 24ba596 Upgrade to Spring Session 4.1.1
  • 5cb5c29 Upgrade to Spring Security 7.1.1
  • 4adc8eb Upgrade to Spring LDAP 4.1.1
  • 4d9c19c Upgrade to Spring Kafka 4.1.1
  • f30f612 Upgrade to Spring Integration 7.1.1
  • b930283 Upgrade to Spring gRPC 1.1.1
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-maven-plugin from 4.1.0 to 4.1.1

Release notes

Sourced from org.springframework.boot:spring-boot-maven-plugin's releases.

v4.1.1

⚠️ Attention Required

  • Spring Boot's Gradle plugin no longer automatically configures gRPC when the Protobuf plugin is applied. This behavior caused problems for those using Protobuf without gRPC. To opt in to the configuration of gRPC, configure the protobuf extension with the grpc plugin using an empty block. The Spring Boot Gradle plugin will then automatically configure the use of protoc-gen-grpc-java as before. #50822

🐞 Bug Fixes

  • Kafka consumer-specific security protocol is not taken into account #51369
  • Structured logging: a failed JSON encode corrupts the next log event written on the same thread #51156
  • Micrometer registries pin the application context #51135
  • Temporary file is not deleted when ExportedImageTar construction fails #51132
  • Metadata annotation processor ignores getter-level @NestedConfigurationProperty for records #51098
  • spring-boot-h2-console pulls servlet-api as transitive dependency #51095
  • PropertiesLauncher does not log nested archive paths #51089
  • Methods that return the result of Map#remove are not declared with a @Nullable return type #51087
  • NativeImageResourceProvider flattens Flyway migration paths in subdirectories #50964
  • Fix ordering of Kotlinx Serialization CodecCustomizer #50961
  • JarFile is not closed when finding main class from archive #50959
  • Application-managed JUL bridge handler should only be removed if installed #50950
  • CloudFoundry reactive auto-configuration should not require a WebClient.Builder bean to be defined #50944
  • Context refresh fails on reactive Cloud Foundry when using Actuator without spring-boot-health #50942
  • Resources are not cleaned up when resolving an image that is not yet present in the builder #50941
  • GraphQlWebMvcAutoConfiguration should apply customizers in order #50914
  • Auto-configured RedisMessageListenerContainer does not use virtual threads when spring.threads.virtual.enabled is true #50884
  • Context refresh fails when using Actuator on Jersey without spring-boot-health #50872
  • Context refresh fails on Cloud Foundry when using Actuator without spring-boot-health #50871
  • IllegalStateException when binding properties to a @Validated class that contains a map whose value type is a wildcard #50856
  • High number of connections due to Mongo health indicator #50852
  • Inconsistent handling of empty string values of spring.security.oauth2.resourceserver.jwt issuer-uri and jwk-set-uri #50849
  • Return type nullability of ApplicationContextAssert's getBean methods does not indicate that bean may be null #50845
  • PropertiesWebClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #50843
  • Exposing gRPC test server port should backoff if gRPC is not present #50825
  • JpaBaseConfiguration#entityManagerConfiguration can cause a dependency loop on beans declaring AsyncTaskExecutor #50801
  • spring.grpc.server.health.include-overall-health is not taken into account #50799
  • Setting 'server.servlet.session.cookie.partitioned' to false still emits the 'Partitioned' cookie attribute #50790
  • Managed version of Prometheus Client is not aligned with Micrometer's micrometer-registry-prometheus #50780
  • Map properties bound from empty strings fail with ConverterNotFoundException #50773
  • Protobuf Common Protos should not be a managed dependency #50772
  • An application that depends on spring-boot-security-oauth2-resource-server may fail to start with a ClassNotFoundException when Reactor is on the classpath but WebFlux is not #50764
  • W3CHeaderParser's decoding is not compliant with RFC 3986 #50650

📔 Documentation

  • Description of spring.graphql.websocket.connection-init-timeout does not render correctly in the reference guide #51348
  • spring.profiles.group should have a 'spring-profile-name' hint provider #51284
  • Remove reference to removed InfluxDB auto-configuration #51176
  • Use JacksonJsonSerde in Kafka Streams documentation #51161
  • Document alternatives to HttpMessageConverters #51129
  • Fix stale type reference for OTLP logging transport metadata #51119
  • Metadata for spring.test.mockmvc.htmlunit.url declares the wrong type #51115

... (truncated)

Commits
  • 6fdf67e Release 4.1.1
  • fde599b Upgrade to Spring Pulsar 2.0.7
  • 9daa58f Upgrade to Spring HATEOAS 3.1.2
  • 353993e Upgrade to Spring Data Bom 2026.0.1
  • 24ba596 Upgrade to Spring Session 4.1.1
  • 5cb5c29 Upgrade to Spring Security 7.1.1
  • 4adc8eb Upgrade to Spring LDAP 4.1.1
  • 4d9c19c Upgrade to Spring Kafka 4.1.1
  • f30f612 Upgrade to Spring Integration 7.1.1
  • b930283 Upgrade to Spring gRPC 1.1.1
  • Additional commits viewable in compare view

Updates org.mongodb:bson from 5.9.1 to 5.10.0

Release notes

Sourced from org.mongodb:bson's releases.

Java Driver 5.10.0 (August 14, 2026)

What's Changed

  • Added $scoreFusion hybrid search stage for combining and normalizing the scores of multiple search pipelines (MongoDB 8.2+) #2024 by @​nhachicha
  • Added a fluent builder API for the $score aggregation stage, with normalization, weighting, and score details (MongoDB 8.2+) #2023 by @​strogiyotec
  • Added $vectorSearch support for nested embeddings and arrays of embeddings via parentFilter and nestedOptions #2026 by @​rozza
  • Removed stale @Beta from SearchOptions and VectorSearchOptions in the Java and Scala drivers #2026 by @​rozza
  • Encoded Kotlin ByteArray data class fields as BSON Binary, and added an opt-in ByteArray BSON Binary serializer for bson-kotlinx #2019 by @​rozza
  • Included the fix for CVE-2026-18710 / JAVA-6266, where ProxySettings.toString() rendered the SOCKS5 proxy username and password into application logs. First shipped in 5.9.2 #2035 by @​strogiyotec
  • ByteArray fields in Kotlin data classes are once again encoded as BSON Binary rather than a BSON array of int32, restoring the behavior from before 5.1.3. Decoding accepts both forms, so documents written by 5.1.3–5.9.x still read back correctly, but newly written documents change BSON type. Review any non-driver consumers of those fields before upgrading. See JAVA-6224

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/drivers/java/sync/current/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

Full Changelog: mongodb/mongo-java-driver@r5.9.0...r5.10.0

Java Driver 5.9.2 (August 11, 2026)

What's Changed

[!WARNING] Starting from driver version 4.11.0, ProxySettings.toString() included the SOCKS5 proxy username and password in application logs.

See JAVA-6266 / CVE-2026-18710

The username and password are no longer included in toString() starting in this release.

If you cannot upgrade, set the org.mongodb.driver.client logger to WARN or higher to suppress the client-construction message. We do not recommend this as a long-term measure: it silences diagnostic information that is valuable for support, and it does not remove credentials already written to existing logs.

Full Changelog: mongodb/mongo-java-driver@r5.9.1...r5.9.2

Commits
  • 6acf4b6 Version: bump 5.10.0
  • 09aa019 Merge commit from fork (#2035)
  • d751950 Evergreen CI windows fixes
  • 533b2b6 Ensure Kotlin can encode ByteArrays efficiently (#2019)
  • 94863fa Support $vectorSearch against nested embeddings and arrays of embeddings (#2026)
  • 1b958ae JAVA-5990 Hybrid Search Score Fusion (#2024)
  • dd814f8 JAVA-6146 Move detail out of the root AGENTS.md into references
  • d87d93a Fluent API for $score (#2023)
  • 0956b9f Resolve forwarded type arguments across POJO hierarchy edges (#2014)
  • cab37d0 Improve readability of NettyStreamCloseFutureListenerTest
  • Additional commits viewable in compare view

Updates org.mongodb:bson-record-codec from 5.9.1 to 5.10.0

Release notes

Sourced from org.mongodb:bson-record-codec's releases.

Java Driver 5.10.0 (August 14, 2026)

What's Changed

  • Added $scoreFusion hybrid search stage for combining and normalizing the scores of multiple search pipelines (MongoDB 8.2+) #2024 by @​nhachicha
  • Added a fluent builder API for the $score aggregation stage, with normalization, weighting, and score details (MongoDB 8.2+) #2023 by @​strogiyotec
  • Added $vectorSearch support for nested embeddings and arrays of embeddings via parentFilter and nestedOptions #2026 by @​rozza
  • Removed stale @Beta from SearchOptions and VectorSearchOptions in the Java and Scala drivers #2026 by @​rozza
  • Encoded Kotlin ByteArray data class fields as BSON Binary, and added an opt-in ByteArray BSON Binary serializer for bson-kotlinx #2019 by @​rozza
  • Included the fix for CVE-2026-18710 / JAVA-6266, where ProxySettings.toString() rendered the SOCKS5 proxy username and password into application logs. First shipped in 5.9.2 #2035 by @​strogiyotec
  • ByteArray fields in Kotlin data classes are once again encoded as BSON Binary rather than a BSON array of int32, restoring the behavior from before 5.1.3. Decoding accepts both forms, so documents written by 5.1.3–5.9.x still read back correctly, but newly written documents change BSON type. Review any non-driver consumers of those fields before upgrading. See JAVA-6224

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/drivers/java/sync/current/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

Full Changelog: mongodb/mongo-java-driver@r5.9.0...r5.10.0

Java Driver 5.9.2 (August 11, 2026)

What's Changed

[!WARNING] Starting from driver version 4.11.0, ProxySettings.toString() included the SOCKS5 proxy username and password in application logs.

See JAVA-6266 / CVE-2026-18710

The username and password are no longer included in toString() starting in this release.

If you cannot upgrade, set the org.mongodb.driver.client logger to WARN or higher to suppress the client-construction message. We do not recommend this as a long-term measure: it silences diagnostic information that is valuable for support, and it does not remove credentials already written to existing logs.

Full Changelog: mongodb/mongo-java-driver@r5.9.1...r5.9.2

Commits
  • 6acf4b6 Version: bump 5.10.0
  • 09aa019 Merge commit from fork (#2035)
  • d751950 Evergreen CI windows fixes
  • 533b2b6 Ensure Kotlin can encode ByteArrays efficiently (#2019)
  • 94863fa Support $vectorSearch against nested embeddings and arrays of embeddings (#2026)
  • 1b958ae JAVA-5990 Hybrid Search Score Fusion (#2024)
  • dd814f8 JAVA-6146 Move detail out of the root AGENTS.md into references
  • d87d93a Fluent API for $score (#2023)
  • 0956b9f Resolve forwarded type arguments across POJO hierarchy edges (#2014)
  • cab37d0 Improve readability of NettyStreamCloseFutureListenerTest
  • Additional commits viewable in compare view

Updates org.mongodb:mongodb-driver-core from 5.9.1 to 5.10.0

Release notes

Sourced from org.mongodb:mongodb-driver-core's releases.

Java Driver 5.10.0 (August 14, 2026)

What's Changed

  • Added $scoreFusion hybrid search stage for combining and normalizing the scores of multiple search pipelines (MongoDB 8.2+) #2024 by @​nhachicha
  • Added a fluent builder API for the $score aggregation stage, with normalization, weighting, and score details (MongoDB 8.2+) #2023 by @​strogiyotec
  • Added $vectorSearch support for nested embeddings and arrays of embeddings via parentFilter and nestedOptions #2026 by @​rozza
  • Removed stale @Beta from SearchOptions and VectorSearchOptions in the Java and Scala drivers #2026 by @​rozza
  • Encoded Kotlin ByteArray data class fields as BSON Binary, and added an opt-in ByteArray BSON Binary serializer for bson-kotlinx #2019 by @​rozza
  • Included the fix for CVE-2026-18710 / JAVA-6266, where ProxySettings.toString() rendered the SOCKS5 proxy username and password into application logs. First shipped in 5.9.2 #2035 by @​strogiyotec
  • ByteArray fields in Kotlin data classes are once again encoded as BSON Binary rather than a BSON array of int32, restoring the behavior from before 5.1.3. Decoding accepts both forms, so documents written by 5.1.3–5.9.x still read back correctly, but newly written documents change BSON type. Review any non-driver consumers of those fields before upgrading. See JAVA-6224

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/drivers/java/sync/current/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

Full Changelog: mongodb/mongo-java-driver@r5.9.0...r5.10.0

Java Driver 5.9.2 (August 11, 2026)

What's Changed

[!WARNING] Starting from driver version 4.11.0, ProxySettings.toString() included the SOCKS5 proxy username and password in application logs.

See JAVA-6266 / CVE-2026-18710

The username and password are no longer included in toString() starting in this release.

If you cannot upgrade, set the org.mongodb.driver.client logger to WARN or higher to suppress the client-construction message. We do not recommend this as a long-term measure: it silences diagnostic information that is valuable for support, and it does not remove credentials already written to existing logs.

Full Changelog: mongodb/mongo-java-driver@r5.9.1...r5.9.2

Commits
  • 6acf4b6 Version: bump 5.10.0
  • 09aa019 Merge commit from fork (#2035)
  • d751950 Evergreen CI windows fixes
  • 533b2b6 Ensure Kotlin can encode ByteArrays efficiently (#2019)
  • 94863fa Support $vectorSearch against nested embeddings and arrays of embeddings (#2026)
  • 1b958ae JAVA-5990 Hybrid Search Score Fusion (#2024)
  • dd814f8 JAVA-6146 Move detail out of the root AGENTS.md into references
  • d87d93a Fluent API for $score (#2023)
  • 0956b9f Resolve forwarded type arguments across POJO hierarchy edges (#2014)
  • cab37d0 Improve readability of NettyStreamCloseFutureListenerTest
  • Additional commits viewable in compare view

Updates org.mongodb:mongodb-driver-sync from 5.9.1 to 5.10.0

Release notes

Sourced from org.mongodb:mongodb-driver-sync's releases.

Java Driver 5.10.0 (August 14, 2026)

What's Changed

  • Added $scoreFusion hybrid search stage for combining and normalizing the scores of multiple search pipelines (MongoDB 8.2+) #2024 by @​nhachicha
  • Added a fluent builder API for the $score aggregation stage, with normalization, weighting, and score details (MongoDB 8.2+) #2023 by @​strogiyotec
  • Added $vectorSearch support for nested embeddings and arrays of embeddings via parentFilter and nestedOptions #2026 by @​rozza
  • Removed stale @Beta from SearchOptions and VectorSearchOptions in the Java and Scala drivers #2026 by @​rozza
  • Encoded Kotlin ByteArray data class fields as BSON Binary, and added an opt-in ByteArray BSON Binary serializer for bson-kotlinx #2019 by @​rozza
  • Included the fix for CVE-2026-18710 / JAVA-6266, where ProxySettings.toString() rendered the SOCKS5 proxy username and password into application logs. First shipped in 5.9.2 #2035 by @​strogiyotec
  • ByteArray fields in Kotlin data classes are once again encoded as BSON Binary rather than a BSON array of int32, restoring the behavior from before 5.1.3. Decoding accepts both forms, so documents written by 5.1.3–5.9.x still read back correctly, but newly written documents change BSON type. Review any non-driver consumers of those fields before upgrading. See JAVA-6224

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/drivers/java/sync/current/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

Full Changelog: mongodb/mongo-java-driver@r5.9.0...r5.10.0

Java Driver 5.9.2 (August 11, 2026)

What's Changed

[!WARNING] Starting from driver version 4.11.0, ProxySettings.toString() included the SOCKS5 proxy username and password in application logs.

See JAVA-6266 / CVE-2026-18710

The username and password are no longer included in toString() starting in this release.

If you cannot upgrade, set the org.mongodb.driver.client logger to WARN or higher to suppress the client-construction message. We do not recommend this as a long-term measure: it silences diagnostic information that is valuable for support, and it does not remove credentials already written to existing logs.

Full Changelog: mongodb/mongo-java-driver@r5.9.1...r5.9.2

Commits
  • 6acf4b6 Version: bump 5.10.0
  • 09aa019 Merge commit from fork (#2035)
  • d751950 Evergreen CI windows fixes
  • 533b2b6 Ensure Kotlin can encode ByteArrays efficiently (#2019)
  • 94863fa Support $vectorSearch against nested embeddings and arrays of embeddings (#2026)
  • 1b958ae JAVA-5990 Hybrid Search Score Fusion (#2024)
  • dd814f8 JAVA-6146 Move detail out of the root AGENTS.md into references
  • d87d93a Fluent API for $score (#2023)
  • 0956b9f Resolve forwarded type arguments across POJO hierarchy edges (#2014)
  • cab37d0 Improve readability of NettyStreamCloseFutureListenerTest
  • Additional commits viewable in compare view

Updates org.mongodb:bson-record-codec from 5.9.1 to 5.10.0

Release notes

Sourced from org.mongodb:bson-record-codec's releases.

Java Driver 5.10.0 (August 14, 2026)

What's Changed

  • Added $scoreFusion hybrid search stage for combining and normalizing the scores of multiple search pipelines (MongoDB 8.2+) #2024 by @​nhachicha
  • Added a fluent builder API for the $score aggregation stage, with normalization, weighting, and score details (MongoDB 8.2+) #2023 by @​strogiyotec
  • Added $vectorSearch support for nested embeddings and arrays of embeddings via parentFilter and nestedOptions #2026 by @​rozza
  • Removed stale @Beta from SearchOptions and VectorSearchOptions in the Java and Scala drivers #2026 by @​rozza
  • Encoded Kotlin ByteArray data class fields as BSON Binary, and added an opt-in ByteArray BSON Binary serializer for bson-kotlinx #2019 by @​rozza
  • Included the fix for CVE-2026-18710 / JAVA-6266, where ProxySettings.toString() rendered the SOCKS5 proxy username and password into application logs. First shipped in 5.9.2 #2035 by @​strogiyotec
  • ByteArray fields in Kotlin data classes are once again encoded as BSON Binary rather than a BSON array of int32, restoring the behavior from before 5.1.3. Decoding accepts both forms, so documents written by 5.1.3–5.9.x still read back correctly, but newly written documents change BSON type. Review any non-driver consumers of those fields before upgrading. See JAVA-6224

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/drivers/java/sync/current/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

Full Changelog: mongodb/mongo-java-driver@r5.9.0...r5.10.0

Java Driver 5.9.2 (August 11, 2026)

What's Changed

[!WARNING] Starting from driver version 4.11.0, ProxySettings.toString() included the SOCKS5 proxy username and password in application logs.

See JAVA-6266 / CVE-2026-18710

The username and password are no longer included in toString() starting in this release.

If you cannot upgrade, set the org.mongodb.driver.client logger to WARN or higher to suppress the client-construction message. We do not recommend this as a long-term measure: it silences diagnostic information that is valuable for support, and it does not remove credentials already written to existing logs.

Full Changelog: mongodb/mongo-java-driver@r5.9.1...r5.9.2

Commits
  • 6acf4b6 Version: bump 5.10.0
  • 09aa019 Merge commit from fork (#2035)
  • d751950 Evergreen CI windows fixes
  • 533b2b6 Ensure Kotlin can encode ByteArrays efficiently (#2019)
  • 94863fa Support $vectorSearch against nested embeddings and arrays of embeddings (#2026)
  • 1b958ae JAVA-5990 Hybrid Search Score Fusion (#2024)
  • dd814f8 JAVA-6146 Move detail out of the root AGENTS.md into references
  • d87d93a Fluent API for $score (#2023)
  • 0956b9f Resolve forwarded type arguments across POJO hierarchy edges (#2014)
  • cab37d0 Improve readability of NettyStreamCloseFutureListenerTest
  • Additional commits viewable in compare view

Updates org.mongodb:mongodb-driver-core from 5.9.1 to 5.10.0

Release notes

Sourced from org.mongodb:mongodb-driver-core's releases.

Java Driver 5.10.0 (August 14, 2026)

What's Changed

  • Added $scoreFusion hybrid search stage for combining and normalizing the scores of multiple search pipelines (MongoDB 8.2+) #2024 by @​nhachicha
  • Added a fluent builder API for the $score aggregation stage, with normalization, weighting, and score details (MongoDB 8.2+) #2023 by @​strogiyotec
  • Added $vectorSearch support for nested embeddings and arrays of embeddings via parentFilter and nestedOptions #2026 by @​rozza
  • Removed stale @Beta from SearchOptions and VectorSearchOptions in the Java and Scala drivers #2026 by @​rozza
  • Encoded Kotlin ByteArray data class fields as BSON Binary, and added an opt-in ByteArray BSON Binary serializer for bson-kotlinx #2019 by @​rozza
  • Included the fix for CVE-2026-18710 / JAVA-6266, where ProxySettings.toString() rendered the SOCKS5 proxy username and password into application logs. First shipped in 5.9.2 #2035 by @​strogiyotec
  • ByteArray fields in Kotlin data classes are once again encoded as BSON Binary rather than a BSON array of int32, restoring the behavior from before 5.1.3. Decoding accepts both forms, so documents written by 5.1.3–5.9.x still read back correctly, but newly written documents change BSON type. Review any non-driver consumers of those fields before upgrading. See JAVA-6224

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/drivers/java/sync/current/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

Full Changelog: mongodb/mongo-java-driver@r5.9.0...r5.10.0

Java Driver 5.9.2 (August 11, 2026)

What's Changed

[!WARNING] Starting from driver version 4.11.0, ProxySettings.toString() included the SOCKS5 proxy username and password in application logs.

See JAVA-6266 / CVE-2026-18710

The username and password are no longer included in toString() starting in this release.

If you cannot upgrade, set the org.mongodb.driver.client logger to WARN or higher to suppress the client-construction message. We do not recommend this as a long-term measure: it silences diagnostic information that is valuable for support, and it does not remove credentials already written to existing logs.

Full Changelog: mongodb/mongo-java-driver@r5.9.1...r5.9.2

Commits

@dependabot
Bump the java group across 1 directory with 38 updates
50bde70 
Bumps the java group with 38 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) | `4.1.0` | `4.1.1` |
| [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) | `4.1.0` | `4.1.1` |
| [org.mongodb:bson](https://github.com/mongodb/mongo-java-driver) | `5.9.1` | `5.10.0` |
| [org.mongodb:bson-record-codec](https://github.com/mongodb/mongo-java-driver) | `5.9.1` | `5.10.0` |
| [org.mongodb:mongodb-driver-core](https://github.com/mongodb/mongo-java-driver) | `5.9.1` | `5.10.0` |
| [org.mongodb:mongodb-driver-sync](https://github.com/mongodb/mongo-java-driver) | `5.9.1` | `5.10.0` |
| [redis.clients:jedis](https://github.com/redis/jedis) | `7.5.3` | `8.0.0` |
| [org.json:json](https://github.com/douglascrockford/JSON-java) | `20260719` | `20260814` |
| org.apache.commons:commons-collections4 | `4.5.0` | `4.6.0` |
| [org.xerial:sqlite-jdbc](https://github.com/xerial/sqlite-jdbc) | `3.53.2.1` | `3.53.4.0` |
| [org.jsoup:jsoup](https://github.com/jhy/jsoup) | `1.23.1` | `1.23.2` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.6.0-jre` | `33.7.1-jre` |
| [org.apache.tika:tika-core](https://github.com/apache/tika) | `3.3.2` | `4.0.0` |
| [org.apache.tika:tika-parsers](https://github.com/apache/tika) | `3.3.2` | `4.0.0` |
| org.apache.tika:tika-parser-pdf-module | `3.3.2` | `4.0.0` |
| org.apache.tika:tika-parser-text-module | `3.3.2` | `4.0.0` |
| org.apache.tika:tika-parser-ocr-module | `3.3.2` | `4.0.0` |
| org.apache.tika:tika-parser-microsoft-module | `3.3.2` | `4.0.0` |
| org.apache.lucene:lucene-core | `10.5.0` | `10.5.1` |
| org.apache.lucene:lucene-analysis-common | `10.5.0` | `10.5.1` |
| org.apache.lucene:lucene-queryparser | `10.5.0` | `10.5.1` |
| org.apache.lucene:lucene-queries | `10.5.0` | `10.5.1` |
| org.apache.lucene:lucene-facet | `10.5.0` | `10.5.1` |
| org.apache.lucene:lucene-highlighter | `10.5.0` | `10.5.1` |
| org.apache.lucene:lucene-memory | `10.5.0` | `10.5.1` |
| org.apache.lucene:lucene-suggest | `10.5.0` | `10.5.1` |
| [co.elastic.clients:elasticsearch-java](https://github.com/elastic/elasticsearch-java) | `9.5.0` | `9.5.2` |
| [org.elasticsearch.client:elasticsearch-rest-client](https://github.com/elastic/elasticsearch) | `9.5.0` | `9.5.2` |
| [com.squareup.okhttp3:okhttp-jvm](https://github.com/lysine-dev/okhttp) | `5.4.0` | `5.5.0` |
| [org.springframework.ai:spring-ai-bom](https://github.com/spring-projects/spring-ai) | `2.0.0` | `2.0.1` |
| [net.javacrumbs.shedlock:shedlock-spring](https://github.com/lukas-krecan/ShedLock) | `7.7.0` | `7.9.0` |
| net.javacrumbs.shedlock:shedlock-provider-hazelcast4 | `7.7.0` | `7.9.0` |
| [com.openai:openai-java-client-okhttp](https://github.com/openai/openai-java) | `4.50.0` | `4.52.0` |
| [com.anthropic:anthropic-java-client-okhttp](https://github.com/anthropics/anthropic-sdk-java) | `2.52.0` | `2.59.0` |
| software.amazon.awssdk:bedrockagentruntime | `2.51.2` | `2.54.6` |
| [org.apache.groovy:groovy](https://github.com/apache/groovy) | `5.0.8` | `5.1.1` |
| [org.apache.groovy:groovy-json](https://github.com/apache/groovy) | `5.0.8` | `5.1.1` |
| [org.liquibase:liquibase-maven-plugin](https://github.com/liquibase/liquibase) | `5.0.3` | `5.0.4` |



Updates `org.springframework.boot:spring-boot-dependencies` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.0...v4.1.1)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.0...v4.1.1)

Updates `org.mongodb:bson` from 5.9.1 to 5.10.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.9.1...r5.10.0)

Updates `org.mongodb:bson-record-codec` from 5.9.1 to 5.10.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.9.1...r5.10.0)

Updates `org.mongodb:mongodb-driver-core` from 5.9.1 to 5.10.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.9.1...r5.10.0)

Updates `org.mongodb:mongodb-driver-sync` from 5.9.1 to 5.10.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.9.1...r5.10.0)

Updates `org.mongodb:bson-record-codec` from 5.9.1 to 5.10.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.9.1...r5.10.0)

Updates `org.mongodb:mongodb-driver-core` from 5.9.1 to 5.10.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.9.1...r5.10.0)

Updates `org.mongodb:mongodb-driver-sync` from 5.9.1 to 5.10.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.9.1...r5.10.0)

Updates `redis.clients:jedis` from 7.5.3 to 8.0.0
- [Release notes](https://github.com/redis/jedis/releases)
- [Commits](redis/jedis@v7.5.3...v8.0.0)

Updates `org.json:json` from 20260719 to 20260814
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
- [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
- [Commits](stleary/JSON-java@2026071...2026081)

Updates `org.apache.commons:commons-collections4` from 4.5.0 to 4.6.0

Updates `org.xerial:sqlite-jdbc` from 3.53.2.1 to 3.53.4.0
- [Release notes](https://github.com/xerial/sqlite-jdbc/releases)
- [Changelog](https://github.com/xerial/sqlite-jdbc/blob/master/CHANGELOG)
- [Commits](xerial/sqlite-jdbc@3.53.2.1...3.53.4.0)

Updates `org.jsoup:jsoup` from 1.23.1 to 1.23.2
- [Release notes](https://github.com/jhy/jsoup/releases)
- [Changelog](https://github.com/jhy/jsoup/blob/master/CHANGES.md)
- [Commits](jhy/jsoup@jsoup-1.23.1...jsoup-1.23.2)

Updates `com.google.guava:guava` from 33.6.0-jre to 33.7.1-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `org.apache.tika:tika-core` from 3.3.2 to 4.0.0
- [Changelog](https://github.com/apache/tika/blob/main/CHANGES.txt)
- [Commits](apache/tika@3.3.2...4.0.0)

Updates `org.apache.tika:tika-parsers` from 3.3.2 to 4.0.0
- [Changelog](https://github.com/apache/tika/blob/main/CHANGES.txt)
- [Commits](apache/tika@3.3.2...4.0.0)

Updates `org.apache.tika:tika-parser-pdf-module` from 3.3.2 to 4.0.0

Updates `org.apache.tika:tika-parser-text-module` from 3.3.2 to 4.0.0

Updates `org.apache.tika:tika-parser-ocr-module` from 3.3.2 to 4.0.0

Updates `org.apache.tika:tika-parser-microsoft-module` from 3.3.2 to 4.0.0

Updates `org.apache.tika:tika-parsers` from 3.3.2 to 4.0.0
- [Changelog](https://github.com/apache/tika/blob/main/CHANGES.txt)
- [Commits](apache/tika@3.3.2...4.0.0)

Updates `org.apache.tika:tika-parser-pdf-module` from 3.3.2 to 4.0.0

Updates `org.apache.tika:tika-parser-text-module` from 3.3.2 to 4.0.0

Updates `org.apache.tika:tika-parser-ocr-module` from 3.3.2 to 4.0.0

Updates `org.apache.tika:tika-parser-microsoft-module` from 3.3.2 to 4.0.0

Updates `org.apache.lucene:lucene-core` from 10.5.0 to 10.5.1

Updates `org.apache.lucene:lucene-analysis-common` from 10.5.0 to 10.5.1

Updates `org.apache.lucene:lucene-queryparser` from 10.5.0 to 10.5.1

Updates `org.apache.lucene:lucene-queries` from 10.5.0 to 10.5.1

Updates `org.apache.lucene:lucene-facet` from 10.5.0 to 10.5.1

Updates `org.apache.lucene:lucene-highlighter` from 10.5.0 to 10.5.1

Updates `org.apache.lucene:lucene-memory` from 10.5.0 to 10.5.1

Updates `org.apache.lucene:lucene-suggest` from 10.5.0 to 10.5.1

Updates `org.apache.lucene:lucene-analysis-common` from 10.5.0 to 10.5.1

Updates `org.apache.lucene:lucene-queryparser` from 10.5.0 to 10.5.1

Updates `org.apache.lucene:lucene-queries` from 10.5.0 to 10.5.1

Updates `org.apache.lucene:lucene-facet` from 10.5.0 to 10.5.1

Updates `org.apache.lucene:lucene-highlighter` from 10.5.0 to 10.5.1

Updates `org.apache.lucene:lucene-memory` from 10.5.0 to 10.5.1

Updates `org.apache.lucene:lucene-suggest` from 10.5.0 to 10.5.1

Updates `co.elastic.clients:elasticsearch-java` from 9.5.0 to 9.5.2
- [Release notes](https://github.com/elastic/elasticsearch-java/releases)
- [Changelog](https://github.com/elastic/elasticsearch-java/blob/main/CHANGELOG.md)
- [Commits](elastic/elasticsearch-java@v9.5.0...v9.5.2)

Updates `org.elasticsearch.client:elasticsearch-rest-client` from 9.5.0 to 9.5.2
- [Release notes](https://github.com/elastic/elasticsearch/releases)
- [Changelog](https://github.com/elastic/elasticsearch/blob/main/docs/changelog.yml)
- [Commits](elastic/elasticsearch@v9.5.0...v9.5.2)

Updates `org.elasticsearch.client:elasticsearch-rest-client` from 9.5.0 to 9.5.2
- [Release notes](https://github.com/elastic/elasticsearch/releases)
- [Changelog](https://github.com/elastic/elasticsearch/blob/main/docs/changelog.yml)
- [Commits](elastic/elasticsearch@v9.5.0...v9.5.2)

Updates `com.squareup.okhttp3:okhttp-jvm` from 5.4.0 to 5.5.0
- [Changelog](https://github.com/lysine-dev/okhttp/blob/main/CHANGELOG.md)
- [Commits](lysine-dev/okhttp@parent-5.4.0...parent-5.5.0)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.0...v4.1.1)

Updates `org.springframework.ai:spring-ai-bom` from 2.0.0 to 2.0.1
- [Release notes](https://github.com/spring-projects/spring-ai/releases)
- [Changelog](https://github.com/spring-projects/spring-ai/blob/main/release-train-settings.xml)
- [Commits](spring-projects/spring-ai@v2.0.0...v2.0.1)

Updates `net.javacrumbs.shedlock:shedlock-spring` from 7.7.0 to 7.9.0
- [Changelog](https://github.com/lukas-krecan/ShedLock/blob/master/RELEASES.md)
- [Commits](lukas-krecan/ShedLock@shedlock-parent-7.7.0...shedlock-parent-7.9.0)

Updates `net.javacrumbs.shedlock:shedlock-provider-hazelcast4` from 7.7.0 to 7.9.0

Updates `net.javacrumbs.shedlock:shedlock-provider-hazelcast4` from 7.7.0 to 7.9.0

Updates `com.openai:openai-java-client-okhttp` from 4.50.0 to 4.52.0
- [Release notes](https://github.com/openai/openai-java/releases)
- [Changelog](https://github.com/openai/openai-java/blob/main/CHANGELOG.md)
- [Commits](openai/openai-java@v4.50.0...v4.52.0)

Updates `com.anthropic:anthropic-java-client-okhttp` from 2.52.0 to 2.59.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-java/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-java/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-java@v2.52.0...v2.59.0)

Updates `software.amazon.awssdk:bedrockagentruntime` from 2.51.2 to 2.54.6

Updates `org.apache.groovy:groovy` from 5.0.8 to 5.1.1
- [Commits](https://github.com/apache/groovy/commits)

Updates `org.apache.groovy:groovy-json` from 5.0.8 to 5.1.1
- [Commits](https://github.com/apache/groovy/commits)

Updates `org.liquibase:liquibase-maven-plugin` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/liquibase/liquibase/releases)
- [Changelog](https://github.com/liquibase/liquibase/blob/main/changelog.txt)
- [Commits](liquibase/liquibase@v5.0.3...v5.0.4)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.mongodb:bson
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.mongodb:bson-record-codec
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.mongodb:mongodb-driver-core
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.mongodb:mongodb-driver-sync
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.mongodb:bson-record-codec
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.mongodb:mongodb-driver-core
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.mongodb:mongodb-driver-sync
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: redis.clients:jedis
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: java
- dependency-name: org.json:json
  dependency-version: '20260814'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: java
- dependency-name: org.apache.commons:commons-collections4
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.xerial:sqlite-jdbc
  dependency-version: 3.53.4.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.jsoup:jsoup
  dependency-version: 1.23.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: com.google.guava:guava
  dependency-version: 33.7.1-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.apache.tika:tika-core
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: java
- dependency-name: org.apache.tika:tika-parsers
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: java
- dependency-name: org.apache.tika:tika-parser-pdf-module
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: java
- dependency-name: org.apache.tika:tika-parser-text-module
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: java
- dependency-name: org.apache.tika:tika-parser-ocr-module
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: java
- dependency-name: org.apache.tika:tika-parser-microsoft-module
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: java
- dependency-name: org.apache.tika:tika-parsers
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: java
- dependency-name: org.apache.tika:tika-parser-pdf-module
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: java
- dependency-name: org.apache.tika:tika-parser-text-module
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: java
- dependency-name: org.apache.tika:tika-parser-ocr-module
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: java
- dependency-name: org.apache.tika:tika-parser-microsoft-module
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: java
- dependency-name: org.apache.lucene:lucene-core
  dependency-version: 10.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.apache.lucene:lucene-analysis-common
  dependency-version: 10.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.apache.lucene:lucene-queryparser
  dependency-version: 10.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.apache.lucene:lucene-queries
  dependency-version: 10.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.apache.lucene:lucene-facet
  dependency-version: 10.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.apache.lucene:lucene-highlighter
  dependency-version: 10.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.apache.lucene:lucene-memory
  dependency-version: 10.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.apache.lucene:lucene-suggest
  dependency-version: 10.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.apache.lucene:lucene-analysis-common
  dependency-version: 10.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.apache.lucene:lucene-queryparser
  dependency-version: 10.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.apache.lucene:lucene-queries
  dependency-version: 10.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.apache.lucene:lucene-facet
  dependency-version: 10.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.apache.lucene:lucene-highlighter
  dependency-version: 10.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.apache.lucene:lucene-memory
  dependency-version: 10.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.apache.lucene:lucene-suggest
  dependency-version: 10.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: co.elastic.clients:elasticsearch-java
  dependency-version: 9.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.elasticsearch.client:elasticsearch-rest-client
  dependency-version: 9.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.elasticsearch.client:elasticsearch-rest-client
  dependency-version: 9.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: com.squareup.okhttp3:okhttp-jvm
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.springframework.ai:spring-ai-bom
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: net.javacrumbs.shedlock:shedlock-spring
  dependency-version: 7.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: net.javacrumbs.shedlock:shedlock-provider-hazelcast4
  dependency-version: 7.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: net.javacrumbs.shedlock:shedlock-provider-hazelcast4
  dependency-version: 7.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: com.openai:openai-java-client-okhttp
  dependency-version: 4.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: com.anthropic:anthropic-java-client-okhttp
  dependency-version: 2.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: software.amazon.awssdk:bedrockagentruntime
  dependency-version: 2.54.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.apache.groovy:groovy
  dependency-version: 5.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.apache.groovy:groovy-json
  dependency-version: 5.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.liquibase:liquibase-maven-plugin
  dependency-version: 5.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: java
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 31, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 7, 2026
@dependabot
dependabot Bot deleted the dependabot/maven/2026.3/java-8b6769db3e branch September 7, 2026 04:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants