Skip to content

fix(deps): bump the prod-deps group across 1 directory with 8 updates #883

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: master
Choose a base branch
from
Open

fix(deps): bump the prod-deps group across 1 directory with 8 updates #883

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 18, 2026 •
edited
Loading

Bumps the prod-deps group with 7 updates in the / directory:

Package From To
org.springframework.boot:spring-boot-starter-parent 3.5.7 4.0.1
org.apache.commons:commons-lang3 3.19.0 3.20.0
org.opensearch.client:opensearch-rest-high-level-client 3.3.2 3.4.0
org.opensearch.client:opensearch-rest-client-sniffer 3.3.2 3.4.0
org.opensearch:opensearch 3.3.2 3.4.0
org.folio:cql2pgjson 35.4.0 35.4.2
com.puppycrawl.tools:checkstyle 12.1.2 13.0.0

Updates org.springframework.boot:spring-boot-starter-parent from 3.5.7 to 4.0.1

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.0.1

⚠️ Noteworthy Changes

  • Hibernate has been upgraded to 7.2.0.Final in response to Hibernate 7.1 moving to limited support
  • spring-boot-starter-kotlin-serialization has been renamed to to spring-boot-starter-kotlinx-serialization-json and spring-boot-starter-kotlin-serialization-test has been renamed to spring-boot-starter-kotlinx-serialization-json-test. This change aligns the starters' names with those of their respective modules
  • Using TestRestTemplate now requires a dependency on spring-boot-restclient

🐞 Bug Fixes

  • JsonMixinModuleEntriesBeanRegistrationAotProcessor does not handle deprecated code #48564
  • JdbcSessionAutoConfiguration may not match when using the auto-configured DataSource #48552
  • @ServiceConnection for LgtmStackContainer fails when logging endpoint is configured due to multiple OtlpLoggingConnectionDetails beans #48536
  • WebApplicationType does not consider modules when deduced from classpath #48517
  • Spring Session auto-configuration fails in a war deployment as ServerProperties is not available #48493
  • Opentelemetry logging export requires actuator module #48488
  • RabbitHealthIndicator reports an error when version is missing from the connection's server properties #48487
  • Actuator Info class has inconsistent nullability annotations and cannot be built with null value #48480
  • Profiles retained during AOT processing are not configured in a native image #48476
  • Security matchers and WebServerNamespace resolution can fail with NoClassDefFoundError when used in a traditional WAR deployment #48388
  • HealthEndpointGroupMembershipValidator does not consider reactive health indicators causing NoSuchHealthContributorException to be thrown #48387
  • spring.jackson.default-property-inclusion is not applied to content inclusion #48343
  • TestRestTemplate.getRootUri() returns empty string #48330
  • Redis health check reports an error when redis_version is missing from the INFO response #48328
  • Parent's MeterRegistry beans are closed when child context closes #48325
  • HttpMessageConverters picks up converter beans for both client and server #48310
  • Conditions to auto-configure a RestClient are outdated with the modularization #48308
  • A custom JwtTypeValidator that replaces the default can no longer be configured #48301
  • PropertiesRestClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #48296
  • SpringBootTest.UseMainMethod.WHEN_AVAILABLE and ALWAYS are incompatible with package-private or parameter-less main method #48275
  • Conditions to auto-configure RestClient-based HTTP service clients are outdated with the modularization #48274
  • Starter for Kotlinx Serialization Json is misnamed #48262
  • ApplicationServletEnvironment is no longer configured in war deployments #48254
  • RestClient.Builder bean present in @SpringBootTest due to spring-boot-starter-webmvc-test, but missing at runtime without restclient starter #48253
  • ProblemDetail is rendered to XML incorrectly #48222

📔 Documentation

  • Harmonize Kotlin example for HTTP Service client support #48577
  • Document HttpMessageConverters detection changes in 4.0.1 #48574
  • Improve javadoc for when to use class names rather than class references #48569
  • Documentation has an outdated reference to the Jackson Kotlin Module #48534
  • Caching documentation should clarify how to use a no-op implementation to run a test suite #48532
  • Document that the default rolling policy for Log4j2 requires logging.file.path to be set #48527
  • Review documentation and migration guide about changes in @AutoConfigureCache #48522
  • License header in build samples is displayed in the reference documentation #48478
  • Configuring Two DataSources How-To code sample is inconsistent #48449
  • Fix links to source files on GitHub #48398
  • Documentation contains broken links to GitHub source files #48394
  • Document that org.aspectj.weaver.Advice must be on the classpath to enable support for Micrometer's annotations #48360
  • Correct the annotation in the Kotlin @ConfigurationPropertiesSource example #48357
  • Polish TestRestTemplate examples in the reference guide #48336

... (truncated)

Commits
  • b2bc463 Release v4.0.1
  • 252b218 Correct renaming of Kotlinx Serialization JSON starters
  • 2fa73c2 Merge pull request #48577 from jwalter
  • 3e68988 Polish "Harmonize Kotlin example for HTTP Service client support"
  • 423373b Harmonize Kotlin example for HTTP Service client support
  • f61ac29 Document HttpMessageConverters detection changes
  • 2519a5d Merge branch '3.5.x'
  • 4fc3ca3 Next development version (v3.5.10-SNAPSHOT)
  • aaf66f4 Merge branch '3.5.x'
  • 08e2cab Polish javadoc for when to use class names rather than class references
  • Additional commits viewable in compare view

Updates org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0

Updates org.springframework.boot:spring-boot-configuration-processor from 3.5.7 to 4.0.1

Release notes

Sourced from org.springframework.boot:spring-boot-configuration-processor's releases.

v4.0.1

⚠️ Noteworthy Changes

  • Hibernate has been upgraded to 7.2.0.Final in response to Hibernate 7.1 moving to limited support
  • spring-boot-starter-kotlin-serialization has been renamed to to spring-boot-starter-kotlinx-serialization-json and spring-boot-starter-kotlin-serialization-test has been renamed to spring-boot-starter-kotlinx-serialization-json-test. This change aligns the starters' names with those of their respective modules
  • Using TestRestTemplate now requires a dependency on spring-boot-restclient

🐞 Bug Fixes

  • JsonMixinModuleEntriesBeanRegistrationAotProcessor does not handle deprecated code #48564
  • JdbcSessionAutoConfiguration may not match when using the auto-configured DataSource #48552
  • @ServiceConnection for LgtmStackContainer fails when logging endpoint is configured due to multiple OtlpLoggingConnectionDetails beans #48536
  • WebApplicationType does not consider modules when deduced from classpath #48517
  • Spring Session auto-configuration fails in a war deployment as ServerProperties is not available #48493
  • Opentelemetry logging export requires actuator module #48488
  • RabbitHealthIndicator reports an error when version is missing from the connection's server properties #48487
  • Actuator Info class has inconsistent nullability annotations and cannot be built with null value #48480
  • Profiles retained during AOT processing are not configured in a native image #48476
  • Security matchers and WebServerNamespace resolution can fail with NoClassDefFoundError when used in a traditional WAR deployment #48388
  • HealthEndpointGroupMembershipValidator does not consider reactive health indicators causing NoSuchHealthContributorException to be thrown #48387
  • spring.jackson.default-property-inclusion is not applied to content inclusion #48343
  • TestRestTemplate.getRootUri() returns empty string #48330
  • Redis health check reports an error when redis_version is missing from the INFO response #48328
  • Parent's MeterRegistry beans are closed when child context closes #48325
  • HttpMessageConverters picks up converter beans for both client and server #48310
  • Conditions to auto-configure a RestClient are outdated with the modularization #48308
  • A custom JwtTypeValidator that replaces the default can no longer be configured #48301
  • PropertiesRestClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #48296
  • SpringBootTest.UseMainMethod.WHEN_AVAILABLE and ALWAYS are incompatible with package-private or parameter-less main method #48275
  • Conditions to auto-configure RestClient-based HTTP service clients are outdated with the modularization #48274
  • Starter for Kotlinx Serialization Json is misnamed #48262
  • ApplicationServletEnvironment is no longer configured in war deployments #48254
  • RestClient.Builder bean present in @SpringBootTest due to spring-boot-starter-webmvc-test, but missing at runtime without restclient starter #48253
  • ProblemDetail is rendered to XML incorrectly #48222

📔 Documentation

  • Harmonize Kotlin example for HTTP Service client support #48577
  • Document HttpMessageConverters detection changes in 4.0.1 #48574
  • Improve javadoc for when to use class names rather than class references #48569
  • Documentation has an outdated reference to the Jackson Kotlin Module #48534
  • Caching documentation should clarify how to use a no-op implementation to run a test suite #48532
  • Document that the default rolling policy for Log4j2 requires logging.file.path to be set #48527
  • Review documentation and migration guide about changes in @AutoConfigureCache #48522
  • License header in build samples is displayed in the reference documentation #48478
  • Configuring Two DataSources How-To code sample is inconsistent #48449
  • Fix links to source files on GitHub #48398
  • Documentation contains broken links to GitHub source files #48394
  • Document that org.aspectj.weaver.Advice must be on the classpath to enable support for Micrometer's annotations #48360
  • Correct the annotation in the Kotlin @ConfigurationPropertiesSource example #48357
  • Polish TestRestTemplate examples in the reference guide #48336

... (truncated)

Commits
  • b2bc463 Release v4.0.1
  • 252b218 Correct renaming of Kotlinx Serialization JSON starters
  • 2fa73c2 Merge pull request #48577 from jwalter
  • 3e68988 Polish "Harmonize Kotlin example for HTTP Service client support"
  • 423373b Harmonize Kotlin example for HTTP Service client support
  • f61ac29 Document HttpMessageConverters detection changes
  • 2519a5d Merge branch '3.5.x'
  • 4fc3ca3 Next development version (v3.5.10-SNAPSHOT)
  • aaf66f4 Merge branch '3.5.x'
  • 08e2cab Polish javadoc for when to use class names rather than class references
  • Additional commits viewable in compare view

Updates org.opensearch.client:opensearch-rest-high-level-client from 3.3.2 to 3.4.0

Release notes

Sourced from org.opensearch.client:opensearch-rest-high-level-client's releases.

3.4.0

Version 3.4.0 Release Notes

Compatible with OpenSearch and OpenSearch Dashboards version 3.4.0

Added

  • Allow setting index.creation_date on index creation and restore for plugin compatibility and migrations (#19931)
  • Add support for a ForkJoinPool type (#19008)
  • Add seperate shard limit validation for local and remote indices (#19532)
  • Use Lucene pack method for half_float and unsigned_long when using ApproximatePointRangeQuery (#19553)
  • New cluster setting search.query.max_query_string_length_monitor_only (#19539)
  • Add a mapper for context aware segments grouping criteria (#19233)
  • Return full error for GRPC error response (#19568)
  • Add support for repository with Server side encryption enabled and client side encryption as well based on a flag (#19630)
  • Add pluggable gRPC interceptors with explicit ordering(#19005)
  • Add BindableServices extension point to transport-grpc-spi (#19304)
  • Add metrics for the merged segment warmer feature (#18929)
  • Handle deleted documents for filter rewrite sub-aggregation optimization (#19643)
  • Add bulk collect API for filter rewrite sub-aggregation optimization (#19933)
  • Allow collectors take advantage of preaggregated data using collectRange API (#20009)
  • Bulk collection logic for metrics and cardinality aggregations (#20067)
  • Add pointer based lag metric in pull-based ingestion (#19635)
  • Introduced internal API for retrieving metadata about requested indices from transport actions (#18523)
  • Add cluster defaults for merge autoThrottle, maxMergeThreads, and maxMergeCount; Add segment size filter to the merged segment warmer (#19629)
  • Add build-tooling to run in FIPS environment (#18921)
  • Add SMILE/CBOR/YAML document format support to Bulk GRPC endpoint (#19744)
  • Make test-suite runnable under FIPS compliance support (#18491)
  • Implement GRPC Search params Highlightand Sort (#19868)
  • Implement GRPC ConstantScoreQuery, FuzzyQuery, MatchBoolPrefixQuery, MatchPhrasePrefix, PrefixQuery, MatchQuery (#19854)
  • Add async periodic flush task support for pull-based ingestion (#19878)
  • Add support for context aware segments (#19098)
  • Implement GRPC FunctionScoreQuery (#19888)
  • Implement error_trace parameter for bulk requests (#19985)
  • Allow the truncate filter in normalizers (#19778)
  • Support pull-based ingestion message mappers and raw payload support (#19765)
  • Add search API tracker (#18601)
  • Support dynamic consumer configuration update in pull-based ingestion (#19963)
  • Cache the StoredFieldsReader for scroll query optimization (#20112)
  • Add Hybrid Cardinality collector to prioritize Ordinals Collector (#19524)

Changed

  • Combining filter rewrite and skip list to optimize sub aggregation(#19573)
  • Faster terms query creation for keyword field with index and docValues enabled (#19350)
  • Refactor to move prepareIndex and prepareDelete methods to Engine class (#19551)
  • Omit maxScoreCollector in SimpleTopDocsCollectorContext when concurrent segment search enabled (#19584)
  • Onboarding new maven snapshots publishing to s3 (#19619)
  • Remove MultiCollectorWrapper and use MultiCollector in Lucene instead (#19595)
  • Change implementation for percentiles aggregation for latency improvement (#19648)
  • Wrap checked exceptions in painless.DefBootstrap to support JDK-25 (#19706)
  • Refactor the ThreadPoolStats.Stats class to use the Builder pattern instead of constructors (#19317)

... (truncated)

Commits

Updates org.opensearch.client:opensearch-rest-client-sniffer from 3.3.2 to 3.4.0

Release notes

Sourced from org.opensearch.client:opensearch-rest-client-sniffer's releases.

3.4.0

Version 3.4.0 Release Notes

Compatible with OpenSearch and OpenSearch Dashboards version 3.4.0

Added

  • Allow setting index.creation_date on index creation and restore for plugin compatibility and migrations (#19931)
  • Add support for a ForkJoinPool type (#19008)
  • Add seperate shard limit validation for local and remote indices (#19532)
  • Use Lucene pack method for half_float and unsigned_long when using ApproximatePointRangeQuery (#19553)
  • New cluster setting search.query.max_query_string_length_monitor_only (#19539)
  • Add a mapper for context aware segments grouping criteria (#19233)
  • Return full error for GRPC error response (#19568)
  • Add support for repository with Server side encryption enabled and client side encryption as well based on a flag (#19630)
  • Add pluggable gRPC interceptors with explicit ordering(#19005)
  • Add BindableServices extension point to transport-grpc-spi (#19304)
  • Add metrics for the merged segment warmer feature (#18929)
  • Handle deleted documents for filter rewrite sub-aggregation optimization (#19643)
  • Add bulk collect API for filter rewrite sub-aggregation optimization (#19933)
  • Allow collectors take advantage of preaggregated data using collectRange API (#20009)
  • Bulk collection logic for metrics and cardinality aggregations (#20067)
  • Add pointer based lag metric in pull-based ingestion (#19635)
  • Introduced internal API for retrieving metadata about requested indices from transport actions (#18523)
  • Add cluster defaults for merge autoThrottle, maxMergeThreads, and maxMergeCount; Add segment size filter to the merged segment warmer (#19629)
  • Add build-tooling to run in FIPS environment (#18921)
  • Add SMILE/CBOR/YAML document format support to Bulk GRPC endpoint (#19744)
  • Make test-suite runnable under FIPS compliance support (#18491)
  • Implement GRPC Search params Highlightand Sort (#19868)
  • Implement GRPC ConstantScoreQuery, FuzzyQuery, MatchBoolPrefixQuery, MatchPhrasePrefix, PrefixQuery, MatchQuery (#19854)
  • Add async periodic flush task support for pull-based ingestion (#19878)
  • Add support for context aware segments (#19098)
  • Implement GRPC FunctionScoreQuery (#19888)
  • Implement error_trace parameter for bulk requests (#19985)
  • Allow the truncate filter in normalizers (#19778)
  • Support pull-based ingestion message mappers and raw payload support (#19765)
  • Add search API tracker (#18601)
  • Support dynamic consumer configuration update in pull-based ingestion (#19963)
  • Cache the StoredFieldsReader for scroll query optimization (#20112)
  • Add Hybrid Cardinality collector to prioritize Ordinals Collector (#19524)

Changed

  • Combining filter rewrite and skip list to optimize sub aggregation(#19573)
  • Faster terms query creation for keyword field with index and docValues enabled (#19350)
  • Refactor to move prepareIndex and prepareDelete methods to Engine class (#19551)
  • Omit maxScoreCollector in SimpleTopDocsCollectorContext when concurrent segment search enabled (#19584)
  • Onboarding new maven snapshots publishing to s3 (#19619)
  • Remove MultiCollectorWrapper and use MultiCollector in Lucene instead (#19595)
  • Change implementation for percentiles aggregation for latency improvement (#19648)
  • Wrap checked exceptions in painless.DefBootstrap to support JDK-25 (#19706)
  • Refactor the ThreadPoolStats.Stats class to use the Builder pattern instead of constructors (#19317)

... (truncated)

Commits

Updates org.opensearch:opensearch from 3.3.2 to 3.4.0

Release notes

Sourced from org.opensearch:opensearch's releases.

3.4.0

Version 3.4.0 Release Notes

Compatible with OpenSearch and OpenSearch Dashboards version 3.4.0

Added

  • Allow setting index.creation_date on index creation and restore for plugin compatibility and migrations (#19931)
  • Add support for a ForkJoinPool type (#19008)
  • Add seperate shard limit validation for local and remote indices (#19532)
  • Use Lucene pack method for half_float and unsigned_long when using ApproximatePointRangeQuery (#19553)
  • New cluster setting search.query.max_query_string_length_monitor_only (#19539)
  • Add a mapper for context aware segments grouping criteria (#19233)
  • Return full error for GRPC error response (#19568)
  • Add support for repository with Server side encryption enabled and client side encryption as well based on a flag (#19630)
  • Add pluggable gRPC interceptors with explicit ordering(#19005)
  • Add BindableServices extension point to transport-grpc-spi (#19304)
  • Add metrics for the merged segment warmer feature (#18929)
  • Handle deleted documents for filter rewrite sub-aggregation optimization (#19643)
  • Add bulk collect API for filter rewrite sub-aggregation optimization (#19933)
  • Allow collectors take advantage of preaggregated data using collectRange API (#20009)
  • Bulk collection logic for metrics and cardinality aggregations (#20067)
  • Add pointer based lag metric in pull-based ingestion (#19635)
  • Introduced internal API for retrieving metadata about requested indices from transport actions (#18523)
  • Add cluster defaults for merge autoThrottle, maxMergeThreads, and maxMergeCount; Add segment size filter to the merged segment warmer (#19629)
  • Add build-tooling to run in FIPS environment (#18921)
  • Add SMILE/CBOR/YAML document format support to Bulk GRPC endpoint (#19744)
  • Make test-suite runnable under FIPS compliance support (#18491)
  • Implement GRPC Search params Highlightand Sort (#19868)
  • Implement GRPC ConstantScoreQuery, FuzzyQuery, MatchBoolPrefixQuery, MatchPhrasePrefix, PrefixQuery, MatchQuery (#19854)
  • Add async periodic flush task support for pull-based ingestion (#19878)
  • Add support for context aware segments (#19098)
  • Implement GRPC FunctionScoreQuery (#19888)
  • Implement error_trace parameter for bulk requests (#19985)
  • Allow the truncate filter in normalizers (#19778)
  • Support pull-based ingestion message mappers and raw payload support (#19765)
  • Add search API tracker (#18601)
  • Support dynamic consumer configuration update in pull-based ingestion (#19963)
  • Cache the StoredFieldsReader for scroll query optimization (#20112)
  • Add Hybrid Cardinality collector to prioritize Ordinals Collector (#19524)

Changed

  • Combining filter rewrite and skip list to optimize sub aggregation(#19573)
  • Faster terms query creation for keyword field with index and docValues enabled (#19350)
  • Refactor to move prepareIndex and prepareDelete methods to Engine class (#19551)
  • Omit maxScoreCollector in SimpleTopDocsCollectorContext when concurrent segment search enabled (#19584)
  • Onboarding new maven snapshots publishing to s3 (#19619)
  • Remove MultiCollectorWrapper and use MultiCollector in Lucene instead (#19595)
  • Change implementation for percentiles aggregation for latency improvement (#19648)
  • Wrap checked exceptions in painless.DefBootstrap to support JDK-25 (#19706)
  • Refactor the ThreadPoolStats.Stats class to use the Builder pattern instead of constructors (#19317)

... (truncated)

Commits

Updates org.opensearch.client:opensearch-rest-client-sniffer from 3.3.2 to 3.4.0

Release notes

Sourced from org.opensearch.client:opensearch-rest-client-sniffer's releases.

3.4.0

Version 3.4.0 Release Notes

Compatible with OpenSearch and OpenSearch Dashboards version 3.4.0

Added

  • Allow setting index.creation_date on index creation and restore for plugin compatibility and migrations (#19931)
  • Add support for a ForkJoinPool type (#19008)
  • Add seperate shard limit validation for local and remote indices (#19532)
  • Use Lucene pack method for half_float and unsigned_long when using ApproximatePointRangeQuery (#19553)
  • New cluster setting search.query.max_query_string_length_monitor_only (#19539)
  • Add a mapper for context aware segments grouping criteria (#19233)
  • Return full error for GRPC error response (#19568)
  • Add support for repository with Server side encryption enabled and client side encryption as well based on a flag (#19630)
  • Add pluggable gRPC interceptors with explicit ordering(#19005)
  • Add BindableServices extension point to transport-grpc-spi (#19304)
  • Add metrics for the merged segment warmer feature (#18929)
  • Handle deleted documents for filter rewrite sub-aggregation optimization (#19643)
  • Add bulk collect API for filter rewrite sub-aggregation optimization (#19933)
  • Allow collectors take advantage of preaggregated data using collectRange API (#20009)
  • Bulk collection logic for metrics and cardinality aggregations (#20067)
  • Add pointer based lag metric in pull-based ingestion (#19635)
  • Introduced internal API for retrieving metadata about requested indices from transport actions (#18523)
  • Add cluster defaults for merge autoThrottle, maxMergeThreads, and maxMergeCount; Add segment size filter to the merged segment warmer (#19629)
  • Add build-tooling to run in FIPS environment (#18921)
  • Add SMILE/CBOR/YAML document format support to Bulk GRPC endpoint (#19744)
  • Make test-suite runnable under FIPS compliance support (#18491)
  • Implement GRPC Search params Highlightand Sort (#19868)
  • Implement GRPC ConstantScoreQuery, FuzzyQuery, MatchBoolPrefixQuery, MatchPhrasePrefix, PrefixQuery, MatchQuery (#19854)
  • Add async periodic flush task support for pull-based ingestion (#19878)
  • Add support for context aware segments (#19098)
  • Implement GRPC FunctionScoreQuery (#19888)
  • Implement error_trace parameter for bulk requests (#19985)
  • Allow the truncate filter in normalizers (#19778)
  • Support pull-based ingestion message mappers and raw payload support (#19765)
  • Add search API tracker (#18601)
  • Support dynamic consumer configuration update in pull-based ingestion (#19963)
  • Cache the StoredFieldsReader for scroll query optimization (#20112)
  • Add Hybrid Cardinality collector to prioritize Ordinals Collector (#19524)

Changed

  • Combining filter rewrite and skip list to optimize sub aggregation(#19573)
  • Faster terms query creation for keyword field with index and docValues enabled (#19350)
  • Refactor to move prepareIndex and prepareDelete methods to Engine class (#19551)
  • Omit maxScoreCollector in SimpleTopDocsCollectorContext when concurrent segment search enabled (#19584)
  • Onboarding new maven snapshots publishing to s3 (#19619)
  • Remove MultiCollectorWrapper and use MultiCollector in Lucene instead (#19595)
  • Change implementation for percentiles aggregation for latency improvement (#19648)
  • Wrap checked exceptions in painless.DefBootstrap to support JDK-25 (#19706)
  • Refactor the ThreadPoolStats.Stats class to use the Builder pattern instead of constructors (#19317)

... (truncated)

Commits
  • 0033614 [3.4] Prevent use of shared distribution on gradle builds (#20227)
  • 62c3bdc Aggregation Array OOB Error (#20204) (#20219)
  • 659942a [AUTO] Add release notes for 3.4.0 (#20181)
  • 7d87ca2 Add Hybrid Cardinality collector to prioritize Ordinals Collector (#19524) (#...
  • 3e83e79 Introduced monitoring mode for query string query max length. (#19539) (#20195)
  • 831b10a Add skiplist optimization to auto_date_histogram aggregation (#20057) (#20191)
  • f791594 Using cached StoredFieldsReader fo...

    Description has been truncated

@dependabot
fix(deps): bump the prod-deps group across 1 directory with 8 updates
f1df2b5 
Bumps the prod-deps group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `3.5.7` | `4.0.1` |
| org.apache.commons:commons-lang3 | `3.19.0` | `3.20.0` |
| [org.opensearch.client:opensearch-rest-high-level-client](https://github.com/opensearch-project/OpenSearch) | `3.3.2` | `3.4.0` |
| [org.opensearch.client:opensearch-rest-client-sniffer](https://github.com/opensearch-project/OpenSearch) | `3.3.2` | `3.4.0` |
| [org.opensearch:opensearch](https://github.com/opensearch-project/OpenSearch) | `3.3.2` | `3.4.0` |
| [org.folio:cql2pgjson](https://github.com/folio-org/raml-module-builder) | `35.4.0` | `35.4.2` |
| [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `12.1.2` | `13.0.0` |



Updates `org.springframework.boot:spring-boot-starter-parent` from 3.5.7 to 4.0.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.7...v4.0.1)

Updates `org.apache.commons:commons-lang3` from 3.19.0 to 3.20.0

Updates `org.springframework.boot:spring-boot-configuration-processor` from 3.5.7 to 4.0.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.7...v4.0.1)

Updates `org.opensearch.client:opensearch-rest-high-level-client` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/opensearch-project/OpenSearch/releases)
- [Changelog](https://github.com/opensearch-project/OpenSearch/blob/main/CHANGELOG.md)
- [Commits](opensearch-project/OpenSearch@3.3.2...3.4.0)

Updates `org.opensearch.client:opensearch-rest-client-sniffer` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/opensearch-project/OpenSearch/releases)
- [Changelog](https://github.com/opensearch-project/OpenSearch/blob/main/CHANGELOG.md)
- [Commits](opensearch-project/OpenSearch@3.3.2...3.4.0)

Updates `org.opensearch:opensearch` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/opensearch-project/OpenSearch/releases)
- [Changelog](https://github.com/opensearch-project/OpenSearch/blob/main/CHANGELOG.md)
- [Commits](opensearch-project/OpenSearch@3.3.2...3.4.0)

Updates `org.opensearch.client:opensearch-rest-client-sniffer` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/opensearch-project/OpenSearch/releases)
- [Changelog](https://github.com/opensearch-project/OpenSearch/blob/main/CHANGELOG.md)
- [Commits](opensearch-project/OpenSearch@3.3.2...3.4.0)

Updates `org.opensearch:opensearch` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/opensearch-project/OpenSearch/releases)
- [Changelog](https://github.com/opensearch-project/OpenSearch/blob/main/CHANGELOG.md)
- [Commits](opensearch-project/OpenSearch@3.3.2...3.4.0)

Updates `org.folio:cql2pgjson` from 35.4.0 to 35.4.2
- [Release notes](https://github.com/folio-org/raml-module-builder/releases)
- [Changelog](https://github.com/folio-org/raml-module-builder/blob/v35.4.2/NEWS.md)
- [Commits](folio-org/raml-module-builder@v35.4.0...v35.4.2)

Updates `com.puppycrawl.tools:checkstyle` from 12.1.2 to 13.0.0
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-12.1.2...checkstyle-13.0.0)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.springframework.boot:spring-boot-configuration-processor
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.opensearch.client:opensearch-rest-high-level-client
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.opensearch.client:opensearch-rest-client-sniffer
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.opensearch:opensearch
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.opensearch.client:opensearch-rest-client-sniffer
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.opensearch:opensearch
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.folio:cql2pgjson
  dependency-version: 35.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 13.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jan 18, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 18, 2026 03:04
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jan 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@psmagin psmagin Awaiting requested review from psmagin psmagin is a code owner automatically assigned from folio-org/spitfire-backend

@viacheslavkol viacheslavkol Awaiting requested review from viacheslavkol viacheslavkol is a code owner automatically assigned from folio-org/spitfire-backend

@SvitlanaKovalova1 SvitlanaKovalova1 Awaiting requested review from SvitlanaKovalova1 SvitlanaKovalova1 is a code owner automatically assigned from folio-org/spitfire-backend

At least 2 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants