Skip to content

Bump the dependencies-backend-production group in /app with 20 updates - #129

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/gradle/app/dependencies-backend-production-d024659142
Open

Bump the dependencies-backend-production group in /app with 20 updates#129
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/gradle/app/dependencies-backend-production-d024659142

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies-backend-production group in /app with 20 updates:

Package From To
gradle-wrapper 9.1.0 9.8.0
org.assertj:assertj-core 3.27.6 3.27.7
com.google.errorprone:error_prone_core 2.46.0 2.50.0
org.mockito:mockito-junit-jupiter 5.21.0 5.24.0
com.uber.nullaway:nullaway 0.12.15 0.14.2
io.quarkus:quarkus-arc 3.31.1 3.40.0
io.quarkus:quarkus-elytron-security 3.31.1 3.40.0
io.quarkus:quarkus-flyway 3.31.1 3.40.0
io.quarkus:quarkus-hibernate-orm-panache 3.31.1 3.40.0
io.quarkus:quarkus-hibernate-validator 3.31.1 3.40.0
io.quarkus:quarkus-jdbc-postgresql 3.31.1 3.40.0
io.quarkus:quarkus-junit5 3.31.1 3.40.0
io.quarkus:quarkus-rest 3.31.1 3.40.0
io.quarkus:quarkus-rest-jackson 3.31.1 3.40.0
io.quarkus:quarkus-smallrye-jwt 3.31.1 3.40.0
io.quarkus 3.31.1 3.40.0
io.quarkiverse.quinoa:quarkus-quinoa 2.7.1 2.9.1
io.rest-assured:rest-assured 6.0.0 6.0.1
net.ltgt.errorprone 4.4.0 5.1.1
com.diffplug.spotless 8.1.0 8.10.3

Updates gradle-wrapper from 9.1.0 to 9.8.0

Release notes

Sourced from gradle-wrapper's releases.

9.8.0

The Gradle team is excited to announce Gradle 9.8.0.

Here are the highlights of this release:

  • Java 27 support
  • Maven mirror settings reuse
  • Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aman Gautam, Björn Kautler, Eng Zer Jun, Hashim Khan, Julian Krannich, KBS, Labh R Jethe, Mark Dodgson, Maxim, monkey, nataphon-ktsystems, Paul King, Qiu Tian, rg_sandesh, Roberto Perez Alcolea, Sean, Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.0 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.0 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.8.0 RC3

The Gradle team is excited to announce Gradle 9.8.0 RC3.

Here are the highlights of this release:

... (truncated)

Commits
  • a927be5 Add the Develocity plugin back to the Android smoke tests (#39273)
  • eaee500 Add the Develocity plugin back to the Android smoke tests
  • 189b672 Route everything still hitting Maven Central through the mirror (#39257)
  • 36b1814 Add back mavenCentral to doc snippets
  • 2740c2d Update Gradle wrapper to version 9.8.0-rc-3 (#39264)
  • 2099383 Update Gradle wrapper to version 9.8.0-rc-3
  • c80202f Route everything still hitting Maven Central through the mirror
  • 3f6a534 Fix when a best practice was introduced (#39253)
  • 9efc9ed Fix when a best practice was introduced
  • 459e143 Route integration test dependencies through the repository mirror (#39239)
  • Additional commits viewable in compare view

Updates org.assertj:assertj-core from 3.27.6 to 3.27.7

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.7

🔒 Security

Core

🚫 Deprecated

Core

  • Deprecate XmlStringPrettyFormatter with no replacement

🐛 Bug Fixes

Guava

  • Navigation to assertj-core or guava types from assertj-guava Javadoc site has unnecessary header #3478

🔨 Dependency Upgrades

Core

  • Upgrade to Byte Buddy 1.18.3
  • Upgrade to JUnit BOM 5.14.1

Guava

  • Upgrade to Guava 33.5.0-jre
Commits
  • e840716 [maven-release-plugin] prepare release assertj-build-3.27.7
  • 85ca7eb Deprecate XmlStringPrettyFormatter
  • 77081dc Merge commit from fork
  • b68fc24 Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...
  • 0cf5bb6 Bump kotlin.version from 2.1.0 to 2.2.21
  • d393ef1 Abort tests when symbolic links cannot be created (#3788)
  • 2212433 Add IntelliJ custom inspection for test class names
  • 5717d02 Update JetBrains icon
  • a8ec20b Add icon for JetBrains products
  • c05fb3d Bump Maven to 3.9.12 and Wrapper to 3.3.4
  • Additional commits viewable in compare view

Updates com.google.errorprone:error_prone_core from 2.46.0 to 2.50.0

Release notes

Sourced from com.google.errorprone:error_prone_core's releases.

Error Prone 2.50.0

New checks:

Closed issues: #5553, #5649, #5778

Full changelog: google/error-prone@v2.49.0...v2.50.0

Error Prone 2.49.0

This release includes several changes to Matcher APIs, and removed some deprecated or problematic APIs:

  • Remove deprecated MethodMatchers.withSignature API, which relies on fragile toString behaviour. Alternatives for matching on method signatures with varargs and type parameters were added in google/error-prone@a98a1c5.
  • Removed variableType(Matcher) API. Matchers.variableType(Matcher) uses VariableTree#getType to match variable types, which own't work for lambda parameters with inferred types after JDK-8268850. The recommended replacement is variableType(TypePredicate).
  • Make enclosingPackage return an optional. Module elements are not enclosed by a package, checks using enclosingPackage shouldn't assume an enclosing package exists when processing arbitrary elements.
  • New FieldMatchers API, similar to MethodMatchers (google/error-prone@1dd9c3a).

New checks:

Closed issues: #2283, #3503, #5210, #5289, #5548, #5548, #5554, #5609, #5614, #5656

Full changelog: google/error-prone@v2.48.0...v2.49.0

Error Prone 2.48.0

Changes:

New checks:

Closed issues: #5529, #5537, #5522, #5521

Full changelog: google/error-prone@v2.47.0...v2.48.0

... (truncated)

Commits
  • d802cff Release Error Prone 2.50.0
  • b12b5f2 In StringCharset, move the description from explanation to summary.
  • a7ca02a Update AssertThrowsUtils to emit var thrown = assertThrows(...) instead o...
  • 6b56517 Fix handling of nested tags in UnrecognisedJavadocTag
  • d36e74f Remove translation of the fail() message into assertThrows(). We already ...
  • c3581e9 Fix JavacFileManager compiler crash during speculative recompiles in modular ...
  • da1f32b Remove assignments from assertThrows() lambdas. A large percentage of remai...
  • dee62f7 Update AssertThrowsBlockToExpression to re-write single VariableTrees int...
  • 4939448 Only hoist the last statement into the assertThrows() lambda.
  • 30fd05a refactor: Rename JavaLangClash bug pattern to AvoidCommonTypeNames
  • Additional commits viewable in compare view

Updates org.mockito:mockito-junit-jupiter from 5.21.0 to 5.24.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.24.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.24.0

v5.23.0

NOTE: Breaking change for Android

The mockito-android artifact has a breaking change: tests now require a device or emulator based on API 28+ (Android P). This is to enable new support for mocking Kotlin classes. See #3788 for more details.

Changelog generated by Shipkit Changelog Gradle Plugin

... (truncated)

Commits
  • 5a2f0f8 Fix Mockito docs for -javaagent flag with Gradle (#3866)
  • 9c5f36f Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 (#3862)
  • e7fd06d Preserve method parameters when clearing inline mocks (#3847)
  • 5a676bc Bump gradle/actions from 6.2.0 to 6.3.0 (#3852)
  • 508f8e7 Bump gradle/actions from 5 to 6.2.0 (#3851)
  • ee8a330 Print object fields via reflection when toString() is not implemented (#3844)
  • 39b1aba Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 (#3845)
  • d8638e1 Migrate extensions-tests to JUnit Jupiter (#3840)
  • 0aab922 Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 (#3839)
  • f3cf74c docs(when-verify): fixes to explanations about redundancy (#3838)
  • Additional commits viewable in compare view

Updates com.uber.nullaway:nullaway from 0.12.15 to 0.14.2

Release notes

Sourced from com.uber.nullaway:nullaway's releases.

NullAway 0.14.2

This release adds JSpecifyUnrecognizedAnnotationLocation, an opt-in check that reports nullness annotations in locations JSpecify does not recognize. See further documentation on the wiki: https://github.com/uber/NullAway/wiki/JSpecify-Support#jspecifyunrecognizedannotationlocation-checker

Not packaged in the release, but we have also added a script to remove unnecessary NullAway suppressions to the repo: https://github.com/uber/NullAway/tree/master/scripts/nullaway-suppression-remover We expect this to be a useful script to run after NullAway updates, to check if NullAway improvements make some suppressions unnecessary.

Also of note, NullAway now more precisely detects whether the JDK used for the build properly supports reading type use annotations from bytecode, particularly important for JSpecify mode. This may lead NullAway to crash on certain build configurations that were unsupported before but we were not detecting precisely.

Beyond the above, this release includes further fixes for JSpecify mode and JSpecifyExperimental, especially for wildcard bounds and multi-dimensional arrays, along with other bug fixes.

Finally, we have re-enabled pushing snapshot builds to the Sonatype snapshots repository, which should ease testing NullAway versions between releases.

  • Small optimization for stream handlers (#1774)
  • Check wildcard generics handling flag for enhanced for loops (#1786)
  • Cover anonymous class type arguments and modeled call-site returns by @​vlsi (#1777)
  • Write the full encoded byte array when serializing TSV/XML rows #1788 by @​AzazelSensei (#1798)
  • Fix @​RequiresNonNull override error message to list the extra fields added by the child method by @​Beluomini (#1751)
  • Model Stream.takeWhile (+ reactive equivalents) like .filter by @​jeffrey-easyesi (#1809)
  • Add JSpecifyUnrecognizedAnnotationLocation, an opt-in check that reports nullness annotations in locations JSpecify does not recognize by @​vlsi (#1787)
  • Detect support for the addTypeAnnotationsToSymbol flag on JDK 17 / 21 (#1794)
  • Fix RequireExplicitNullMarking diagnostics repeating the check name, so a report no longer begins with [RequireExplicitNullMarking] [RequireExplicitNullMarking] by @​vlsi (#1815)
  • Less conservative handling of raw array types (#1807)
  • Fix crasher example from Caffeine (#1820)
  • Add a script to remove unnecessary NullAway suppressions (#1803)
  • Use LinkedHashMap / LinkedHashSet for determinism (#1796)
  • Prevent classloader closure from interrupting stubx reads (#1830)
  • Preserve non-null type variables through wildcard capture (#1837)
  • Treat Maven plugin parameters as externally initialized by @​ZedingZhang (#1848)
  • Do not treat type variables from the caller as inference variables (#1824)
  • Prevent recursion on self-referential wildcard bounds during inference by @​adityaanikam (#1843)
  • Avoid stale wildcard bounds after javac supertype inspection (#1849)
  • Preserve contextual bounds for recursive wildcard captures (#1853)
  • Restore effective wildcard upper bounds for invocation types (#1855)
  • Preserve wildcard component types for array element assignments (#1857)
  • Lazily allocate maps to detect wildcard cycles (#1888)
  • Preserve all dimensions of multi-dimensional array creation expressions in JSpecify mode by @​dbwiddis (#1711)
  • Fix false positives for Spring SpEL expressions using null in comparisons by @​Beluomini (#1750)
  • Apply covariant array subtyping at every dimension by @​dbwiddis (#1889)
  • Maintenance
    • Remove outdated Spark test (#1772)

... (truncated)

Changelog

Sourced from com.uber.nullaway:nullaway's changelog.

Version 0.14.2

This release adds JSpecifyUnrecognizedAnnotationLocation, an opt-in check that reports nullness annotations in locations JSpecify does not recognize. See further documentation on the wiki: https://github.com/uber/NullAway/wiki/JSpecify-Support#jspecifyunrecognizedannotationlocation-checker

Not packaged in the release, but we have also added a script to remove unnecessary NullAway suppressions to the repo: https://github.com/uber/NullAway/tree/master/scripts/nullaway-suppression-remover We expect this to be a useful script to run after NullAway updates, to check if NullAway improvements make some suppressions unnecessary.

Also of note, NullAway now more precisely detects whether the JDK used for the build properly supports reading type use annotations from bytecode, particularly important for JSpecify mode. This may lead NullAway to crash on certain build configurations that were unsupported before but we were not detecting precisely.

Beyond the above, this release includes further fixes for JSpecify mode and JSpecifyExperimental, especially for wildcard bounds and multi-dimensional arrays, along with other bug fixes.

Finally, we have re-enabled pushing snapshot builds to the Sonatype snapshots repository, which should ease testing NullAway versions between releases.

  • Small optimization for stream handlers (#1774)
  • Check wildcard generics handling flag for enhanced for loops (#1786)
  • Cover anonymous class type arguments and modeled call-site returns by @​vlsi (#1777)
  • Write the full encoded byte array when serializing TSV/XML rows #1788 by @​AzazelSensei (#1798)
  • Fix @​RequiresNonNull override error message to list the extra fields added by the child method by @​Beluomini (#1751)
  • Model Stream.takeWhile (+ reactive equivalents) like .filter by @​jeffrey-easyesi (#1809)
  • Add JSpecifyUnrecognizedAnnotationLocation, an opt-in check that reports nullness annotations in locations JSpecify does not recognize by @​vlsi (#1787)
  • Detect support for the addTypeAnnotationsToSymbol flag on JDK 17 / 21 (#1794)
  • Fix RequireExplicitNullMarking diagnostics repeating the check name, so a report no longer begins with [RequireExplicitNullMarking] [RequireExplicitNullMarking] by @​vlsi (#1815)
  • Less conservative handling of raw array types (#1807)
  • Fix crasher example from Caffeine (#1820)
  • Add a script to remove unnecessary NullAway suppressions (#1803)
  • Use LinkedHashMap / LinkedHashSet for determinism (#1796)
  • Prevent classloader closure from interrupting stubx reads (#1830)
  • Preserve non-null type variables through wildcard capture (#1837)
  • Treat Maven plugin parameters as externally initialized by @​ZedingZhang (#1848)
  • Do not treat type variables from the caller as inference variables (#1824)
  • Prevent recursion on self-referential wildcard bounds during inference by @​adityaanikam (#1843)
  • Avoid stale wildcard bounds after javac supertype inspection (#1849)
  • Preserve contextual bounds for recursive wildcard captures (#1853)
  • Restore effective wildcard upper bounds for invocation types (#1855)
  • Preserve wildcard component types for array element assignments (#1857)
  • Lazily allocate maps to detect wildcard cycles (#1888)
  • Preserve all dimensions of multi-dimensional array creation expressions in JSpecify mode by @​dbwiddis (#1711)
  • Fix false positives for Spring SpEL expressions using null in comparisons by @​Beluomini (#1750)
  • Apply covariant array subtyping at every dimension by @​dbwiddis (#1889)

... (truncated)

Commits
  • fa89a56 (Fixed) Prepare for release 0.14.2
  • 2e0d12a fix release yaml
  • f472b6b Reset snapshot version
  • 738e5ff Prepare next development version.
  • 4765e0e Prepare for release 0.14.2.
  • 52fd671 Add workflow for cutting releases (#1892)
  • 5354f39 Add missing dependencies for publishShadowPublicationToMavenCentralRepository...
  • cec5171 Publish snapshots to Maven Central (#1890)
  • 079a1ff Apply covariant array subtyping at every dimension (#1889)
  • f1ab72a Fix false positive in SpringHandler for SpEL expressions using null in compar...
  • Additional commits viewable in compare view

Updates io.quarkus:quarkus-arc from 3.31.1 to 3.40.0

Updates io.quarkus:quarkus-elytron-security from 3.31.1 to 3.40.0

Updates io.quarkus:quarkus-flyway from 3.31.1 to 3.40.0

Updates io.quarkus:quarkus-hibernate-orm-panache from 3.31.1 to 3.40.0

Updates io.quarkus:quarkus-hibernate-validator from 3.31.1 to 3.40.0

Updates io.quarkus:quarkus-jdbc-postgresql from 3.31.1 to 3.40.0

Updates io.quarkus:quarkus-junit5 from 3.31.1 to 3.40.0

Updates io.quarkus:quarkus-rest from 3.31.1 to 3.40.0

Updates io.quarkus:quarkus-rest-jackson from 3.31.1 to 3.40.0

Updates io.quarkus:quarkus-smallrye-jwt from 3.31.1 to 3.40.0

Updates io.quarkus from 3.31.1 to 3.40.0

Updates io.quarkus:quarkus-elytron-security from 3.31.1 to 3.40.0

Updates io.quarkus:quarkus-flyway from 3.31.1 to 3.40.0

Updates io.quarkus:quarkus-hibernate-orm-panache from 3.31.1 to 3.40.0

Updates io.quarkus:quarkus-hibernate-validator from 3.31.1 to 3.40.0

Updates io.quarkus:quarkus-jdbc-postgresql from 3.31.1 to 3.40.0

Updates io.quarkus:quarkus-junit5 from 3.31.1 to 3.40.0

Updates io.quarkiverse.quinoa:quarkus-quinoa from 2.7.1 to 2.9.1

Release notes

Sourced from io.quarkiverse.quinoa:quarkus-quinoa's releases.

2.9.1

What's Changed

New Contributors

Full Changelog: quarkiverse/quarkus-quinoa@2.9.0...2.9.1

2.9.0

What's Changed

[!IMPORTANT]
Breaking Change requires Quarkus 3.37+ to support new SBOM features!

Full Changelog: quarkiverse/quarkus-quinoa@2.8.4...2.9.0

2.8.4

What's Changed

... (truncated)

Commits
  • 27917f5 [maven-release-plugin] prepare release 2.9.1
  • ec09c14 Update the latest release version 2.9.1 in documentation
  • 02c9dca Update current version to 2.9.1 (#1140)
  • e967a0b Relay binary WebSocket frames in the dev proxy (#1138)
  • 55470ce docs: add AndreasHae as a contributor for code (#1139)
  • 1c0eba8 Fix deprecation warnings for Quarkus 3.37.2+ compatibility (#1137)
  • a600f3e Fix ecosystem CI: explicitly enable Quinoa in unit tests (#1136)
  • 9e6cf0a Bump js-yaml in /integration-tests/src/main/ui-angular (#1132)
  • 9fc3eb1 Bump browserslist in /integration-tests/src/main/ui-react (#1130)
  • 149238d Bump nanoid in /integration-tests/src/main/ui-angular-esbuild (#1129)
  • Additional commits viewable in compare view

Updates io.quarkus:quarkus-rest from 3.31.1 to 3.40.0

Updates io.quarkus:quarkus-rest-jackson from 3.31.1 to 3.40.0

Updates io.quarkus:quarkus-smallrye-jwt from 3.31.1 to 3.40.0

Updates io.rest-assured:rest-assured from 6.0.0 to 6.0.1

Changelog

Sourced from io.rest-assured:rest-assured's changelog.

Changelog 6.0.1 (2026-07-10)

  • Fix a JsonPath denial-of-service where oversized numeric literals in untrusted JSON were parsed into arbitrarily large BigIntegers, an O(n^2) CPU and heap cost. JSON number tokens are now capped at 1000 characters by default, configurable via JsonPathConfig.numberLengthLimit and JsonConfig.numberLengthLimit (a negative value disables the check). Thanks to Brian Lee (PhD security researcher, Georgia Tech SSLab) for the private report.
  • Use custom Jackson 3 object mapper in JsonPath (#1858) (thanks to gkiel for PR)
  • Fix Spring MockMvc cookie handling with Jakarta-only servlet APIs (fixes #1853)
  • Use Jackson 3 mapper in JsonPath deserialization when Jackson 3 is the only Jackson on the classpath (#1865) (thanks to dickerpulli for PR)
  • Add JsonPath.using(Jackson3ObjectMapperFactory) overload (#1861) (thanks to Anusha-7254 for PR)
  • Fix typo in duplicate-finder-maven-plugin phase property (#1866) (thanks to metacosm for PR)
  • Fix incorrect serialization of enum constants declared with a body when used as query/path parameters (#1799)
  • The spring-mock-mvc and spring-web-test-client modules now target Spring Framework 7 and no longer expose their own Spring version as a transitive dependency (the Spring dependencies are declared optional), so they no longer drag Spring 5 onto a Spring Boot 4 / Spring Framework 7 classpath. This removes the need for manual Spring exclusions on Spring Boot 4 (fixes #1853, #1868). Thanks to spencerarq for the detailed investigation.

Changelog 5.5.7 (2026-01-16)

  • Spring MockMvc module now supports Spring Framework 7.0 (thanks to Marcin Grzejszczak for PR)
Commits
  • 8cc835a [maven-release-plugin] prepare release rest-assured-6.0.1
  • 92551ed Sync dist and OSGi module versions during release
  • 29b55e2 Sync dist and osgi module parent versions to 6.0.1-SNAPSHOT
  • f1abe77 [ci ...

    Description has been truncated

@dependabot
Bump the dependencies-backend-production group in /app with 20 updates
dc69011 
Bumps the dependencies-backend-production group in /app with 20 updates:

| Package | From | To |
| --- | --- | --- |
| [gradle-wrapper](https://github.com/gradle/gradle) | `9.1.0` | `9.8.0` |
| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.27.6` | `3.27.7` |
| [com.google.errorprone:error_prone_core](https://github.com/google/error-prone) | `2.46.0` | `2.50.0` |
| [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) | `5.21.0` | `5.24.0` |
| [com.uber.nullaway:nullaway](https://github.com/uber/NullAway) | `0.12.15` | `0.14.2` |
| io.quarkus:quarkus-arc | `3.31.1` | `3.40.0` |
| io.quarkus:quarkus-elytron-security | `3.31.1` | `3.40.0` |
| io.quarkus:quarkus-flyway | `3.31.1` | `3.40.0` |
| io.quarkus:quarkus-hibernate-orm-panache | `3.31.1` | `3.40.0` |
| io.quarkus:quarkus-hibernate-validator | `3.31.1` | `3.40.0` |
| io.quarkus:quarkus-jdbc-postgresql | `3.31.1` | `3.40.0` |
| io.quarkus:quarkus-junit5 | `3.31.1` | `3.40.0` |
| io.quarkus:quarkus-rest | `3.31.1` | `3.40.0` |
| io.quarkus:quarkus-rest-jackson | `3.31.1` | `3.40.0` |
| io.quarkus:quarkus-smallrye-jwt | `3.31.1` | `3.40.0` |
| io.quarkus | `3.31.1` | `3.40.0` |
| [io.quarkiverse.quinoa:quarkus-quinoa](https://github.com/quarkiverse/quarkus-quinoa) | `2.7.1` | `2.9.1` |
| [io.rest-assured:rest-assured](https://github.com/rest-assured/rest-assured) | `6.0.0` | `6.0.1` |
| net.ltgt.errorprone | `4.4.0` | `5.1.1` |
| [com.diffplug.spotless](https://github.com/diffplug/spotless) | `8.1.0` | `8.10.3` |


Updates `gradle-wrapper` from 9.1.0 to 9.8.0
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.1.0...v9.8.0)

Updates `org.assertj:assertj-core` from 3.27.6 to 3.27.7
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.27.6...assertj-build-3.27.7)

Updates `com.google.errorprone:error_prone_core` from 2.46.0 to 2.50.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.46.0...v2.50.0)

Updates `org.mockito:mockito-junit-jupiter` from 5.21.0 to 5.24.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.21.0...v5.24.0)

Updates `com.uber.nullaway:nullaway` from 0.12.15 to 0.14.2
- [Release notes](https://github.com/uber/NullAway/releases)
- [Changelog](https://github.com/uber/NullAway/blob/master/CHANGELOG.md)
- [Commits](uber/NullAway@v0.12.15...v0.14.2)

Updates `io.quarkus:quarkus-arc` from 3.31.1 to 3.40.0

Updates `io.quarkus:quarkus-elytron-security` from 3.31.1 to 3.40.0

Updates `io.quarkus:quarkus-flyway` from 3.31.1 to 3.40.0

Updates `io.quarkus:quarkus-hibernate-orm-panache` from 3.31.1 to 3.40.0

Updates `io.quarkus:quarkus-hibernate-validator` from 3.31.1 to 3.40.0

Updates `io.quarkus:quarkus-jdbc-postgresql` from 3.31.1 to 3.40.0

Updates `io.quarkus:quarkus-junit5` from 3.31.1 to 3.40.0

Updates `io.quarkus:quarkus-rest` from 3.31.1 to 3.40.0

Updates `io.quarkus:quarkus-rest-jackson` from 3.31.1 to 3.40.0

Updates `io.quarkus:quarkus-smallrye-jwt` from 3.31.1 to 3.40.0

Updates `io.quarkus` from 3.31.1 to 3.40.0

Updates `io.quarkus:quarkus-elytron-security` from 3.31.1 to 3.40.0

Updates `io.quarkus:quarkus-flyway` from 3.31.1 to 3.40.0

Updates `io.quarkus:quarkus-hibernate-orm-panache` from 3.31.1 to 3.40.0

Updates `io.quarkus:quarkus-hibernate-validator` from 3.31.1 to 3.40.0

Updates `io.quarkus:quarkus-jdbc-postgresql` from 3.31.1 to 3.40.0

Updates `io.quarkus:quarkus-junit5` from 3.31.1 to 3.40.0

Updates `io.quarkiverse.quinoa:quarkus-quinoa` from 2.7.1 to 2.9.1
- [Release notes](https://github.com/quarkiverse/quarkus-quinoa/releases)
- [Commits](quarkiverse/quarkus-quinoa@2.7.1...2.9.1)

Updates `io.quarkus:quarkus-rest` from 3.31.1 to 3.40.0

Updates `io.quarkus:quarkus-rest-jackson` from 3.31.1 to 3.40.0

Updates `io.quarkus:quarkus-smallrye-jwt` from 3.31.1 to 3.40.0

Updates `io.rest-assured:rest-assured` from 6.0.0 to 6.0.1
- [Changelog](https://github.com/rest-assured/rest-assured/blob/master/changelog.txt)
- [Commits](rest-assured/rest-assured@rest-assured-6.0.0...rest-assured-6.0.1)

Updates `net.ltgt.errorprone` from 4.4.0 to 5.1.1

Updates `io.quarkus` from 3.31.1 to 3.40.0

Updates `com.diffplug.spotless` from 8.1.0 to 8.10.3
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@gradle/8.1.0...gradle/8.10.3)

---
updated-dependencies:
- dependency-name: gradle-wrapper
  dependency-version: 9.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies-backend-production
- dependency-name: com.google.errorprone:error_prone_core
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: org.mockito:mockito-junit-jupiter
  dependency-version: 5.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: com.uber.nullaway:nullaway
  dependency-version: 0.14.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus:quarkus-arc
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus:quarkus-elytron-security
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus:quarkus-flyway
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus:quarkus-hibernate-orm-panache
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus:quarkus-hibernate-validator
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus:quarkus-jdbc-postgresql
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus:quarkus-junit5
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus:quarkus-rest
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus:quarkus-rest-jackson
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus:quarkus-smallrye-jwt
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus:quarkus-elytron-security
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus:quarkus-flyway
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus:quarkus-hibernate-orm-panache
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus:quarkus-hibernate-validator
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus:quarkus-jdbc-postgresql
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus:quarkus-junit5
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkiverse.quinoa:quarkus-quinoa
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus:quarkus-rest
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus:quarkus-rest-jackson
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus:quarkus-smallrye-jwt
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: io.rest-assured:rest-assured
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies-backend-production
- dependency-name: net.ltgt.errorprone
  dependency-version: 5.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies-backend-production
- dependency-name: io.quarkus
  dependency-version: 3.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
- dependency-name: com.diffplug.spotless
  dependency-version: 8.10.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-backend-production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 1, 2026
@github-actions

github-actions Bot commented Oct 1, 2026

Copy link
Copy Markdown

Test Results

11 tests   - 3   11 ✅  - 3   2s ⏱️ -1s
 2 suites  - 2    0 💤 ±0 
 2 files    - 2    0 ❌ ±0 

Results for commit dc69011. ± Comparison against base commit ca00714.

This pull request removes 3 tests. 
dev.blaauwendraad.recipe_book.data.RecipeEntityTest ‑ persistRecipe()
dev.blaauwendraad.recipe_book.web.UserAuthenticationResourceTest ‑ registerUser_DuplicateUsername_Returns400()
dev.blaauwendraad.recipe_book.web.UserAuthenticationResourceTest ‑ registerUser_ValidInput_Returns200()

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@Breus Breus

@EmielBoss EmielBoss

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@Breus @EmielBoss