deps(backend): bump the all-backend group in /backend with 8 updates #4

dependabot · 2025-08-10T19:26:07Z

Bumps the all-backend group in /backend with 8 updates:

Package	From	To
io.jsonwebtoken:jjwt-api	`0.11.5`	`0.12.6`
io.jsonwebtoken:jjwt-impl	`0.11.5`	`0.12.6`
io.jsonwebtoken:jjwt-jackson	`0.11.5`	`0.12.6`
org.springdoc:springdoc-openapi-starter-webmvc-ui	`2.5.0`	`2.8.9`
jakarta.annotation:jakarta.annotation-api	`2.1.1`	`3.0.0`
org.junit.jupiter:junit-jupiter	`5.12.2`	`5.13.4`
org.junit.platform:junit-platform-launcher	`1.12.2`	`1.13.4`
org.springframework.boot	`3.5.3`	`3.5.4`

Updates io.jsonwebtoken:jjwt-api from 0.11.5 to 0.12.6

Release notes

Sourced from io.jsonwebtoken:jjwt-api's releases.

0.12.6

This patch release:

Ensures that after successful JWS signature verification, an application-configured Base64Url Decoder output is used to construct a Jws instance (instead of JJWT's default decoder). See jwtk/jjwt#947.

Fixes a decompression memory leak in concurrent/multi-threaded environments introduced in 0.12.0 when decompressing JWTs with a zip header of GZIP. See jwtk/jjwt#949.

Upgrades BouncyCastle to 1.78 via jwtk/jjwt#941

Usees Acsiidoc as README format by @bdemers in jwtk/jjwt#777

Allows using GenericSecret for HmacSHA* algorithms by @mnylen in jwtk/jjwt#935

Enables JWE arbitrary content compression by @mnylen in jwtk/jjwt#937

New Contributors

@mnylen made their first contribution in jwtk/jjwt#935

Full Changelog: jwtk/jjwt@0.12.5...0.12.6

0.12.5

This release fixes issue #916 and ensures that builders' NestedCollection changes are applied to the collection immediately as mutation methods are called, no longer requiring application developers to call .and() to 'commit' or apply a change. For example, prior to this release, the following code did not apply changes:
JwtBuilder builder = Jwts.builder();
builder.audience().add("an-audience"); // no .and() call
builder.compact(); // would not keep 'an-audience'
Now this code works as expected and all other NestedCollection instances like it apply changes immediately (e.g. when calling .add(value)).

However, standard fluent builder chains are still recommended for readability when feasible, e.g.
Jwts.builder()
    .audience().add("an-audience").and() // allows fluent chaining
    .subject("Joe")
    // etc...
    .compact()
These same notes are repeated in the CHANGELOG, and as always, project documentation is in the README.

Please allow 30 minutes from the time this announcement is published for the release to be available in Maven Central.

0.12.4

This is patch release completes 10 issues, with two especially noteworthy changes, and a number of other smaller bug fixes and enhancements.

The default Jackson deserializer will now reject duplicate JSON members by default in an attempt to be a little more strict at rejecting potentially malicious or malformed JSON. This is a default and can be overridden with a custom ObjectMapper if desired.

Password-based JWE encryption key algorithms (PBES2_HS256_A128KW, PBES2_HS384_A192KW and PBES2_HS512_A256KW) now enforce an upper bound (maximum) number of iterations allowed during decryption to mitigate against potential DoS attacks. Many thanks to Jingcheng Yang and Jianjun Chen from Sichuan University and Zhongguancun Lab for their work on this!

A number of other issues fixed: thread-safe ServiceLoader usage for dynamic JSON processor lookup, Android enhancements for JSON Reader APIs, fixed Elliptic Curve field element padding, and more. Please read the 0.12.4 CHANGELOG for full details of all of these changes, and as always, project documentation is in the 0.12.4 README.

Please allow 30 minutes from the time this announcement is published for the release to be available in Maven Central.

... (truncated)

Changelog

Sourced from io.jsonwebtoken:jjwt-api's changelog.

0.12.6

This patch release:

Ensures that after successful JWS signature verification, an application-configured Base64Url Decoder output is used to construct a Jws instance (instead of JJWT's default decoder). See Issue 947.

Fixes a decompression memory leak in concurrent/multi-threaded environments introduced in 0.12.0 when decompressing JWTs with a zip header of GZIP. See Issue 949.

Upgrades BouncyCastle to 1.78 via PR 941.

Ensures that a JwkSet's keys list member is no longer considered secret and is not redacted by default. However, each individual JWK element within the keys list may still have redacted private or secret members as expected. See Issue 976.

0.12.5

This patch release:
Ensures that builders' NestedCollection changes are applied to the collection immediately as mutation methods are called, no longer requiring application developers to call .and() to 'commit' or apply a change. For example, prior to this release, the following code did not apply changes:
JwtBuilder builder = Jwts.builder();
builder.audience().add("an-audience"); // no .and() call
builder.compact(); // would not keep 'an-audience'
Now this code works as expected and all other NestedCollection instances like it apply changes immediately (e.g. when calling .add(value)).

However, standard fluent builder chains are still recommended for readability when feasible, e.g.
Jwts.builder()
    .audience().add("an-audience").and() // allows fluent chaining
    .subject("Joe")
    // etc...
    .compact()
See Issue 916.
0.12.4

This patch release includes various changes listed below.

Jackson Default Parsing Behavior

This release makes two behavioral changes to JJWT's default Jackson ObjectMapper parsing settings:

In the interest of having stronger standards to reject potentially malformed/malicious/accidental JSON that could have undesirable effects on an application, JJWT's default ObjectMapper is now configured to explicitly reject/fail parsing JSON (JWT headers and/or Claims) if/when that JSON contains duplicate JSON member names.

For example, now the following JSON, if parsed, would fail (be rejected) by default:

... (truncated)

Commits

0df9756 [maven-release-plugin] prepare release 0.12.6
aacdfdc - Updated README.adoc :project-version: to be 0.12.6.
d14f27b Bump org.bouncycastle:bcprov-jdk18on from 1.76 to 1.78 (#941)
0c2d96c Fixes #949 (#950)
a7de554 Fixes #947 (#948)
7543248 Bump org.bouncycastle:bcpkix-jdk18on from 1.76 to 1.78 (#943)
3489fdb JWE arbitrary content compression (#937)
23d9a33 Allow using GenericSecret for HmacSHA* (#935)
c673b76 Update SECURITY.md
2694861 Use Acsiidoc as README format (#777)
Additional commits viewable in compare view

Updates io.jsonwebtoken:jjwt-impl from 0.11.5 to 0.12.6

Release notes

Sourced from io.jsonwebtoken:jjwt-impl's releases.

0.12.6

This patch release:

Ensures that after successful JWS signature verification, an application-configured Base64Url Decoder output is used to construct a Jws instance (instead of JJWT's default decoder). See jwtk/jjwt#947.

Fixes a decompression memory leak in concurrent/multi-threaded environments introduced in 0.12.0 when decompressing JWTs with a zip header of GZIP. See jwtk/jjwt#949.

Upgrades BouncyCastle to 1.78 via jwtk/jjwt#941

Usees Acsiidoc as README format by @bdemers in jwtk/jjwt#777

Allows using GenericSecret for HmacSHA* algorithms by @mnylen in jwtk/jjwt#935

Enables JWE arbitrary content compression by @mnylen in jwtk/jjwt#937

New Contributors

@mnylen made their first contribution in jwtk/jjwt#935

Full Changelog: jwtk/jjwt@0.12.5...0.12.6

0.12.5

This release fixes issue #916 and ensures that builders' NestedCollection changes are applied to the collection immediately as mutation methods are called, no longer requiring application developers to call .and() to 'commit' or apply a change. For example, prior to this release, the following code did not apply changes:
JwtBuilder builder = Jwts.builder();
builder.audience().add("an-audience"); // no .and() call
builder.compact(); // would not keep 'an-audience'
Now this code works as expected and all other NestedCollection instances like it apply changes immediately (e.g. when calling .add(value)).

However, standard fluent builder chains are still recommended for readability when feasible, e.g.
Jwts.builder()
    .audience().add("an-audience").and() // allows fluent chaining
    .subject("Joe")
    // etc...
    .compact()
These same notes are repeated in the CHANGELOG, and as always, project documentation is in the README.

Please allow 30 minutes from the time this announcement is published for the release to be available in Maven Central.

0.12.4

This is patch release completes 10 issues, with two especially noteworthy changes, and a number of other smaller bug fixes and enhancements.

The default Jackson deserializer will now reject duplicate JSON members by default in an attempt to be a little more strict at rejecting potentially malicious or malformed JSON. This is a default and can be overridden with a custom ObjectMapper if desired.

Password-based JWE encryption key algorithms (PBES2_HS256_A128KW, PBES2_HS384_A192KW and PBES2_HS512_A256KW) now enforce an upper bound (maximum) number of iterations allowed during decryption to mitigate against potential DoS attacks. Many thanks to Jingcheng Yang and Jianjun Chen from Sichuan University and Zhongguancun Lab for their work on this!

A number of other issues fixed: thread-safe ServiceLoader usage for dynamic JSON processor lookup, Android enhancements for JSON Reader APIs, fixed Elliptic Curve field element padding, and more. Please read the 0.12.4 CHANGELOG for full details of all of these changes, and as always, project documentation is in the 0.12.4 README.

Please allow 30 minutes from the time this announcement is published for the release to be available in Maven Central.

... (truncated)

Changelog

Sourced from io.jsonwebtoken:jjwt-impl's changelog.

0.12.6

This patch release:

Ensures that after successful JWS signature verification, an application-configured Base64Url Decoder output is used to construct a Jws instance (instead of JJWT's default decoder). See Issue 947.

Fixes a decompression memory leak in concurrent/multi-threaded environments introduced in 0.12.0 when decompressing JWTs with a zip header of GZIP. See Issue 949.

Upgrades BouncyCastle to 1.78 via PR 941.

Ensures that a JwkSet's keys list member is no longer considered secret and is not redacted by default. However, each individual JWK element within the keys list may still have redacted private or secret members as expected. See Issue 976.

0.12.5

This patch release:
Ensures that builders' NestedCollection changes are applied to the collection immediately as mutation methods are called, no longer requiring application developers to call .and() to 'commit' or apply a change. For example, prior to this release, the following code did not apply changes:
JwtBuilder builder = Jwts.builder();
builder.audience().add("an-audience"); // no .and() call
builder.compact(); // would not keep 'an-audience'
Now this code works as expected and all other NestedCollection instances like it apply changes immediately (e.g. when calling .add(value)).

However, standard fluent builder chains are still recommended for readability when feasible, e.g.
Jwts.builder()
    .audience().add("an-audience").and() // allows fluent chaining
    .subject("Joe")
    // etc...
    .compact()
See Issue 916.
0.12.4

This patch release includes various changes listed below.

Jackson Default Parsing Behavior

This release makes two behavioral changes to JJWT's default Jackson ObjectMapper parsing settings:

In the interest of having stronger standards to reject potentially malformed/malicious/accidental JSON that could have undesirable effects on an application, JJWT's default ObjectMapper is now configured to explicitly reject/fail parsing JSON (JWT headers and/or Claims) if/when that JSON contains duplicate JSON member names.

For example, now the following JSON, if parsed, would fail (be rejected) by default:

... (truncated)

Commits

0df9756 [maven-release-plugin] prepare release 0.12.6
aacdfdc - Updated README.adoc :project-version: to be 0.12.6.
d14f27b Bump org.bouncycastle:bcprov-jdk18on from 1.76 to 1.78 (#941)
0c2d96c Fixes #949 (#950)
a7de554 Fixes #947 (#948)
7543248 Bump org.bouncycastle:bcpkix-jdk18on from 1.76 to 1.78 (#943)
3489fdb JWE arbitrary content compression (#937)
23d9a33 Allow using GenericSecret for HmacSHA* (#935)
c673b76 Update SECURITY.md
2694861 Use Acsiidoc as README format (#777)
Additional commits viewable in compare view

Updates io.jsonwebtoken:jjwt-jackson from 0.11.5 to 0.12.6

Updates org.springdoc:springdoc-openapi-starter-webmvc-ui from 2.5.0 to 2.8.9

Release notes

Sourced from org.springdoc:springdoc-openapi-starter-webmvc-ui's releases.

springdoc-openapi v2.8.9 released!

What's Changed

Support for @Positive by @mpleine in springdoc/springdoc-openapi#3001

Fixes for Spring Boot 3.5.0 API by @mschout in springdoc/springdoc-openapi#3007

feat: type-use for method parameters by @mymx2 in springdoc/springdoc-openapi#3011

Added

#2944 - Support for @Positive

#3011 - type-use for method parameters

Changed

Upgrade spring-boot to version 3.5.0

Fixed

#2982 - application/problem+json content type is not set for ProblemDetails

#2990 - Issues with POST Request, application/x-www-form-urlencoded and only one parameter

#2998 - io.swagger.v3.oas.annotations.Webhook does not work when defined on the method level

#3012 - Order of examples is (sometimes) not preserved

New Contributors

@mpleine made their first contribution in springdoc/springdoc-openapi#3001

Full Changelog: springdoc/springdoc-openapi@v2.8.8...v2.8.9

v2.8.8

Full Changelog: springdoc/springdoc-openapi@v2.8.7...v2.8.8

Fixed

#2977 - Handle projects not using kotlin-reflect #2977

springdoc-openapi v2.8.7 released!

What's Changed

Added

#2944 - Introducing springdoc-openapi-bom project

#2948 - Customize Servers via application.yml

#2963 - Set default content type for problem details object to application/problem+jso

#2971 - List of value classes in Kotlin

Changed

Upgrade swagger-ui to v5.21.0

Upgrade swagger-core to 2.2.30

Upgrade spring-boot to version 3.4.5

Upgrade spring-security-oauth2-authorization-server to version 1.4.3

Fixed

#2947 - Unexpected warning "Appended trailing slash to static resource location"

#2960 - NPE when customizing group's open-api without specifying any schema

#2969 - fix path to register resource handler to work SwaggerIndexPageTransformer considering /webjar path prefix

#2964 - Cannot add custom description and example for java.time.Duration since v2.8.6

... (truncated)

Changelog

Sourced from org.springdoc:springdoc-openapi-starter-webmvc-ui's changelog.

[2.8.9] - 2025-06-10

Added

#2944 - Support for @Positive

#3011 - type-use for method parameters

Changed

Upgrade spring-boot to version 3.5.0

Fixed

#2982 - application/problem+json content type is not set for ProblemDetails

#2990 - Issues with POST Request, application/x-www-form-urlencoded and only one parameter

#2998 - io.swagger.v3.oas.annotations.Webhook does not work when defined on the method level

#3012 - Order of examples is (sometimes) not preserved

[2.8.8] - 2025-05-04

Fixed

#2977 - Handle projects not using kotlin-reflect #2977

[2.8.7] - 2025-05-04

Added

#2944 - Introducing springdoc-openapi-bom project

#2948 - Customize Servers via application.yml

#2963 - Set default content type for problem details object to application/problem+jso

#2971 - List of value classes in Kotlin

Changed

Upgrade swagger-ui to v5.21.0

Upgrade swagger-core to 2.2.30

Upgrade spring-boot to version 3.4.5

Upgrade spring-security-oauth2-authorization-server to version 1.4.3

Fixed

#2947 - Unexpected warning "Appended trailing slash to static resource location"

#2960 - NPE when customizing group's open-api without specifying any schema

#2969 - fix path to register resource handler to work SwaggerIndexPageTransformer considering /webjar path prefix

#2964 - Cannot add custom description and example for java.time.Duration since v2.8.6

#2972 - @Header(schema = @Schema(type = "string")) generates empty or broken schema in

... (truncated)

Commits

830a98a [maven-release-plugin] prepare release v2.8.9
976d8ec docs update
1ebf9b8 Order of examples is (sometimes) not preserved. Fixes #3012
10fd6dd io.swagger.v3.oas.annotations.Webhook does not work when defined on the metho...
31ed191 Issues with POST Request, application/x-www-form-urlencoded and only one para...
ceb4a10 application/problem+json content type is not set for ProblemDetails. Fixes #2982
a23005b Merge branch 'mymx2-feat/type-use'
290162f code review
9f05020 Merge branch 'mschout-spring-boot-3.5-support'
6111073 code review
Additional commits viewable in compare view

Updates jakarta.annotation:jakarta.annotation-api from 2.1.1 to 3.0.0

Commits

d456606 Prepare release jakarta.annotation:ca-parent:3.0.0
292e95a make sure built javadoc contains year 2024,
1c0df1c make build reproducible
606b49d update parent to 1.0.9
7d635c7 use release 11 to comply with the plan
fb6a7d2 add contributing info to the readme
58f0e95 put back references section
65561d8 fix cp right
66b0a6c improve code samples in javadoc
2ef3318 Set release level to 21
Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter from 5.12.2 to 5.13.4

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 5.13.4 = Platform 1.13.4 + Jupiter 5.13.4 + Vintage 5.13.4

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.3...r5.13.4

JUnit 5.13.3 = Platform 1.13.3 + Jupiter 5.13.3 + Vintage 5.13.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.2...r5.13.3

JUnit 5.13.2 = Platform 1.13.2 + Jupiter 5.13.2 + Vintage 5.13.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.1...r5.13.2

JUnit 5.13.1 = Platform 1.13.1 + Jupiter 5.13.1 + Vintage 5.13.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.0...r5.13.1

JUnit 5.13.0 = Platform 1.13.0 + Jupiter 5.13.0 + Vintage 5.13.0

See Release Notes.

New Contributors

@Oyster-zx made their first contribution in junit-team/junit5#4311

@etrandafir93 made their first contribution in junit-team/junit5#4336

@hanszt made their first contribution in junit-team/junit5#3377

@ngocnhan-tran1996 made their first contribution in junit-team/junit5#4545

Full Changelog: junit-team/junit-framework@r5.12.2...r5.13.0

JUnit 5.13.0-RC1 = Platform 1.13.0-RC1 + Jupiter 5.13.0-RC1 + Vintage 5.13.0-RC1

See Release Notes.

New Contributors

@hanszt made their first contribution in junit-team/junit5#3377

Full Changelog: junit-team/junit-framework@r5.13.0-M3...r5.13.0-RC1

JUnit 5.13.0-M3 = Platform 1.13.0-M3 + Jupiter 5.13.0-M3 + Vintage 5.13.0-M3

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.0-M2...r5.13.0-M3

... (truncated)

Commits

8a21048 Release 5.13.4
9a38789 Finalize 5.13.4 release notes
458325c Log only once per implementation type for CloseableResource types
976a110 Protect against potential problems when converting file-based selectors
e94f728 Allow default package for PackageSource
b60fecf Fail on classpath resource names that are blank after removing leading /
6378c88 Remove java.* packages from Import-Package headers in all jars (#4738)
1a360f3 Create initial 5.13.4 release notes from template
806fc9a Document #4689 in release notes
1653839 Document #4686 in release notes
Additional commits viewable in compare view

Updates org.junit.platform:junit-platform-launcher from 1.12.2 to 1.13.4

Commits

See full diff in compare view

Updates org.springframework.boot from 3.5.3 to 3.5.4

Release notes

Sourced from org.springframework.boot's releases.

v3.5.4

🐞 Bug Fixes

LambdaSafe.withFilter is not public #46474

Executable JAR application class encounters performance issues when used with Palo Alto Network Cortex XDR agent #46402

Runtime dependencies are missing from aotCompileClasspath and aotTestCompileClasspath when using Kotlin #46398

Additional fields for structured JSON logging incompatible with nested ecs logging in 3.5.x #46351

Change in DefaultErrorAttributes alters the shape of API validation error responses #46260

jdbc.connections.active and jdbc.connections.idle metrics are not available when using Hikari in a native image #46225

developmentOnly and testAndDevelopmentOnly dependencies may prevent implementation dependencies from being included in the uber-jar #46205

Hash calculation for uber archive entries that require unpacking is inefficient #46203

Permissions are applied inconsistently when building uber archives with Gradle #46194

Environment variables using legacy dash format can no longer be bound #46184

EmbeddedWebServerFactoryCustomizerAutoConfiguration fails when undertow-core is on the classpath and undertow-servlet is not #46180

Executable JAR application class encounters performance issues #46177

Executable JAR application class encounters performance issues #46176

Setting spring.reactor.context-propagation has no effect when lazy initialization is enabled #46174

Setting spring.netty.leak-detection has no effect when lazy initialization is enabled #46170

SslInfo does not use its Clock when checking certificate validity #46011

📔 Documentation

Fix description of spring.batch.job.enabled #46247

Fix broken Kotlin examples in reference documentation #46168

Add Logback Access Reactor Netty to community starters #46060

🔨 Dependency Upgrades

Upgrade to ActiveMQ 6.1.7 #46373

Upgrade to Caffeine 3.2.2 #46432

Upgrade to Couchbase Client 3.8.2 #46460

Upgrade to GraphQL Java 24.1 #46395

Upgrade to Groovy 4.0.28 #46516

Upgrade to Hibernate 6.6.22.Final #46492

Upgrade to HikariCP 6.3.1 #46493

Upgrade to Infinispan 15.2.5.Final #46461

Upgrade to Jackson Bom 2.19.2 #46494

Upgrade to Jetty 12.0.23 #46375

Upgrade to MariaDB 3.5.4 #46376

Upgrade to Maven Invoker Plugin 3.9.1 #46377

Upgrade to Micrometer 1.15.2 #46280

Upgrade to Micrometer Tracing 1.5.2 #46281

Upgrade to MSSQL JDBC 12.10.1.jre11 #46378

Upgrade to MySQL 9.3.0 #46371

Upgrade to Neo4j Java Driver 5.28.9 #46434

Upgrade to Netty 4.1.123.Final #46435

Upgrade to Prometheus Client 1.3.10 #46379

Upgrade to Reactor Bom 2024.0.8 #46282

Upgrade to RxJava3 3.1.11 #46380

Upgrade to Spring AMQP 3.2.6 #46283

... (truncated)

Commits

925f9bc Release v3.5.4
d82fb35 Merge branch '3.4.x' into 3.5.x
4b6064f Next development version (v3.4.9-SNAPSHOT)
a39c8f0 Merge branch '3.4.x' into 3.5.x
99d53de Upgrade to Spring Integration 6.5.1
1b4aad5 Upgrade to Groovy 4.0.28
3f0f79b Upgrade to Spring Integration 6.4.6
ff8443c Upgrade to Groovy 4.0.28
aed8550 Merge branch '3.4.x' into 3.5.x
5406976 Apply commercial input consistently
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-backend group in /backend with 8 updates: | Package | From | To | | --- | --- | --- | | [io.jsonwebtoken:jjwt-api](https://github.com/jwtk/jjwt) | `0.11.5` | `0.12.6` | | [io.jsonwebtoken:jjwt-impl](https://github.com/jwtk/jjwt) | `0.11.5` | `0.12.6` | | io.jsonwebtoken:jjwt-jackson | `0.11.5` | `0.12.6` | | [org.springdoc:springdoc-openapi-starter-webmvc-ui](https://github.com/springdoc/springdoc-openapi) | `2.5.0` | `2.8.9` | | [jakarta.annotation:jakarta.annotation-api](https://github.com/jakartaee/common-annotations-api) | `2.1.1` | `3.0.0` | | [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `5.12.2` | `5.13.4` | | [org.junit.platform:junit-platform-launcher](https://github.com/junit-team/junit-framework) | `1.12.2` | `1.13.4` | | [org.springframework.boot](https://github.com/spring-projects/spring-boot) | `3.5.3` | `3.5.4` | Updates `io.jsonwebtoken:jjwt-api` from 0.11.5 to 0.12.6 - [Release notes](https://github.com/jwtk/jjwt/releases) - [Changelog](https://github.com/jwtk/jjwt/blob/master/CHANGELOG.md) - [Commits](jwtk/jjwt@0.11.5...0.12.6) Updates `io.jsonwebtoken:jjwt-impl` from 0.11.5 to 0.12.6 - [Release notes](https://github.com/jwtk/jjwt/releases) - [Changelog](https://github.com/jwtk/jjwt/blob/master/CHANGELOG.md) - [Commits](jwtk/jjwt@0.11.5...0.12.6) Updates `io.jsonwebtoken:jjwt-jackson` from 0.11.5 to 0.12.6 Updates `org.springdoc:springdoc-openapi-starter-webmvc-ui` from 2.5.0 to 2.8.9 - [Release notes](https://github.com/springdoc/springdoc-openapi/releases) - [Changelog](https://github.com/springdoc/springdoc-openapi/blob/main/CHANGELOG.md) - [Commits](springdoc/springdoc-openapi@v2.5.0...v2.8.9) Updates `jakarta.annotation:jakarta.annotation-api` from 2.1.1 to 3.0.0 - [Commits](jakartaee/common-annotations-api@2.1.1...3.0.0) Updates `org.junit.jupiter:junit-jupiter` from 5.12.2 to 5.13.4 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r5.12.2...r5.13.4) Updates `org.junit.platform:junit-platform-launcher` from 1.12.2 to 1.13.4 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](https://github.com/junit-team/junit-framework/commits) Updates `org.springframework.boot` from 3.5.3 to 3.5.4 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.3...v3.5.4) --- updated-dependencies: - dependency-name: io.jsonwebtoken:jjwt-api dependency-version: 0.12.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-backend - dependency-name: io.jsonwebtoken:jjwt-impl dependency-version: 0.12.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-backend - dependency-name: io.jsonwebtoken:jjwt-jackson dependency-version: 0.12.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-backend - dependency-name: org.springdoc:springdoc-openapi-starter-webmvc-ui dependency-version: 2.8.9 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-backend - dependency-name: jakarta.annotation:jakarta.annotation-api dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-backend - dependency-name: org.junit.jupiter:junit-jupiter dependency-version: 5.13.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-backend - dependency-name: org.junit.platform:junit-platform-launcher dependency-version: 1.13.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-backend - dependency-name: org.springframework.boot dependency-version: 3.5.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-backend ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 10, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps(backend): bump the all-backend group in /backend with 8 updates #4

deps(backend): bump the all-backend group in /backend with 8 updates #4

Uh oh!

dependabot bot commented on behalf of github Aug 10, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

deps(backend): bump the all-backend group in /backend with 8 updates #4

Are you sure you want to change the base?

deps(backend): bump the all-backend group in /backend with 8 updates #4

Uh oh!

Conversation

dependabot bot commented on behalf of github Aug 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

0.12.6

New Contributors

0.12.5

0.12.4

0.12.6

0.12.5

0.12.4

Jackson Default Parsing Behavior

0.12.6

New Contributors

0.12.5

0.12.4

0.12.6

0.12.5

0.12.4

Jackson Default Parsing Behavior

springdoc-openapi v2.8.9 released!

What's Changed

Added

Changed

Fixed

New Contributors

v2.8.8

Fixed

springdoc-openapi v2.8.7 released!

What's Changed

Added

Changed

Fixed

[2.8.9] - 2025-06-10

Added

Changed

Fixed

[2.8.8] - 2025-05-04

Fixed

[2.8.7] - 2025-05-04

Added

Changed

Fixed

New Contributors

New Contributors

v3.5.4

🐞 Bug Fixes

📔 Documentation

🔨 Dependency Upgrades

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Aug 10, 2025 •

edited

Loading