[DT-400-maven]: Bump the maven-dependencies group with 8 updates

[dependabot]

Bumps the maven-dependencies group with 8 updates:

Package	From	To
com.fasterxml.jackson.core:jackson-core	2.18.2	2.18.3
com.fasterxml.jackson.core:jackson-annotations	2.18.2	2.18.3
io.sentry:sentry	8.2.0	8.3.0
org.slf4j:slf4j-api	2.0.16	2.0.17
org.mockito:mockito-core	5.15.2	5.16.0
org.mockito:mockito-junit-jupiter	5.15.2	5.16.0
com.google.cloud:google-cloud-storage	2.48.2	2.49.0
org.webjars:swagger-ui	5.18.3	5.20.0

Updates com.fasterxml.jackson.core:jackson-core from 2.18.2 to 2.18.3

Commits

• cc34e8d [maven-release-plugin] prepare release jackson-core-2.18.3
• 7aaf78f Prep for 2.18.3 release
• e1f247f Update Ubuntu in CI
• 31c74ac Fix credits wrt version number
• 583a8c1 ...
• 671f8ed fix the surrogate utf8 feature when custom characterEscapes is used (#1399)
• 0aa97a7 Merge branch '2.17' into 2.18
• 58889b0 Update release notes wrt #1397
• 7e3c408 Changes post #4917: forcibly clear _numberString when new number token set ...
• e67a3ec Merge branch '2.17' into 2.18
• Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-annotations from 2.18.2 to 2.18.3

Commits

• See full diff in compare view

Updates io.sentry:sentry from 8.2.0 to 8.3.0

Release notes

Sourced from io.sentry:sentry's releases.

8.3.0

Features

• Add HTTP server request headers from OpenTelemetry span attributes to sentry request in payload (#4102)
  • You have to explicitly enable each header by adding it to the OpenTelemetry config
  • Please only enable headers you actually want to send to Sentry. Some may contain sensitive data like PII, cookies, tokens etc.
  • We are no longer adding request/response headers to contexts/otel/attributes of the event.
• The ignoredErrors option is now configurable via the manifest property io.sentry.traces.ignored-errors (#4178)
• A list of active Spring profiles is attached to payloads sent to Sentry (errors, traces, etc.) and displayed in the UI when using our Spring or Spring Boot integrations (#4147)
  • This consists of an empty list when only the default profile is active
• Added enableTraceIdGeneration to the AndroidOptions. This allows Hybrid SDKs to "freeze" and control the trace and connect errors on different layers of the application (4188)
• Move to a single NetworkCallback listener to reduce number of IPC calls on Android (#4164)
• Add GraphQL Apollo Kotlin 4 integration (#4166)
• Add support for async dispatch requests to Spring Boot 2 and 3 (#3983)
  • To enable it, please set sentry.keep-transactions-open-for-async-responses=true in application.properties or sentry.keepTransactionsOpenForAsyncResponses: true in application.yml
• Add constructor to JUL SentryHandler for disabling external config (#4208)

Fixes

• Filter strings that cannot be parsed as Regex no longer cause an SDK crash (#4213)
  • This was the case e.g. for ignoredErrors, ignoredTransactions and ignoredCheckIns
  • We now simply don't use such strings for Regex matching and only use them for String comparison
• SentryOptions.setTracePropagationTargets is no longer marked internal (#4170)
• Session Replay: Fix crash when a navigation breadcrumb does not have "to" destination (#4185)
• Session Replay: Cap video segment duration to maximum 5 minutes to prevent endless video encoding in background (#4185)
• Check tracePropagationTargets in OpenTelemetry propagator (#4191)
  • If a URL can be retrieved from OpenTelemetry span attributes, we check it against tracePropagationTargets before attaching sentry-trace and baggage headers to outgoing requests
  • If no URL can be retrieved we always attach the headers
• Fix ignoredErrors, ignoredTransactions and ignoredCheckIns being unset by external options like sentry.properties or ENV vars (#4207)
  • Whenever parsing of external options was enabled (enableExternalConfiguration), which is the default for many integrations, the values set on SentryOptions passed to Sentry.init would be lost
  • Even if the value was not set in any external configuration it would still be set to an empty list

Behavioural Changes

• The class io.sentry.spring.jakarta.webflux.ReactorUtils is now deprecated, please use io.sentry.reactor.SentryReactorUtils in the new sentry-reactor module instead (#4155)
  • The new module will be exposed as an api dependency when using sentry-spring-boot-jakarta (Spring Boot 3) or sentry-spring-jakarta (Spring 6). Therefore, if you're using one of those modules, changing your imports will suffice.

Changelog

Sourced from io.sentry:sentry's changelog.

8.3.0

Features

• Add HTTP server request headers from OpenTelemetry span attributes to sentry request in payload (#4102)
  • You have to explicitly enable each header by adding it to the OpenTelemetry config
  • Please only enable headers you actually want to send to Sentry. Some may contain sensitive data like PII, cookies, tokens etc.
  • We are no longer adding request/response headers to contexts/otel/attributes of the event.
• The ignoredErrors option is now configurable via the manifest property io.sentry.traces.ignored-errors (#4178)
• A list of active Spring profiles is attached to payloads sent to Sentry (errors, traces, etc.) and displayed in the UI when using our Spring or Spring Boot integrations (#4147)
  • This consists of an empty list when only the default profile is active
• Added enableTraceIdGeneration to the AndroidOptions. This allows Hybrid SDKs to "freeze" and control the trace and connect errors on different layers of the application (4188)
• Move to a single NetworkCallback listener to reduce number of IPC calls on Android (#4164)
• Add GraphQL Apollo Kotlin 4 integration (#4166)
• Add support for async dispatch requests to Spring Boot 2 and 3 (#3983)
  • To enable it, please set sentry.keep-transactions-open-for-async-responses=true in application.properties or sentry.keepTransactionsOpenForAsyncResponses: true in application.yml
• Add constructor to JUL SentryHandler for disabling external config (#4208)

Fixes

• Filter strings that cannot be parsed as Regex no longer cause an SDK crash (#4213)
  • This was the case e.g. for ignoredErrors, ignoredTransactions and ignoredCheckIns
  • We now simply don't use such strings for Regex matching and only use them for String comparison
• SentryOptions.setTracePropagationTargets is no longer marked internal (#4170)
• Session Replay: Fix crash when a navigation breadcrumb does not have "to" destination (#4185)
• Session Replay: Cap video segment duration to maximum 5 minutes to prevent endless video encoding in background (#4185)
• Check tracePropagationTargets in OpenTelemetry propagator (#4191)
  • If a URL can be retrieved from OpenTelemetry span attributes, we check it against tracePropagationTargets before attaching sentry-trace and baggage headers to outgoing requests
  • If no URL can be retrieved we always attach the headers
• Fix ignoredErrors, ignoredTransactions and ignoredCheckIns being unset by external options like sentry.properties or ENV vars (#4207)
  • Whenever parsing of external options was enabled (enableExternalConfiguration), which is the default for many integrations, the values set on SentryOptions passed to Sentry.init would be lost
  • Even if the value was not set in any external configuration it would still be set to an empty list

Behavioural Changes

• The class io.sentry.spring.jakarta.webflux.ReactorUtils is now deprecated, please use io.sentry.reactor.SentryReactorUtils in the new sentry-reactor module instead (#4155)
  • The new module will be exposed as an api dependency when using sentry-spring-boot-jakarta (Spring Boot 3) or sentry-spring-jakarta (Spring 6). Therefore, if you're using one of those modules, changing your imports will suffice.

Commits

• d5289e7 release: 8.3.0
• c1a567b Filter strings that cannot be parsed as Regex no longer cause an SDK crash (#...
• f64d1f2 Add support for async dispatch requests (#3983)
• 3b6cfdf Add HTTP server request headers from OpenTelemetry span attributes to sentry ...
• cde02ad Add constructor to JUL SentryHandler for disabling external config (#4208)
• 7d08e30 fix(session-replay): Do not crash if navigation breadcrumb has no destinatio...
• c8461d4 Check tracePropagationTargets in OpenTelemetry propagator (#4191)
• afe9d2c Fix ignoredErrors, ignoredTransactions and ignoredCheckIns being unset ...
• e5e95de feat: Added enableTraceIdGeneration option (#4188)
• c87d429 Add GraphQL Apollo Kotlin 4 integration (#4166)
• Additional commits viewable in compare view

Updates org.slf4j:slf4j-api from 2.0.16 to 2.0.17

Updates org.mockito:mockito-core from 5.15.2 to 5.16.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.16.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.16.0

• 2025-03-03 - 10 commit(s) by Brice Dutheil, Rafael Winterhalter, TDL, dependabot[bot]
• Add support for including module-info in Mockito. [(#3597)](mockito/mockito#3597)
• Bump com.gradle.develocity from 3.19 to 3.19.1 [(#3579)](mockito/mockito#3579)
• Bump org.assertj:assertj-core from 3.27.2 to 3.27.3 [(#3577)](mockito/mockito#3577)
• Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.1 to 7.0.2 [(#3574)](mockito/mockito#3574)
• Bump com.diffplug.spotless:spotless-plugin-gradle from 6.25.0 to 7.0.1 [(#3571)](mockito/mockito#3571)
• Bump org.assertj:assertj-core from 3.27.1 to 3.27.2 [(#3569)](mockito/mockito#3569)
• Tweaks documentation on mockito agent config for maven [(#3568)](mockito/mockito#3568)
• Adds --info to diagnose closeAndReleaseStagingRepositories issues [(#3567)](mockito/mockito#3567)
• Refine reflection when calling management factory [(#3566)](mockito/mockito#3566)
• Avoid warning when dynamic attach is enabled [(#3551)](mockito/mockito#3551)

Commits

• c81be5d Add support for including module-info in Mockito. (#3597)
• d01ac9d Issue #3584 Improve Gradle Kotlin documentation to add agent
• 83ee69b Bump com.gradle.develocity from 3.19 to 3.19.1 (#3579)
• 289e971 Bump org.assertj:assertj-core from 3.27.2 to 3.27.3 (#3577)
• 1ab8483 Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.1 to 7.0.2 (#3574)
• fdb5df1 Bump com.diffplug.spotless:spotless-plugin-gradle from 6.25.0 to 7.0.1 (#3571)
• e280630 Bump org.assertj:assertj-core from 3.27.1 to 3.27.2 (#3569)
• 96c2095 Tweak documentation on mockito agent config for maven (#3568)
• 1c3800d Add --info to diagnose release issues (#3567)
• e9a4c77 Refine reflection when calling management factory (#3566)
• See full diff in compare view

Updates org.mockito:mockito-junit-jupiter from 5.15.2 to 5.16.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.16.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.16.0

• 2025-03-03 - 10 commit(s) by Brice Dutheil, Rafael Winterhalter, TDL, dependabot[bot]
• Add support for including module-info in Mockito. [(#3597)](mockito/mockito#3597)
• Bump com.gradle.develocity from 3.19 to 3.19.1 [(#3579)](mockito/mockito#3579)
• Bump org.assertj:assertj-core from 3.27.2 to 3.27.3 [(#3577)](mockito/mockito#3577)
• Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.1 to 7.0.2 [(#3574)](mockito/mockito#3574)
• Bump com.diffplug.spotless:spotless-plugin-gradle from 6.25.0 to 7.0.1 [(#3571)](mockito/mockito#3571)
• Bump org.assertj:assertj-core from 3.27.1 to 3.27.2 [(#3569)](mockito/mockito#3569)
• Tweaks documentation on mockito agent config for maven [(#3568)](mockito/mockito#3568)
• Adds --info to diagnose closeAndReleaseStagingRepositories issues [(#3567)](mockito/mockito#3567)
• Refine reflection when calling management factory [(#3566)](mockito/mockito#3566)
• Avoid warning when dynamic attach is enabled [(#3551)](mockito/mockito#3551)

Commits

• c81be5d Add support for including module-info in Mockito. (#3597)
• d01ac9d Issue #3584 Improve Gradle Kotlin documentation to add agent
• 83ee69b Bump com.gradle.develocity from 3.19 to 3.19.1 (#3579)
• 289e971 Bump org.assertj:assertj-core from 3.27.2 to 3.27.3 (#3577)
• 1ab8483 Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.1 to 7.0.2 (#3574)
• fdb5df1 Bump com.diffplug.spotless:spotless-plugin-gradle from 6.25.0 to 7.0.1 (#3571)
• e280630 Bump org.assertj:assertj-core from 3.27.1 to 3.27.2 (#3569)
• 96c2095 Tweak documentation on mockito agent config for maven (#3568)
• 1c3800d Add --info to diagnose release issues (#3567)
• e9a4c77 Refine reflection when calling management factory (#3566)
• See full diff in compare view

Updates org.mockito:mockito-junit-jupiter from 5.15.2 to 5.16.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.16.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.16.0

• 2025-03-03 - 10 commit(s) by Brice Dutheil, Rafael Winterhalter, TDL, dependabot[bot]
• Add support for including module-info in Mockito. [(#3597)](mockito/mockito#3597)
• Bump com.gradle.develocity from 3.19 to 3.19.1 [(#3579)](mockito/mockito#3579)
• Bump org.assertj:assertj-core from 3.27.2 to 3.27.3 [(#3577)](mockito/mockito#3577)
• Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.1 to 7.0.2 [(#3574)](mockito/mockito#3574)
• Bump com.diffplug.spotless:spotless-plugin-gradle from 6.25.0 to 7.0.1 [(#3571)](mockito/mockito#3571)
• Bump org.assertj:assertj-core from 3.27.1 to 3.27.2 [(#3569)](mockito/mockito#3569)
• Tweaks documentation on mockito agent config for maven [(#3568)](mockito/mockito#3568)
• Adds --info to diagnose closeAndReleaseStagingRepositories issues [(#3567)](mockito/mockito#3567)
• Refine reflection when calling management factory [(#3566)](mockito/mockito#3566)
• Avoid warning when dynamic attach is enabled [(#3551)](mockito/mockito#3551)

Commits

• c81be5d Add support for including module-info in Mockito. (#3597)
• d01ac9d Issue #3584 Improve Gradle Kotlin documentation to add agent
• 83ee69b Bump com.gradle.develocity from 3.19 to 3.19.1 (#3579)
• 289e971 Bump org.assertj:assertj-core from 3.27.2 to 3.27.3 (#3577)
• 1ab8483 Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.1 to 7.0.2 (#3574)
• fdb5df1 Bump com.diffplug.spotless:spotless-plugin-gradle from 6.25.0 to 7.0.1 (#3571)
• e280630 Bump org.assertj:assertj-core from 3.27.1 to 3.27.2 (#3569)
• 96c2095 Tweak documentation on mockito agent config for maven (#3568)
• 1c3800d Add --info to diagnose release issues (#3567)
• e9a4c77 Refine reflection when calling management factory (#3566)
• See full diff in compare view

Updates com.google.cloud:google-cloud-storage from 2.48.2 to 2.49.0

Release notes

Sourced from com.google.cloud:google-cloud-storage's releases.

v2.49.0

2.49.0 (2025-02-26)

Features

• Add new Options to allow per method header values (#2941) (297802d)
• transfer-manager: Add ParallelUploadConfig.Builder#setUploadBlobInfoFactory (#2936) (86e9ae8), closes #2638

Bug Fixes

• Categorize a WatchdogTimeoutException as retriable for grpc ReadObject (#2954) (b53bd53)
• deps: Update the Java code generator (gapic-generator-java) to 2.53.0 (9946d6b)
• Update grpc based Storage to defer project id validation (#2930) (cc03784)
• Update kms key handling when opening a resumable upload to clear the value in the json to be null rather than empty string (#2939) (43553de)

Dependencies

• Update sdk-platform-java dependencies (#2957) (40cfda6)

Documentation

• Add note about HNS support to moveBlob (#2929) (c461546)

Changelog

Sourced from com.google.cloud:google-cloud-storage's changelog.

2.49.0 (2025-02-26)

Features

• Add new Options to allow per method header values (#2941) (297802d)
• transfer-manager: Add ParallelUploadConfig.Builder#setUploadBlobInfoFactory (#2936) (86e9ae8), closes #2638

Bug Fixes

• Categorize a WatchdogTimeoutException as retriable for grpc ReadObject (#2954) (b53bd53)
• deps: Update the Java code generator (gapic-generator-java) to 2.53.0 (9946d6b)
• Update grpc based Storage to defer project id validation (#2930) (cc03784)
• Update kms key handling when opening a resumable upload to clear the value in the json to be null rather than empty string (#2939) (43553de)

Dependencies

• Update sdk-platform-java dependencies (#2957) (40cfda6)

Documentation

• Add note about HNS support to moveBlob (#2929) (c461546)

Commits

• 8ea21b3 chore(main): release 2.49.0 (#2931)
• 40cfda6 deps: update sdk-platform-java dependencies (#2957)
• d6d6f8e test(deps): update dependency org.slf4j:jul-to-slf4j to v2.0.17 (#2953)
• b53bd53 fix: categorize a WatchdogTimeoutException as retriable for grpc ReadObject (...
• 297802d feat: add new Options to allow per method header values (#2941)
• cc4c7f4 chore: renovate config fix for ch.qos.logback:logback-classic (#2952)
• 51fcce1 chore: Update generation configuration at Tue Feb 25 02:24:21 UTC 2025 (#2951)
• 95e540a chore: add renovate logging config (#2949)
• 99d0f0c test: add slf4j and logback config for tests (#2946)
• 9af146d chore(deps): update dependency com.google.cloud:libraries-bom to v26.55.0 (#2...
• Additional commits viewable in compare view

Updates org.webjars:swagger-ui from 5.18.3 to 5.20.0

Release notes

Sourced from org.webjars:swagger-ui's releases.

Swagger UI v5.20.0 Released!

5.20.0 (2025-02-27)

Bug Fixes

• docker: add OpenContainer labels
• json-schema-5: fix JumpToPath feature for schemas, closes swagger-api/swagger-editor#4035
• fix JumpToPath feature for auth methods
• display the correct name of security methods
• fix console errors appearing when security scheme is not defined
• components: render examples only when their shape is correct
• swagger-client: allow resolving URLs without extensions, closes swagger-api/apidom#4298
• css: fix css sourcemaps
• security: update axios to address CVE-2024-39338
• swagger-client: do not encode server variables, closes swagger-api/swagger-js#3656
• security: fix unsafe cookie serialization, addresses CVE-2024-47764, GHSA-pxg6-pf52-xh8x
• spec: compensate if OpenAPI.paths field is defined as unexpected structure
• json-schema-2020-12: check for schema type before extracting extension keywords, closes swagger-ui/issues#9376
• json-schema-2020-12: fix rendering of uniqueItems keyword
• json-schema-2020-12: fix overrides of JSON Schema extension keywords
• spec: clear JSON state when loading a new definition
• oas31: fix caching of JSON Schema 2020-12 context
• json-schema-2020-12: fix default expansion being applied to components after initial render
• json-schema-2020-12: fix complex schemas expanding beyond the default expansion depth
• json-schema-2020-12: fix deep expansion not expanding some of the keywords
• oas31: fix expansion of Schema Object fixed fields

Features

• swagger-ui-react: add support for initialState prop
• add horizontal scrollbar for schemas, refs swagger-api/swagger-ui#8940
• display schema of complex parameters
• display schema of complex request body properties
• json-schema-2020-12: allow to use fn outside of React context
• oas31: display schema of complex parameters with union type
• oas31: display schema of complex request body properties with union type
• oas31: display textarea for parameters with complex union type
• json-schema-2020-12: allow to use getTitle outside of JSON Schema 2020-12 context
• json-schema-2020-12: introduce system bound HOC
• json-schema-2020-12: add support for rendering extension keywords, closes swagger-ui/issues#9376
• json-schema-2020-12: add support for rendering examples keyword
• json-schema-2020-12: use JSON Viewer to display keywords with complex values
• json-schema-2020-12: handle empty objects and arrays in JSONViewer
• oas3: more support for OpenAPI 3.0.4
• introduce custom URL sanitization mechanism
• apply additional fixes for custom URL sanitization mechanism
• oas31: add support for OpenAPI extensions
• json-schema-2020-12: respect showExtensions config option

... (truncated)

Commits

• d9887d6 chore(release): cut the v5.20.0 release
• 80d56c9 feat: apply cumulative update to address various issues (#10324)
• 621a7f0 chore(deps-dev): bump prettier from 3.5.1 to 3.5.2 (#10315)
• 6bcd033 chore(deps-dev): bump @​babel/cli from 7.24.7 to 7.26.4 (#10309)
• aed0312 chore(deps-dev): bump @​babel/plugin-transform-runtime (#10310)
• 25fec5e chore(deps-dev): bump jsdom from 25.0.1 to 26.0.0 (#10304)
• 741d1d1 chore(deps-dev): bump @​babel/register from 7.23.7 to 7.25.9 (#10302)
• d0936b1 chore(deps-dev): bump @​babel/preset-env from 7.24.7 to 7.26.9 (#10303)
• a8fc30d test(oas31): move test out of components (#10300)
• dfa908d chore(release): cut the v5.19.0 release
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
org.webjars:swagger-ui	[< 4.2, > 4.1.3]
org.webjars:swagger-ui	[< 4.5, > 4.4.1]
org.webjars:swagger-ui	[>= 4.9.a, < 4.10]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[rushtong]

👍🏽

[fboulnois]

👍

[rushtong]

Just a note that I double checked the swagger update worked 👍🏽