Skip to content

chore: [DevOps] bump the production-minor-patch group across 1 directory with 5 updates#836

Merged
newtork merged 1 commit intomainfrom
dependabot/maven/main/production-minor-patch-26899d9402
Apr 24, 2026
Merged

chore: [DevOps] bump the production-minor-patch group across 1 directory with 5 updates#836
newtork merged 1 commit intomainfrom
dependabot/maven/main/production-minor-patch-26899d9402

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 23, 2026

Bumps the production-minor-patch group with 5 updates in the / directory:

Package From To
io.projectreactor:reactor-core 3.8.4 3.8.5
io.micrometer:micrometer-core 1.16.4 1.16.5
io.micrometer:micrometer-observation 1.16.4 1.16.5
org.projectlombok:lombok 1.18.44 1.18.46
org.springframework.boot:spring-boot-dependencies 3.5.13 3.5.14

Updates io.projectreactor:reactor-core from 3.8.4 to 3.8.5

Release notes

Sourced from io.projectreactor:reactor-core's releases.

v3.8.5

Reactor Core 3.8.5 is part of the 2025.0.5 Release Train.

What's Changed

✨ New features and improvements

Full Changelog: reactor/reactor-core@v3.8.4...v3.8.5

Commits

Updates io.micrometer:micrometer-core from 1.16.4 to 1.16.5

Release notes

Sourced from io.micrometer:micrometer-core's releases.

1.16.5

🐞 Bug Fixes

  • Invalid reflection hint in micrometer-core for native GraalVM 25 build #7316
  • ObservationGrpcClientInterceptor throws NPE when NameResolver returns empty authority #7380
  • Wrong Nullability Information in OkHttpMetricsEventListener #7373

🔨 Dependency Upgrades

  • Bump com.netflix.spectator:spectator-reg-atlas from 1.9.4 to 1.9.6 #7393
  • Bump spring6 from 6.2.16 to 6.2.17 #7294

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, and @​ribafish

Commits
  • cf727d0 Bump com.netflix.spectator:spectator-reg-atlas from 1.9.5 to 1.9.6 (#7393)
  • 55b8f06 Fix OkHttp tests
  • 140b83b Harmonize @​Nullable annotations in okhttp instrumentation (#7375)
  • 8c1758b Handle null peerName in GrpcClientObservationConvention (#7381)
  • 5ee71b4 Merge branch '1.15.x' into 1.16.x
  • 84faaa6 Fix build cache misses from overlapping outputs in statsd module (#7349)
  • 9a0441d Merge branch '1.15.x' into 1.16.x
  • 1010433 NullMeterTagSupportTests does not match its filename
  • c2770fc Bump org.apache.logging.log4j:log4j-core from 2.25.3 to 2.25.4 (#7362)
  • 26f6da0 Bump io.netty:netty-bom from 4.1.131.Final to 4.1.132.Final (#7335)
  • Additional commits viewable in compare view

Updates io.micrometer:micrometer-observation from 1.16.4 to 1.16.5

Release notes

Sourced from io.micrometer:micrometer-observation's releases.

1.16.5

🐞 Bug Fixes

  • Invalid reflection hint in micrometer-core for native GraalVM 25 build #7316
  • ObservationGrpcClientInterceptor throws NPE when NameResolver returns empty authority #7380
  • Wrong Nullability Information in OkHttpMetricsEventListener #7373

🔨 Dependency Upgrades

  • Bump com.netflix.spectator:spectator-reg-atlas from 1.9.4 to 1.9.6 #7393
  • Bump spring6 from 6.2.16 to 6.2.17 #7294

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, and @​ribafish

Commits
  • cf727d0 Bump com.netflix.spectator:spectator-reg-atlas from 1.9.5 to 1.9.6 (#7393)
  • 55b8f06 Fix OkHttp tests
  • 140b83b Harmonize @​Nullable annotations in okhttp instrumentation (#7375)
  • 8c1758b Handle null peerName in GrpcClientObservationConvention (#7381)
  • 5ee71b4 Merge branch '1.15.x' into 1.16.x
  • 84faaa6 Fix build cache misses from overlapping outputs in statsd module (#7349)
  • 9a0441d Merge branch '1.15.x' into 1.16.x
  • 1010433 NullMeterTagSupportTests does not match its filename
  • c2770fc Bump org.apache.logging.log4j:log4j-core from 2.25.3 to 2.25.4 (#7362)
  • 26f6da0 Bump io.netty:netty-bom from 4.1.131.Final to 4.1.132.Final (#7335)
  • Additional commits viewable in compare view

Updates io.micrometer:micrometer-observation from 1.16.4 to 1.16.5

Release notes

Sourced from io.micrometer:micrometer-observation's releases.

1.16.5

🐞 Bug Fixes

  • Invalid reflection hint in micrometer-core for native GraalVM 25 build #7316
  • ObservationGrpcClientInterceptor throws NPE when NameResolver returns empty authority #7380
  • Wrong Nullability Information in OkHttpMetricsEventListener #7373

🔨 Dependency Upgrades

  • Bump com.netflix.spectator:spectator-reg-atlas from 1.9.4 to 1.9.6 #7393
  • Bump spring6 from 6.2.16 to 6.2.17 #7294

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, and @​ribafish

Commits
  • cf727d0 Bump com.netflix.spectator:spectator-reg-atlas from 1.9.5 to 1.9.6 (#7393)
  • 55b8f06 Fix OkHttp tests
  • 140b83b Harmonize @​Nullable annotations in okhttp instrumentation (#7375)
  • 8c1758b Handle null peerName in GrpcClientObservationConvention (#7381)
  • 5ee71b4 Merge branch '1.15.x' into 1.16.x
  • 84faaa6 Fix build cache misses from overlapping outputs in statsd module (#7349)
  • 9a0441d Merge branch '1.15.x' into 1.16.x
  • 1010433 NullMeterTagSupportTests does not match its filename
  • c2770fc Bump org.apache.logging.log4j:log4j-core from 2.25.3 to 2.25.4 (#7362)
  • 26f6da0 Bump io.netty:netty-bom from 4.1.131.Final to 4.1.132.Final (#7335)
  • Additional commits viewable in compare view

Updates org.projectlombok:lombok from 1.18.44 to 1.18.46

Changelog

Sourced from org.projectlombok:lombok's changelog.

v1.18.46 (April 22nd, 2026)

  • PLATFORM: JDK26 support added #4019.
  • PLATFORM: Spring Tools Suite 5 supported #3985.
  • BUGFIX: @Jacksonized no longer stops generating @JsonProperty once an explicit @JsonIgnore annotations is encountered #4022.
  • BUGFIX: In eclipse, mixing @Jacksonized and fluent = true no longer causes the error com.fasterxml.jackson.annotation.JsonProperty is not a repeatable annotation interface. #3934.
  • BUGFIX: Some finishing touches for v1.18.44's support of Jackson3 #4004.
Commits
  • 936ca59 [build] lombok's launcher is still intended to be 1.4 compatible, or at least...
  • fcdab3f [version] pre-release version bump
  • 1cb7d49 [changelog]#4004 Mention Jackson3 final touches in changelog.
  • 12a15b0 Fix: Bump EA_JDK to 27 (25 and 26 have been released)
  • 2be766c Merge branch 'jackson3-final-touches'
  • 290fa4c [trivial] constantize the warning we spit out for ambiguous jackson2/3, and m...
  • e6567b6 test: Add Jackson 3 test cases and version ambiguity warnings
  • 45e72e2 feat: Add Jackson 3 databind/dataformat annotations to HandlerUtil copy lists
  • 184d423 feat: Add Jackson 3 support to @​Jacksonized handlers
  • e027ad0 refactored to ShadowClassLoader use Collections::enumeration instead of Vector
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-dependencies from 3.5.13 to 3.5.14

Release notes

Sourced from org.springframework.boot:spring-boot-dependencies's releases.

v3.5.14

🐞 Bug Fixes

  • ApplicationPidFileWriter does not handle symlinks correctly #50173
  • RandomValuePropertySource is not suitable for secrets #50172
  • Cassandra auto-configuration misconfigures CqlSessionBuilder #50171
  • ApplicationTemp does not handle symlinks correctly #50170
  • Remote DevTools performs comparison incorrectly #50169
  • spring.rabbitmq.ssl.verify-hostname is applied inconsistently #50168
  • EnversRevisionRepositoriesRegistrar should reuse @EnableEnversRepositories rather than configuring the JPA counterpart #50035
  • Annotations like @Ssl don't work on @Bean methods when using @ServiceConnection #50033
  • Whole number values are ignored when configuring min and max expected values and SLO boundaries for a distribution summary meter #50021
  • WebFlux Cloud Foundry links endpoint includes query string from received request in resolved links #50008
  • 500 response from env endpoint when supplied pattern is invalid #49942
  • HTTP method is lost when configuring excludes in EndpointRequest #49885
  • Docker Compose support doesn't work with apache/artemis image #49865
  • Honor HttpMethod for reactive additional endpoint paths #49864
  • Docker Compose support doesn't work with apache/activemq image #49863
  • Imports on a containing test class are ignored when a nested class has imports #49860

📔 Documentation

  • Link to the observability section of the Lettuce documentation is broken #50092
  • Javadoc for StaticResourceLocation.FAVICON doesn't describe icons location #50083
  • MySamlRelyingPartyConfiguration is missing a Kotlin sample #50023
  • Incorrect default value for management.httpexchanges.recording.include in configuration metadata #50010
  • Link to the Kubernetes documentation when discussing startup probes #50007
  • Update docs to encourage Java fundamentals for beginners that prefer to learn that way #49895
  • Clarify that configuration property default values are not available through the Environment #49835

🔨 Dependency Upgrades

... (truncated)

Commits
  • 7d7b3ac Release v3.5.14
  • 9dc5aa2 Polish
  • f533a45 Do not follow symlinks when writing PID file
  • f3b8eb0 Use SecureRandom in RandomValuePropertySource
  • e22083a Enable hostname verification for SSL connections to Cassandra
  • 5ceb1a2 Improve ApplicationTemp's temporary directory creation
  • 4b0862c Use constant-time comparison for remote DevTools secret
  • e4febe2 Apply verify-hostname consistently
  • 2c2ffe5 Fix Windows test failure
  • 0046a44 Protect against corrupt buildpack archives
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ory with 5 updates

Bumps the production-minor-patch group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [io.projectreactor:reactor-core](https://github.com/reactor/reactor-core) | `3.8.4` | `3.8.5` |
| [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) | `1.16.4` | `1.16.5` |
| [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer) | `1.16.4` | `1.16.5` |
| [org.projectlombok:lombok](https://github.com/projectlombok/lombok) | `1.18.44` | `1.18.46` |
| [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) | `3.5.13` | `3.5.14` |



Updates `io.projectreactor:reactor-core` from 3.8.4 to 3.8.5
- [Release notes](https://github.com/reactor/reactor-core/releases)
- [Commits](reactor/reactor-core@v3.8.4...v3.8.5)

Updates `io.micrometer:micrometer-core` from 1.16.4 to 1.16.5
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.16.4...v1.16.5)

Updates `io.micrometer:micrometer-observation` from 1.16.4 to 1.16.5
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.16.4...v1.16.5)

Updates `io.micrometer:micrometer-observation` from 1.16.4 to 1.16.5
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.16.4...v1.16.5)

Updates `org.projectlombok:lombok` from 1.18.44 to 1.18.46
- [Changelog](https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown)
- [Commits](projectlombok/lombok@v1.18.44...v1.18.46)

Updates `org.springframework.boot:spring-boot-dependencies` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-core
  dependency-version: 3.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: io.micrometer:micrometer-core
  dependency-version: 1.16.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: io.micrometer:micrometer-observation
  dependency-version: 1.16.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: io.micrometer:micrometer-observation
  dependency-version: 1.16.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: org.projectlombok:lombok
  dependency-version: 1.18.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Apr 23, 2026
@newtork newtork merged commit 441df8a into main Apr 24, 2026
4 checks passed
@newtork newtork deleted the dependabot/maven/main/production-minor-patch-26899d9402 branch April 24, 2026 16:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant