chore: [DevOps] bump the production-minor-patch group with 19 updates by dependabot[bot] · Pull Request #1164 · SAP/cloud-sdk-java

dependabot · 2026-05-05T01:32:02Z

Bumps the production-minor-patch group with 19 updates:

Package	From	To
org.openapitools:openapi-generator	`7.21.0`	`7.22.0`
io.swagger.core.v3:swagger-models	`2.2.48`	`2.2.49`
io.swagger.parser.v3:swagger-parser	`2.1.40`	`2.1.41`
io.swagger.parser.v3:swagger-parser-core	`2.1.40`	`2.1.41`
com.fasterxml.jackson.core:jackson-core	`2.21.2`	`2.21.3`
com.fasterxml.jackson.core:jackson-databind	`2.21.2`	`2.21.3`
com.fasterxml.jackson.dataformat:jackson-dataformat-xml	`2.21.2`	`2.21.3`
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml	`2.21.2`	`2.21.3`
com.fasterxml.jackson.datatype:jackson-datatype-guava	`2.21.2`	`2.21.3`
com.fasterxml.jackson.datatype:jackson-datatype-joda	`2.21.2`	`2.21.3`
com.fasterxml.jackson.datatype:jackson-datatype-jsr310	`2.21.2`	`2.21.3`
com.github.ben-manes.caffeine:jcache	`3.2.3`	`3.2.4`
com.sap.cloud.security:java-bom	`4.0.4`	`4.0.5`
com.sap.cloud.environment.servicebinding:java-modules-bom	`0.30.0`	`0.31.0`
com.github.ben-manes.caffeine:caffeine	`3.2.3`	`3.2.4`
com.auth0:java-jwt	`4.5.1`	`4.5.2`
org.checkerframework:checker-qual	`4.0.0`	`4.1.0`
io.grpc:grpc-bom	`1.80.0`	`1.81.0`
joda-time:joda-time	`2.14.1`	`2.14.2`

Updates org.openapitools:openapi-generator from 7.21.0 to 7.22.0

Release notes

Sourced from org.openapitools:openapi-generator's releases.

v7.22.0 released

v7.22.0 stable release comes with 150+ enhancements and bug fixes.

Below are the highlights of the changes. For a full list of changes, please refer to the "Pull Request" tab.

General

refactor: centralize common schema checks in ModelUtils #23608

[CORE] : BUGFIX - prevent Stream closed on concurrent JAR access in TemplateManager #23596

Improve OneOf handling with new normalizer REPLACE_ONE_OF_BY_DISCRIMINATOR_MAPPING #23543

ci: upload openapi-generator-cli.jar as GitHub Release asset #23524

fix: preserve parent description when simplifying nullable anyOf/oneOf #23361

[GRADLE-PLUGIN] - Modernize plugin to use Lazy Configuration API #23042

C#

[csharp][generichost] Fix TokenBase race condition #23356

[csharp][generichost] Fix possible concatentation bug #23355

[csharp][generichost] Fix invalid implicit cast #23344

[csharp][generichost] Treat warnings as errors #23343

[csharp][generichost] Fix dateTimeOffset bug #23342

Marking a class abstract should not mark the methods abstract as well #23291

[csharp][generichost] Multiple oauth tokens #23264

[csharp] Support null types #23260

Crystal

[crystal] Fix empty auth_settings Hash literal #23625

Dart

[dart-dio] Fix json_serializable serialize template to support hasFormParams #23579

Fix wrong import statements in dart-dio when using import-mappings #23571

fix: Change Dart Serializer for MapBuilder to be nullable #23460

feat(dart-dio): add methods to remove auth tokens in api client #23386

Go

feat(go): add enumUnknownDefaultCase config option #23417

Java

Correct imports for RxJava2 and RxJava3. Add support for Vert.x 5. #23563

add support for sealed response interfaces for spring-declarative-http-interface #23549

[Java][jersey3] Add error entity deserialization to ApiException #23542

[Java] [apache-httpclient] Add support for Jackson3 for apache httpclient generator #23446

[Java][WebClient][RestClient] Standardize useAbstractionForFiles behavior to use Resource interface #23382

feat(spring): enable openApiNullable with useJackson3 #23331

[java] [Spring] useJspecify for java clients and spring generator #23256

Kotlin

[KOTLIN-SPRING;JAVA-SPRING] chore: upgrade spring boot 3 to 3.3.13 version #23591

[KOTLIN-SPRING] Add oneOf sealed interface support with discriminator #23574

fix [Kotlin]: handle nullable response.body in jvm-okhttp ApiClient #23515

[kotlin-server] Fix class names for useTags #23441

fix(kotlin-spring): use Jackson 3 annotation package in model imports #23406

... (truncated)

Commits

f4d1cb8 v7.22.0 release (#23641)
8847c06 fix(kotlin-spring): add explicit Jackson 3 dependency versions for Spring Boo...
80ea9e5 fix(python): Fix sanitize_for_serialization code generation for python client...
d99a8c9 Update axios to 1.15.2 (#23637)
33ef2a0 [rust-axum] Fix uint32/uint64 type mapping (#23547)
7275888 update normalizer doc with correct path to spec (#23636)
0b1ac88 Improve OneOf handling with new normalizer REPLACE_ONE_OF_BY_DISCRIMINATOR_MA...
568501f build(deps-dev): bump postcss (#23634)
ce59f5a fix: issue 23548 (add support for sealed response interfaces for spring-decla...
c90cfa7 fix(openapi-yaml): preserve format:byte examples (#23623)
Additional commits viewable in compare view

Updates io.swagger.core.v3:swagger-models from 2.2.48 to 2.2.49

Updates io.swagger.parser.v3:swagger-parser from 2.1.40 to 2.1.41

Release notes

Sourced from io.swagger.parser.v3:swagger-parser's releases.

Swagger-parser 2.1.41 released!

Bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.14 (#2317)

chore: update v2 parser to 1.0.76 (#2314)

Prevent StackOverflowError in ResolverFully (#2297)

Fix thread-safety bug in OpenAPIDereferencer31 (#2294)

fix(converter): keep x-nullable in shared $ref responses (#2276)

Commits

1d86e4a prepare release 2.1.41 (#2322)
f0cb8e5 Fix thread-safety bug in OpenAPIDereferencer31 (#2294)
9e2ff91 Prevent StackOverflowError in ResolverFully (#2297)
57c0edb Bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.14 (#2317)
bb8a82c fix(converter): keep x-nullable in shared $ref responses (#2276)
b6ed0cc chore: update v2 parser to 1.0.76 (#2314)
afc1742 Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.2 to 3.6.3 (#2025)
370c009 Bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.2 to 3.2.5 (#2045)
bfd616c Bump org.jacoco:jacoco-maven-plugin from 0.8.8 to 0.8.11 (#2027)
81d8790 bump snapshot 2.1.41-SNAPSHOT (#2310)
See full diff in compare view

Updates io.swagger.parser.v3:swagger-parser-core from 2.1.40 to 2.1.41

Updates com.fasterxml.jackson.core:jackson-core from 2.21.2 to 2.21.3

Commits

5815636 [maven-release-plugin] prepare release jackson-core-2.21.3
6e728f9 Prep for 2.21.3 release
4e30cf2 Merge branch '2.20' into 2.21
1429fff Merge branch '2.19' into 2.20
8f622c5 Merge branch '2.18' into 2.19
cd4d6b2 Post-release dep version bump
0345882 [maven-release-plugin] prepare for next development iteration
a7a5562 [maven-release-plugin] prepare release jackson-core-2.18.7
cd647ea Prep for 2.18.7 release
0ac2f77 Update release notes
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.21.2 to 2.21.3

Commits

See full diff in compare view

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-xml from 2.21.2 to 2.21.3

Commits

797e9c5 [maven-release-plugin] prepare release jackson-dataformat-xml-2.21.3
2f97c37 Prep for 2.21.3 release
2cf2278 Merge branch '2.20' into 2.21
14641c8 Merge branch '2.19' into 2.20
6a60f08 Merge branch '2.18' into 2.19
4f33205 Post-release dep version bump
a14b1ce [maven-release-plugin] prepare for next development iteration
becde8e [maven-release-plugin] prepare release jackson-dataformat-xml-2.18.7
72a4a37 Prep for 2.18.7 release
74b2742 Post-release dep version bump
Additional commits viewable in compare view

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-yaml from 2.21.2 to 2.21.3

Commits

ccfcc95 [maven-release-plugin] prepare release jackson-dataformats-text-2.21.3
5e81617 Prep for 2.21.3 release
52ab617 Merge branch '2.20' into 2.21
84f99f7 Merge branch '2.19' into 2.20
4fe54cb Merge branch '2.18' into 2.19
f18c578 Post-release dep version bump
8db1032 [maven-release-plugin] prepare for next development iteration
7afb263 [maven-release-plugin] prepare release jackson-dataformats-text-2.18.7
ec50f24 Prep for 2.18.7 release
a8bedbd Post-release dep version bump
Additional commits viewable in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-guava from 2.21.2 to 2.21.3

Commits

606cf20 [maven-release-plugin] prepare release jackson-datatypes-collections-2.21.3
a94e222 Prep for 2.21.3 release
86b9db2 Post-release dep version bump
55354b3 [maven-release-plugin] prepare for next development iteration
See full diff in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-joda from 2.21.2 to 2.21.3

Commits

a64fbe0 [maven-release-plugin] prepare release jackson-datatype-joda-2.21.3
3009642 Prep for 2.21.3 release
fc02f6e Post-release dep version bump
da7bc3e [maven-release-plugin] prepare for next development iteration
See full diff in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.21.2 to 2.21.3

Updates com.fasterxml.jackson.core:jackson-databind from 2.21.2 to 2.21.3

Commits

See full diff in compare view

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-xml from 2.21.2 to 2.21.3

Commits

797e9c5 [maven-release-plugin] prepare release jackson-dataformat-xml-2.21.3
2f97c37 Prep for 2.21.3 release
2cf2278 Merge branch '2.20' into 2.21
14641c8 Merge branch '2.19' into 2.20
6a60f08 Merge branch '2.18' into 2.19
4f33205 Post-release dep version bump
a14b1ce [maven-release-plugin] prepare for next development iteration
becde8e [maven-release-plugin] prepare release jackson-dataformat-xml-2.18.7
72a4a37 Prep for 2.18.7 release
74b2742 Post-release dep version bump
Additional commits viewable in compare view

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-yaml from 2.21.2 to 2.21.3

Commits

ccfcc95 [maven-release-plugin] prepare release jackson-dataformats-text-2.21.3
5e81617 Prep for 2.21.3 release
52ab617 Merge branch '2.20' into 2.21
84f99f7 Merge branch '2.19' into 2.20
4fe54cb Merge branch '2.18' into 2.19
f18c578 Post-release dep version bump
8db1032 [maven-release-plugin] prepare for next development iteration
7afb263 [maven-release-plugin] prepare release jackson-dataformats-text-2.18.7
ec50f24 Prep for 2.18.7 release
a8bedbd Post-release dep version bump
Additional commits viewable in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-guava from 2.21.2 to 2.21.3

Commits

606cf20 [maven-release-plugin] prepare release jackson-datatypes-collections-2.21.3
a94e222 Prep for 2.21.3 release
86b9db2 Post-release dep version bump
55354b3 [maven-release-plugin] prepare for next development iteration
See full diff in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-joda from 2.21.2 to 2.21.3

Commits

a64fbe0 [maven-release-plugin] prepare release jackson-datatype-joda-2.21.3
3009642 Prep for 2.21.3 release
fc02f6e Post-release dep version bump
da7bc3e [maven-release-plugin] prepare for next development iteration
See full diff in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.21.2 to 2.21.3

Updates com.github.ben-manes.caffeine:jcache from 3.2.3 to 3.2.4

Release notes

Sourced from com.github.ben-manes.caffeine:jcache's releases.

3.2.4

Improved access expiration's read performance by avoiding false sharing effects caused by the timestamp update

Fixed head-of-line blocking of expiration queues caused by in-flight async entries (#1954)

Fixed various minor issues found using AI audits

Added ObjectInputFilter support to JCache

Commits

836b65c use a consistent expiration tolerance calculation
0dc7daf resurrect in-flight async entries on expiration
0bac8b5 handle head-of-line blocking of expiration queues (fixes #1954)
ff25836 test polish
f3a6176 Fix JCache close/createCache races and recursive teardown
622fbe7 Fix removal in identity views and widen hill-climber counters
8da5a7a defer weighing the entry until after the putIfAbsent hit fast-path
94ad0ff Record eviction stats before notifying the removal listener consistently
f94c011 Auto-assert eviction stats alongside notifications.withCause.exclusively
2e945e0 Skip timestamp writes within tolerance on the read path.
Additional commits viewable in compare view

Updates com.sap.cloud.security:java-bom from 4.0.4 to 4.0.5

Release notes

Sourced from com.sap.cloud.security:java-bom's releases.

4.0.5

Restore deprecated HttpClientFactory.services field and ServiceLoader-based factory discovery for backward compatibility

Custom HttpClientFactory implementations registered via META-INF/services are discovered again

A deprecation warning is logged when a custom factory is used, guiding users to migrate to SecurityHttpClientFactory with SecurityHttpClientProvider

Token services with default (no-arg) constructors continue to use the new SecurityHttpClientProvider internally

Fix multi-tenant IAS token exchange by adding app_tid parameter to the token exchange request in DefaultIdTokenExtension

In multi-tenant applications, IAS requires app_tid in addition to client_id to uniquely identify the application

The app_tid is extracted from the incoming access token and included when present

Changelog

Sourced from com.sap.cloud.security:java-bom's changelog.

4.0.5

Restore deprecated HttpClientFactory.services field and ServiceLoader-based factory discovery for backward compatibility

Custom HttpClientFactory implementations registered via META-INF/services are discovered again

A deprecation warning is logged when a custom factory is used, guiding users to migrate to SecurityHttpClientFactory with SecurityHttpClientProvider

Token services with default (no-arg) constructors continue to use the new SecurityHttpClientProvider internally

Fix multi-tenant IAS token exchange by adding app_tid parameter to the token exchange request in DefaultIdTokenExtension

In multi-tenant applications, IAS requires app_tid in addition to client_id to uniquely identify the application

The app_tid is extracted from the incoming access token and included when present

Commits

2f9e42e Feature/restore httpclientfactory services (#1948)
eddb3a9 Bugfix/add app tid to id token exchange (#1949)
See full diff in compare view

Updates com.sap.cloud.environment.servicebinding:java-modules-bom from 0.30.0 to 0.31.0

Release notes

Sourced from com.sap.cloud.environment.servicebinding:java-modules-bom's releases.

Release 0.31.0

What's Changed

chore: Improve Deployment workflow by @Jonas-Isr in SAP/btp-environment-variable-access#322

Spring 7/Spring Boot 4 migration: update import by @drichtsteiger in SAP/btp-environment-variable-access#320

Full Changelog: SAP/btp-environment-variable-access@0.30.0...0.31.0

Commits

c72ff03 bump version 0.30.0 -> 0.31.0
f3eca41 Spring 7/Spring Boot 4 migration: update import (#320)
c8b4b22 chore: Improve Deployment workflow (#322)
See full diff in compare view

Updates com.github.ben-manes.caffeine:caffeine from 3.2.3 to 3.2.4

Release notes

Sourced from com.github.ben-manes.caffeine:caffeine's releases.

3.2.4

Improved access expiration's read performance by avoiding false sharing effects caused by the timestamp update

Fixed head-of-line blocking of expiration queues caused by in-flight async entries (#1954)

Fixed various minor issues found using AI audits

Added ObjectInputFilter support to JCache

Commits

836b65c use a consistent expiration tolerance calculation
0dc7daf resurrect in-flight async entries on expiration
0bac8b5 handle head-of-line blocking of expiration queues (fixes #1954)
ff25836 test polish
f3a6176 Fix JCache close/createCache races and recursive teardown
622fbe7 Fix removal in identity views and widen hill-climber counters
8da5a7a defer weighing the entry until after the putIfAbsent hit fast-path
94ad0ff Record eviction stats before notifying the removal listener consistently
f94c011 Auto-assert eviction stats alongside notifications.withCause.exclusively
2e945e0 Skip timestamp writes within tolerance on the read path.
Additional commits viewable in compare view

Updates com.auth0:java-jwt from 4.5.1 to 4.5.2

Release notes

Sourced from com.auth0:java-jwt's releases.

4.5.2

Added

Chore: Bump update commons-beanutils dependency #761 (tanya732)

Chore: Update Readme with Java 21 #760 (tanya732)

Changelog

Sourced from com.auth0:java-jwt's changelog.

4.5.2 (2026-04-29)

Full Changelog

Added

Chore: Bump update commons-beanutils dependency #761 (tanya732)

Chore: Update Readme with Java 21 #760 (tanya732)

Commits

695fd2b Release 4.5.2 (#765)
4ac3178 Release 4.5.2
d056a79 Bump com.fasterxml.jackson.core:jackson-databind from 2.21.2 to 2.21.3 in /li...
37f195a Bump com.fasterxml.jackson.core:jackson-databind in /lib
dba4c93 Chore: Bump update commons-beanutils dependency (#761)
84d4c8f Merge branch 'master' into chore/bump-commons-beanutils
5c923d4 Chore: Add SCA scan workflow (#762)
09a4da5 Merge branch 'master' into chore/add-sca-scan
ef47e64 Chore: Add SCA scan workflow
3fcfbcb Chore: Bump update commons-beanutils dependency
Additional commits viewable in compare view

Updates org.checkerframework:checker-qual from 4.0.0 to 4.1.0

Release notes

Sourced from org.checkerframework:checker-qual's releases.

Checker Framework 4.1.0

Version 4.1.0 (2026-05-01)

User-visible changes

Removed deprecated script checker/bin-devel/build.sh; use ./gradlew assemble instead.

Removed deprecated names "builder", "object.construction", and "objectconstruction" for the Called Methods Checker.

Implementation details

New method annotation @DoesNotUnrefineReceiver.

In AnnotatedTypeFactory:

new method hasDoesNotUnrefineReceiver().

isAliasedTypeAnnotation() is now protected rather than public.

Closed issues

#6890, #7364, #7488.

Changelog

Sourced from org.checkerframework:checker-qual's changelog.

Version 4.1.0 (2026-05-01)

User-visible changes

Removed deprecated script checker/bin-devel/build.sh; use ./gradlew assemble instead.

Removed deprecated names "builder", "object.construction", and "objectconstruction" for the Called Methods Checker.

Implementation details

New method annotation @DoesNotUnrefineReceiver.

In AnnotatedTypeFactory:

new method hasDoesNotUnrefineReceiver().

isAliasedTypeAnnotation() is now protected rather than public.

Closed issues

#6890, #7364, #7488.

Commits

b8a7ca6 new release 4.1.0
f1563d2 Update for release.
7867737 Set environment variable GH_TOKEN
771b037 Tweak documentation (#7668)
71735d1 Fix documentation typo
6465706 Make isAliasedTypeAnnotation() protected (#7667)
8af69bc Update cimg/base Docker tag to v2026.04
fa3ad9b How to update the Hevea version number
18002bf Use environment variable
dd8381c Set up GitHub Actions CI
Additional commits viewable in compare view

Updates io.grpc:grpc-bom from 1.80.0 to 1.81.0

Release notes

Sourced from io.grpc:grpc-bom's releases.

V1.81.0

In this release we drop support for Android API level 22 or lower (Lollipop or earlier), following Google Play Service’s discontinued updates for Lollipop (API levels 21 & 22) and now requires a minimum of API level 23 (Android 6.0 Marshmallow).

API Changes

api: Deprecate LoadBalancer.handleResolvedAddresses(). Developers maintaining custom LoadBalancer implementations should transition to using LoadBalancer.acceptResolvedAddresses(). Unlike the deprecated method, acceptResolvedAddresses() returns a Status object, allowing the load balancer to explicitly report success or reject the update if the provided addresses or configuration are invalid. (#11623)

Behavior Changes

core: Enable dns "caching" on Android for 30 seconds to reduce CPU impact of a refresh loop with an LB policy (0675f70af). DnsNameResolver ignores re-resolution requests on OpenJDK-like platforms if it has been too soon since the last DNS query because InetAddress.getAllByName() has a cache with a fixed entry lifetime, but this logic was disabled for Android which does not have that style of cache. Android’s cache uses the result TTL, which will rarely be less than 30 seconds. This change would probably be most noticeable when 1) changing to a different network (e.g., from wifi to mobile), 2) the server has different addresses for different networks, and 3) the app is not using AndroidChannelBuilder with an android.context.Context. For reference, it seems Chrome caches for 1 minute

Bug Fixes

opentelemetry: Fix baggage propagation, the baggage propagation for opentelemetry introduced in #12389 was broken. The context is decided once and used for all recording for the call, thus guaranteeing all record()s have consistent information.

core: Address a race condition where ManagedChannelOrphanWrapper could incorrectly log a "not shutdown properly" warning during garbage collection when using directExecutor(). (#12705) (d459338d9)

xds: Fix xDS HTTP CONNECT's transport socket name bug which is now corrected to use typeUrl. (#12740) (eac9fe961)

xds: Fix an issue where subchannel metrics were dropping their association with the backend_service. This ensures xDS load balancing metrics are reported accurately. (#12735)

New Features

netty: Add tcp metrics, by implementing a few of the metrics defined in A80.

api: Add a CallOption for a custom label on per-RPC metrics (0e39b2967). This CallOption is copied by grpc-opentelemetry to the grpc.client.call.custom label as defined by gRFC A108. See also the gRPC OpenTelemetry Metrics guide (update in-progress)

xds: Add support for Weighted Round Robin (WRR) load balancing driven by custom backend metrics, implementing the behavior defined in gRFC A114. (#12645)

utils: Update AdvancedTlsX509KeyManager so that developers can now preserve and use key aliases when dynamically reloading TLS certificates. (#12686)

Documentation

Update the "Outgoing Flow Control" section in the Manual Flow Control example to say onNext() does not block, but rather queues the messages in memory and advises developers to use CallStreamObserver.isReady() to prevent this memory exhaustion (#12700) (a3a9ffcbe) (#12726) (65ae2efda)

examples: Clean up Health example, and document need for grpc-services (3ed732fc0)

Dependencies

Upgrade Dependencies (#12719) (16e17abba). Google-auth-library: 1.42.1, animal-sniffer: 1.27, assertj-core:3.27.7, error_prone_annotations:2.48.0, proto-google-common-protos:2.64.1, google-cloud-logging:3.23.10, jetty-http2-server:12.1.7, jetty-ee10-servlet:12.1.7, lincheck:3.4, opentelemetry-api:1.60.1, opentelemetry-exporter-prometheus:1.60.1-alpha, opentelemetry-gcp-resources:1.54.0-alpha, opentelemetry-sdk-extension-autoconfigure:1.60.1, opentelemetry-sdk-testing:1.60.1, robolectric:4.16.1, tomcat-embed-core:10.1.52, tomcat-embed-core9: 9.0.115,

Upgrade Netty to 4.1.132 and netty-tcnative to 2.0.75 (1528f809c)

Thanks to

@becomeStar

@benjaminp

@JoeCqupt

@Kainsin

@merlimat

@SreeramdasLavanya

@themechbro

@zhangweikop

Commits

6951542 Bump version to 1.81.0
e94188e Update README etc to reference 1.81.0
4813c6d core,xds: Fix backend_service plumbing for subchannel metrics (#12735)
6737eb5 Revert "Replace javax ThreadSafe annotation with errorprone ThreadSafe (#1274...
ef35313 Replace javax ThreadSafe annotation with errorprone ThreadSafe (#12742)
3ed732f examples: Clean up Health, and document need for grpc-services
eac9fe9 xds: fix xDS HTTP CONNECT's transport socket name bug (#12740)
1528f80 Upgrade Netty to 4.1.132 and netty-tcnative to 2.0.75
d057a7e [xds] Implement A114: WRR support for custom backend metrics (#12645)
842636f xds: Add configuration objects for ExtAuthz, GrpcService and Bootstrap change...
Additional commits viewable in compare view

Updates joda-time:joda-time from 2.14.1 to 2.14.2

Release notes

Sourced from joda-time:joda-time's releases.

Release v2.14.2

See the change notes for more information.

What's Changed

Update time zone data to 2026bgtz by @jodastephen in JodaOrg/joda-time#831

Full Changelog: JodaOrg/joda-time@v2.14.1...v2.14.2

Commits

d6ba4f0 Release v2.14.2
43ea40b Update time zone data to 2026bgtz (#831)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-minor-patch group with 19 updates: | Package | From | To | | --- | --- | --- | | [org.openapitools:openapi-generator](https://github.com/openapitools/openapi-generator) | `7.21.0` | `7.22.0` | | io.swagger.core.v3:swagger-models | `2.2.48` | `2.2.49` | | [io.swagger.parser.v3:swagger-parser](https://github.com/swagger-api/swagger-parser) | `2.1.40` | `2.1.41` | | io.swagger.parser.v3:swagger-parser-core | `2.1.40` | `2.1.41` | | [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.21.2` | `2.21.3` | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.21.2` | `2.21.3` | | [com.fasterxml.jackson.dataformat:jackson-dataformat-xml](https://github.com/FasterXML/jackson-dataformat-xml) | `2.21.2` | `2.21.3` | | [com.fasterxml.jackson.dataformat:jackson-dataformat-yaml](https://github.com/FasterXML/jackson-dataformats-text) | `2.21.2` | `2.21.3` | | [com.fasterxml.jackson.datatype:jackson-datatype-guava](https://github.com/FasterXML/jackson-datatypes-collections) | `2.21.2` | `2.21.3` | | [com.fasterxml.jackson.datatype:jackson-datatype-joda](https://github.com/FasterXML/jackson-datatype-joda) | `2.21.2` | `2.21.3` | | com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.21.2` | `2.21.3` | | [com.github.ben-manes.caffeine:jcache](https://github.com/ben-manes/caffeine) | `3.2.3` | `3.2.4` | | [com.sap.cloud.security:java-bom](https://github.com/SAP/cloud-security-xsuaa-integration) | `4.0.4` | `4.0.5` | | [com.sap.cloud.environment.servicebinding:java-modules-bom](https://github.com/SAP/btp-environment-variable-access) | `0.30.0` | `0.31.0` | | [com.github.ben-manes.caffeine:caffeine](https://github.com/ben-manes/caffeine) | `3.2.3` | `3.2.4` | | [com.auth0:java-jwt](https://github.com/auth0/java-jwt) | `4.5.1` | `4.5.2` | | [org.checkerframework:checker-qual](https://github.com/typetools/checker-framework) | `4.0.0` | `4.1.0` | | [io.grpc:grpc-bom](https://github.com/grpc/grpc-java) | `1.80.0` | `1.81.0` | | [joda-time:joda-time](https://github.com/JodaOrg/joda-time) | `2.14.1` | `2.14.2` | Updates `org.openapitools:openapi-generator` from 7.21.0 to 7.22.0 - [Release notes](https://github.com/openapitools/openapi-generator/releases) - [Changelog](https://github.com/OpenAPITools/openapi-generator/blob/master/docs/release-summary.md) - [Commits](OpenAPITools/openapi-generator@v7.21.0...v7.22.0) Updates `io.swagger.core.v3:swagger-models` from 2.2.48 to 2.2.49 Updates `io.swagger.parser.v3:swagger-parser` from 2.1.40 to 2.1.41 - [Release notes](https://github.com/swagger-api/swagger-parser/releases) - [Commits](swagger-api/swagger-parser@v2.1.40...v2.1.41) Updates `io.swagger.parser.v3:swagger-parser-core` from 2.1.40 to 2.1.41 Updates `io.swagger.parser.v3:swagger-parser-core` from 2.1.40 to 2.1.41 Updates `com.fasterxml.jackson.core:jackson-core` from 2.21.2 to 2.21.3 - [Commits](FasterXML/jackson-core@jackson-core-2.21.2...jackson-core-2.21.3) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.21.2 to 2.21.3 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.21.2 to 2.21.3 - [Commits](FasterXML/jackson-dataformat-xml@jackson-dataformat-xml-2.21.2...jackson-dataformat-xml-2.21.3) Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from 2.21.2 to 2.21.3 - [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.21.2...jackson-dataformats-text-2.21.3) Updates `com.fasterxml.jackson.datatype:jackson-datatype-guava` from 2.21.2 to 2.21.3 - [Commits](FasterXML/jackson-datatypes-collections@jackson-datatypes-collections-2.21.2...jackson-datatypes-collections-2.21.3) Updates `com.fasterxml.jackson.datatype:jackson-datatype-joda` from 2.21.2 to 2.21.3 - [Commits](FasterXML/jackson-datatype-joda@jackson-datatype-joda-2.21.2...jackson-datatype-joda-2.21.3) Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.21.2 to 2.21.3 Updates `com.fasterxml.jackson.core:jackson-databind` from 2.21.2 to 2.21.3 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.21.2 to 2.21.3 - [Commits](FasterXML/jackson-dataformat-xml@jackson-dataformat-xml-2.21.2...jackson-dataformat-xml-2.21.3) Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from 2.21.2 to 2.21.3 - [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.21.2...jackson-dataformats-text-2.21.3) Updates `com.fasterxml.jackson.datatype:jackson-datatype-guava` from 2.21.2 to 2.21.3 - [Commits](FasterXML/jackson-datatypes-collections@jackson-datatypes-collections-2.21.2...jackson-datatypes-collections-2.21.3) Updates `com.fasterxml.jackson.datatype:jackson-datatype-joda` from 2.21.2 to 2.21.3 - [Commits](FasterXML/jackson-datatype-joda@jackson-datatype-joda-2.21.2...jackson-datatype-joda-2.21.3) Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.21.2 to 2.21.3 Updates `com.github.ben-manes.caffeine:jcache` from 3.2.3 to 3.2.4 - [Release notes](https://github.com/ben-manes/caffeine/releases) - [Commits](ben-manes/caffeine@v3.2.3...v3.2.4) Updates `com.sap.cloud.security:java-bom` from 4.0.4 to 4.0.5 - [Release notes](https://github.com/SAP/cloud-security-xsuaa-integration/releases) - [Changelog](https://github.com/SAP/cloud-security-services-integration-library/blob/main/CHANGELOG.md) - [Commits](SAP/cloud-security-services-integration-library@4.0.4...4.0.5) Updates `com.sap.cloud.environment.servicebinding:java-modules-bom` from 0.30.0 to 0.31.0 - [Release notes](https://github.com/SAP/btp-environment-variable-access/releases) - [Commits](SAP/btp-environment-variable-access@0.30.0...0.31.0) Updates `com.github.ben-manes.caffeine:caffeine` from 3.2.3 to 3.2.4 - [Release notes](https://github.com/ben-manes/caffeine/releases) - [Commits](ben-manes/caffeine@v3.2.3...v3.2.4) Updates `com.auth0:java-jwt` from 4.5.1 to 4.5.2 - [Release notes](https://github.com/auth0/java-jwt/releases) - [Changelog](https://github.com/auth0/java-jwt/blob/master/CHANGELOG.md) - [Commits](auth0/java-jwt@4.5.1...4.5.2) Updates `org.checkerframework:checker-qual` from 4.0.0 to 4.1.0 - [Release notes](https://github.com/typetools/checker-framework/releases) - [Changelog](https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md) - [Commits](typetools/checker-framework@checker-framework-4.0.0...checker-framework-4.1.0) Updates `io.grpc:grpc-bom` from 1.80.0 to 1.81.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.80.0...v1.81.0) Updates `joda-time:joda-time` from 2.14.1 to 2.14.2 - [Release notes](https://github.com/JodaOrg/joda-time/releases) - [Changelog](https://github.com/JodaOrg/joda-time/blob/main/RELEASE-NOTES.txt) - [Commits](JodaOrg/joda-time@v2.14.1...v2.14.2) --- updated-dependencies: - dependency-name: org.openapitools:openapi-generator dependency-version: 7.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: io.swagger.core.v3:swagger-models dependency-version: 2.2.49 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: io.swagger.parser.v3:swagger-parser dependency-version: 2.1.41 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: io.swagger.parser.v3:swagger-parser-core dependency-version: 2.1.41 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: io.swagger.parser.v3:swagger-parser-core dependency-version: 2.1.41 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: com.fasterxml.jackson.core:jackson-core dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-guava dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-joda dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310 dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-guava dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-joda dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310 dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: com.github.ben-manes.caffeine:jcache dependency-version: 3.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: com.sap.cloud.security:java-bom dependency-version: 4.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: com.sap.cloud.environment.servicebinding:java-modules-bom dependency-version: 0.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: com.github.ben-manes.caffeine:caffeine dependency-version: 3.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: com.auth0:java-jwt dependency-version: 4.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: org.checkerframework:checker-qual dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: io.grpc:grpc-bom dependency-version: 1.81.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: joda-time:joda-time dependency-version: 2.14.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels May 5, 2026

sap-cloud-sdk-bot Bot enabled auto-merge (squash) May 5, 2026 10:48

sap-cloud-sdk-bot Bot approved these changes May 5, 2026

View reviewed changes

sap-cloud-sdk-bot Bot merged commit 58e368d into main May 5, 2026
13 checks passed

sap-cloud-sdk-bot Bot deleted the dependabot/maven/main/production-minor-patch-9b68ac8541 branch May 5, 2026 10:48

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: [DevOps] bump the production-minor-patch group with 19 updates#1164

chore: [DevOps] bump the production-minor-patch group with 19 updates#1164
sap-cloud-sdk-bot[bot] merged 1 commit intomainfrom
dependabot/maven/main/production-minor-patch-9b68ac8541

dependabot Bot commented on behalf of github May 5, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 5, 2026

v7.22.0 released

General

C#

Crystal

Dart

Go

Java

Kotlin

Swagger-parser 2.1.41 released!

3.2.4

4.0.5

4.0.5

Release 0.31.0

What's Changed

3.2.4

4.5.2

4.5.2 (2026-04-29)

Checker Framework 4.1.0

Version 4.1.0 (2026-05-01)

User-visible changes

Implementation details

Closed issues

Version 4.1.0 (2026-05-01)

User-visible changes

Implementation details

Closed issues

V1.81.0

Release v2.14.2

What's Changed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants