Bump org.projectlombok:lombok from 1.18.42 to 1.18.46

[dependabot]

Bumps org.projectlombok:lombok from 1.18.42 to 1.18.46.

Changelog

Sourced from org.projectlombok:lombok's changelog.

v1.18.46 (April 22nd, 2026)

• PLATFORM: JDK26 support added #4019.
• PLATFORM: Spring Tools Suite 5 supported #3985.
• BUGFIX: @Jacksonized no longer stops generating @JsonProperty once an explicit @JsonIgnore annotations is encountered #4022.
• BUGFIX: In eclipse, mixing @Jacksonized and fluent = true no longer causes the error com.fasterxml.jackson.annotation.JsonProperty is not a repeatable annotation interface. #3934.
• BUGFIX: Some finishing touches for v1.18.44's support of Jackson3 #4004.

v1.18.44 (March 11th, 2026)

• FEATURE: @Jacksonized now supports both Jackson2 and Jackson3; you'll get a warning until you configure which one (or even both!) you want lombok to generate. #3950.
• BUGFIX: On JDK25, val and @ExtensionMethod could sometimes cause erroneous errors (in that you see errors but compilation succeeds anyway) using javac. #3947.
• BUGFIX: @Jacksonized + fields marked transient would result in those transient fields being serialised which is surprising (and thus undesired) behaviour. #3936.

Commits

• 936ca59 [build] lombok's launcher is still intended to be 1.4 compatible, or at least...
• fcdab3f [version] pre-release version bump
• 1cb7d49 [changelog]#4004 Mention Jackson3 final touches in changelog.
• 12a15b0 Fix: Bump EA_JDK to 27 (25 and 26 have been released)
• 2be766c Merge branch 'jackson3-final-touches'
• 290fa4c [trivial] constantize the warning we spit out for ambiguous jackson2/3, and m...
• e6567b6 test: Add Jackson 3 test cases and version ambiguity warnings
• 45e72e2 feat: Add Jackson 3 databind/dataformat annotations to HandlerUtil copy lists
• 184d423 feat: Add Jackson 3 support to @​Jacksonized handlers
• e027ad0 refactored to ShadowClassLoader use Collections::enumeration instead of Vector
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Code Coverage Report

Overall Project	86.26%	🍏

There is no coverage information present for the Files changed

[deweyjose]

@Dewbot review

[cursor]

Summary

Dependabot patch bump of org.projectlombok:lombok from 1.18.42 → 1.18.46 in pom.xml only. Lombok is a provided-scope compile-time annotation processor for the plugin itself (@Getter on Codegen, etc.); it is not on the GraphQL generation path and is not bundled for consumers.

Build result

Ran locally on this PR head (CI does not run on fork PRs):

• ./mvnw -B -ntp verify — BUILD SUCCESS (49 tests, 0 failures; spotless:check included)
• ./mvnw -B -ntp spotless:check — BUILD SUCCESS

Wiring completeness

N/A — no new @Parameter / CodegenConfigProvider / executor / builder wiring.

Backwards compatibility

Not breaking.

• No @Parameter renames, retypes, or default changes
• No change to generated consumer output (lombok does not affect DGS codegen)
• No Java/Maven minimum or lifecycle changes
• Not a generation-path dependency (graphql-dgs-codegen-core, kotlinpoet, graphql-java untouched)
• provided scope — not a runtime transitive dependency for plugin consumers

Risks

Low. Patch-level lombok releases are typically bug fixes and JDK compatibility improvements. Full test suite passed with the new version.

Verdict

APPROVE — meets Dependabot auto-merge criteria (patch bump, pom.xml-only, non-generation-path, green build).

  

_{Sent by Cursor Automation: grpahqlcodegen Review Agent}