FINERACT-2421: Update all non-major dependencies

[renovate-bot]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/cache	action	patch	v5.0.4 → v5.0.5
actions/upload-artifact	action	patch	v7.0.0 → v7.0.1
apache/kafka		minor	4.1.1-rc2 → 4.2.0-rc2
gradle (source)		patch	8.14.3 → 8.14.4
mysql	service	minor	9.1 → 9.7
org.thymeleaf:thymeleaf-spring6 (source)	devDependencies	patch	3.1.4.RELEASE → 3.1.5.RELEASE
org.thymeleaf:thymeleaf (source)	devDependencies	patch	3.1.4.RELEASE → 3.1.5.RELEASE
at.yawk.lz4:lz4-java	devDependencies	minor	1.10.1 → 1.11.0
io.netty:netty-codec-http2 (source)	devDependencies	minor	4.1.132.Final → 4.2.12.Final
io.netty:netty-codec-http (source)	devDependencies	minor	4.1.132.Final → 4.2.12.Final
io.netty:netty-codec (source)	devDependencies	minor	4.1.132.Final → 4.2.12.Final
org.springframework.security:spring-security-core (source)	devDependencies	patch	6.5.9 → 6.5.10
org.springframework:spring-core	devDependencies	patch	6.2.17 → 6.2.18
com.nimbusds:nimbus-jose-jwt	devDependencies	minor	10.0.2 → 10.9
org.apache.commons:commons-lang3 (source)	devDependencies	minor	3.18.0 → 3.20.0
org.yakworks:spring-icu4j	devDependencies	minor	0.4.2 → 0.5.2
org.springframework.restdocs:spring-restdocs-restassured	devDependencies	patch	3.0.3 → 3.0.5
org.springframework.restdocs:spring-restdocs-webtestclient	devDependencies	patch	3.0.3 → 3.0.5
org.springframework.restdocs:spring-restdocs-mockmvc	devDependencies	patch	3.0.3 → 3.0.5
org.springframework.restdocs:spring-restdocs-asciidoctor	devDependencies	patch	3.0.3 → 3.0.5
io.cucumber:cucumber-spring (source)	devDependencies	minor	7.20.1 → 7.34.3
io.cucumber:cucumber-junit-platform-engine (source)	devDependencies	minor	7.20.1 → 7.34.3
io.cucumber:cucumber-java8 (source)	devDependencies	minor	7.20.1 → 7.34.3
io.cucumber:cucumber-java (source)	devDependencies	minor	7.20.1 → 7.34.3
org.apache.sshd:sshd-core (source)	devDependencies	minor	2.15.0 → 2.17.1
org.apache.sshd:sshd-common (source)	devDependencies	minor	2.15.0 → 2.17.1
org.wiremock:wiremock-standalone (source)	devDependencies	patch	3.13.0 → 3.13.2
com.mysql:mysql-connector-j (source)	devDependencies	minor	9.3.0 → 9.7.0
org.postgresql:postgresql (source)	devDependencies	patch	42.7.9 → 42.7.11
org.mariadb.jdbc:mariadb-java-client (source)	devDependencies	patch	3.5.7 → 3.5.8
org.apache.avro:avro (source)	devDependencies	patch	1.12.0 → 1.12.1
org.apache.groovy:groovy-json (source)	devDependencies	patch	5.0.2 → 5.0.5
org.apache.groovy:groovy-xml (source)	devDependencies	patch	5.0.2 → 5.0.5
io.rest-assured:xml-path (source)	devDependencies	patch	5.5.1 → 5.5.7
io.rest-assured:json-path (source)	devDependencies	patch	5.5.1 → 5.5.7
io.rest-assured:rest-assured (source)	devDependencies	patch	5.5.1 → 5.5.7
org.apache.poi:poi-ooxml	devDependencies	minor	5.4.1 → 5.5.1
org.apache.poi:poi	devDependencies	minor	5.4.1 → 5.5.1
org.awaitility:awaitility (source)	devDependencies	minor	4.2.2 → 4.3.0
org.dom4j:dom4j (source)	devDependencies	minor	2.1.4 → 2.2.0
org.hibernate.validator:hibernate-validator (source)	devDependencies	minor	9.0.1.Final → 9.1.0.Final
jakarta.xml.bind:jakarta.xml.bind-api	devDependencies	patch	4.0.2 → 4.0.5
jakarta.activation:jakarta.activation-api	devDependencies	patch	2.1.3 → 2.1.4
io.swagger.core.v3:swagger-core-jakarta	devDependencies	patch	2.2.22 → 2.2.49
io.swagger.core.v3:swagger-jaxrs2-jakarta	devDependencies	patch	2.2.22 → 2.2.49
io.swagger.core.v3:swagger-annotations-jakarta	devDependencies	patch	2.2.22 → 2.2.49
org.apache.activemq:activemq-client (source)	devDependencies	patch	6.2.4 → 6.2.5
com.google.cloud.sql:mysql-socket-factory-connector-j-8	devDependencies	minor	1.23.1 → 1.28.3
org.springdoc:springdoc-openapi-starter-webmvc-ui (source)	devDependencies	minor	2.6.0 → 2.8.17
com.tmatesoft.svnkit:svnkit (source)	devDependencies	patch	1.10.12 → 1.10.13
org.eclipse.jgit:org.eclipse.jgit.ssh.apache	devDependencies	minor	7.2.1.202505142326-r → 7.6.0.202603022253-r
org.eclipse.jgit:org.eclipse.jgit.gpg.bc	devDependencies	minor	7.2.1.202505142326-r → 7.6.0.202603022253-r
org.eclipse.jgit:org.eclipse.jgit	devDependencies	minor	7.2.1.202505142326-r → 7.6.0.202603022253-r
org.bouncycastle:bcpg-jdk18on (source)	devDependencies	minor	1.81 → 1.84
org.bouncycastle:bcutil-jdk18on (source)	devDependencies	minor	1.81 → 1.84
org.bouncycastle:bcprov-jdk18on (source)	devDependencies	minor	1.81 → 1.84
org.bouncycastle:bcpkix-jdk18on (source)	devDependencies	minor	1.81 → 1.84
org.projectlombok:lombok (source)	devDependencies	patch	1.18.36 → 1.18.46
commons-codec:commons-codec (source)	devDependencies	minor	1.17.1 → 1.22.0
com.squareup.retrofit2:converter-protobuf	devDependencies	minor	2.11.0 → 2.12.0
com.squareup.retrofit2:converter-gson	devDependencies	minor	2.11.0 → 2.12.0
com.squareup.retrofit2:converter-scalars	devDependencies	minor	2.11.0 → 2.12.0
com.squareup.retrofit2:converter-java8	devDependencies	minor	2.11.0 → 2.12.0
com.squareup.retrofit2:converter-jaxb	devDependencies	minor	2.11.0 → 2.12.0
com.squareup.retrofit2:converter-simplexml	devDependencies	minor	2.11.0 → 2.12.0
com.squareup.retrofit2:converter-jackson	devDependencies	minor	2.11.0 → 2.12.0
com.squareup.retrofit2:converter-wire	devDependencies	minor	2.11.0 → 2.12.0
com.squareup.retrofit2:adapter-guava	devDependencies	minor	2.11.0 → 2.12.0
com.squareup.retrofit2:adapter-rxjava3	devDependencies	minor	2.11.0 → 2.12.0
com.squareup.retrofit2:adapter-rxjava2	devDependencies	minor	2.11.0 → 2.12.0
com.squareup.retrofit2:adapter-java8	devDependencies	minor	2.11.0 → 2.12.0
com.squareup.retrofit2:retrofit-mock	devDependencies	minor	2.11.0 → 2.12.0
com.squareup.retrofit2:retrofit	devDependencies	minor	2.11.0 → 2.12.0
com.github.spotbugs:spotbugs-annotations (source)	devDependencies	minor	4.8.6 → 4.9.8
io.github.classgraph:classgraph	devDependencies	patch	4.8.179 → 4.8.184
joda-time:joda-time (source)	devDependencies	minor	2.13.1 → 2.14.2
org.apache.tika:tika-parser-image-module (source)	devDependencies	minor	3.2.3 → 3.3.0
org.cyclonedx.bom	plugin	minor	3.1.0 → 3.2.4
me.champeau.jmh	plugin	patch	0.7.1 → 0.7.3
com.gradleup.shadow	plugin	minor	9.3.2 → 9.4.1
org.openapi.generator	plugin	minor	7.8.0 → 7.22.0
se.thinkcode.cucumber-runner	plugin	patch	0.0.11 → 0.0.14
com.github.spotbugs	plugin	minor	6.0.26 → 6.5.3
com.github.andygoossens.modernizer	plugin	minor	1.10.0 → 1.13.0
org.sonarqube	plugin	minor	6.0.1.5171 → 6.3.1.5724
com.google.cloud.tools.jib	plugin	minor	3.4.5 → 3.5.3
org.apache.tika:tika-parser-microsoft-module (source)	devDependencies	minor	3.2.3 → 3.3.0
com.gorylenko.gradle-git-properties	plugin	minor	2.4.2 → 2.5.7
io.swagger.core.v3.swagger-gradle-plugin	plugin	patch	2.2.23 → 2.2.49
net.ltgt.errorprone	plugin	minor	4.1.0 → 4.4.0
org.springframework.boot	plugin	patch	3.5.13 → 3.5.14
org.zeroturnaround.gradle.jrebel	plugin	patch	1.2.0 → 1.2.2
org.barfuin.gradle.taskinfo	plugin	patch	2.2.0 → 2.2.1
org.apache.tika:tika-parser-miscoffice-module (source)	devDependencies	minor	3.2.3 → 3.3.0
org.apache.tika:tika-core (source)	devDependencies	minor	3.2.3 → 3.3.0
org.ehcache:ehcache (source)	devDependencies	minor	3.10.8 → 3.12.0
org.quartz-scheduler:quartz (source)	devDependencies	patch	2.5.0 → 2.5.2
org.apache.commons:commons-csv (source)	devDependencies	minor	1.12.0 → 1.14.1
com.github.librepdf:openpdf	devDependencies	patch	3.0.0 → 3.0.4
commons-io:commons-io (source)	devDependencies	minor	2.18.0 → 2.22.0
software.amazon.msk:aws-msk-iam-auth (source)	devDependencies	minor	2.2.0 → 2.3.5
org.apache.commons:commons-collections4 (source)	devDependencies	minor	4.4 → 4.5.0
com.google.googlejavaformat:google-java-format	devDependencies	minor	1.24.0 → 1.35.0
com.google.code.gson:gson	devDependencies	minor	2.11.0 → 2.14.0
com.google.guava:guava	devDependencies	minor	33.1.0-jre → 33.6.0-jre
org.eclipse.persistence:org.eclipse.persistence.jpa (source)	devDependencies	patch	4.0.2 → 4.0.9
ch.qos.logback:logback-classic (source, changelog)	devDependencies	patch	1.5.19 → 1.5.32
ch.qos.logback:logback-core (source, changelog)	devDependencies	patch	1.5.19 → 1.5.32
org.glassfish.jersey:jersey-bom (source)	devDependencies	patch	3.1.10 → 3.1.11
org.testcontainers:testcontainers-bom (source)	devDependencies	minor	1.20.4 → 1.21.4
io.github.resilience4j:resilience4j-bom (source)	devDependencies	minor	2.2.0 → 2.4.0
software.amazon.awssdk:bom	devDependencies	minor	2.29.9 → 2.44.0
org.mockito:mockito-bom	devDependencies	minor	5.14.2 → 5.23.0
io.cucumber:cucumber-bom (source)	devDependencies	minor	7.20.1 → 7.34.3
com.fasterxml.jackson:jackson-bom	devDependencies	minor	2.19.2 → 2.21.3
org.junit:junit-bom (source)	devDependencies	minor	5.11.3 → 5.14.4
org.jetbrains.kotlin:kotlin-bom (source)	devDependencies	minor	2.0.21 → 2.3.21
io.opentelemetry:opentelemetry-bom	devDependencies	minor	1.44.1 → 1.61.0
io.awspring.cloud:spring-cloud-aws-dependencies (source)	devDependencies	minor	3.2.1 → 3.4.2
org.springframework.boot:spring-boot-dependencies (source)	devDependencies	patch	3.5.13 → 3.5.14
io.micrometer:micrometer-bom	devDependencies	minor	1.13.6 → 1.16.5
com.gradle.common-custom-user-data-gradle-plugin	plugin	minor	2.0.2 → 2.6.0
io.qameta.allure	plugin	minor	3.0.2 → 3.2.0

---

Release Notes

actions/cache (actions/cache)

v5.0.5

Compare Source

What's Changed

• Update ts-http-runtime dependency by @​yacaovsnc in #​1747

Full Changelog: actions/cache@v5...v5.0.5

actions/upload-artifact (actions/upload-artifact)

v7.0.1

Compare Source

What's Changed

• Update the readme with direct upload details by @​danwkennedy in #​795
• Readme: bump all the example versions to v7 by @​danwkennedy in #​796
• Include changes in typespec/ts-http-runtime 0.3.5 by @​yacaovsnc in #​797

Full Changelog: actions/upload-artifact@v7...v7.0.1

apache/kafka (apache/kafka)

v4.2.0

Compare Source

v4.1.2

Compare Source

gradle/gradle (gradle)

v8.14.4

Compare Source

yawkat/lz4-java (at.yawk.lz4:lz4-java)

v1.11.0: lz4-java v1.11.0

What's Changed

• Add linux-riscv64 binary by @​luhenry in #​46
• Bump checkout action version by @​TyomaVader in #​47
• Add native fast reset compressors by @​TyomaVader in #​44
• Fix docs production deployment by @​yawkat in #​49
• Add testing on native amd64, arm, and riscv runners by @​luhenry in #​50

New Contributors

• @​luhenry made their first contribution in #​46
• @​TyomaVader made their first contribution in #​47

Full Changelog: yawkat/lz4-java@v1.10.4...v1.11.0

v1.10.4: lz4-java v1.10.4

What's Changed

• Tune Linux native build flags and xxhash compilation by @​yawkat in #​41
• Fix Linux native flags for non-x86 CI builds by @​yawkat in #​42

These changes attempt to fix the native performance regression in 1.9+. They should have no functional or security impact.

Full Changelog: yawkat/lz4-java@v1.10.3...v1.10.4

v1.10.3: lz4-java v1.10.3

What's Changed

• github-pages documentation by @​yawkat in #​32
• Improve README formatting by @​Marcono1234 in #​37
• fix NPE in LZ4FrameInputStream#available by @​dldnhf in #​40

New Contributors

• @​dldnhf made their first contribution in #​40

Full Changelog: yawkat/lz4-java@v1.10.2...v1.10.3

v1.10.2: lz4-java v1.10.2

What's Changed

• Reproducible build by @​yawkat in #​15
• Run tests for pull requests again by @​Marcono1234 in #​17
• Add .git-versioned-pom.xml to .gitignore by @​Marcono1234 in #​16
• Fix source code formatting by @​Marcono1234 in #​18
• Improve publish workflow by @​Marcono1234 in #​19
• Migrate to macOS 15 x86_64 for release build by @​Marcono1234 in #​21
• Use gcc included in Windows image for release build by @​Marcono1234 in #​22
• Improve LZ4FrameIOStreamTest test by @​Marcono1234 in #​23
• Rename windows JNI lib to liblz4-java.dll by @​HTHou in #​25
• Use bnd-maven-plugin to fix osgi manifest headers by @​aptmac in #​28

New Contributors

• @​HTHou made their first contribution in #​25
• @​aptmac made their first contribution in #​28

Full Changelog: yawkat/lz4-java@v1.10.1...v1.10.2

spring-projects/spring-security

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.