Update adobe.testing.s3mock (major)

[solrbot]

This PR contains the following updates:

Package	Type	Update	Change
com.adobe.testing:s3mock-testsupport-common	dependencies	major	3.12.0 → 5.1.0
com.adobe.testing:s3mock-junit4	dependencies	major	3.12.0 → 4.12.4

---

Release Notes

adobe/S3Mock (com.adobe.testing:s3mock-testsupport-common)

v5.1.0

Compare Source

• Features and fixes
  • fix: Skip blank initialBuckets entries during startup to avoid creating a bogus root-level persisted bucket.
  • fix: InvalidRange error code (fixes #​3044)
  • feat: Experimental S3 Vectors API support — enable with SPRING_PROFILES_ACTIVE=vectors; runs on dedicated HTTP port 9092 / HTTPS port 9193. Supports CreateVectorBucket, GetVectorBucket, ListVectorBuckets, DeleteVectorBucket, CreateIndex, GetIndex, ListIndexes, DeleteIndex, PutVectors, GetVectors, ListVectors, DeleteVectors, QueryVectors, PutVectorBucketPolicy, GetVectorBucketPolicy, DeleteVectorBucketPolicy, TagResource, UntagResource, ListTagsForResource. See README.md#s3-vectors-support.
    • This was mostly implemented using Claude with human guidance.
    • ITs pass against the real S3 API except the VectorPolicyIT which would need real AWS principals.
  • Updated LICENSE and CODE_OF_CONDUCT.md, CONTRIBUTING.md, PULL_REQUEST_TEMPLATE.md to match latest official Adobe guidelines.
• Version updates (deliverable dependencies)
  • Bump alpine from 3.23.3 to 3.24.1 in /docker
  • Bump spring-boot.version from 4.0.5 to 4.1.0
  • Bump software.amazon.awssdk:bom from 2.42.29 to 2.46.11
  • Bump aws.sdk.kotlin:s3-jvm from 1.6.52 to 1.6.96
  • Bump org.jetbrains.kotlin:kotlin-bom from 2.3.10 to 2.3.21
  • Bump org.jetbrains.kotlinx:kotlinx-coroutines-bom from 1.10.2 to 1.11.0
  • Bump org.testcontainers:testcontainers-bom from 2.0.2 to 2.0.5
• Version updates (build dependencies)
  • Bump com.github.gantsign.maven:ktlint-maven-plugin from 3.7.0 to 3.7.1
  • Bump com.puppycrawl.tools:checkstyle from 13.4.0 to 13.6.0
  • Bump digital.pragmatech.testing:spring-test-profiler from 0.1.0 to 0.1.2
  • Bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15
  • Bump org.apache.maven.plugins:maven-dependency-plugin from 3.10.0 to 3.11.0
  • Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.5 to 3.5.6
  • Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6
  • Bump org.sonatype.central:central-publishing-maven-plugin from 0.10.0 to 0.11.0
  • Bump org.xmlunit:xmlunit-assertj3 from 2.11.0 to 2.12.0
  • Bump actions/checkout from 6.0.2 to 6.0.3
  • Bump actions/dependency-review-action from 4.9.0 to 5.0.0
  • Bump actions/stale from 10.2.0 to 10.3.0
  • Bump actions/upload-artifact from 7.0.0 to 7.0.1
  • Bump docker/setup-qemu-action from 4.0.0 to 4.1.0
  • Bump github/codeql-action from 4.35.1 to 4.36.2
  • Bump step-security/harden-runner from 2.16.1 to 2.19.4

v5.0.0

Compare Source

• Breaking changes
  • File system: Root directories created by S3Mock 4.x are not compatible with 5.x. Existing persisted data must be discarded.
    • The migration to Jackson 3 changes the serialized metadata format (bucketMetadata.json, objectMetadata.json).
    • "DisplayName" was removed from Owner (fixes #​2738). AWS APIs stopped returning "DisplayName" in November 2025.
  • Spring Boot 3.x → 4.x: Customers using S3Mock Java artifacts (JUnit 5 extension, TestNG listener, or embedding S3Mock directly) must ensure their project is compatible with Spring Boot 4.x and Spring Framework 7.x transitive dependencies.
  • Discontinued configuration properties and environment variables:
    • The following legacy environment variables / system properties that were deprecated in 4.5.0 are no longer supported.
      Use the current environment variables listed in Configuration instead.
      • root → use COM_ADOBE_TESTING_S3MOCK_STORE_ROOT
      • initialBuckets → use COM_ADOBE_TESTING_S3MOCK_STORE_INITIAL_BUCKETS
      • validKmsKeys → use COM_ADOBE_TESTING_S3MOCK_STORE_VALID_KMS_KEYS
      • retainFilesOnExit → use COM_ADOBE_TESTING_S3MOCK_STORE_RETAIN_FILES_ON_EXIT
      • COM_ADOBE_TESTING_S3MOCK_REGION → use COM_ADOBE_TESTING_S3MOCK_STORE_REGION
      • http.port → use Spring Boot's SERVER_PORT or com.adobe.testing.s3mock.httpPort
    • The legacy Spring configuration property prefix com.adobe.testing.s3mock.domain.* is no longer supported.
      Use the com.adobe.testing.s3mock.store.* prefix instead.
      • com.adobe.testing.s3mock.domain.root → use com.adobe.testing.s3mock.store.root
      • com.adobe.testing.s3mock.domain.initialBuckets → use com.adobe.testing.s3mock.store.initialBuckets
      • com.adobe.testing.s3mock.domain.validKmsKeys → use com.adobe.testing.s3mock.store.validKmsKeys
      • com.adobe.testing.s3mock.domain.retainFilesOnExit → use com.adobe.testing.s3mock.store.retainFilesOnExit
• Features and fixes
  • Add "actuator" Spring profile that enables JMX and all Spring Boot Actuator endpoints. The "debug" and "trace" profiles now automatically activate the "actuator" profile via profile groups. Actuator endpoints are disabled by default.
  • Get object with range now returns the same headers as non-range calls.
  • Docker: Copy "s3mock.jar" to "/opt/", run with absolute path reference to avoid issues when working directory is changed. (fixes #​2827)
  • S3Mock supports ChecksumType.FULL_OBJECT for Multipart uploads (fixes #​2843)
  • Return 412 on if-none-match=true when making CompleteMultipartRequest (fixes #​2790)
• Refactorings
  • Use Jackson 3 annotations and mappers.
  • AWS has deprecated SDK for Java v1 and will remove support EOY 2025.
    • Remove Java SDK v1.
  • JUnit 4.x deprecation
    • Remove JUnit 4.x support.
  • Remove legacy properties for S3Mock configuration.
  • Move all controller-related code from "com.adobe.testing.s3mock" to "com.adobe.testing.s3mock.controller" package.
  • Remove Apache libraries like "commons-compress", "commons-codec" or "commons-lang3" from dependencies. Kotlin and Java standard library provide similar functionality.
• Version updates (deliverable dependencies)
  • Bump spring-boot.version from 3.5.8 to 4.0.5
  • Bump Java version from 17 to 25
    • Compile with Java 25, target Java 17. This follows Spring guidance
    • Docker container runs Java 25
  • Bump testcontainers.version from 1.21.3 to 2.0.2
  • Bump kotlin.version from 2.2.21 to 2.3.10
    • Compile with Kotlin 2.3, target Kotlin 2.2. This follows Spring guidance
  • Bump alpine from 3.23.0 to 3.23.3 in /docker
  • Bump org.testng:testng from 7.11.0 to 7.12.0
  • Bump aws-v2.version from 2.40.0 to 2.42.29
  • Bump org.jetbrains:annotations from 26.0.2-1 to 26.1.0
• Version updates (build dependencies)
  • Bump aws.sdk.kotlin:s3-jvm from 1.5.95 to 1.6.52
  • Bump Maven to 4.0.0-rc5 (TODO: update to 4.0.0)
  • Bump com.github.gantsign.maven:ktlint-maven-plugin from 3.5.0 to 3.7.0
  • Bump com.puppycrawl.tools:checkstyle from 13.2.0 to 13.4.0
  • Bump io.fabric8:docker-maven-plugin from 0.48.0 to 0.48.1
  • Bump org.apache.maven.plugins:maven-compiler-plugin from 3.14.1 to 3.15.0
  • Bump org.apache.maven.plugins:maven-dependency-plugin from 3.9.0 to 3.10.0
  • Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.4 to 3.5.5
  • Bump org.apache.maven.plugins:maven-release-plugin from 3.3.0 to 3.3.1
  • Bump org.apache.maven.plugins:maven-resources-plugin from 3.4.0 to 3.5.0
  • Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.4 to 3.5.5
  • Bump org.codehaus.mojo:exec-maven-plugin from 3.6.2 to 3.6.3
  • Bump org.jetbrains.dokka:dokka-maven-plugin from 2.1.0 to 2.2.0
  • Bump org.mockito.kotlin:mockito-kotlin from 6.1.0 to 6.3.0
  • Bump digital.pragmatech.testing:spring-test-profiler from 0.0.14 to 0.1.0
  • Bump actions/checkout from 6.0.1 to 6.0.2
  • Bump actions/dependency-review-action from 4.8.2 to 4.9.0
  • Bump actions/setup-java from 5.0.0 to 5.2.0
  • Bump actions/stale from 10.1.1 to 10.2.0
  • Bump actions/upload-artifact from 5.0.0 to 7.0.0
  • Bump docker/setup-qemu-action from 3.7.0 to 4.0.0
  • Bump github/codeql-action from 4.31.6 to 4.35.1
  • Bump step-security/harden-runner from 2.13.3 to 2.16.1

v4.12.4

Compare Source

Version 4.x is JDK17 LTS bytecode compatible, with Docker and JUnit / direct Java integration.

This is the last planned minor release of 4.x.

• Features and fixes
  • none
• Version updates (deliverable dependencies)
  • Bump testcontainers.version from 1.21.3 to 1.21.4
• Version updates (build dependencies)
  • none

v4.11.0

Compare Source

Version 4.x is JDK17 LTS bytecode compatible, with Docker and JUnit / direct Java integration.

• Features and fixes
  • Support quiet parameter in DeleteObjects (fixes #​2756)
• Version updates (deliverable dependencies)
  • Bump spring-boot.version from 3.5.7 to 3.5.8
  • Bump aws-v2.version from 2.38.1 to 2.40.0
  • Bump aws.version from 1.12.793 to 1.12.794
  • Bump org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0
  • Bump alpine from 3.22.2 to 3.23.0 in /docker
• Version updates (build dependencies)
  • Bump aws.sdk.kotlin:s3-jvm from 1.5.77 to 1.5.95
  • Bump io.fabric8:docker-maven-plugin from 0.47.0 to 0.48.0
  • Bump org.apache.maven.plugins:maven-release-plugin from 3.1.1 to 3.3.0
  • Bump org.apache.maven.plugins:maven-jar-plugin from 3.4.2 to 3.5.0
  • Bump org.apache.maven.plugins:maven-source-plugin from 3.3.1 to 3.4.0
  • Bump org.apache.maven.plugins:maven-resources-plugin from 3.3.1 to 3.4.0
  • Bump actions/stale from 10.1.0 to 10.1.1
  • Bump actions/dependency-review-action from 4.8.1 to 4.8.2
  • Bump com.puppycrawl.tools:checkstyle from 12.1.1 to 12.2.0
  • Bump actions/checkout from 5.0.0 to 6.0.1
  • Bump github/codeql-action from 4.31.2 to 4.31.6
  • Bump step-security/harden-runner from 2.13.2 to 2.13.3
  • Bump maven wrapper from 3.3.3 to 3.3.4

v4.10.0

Compare Source

Version 4.x is JDK17 LTS bytecode compatible, with Docker and JUnit / direct Java integration.

• Features and fixes
  • Return correct error body on invalid ranges (fixes #​2732)
  • Accept unquoted etags in if-match/if-none-match headers (fixes #​2665)
  • StoreCleaner deletes files on exit (fixes #​2745)
• Refactorings
  • Drop commons-lang3 dependency and replace its usages with core Java (fixes #​2735)
• Version updates (deliverable dependencies)
  • Bump spring-boot.version from 3.5.6 to 3.5.7
  • Bump aws-v2.version from 2.33.12 to 2.38.1
  • Bump aws.version from 1.12.791 to 1.12.793
  • Bump alpine from 3.22.1 to 3.22.2 in /docker
  • Bump commons-codec:commons-codec from 1.19.0 to 1.20.0
  • Bump commons-io:commons-io from 2.20.0 to 2.21.0
• Version updates (build dependencies)
  • Bump kotlin.version from 2.2.20 to 2.2.21
  • Bump aws.sdk.kotlin:s3-jvm from 1.5.41 to 1.5.77
  • Bump io.fabric8:docker-maven-plugin from 0.46.0 to 0.47.0
  • Bump digital.pragmatech.testing:spring-test-profiler from 0.0.12 to 0.0.14
  • Bump org.mockito.kotlin:mockito-kotlin from 6.0.0 to 6.1.0
  • Bump org.xmlunit:xmlunit-assertj3 from 2.10.4 to 2.11.0
  • Bump org.codehaus.mojo:exec-maven-plugin from 3.5.1 to 3.6.2
  • Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.3 to 3.12.0
  • Bump org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 to 3.14.1
  • Bump org.apache.maven.plugins:maven-dependency-plugin from 3.8.1 to 3.9.0
  • Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.1 to 3.6.2
  • Bump com.puppycrawl.tools:checkstyle from 11.0.1 to 12.1.1
  • Bump org.jacoco:jacoco-maven-plugin from 0.8.13 to 0.8.14
  • Bump github/codeql-action from 3.30.3 to 4.31.2
  • Bump actions/dependency-review-action from 4.7.3 to 4.8.1
  • Bump ossf/scorecard-action from 2.4.2 to 2.4.3
  • Bump actions/stale from 10.0.0 to 10.1.0
  • Bump actions/upload-artifact from 4.6.2 to 5.0.0
  • Bump step-security/harden-runner from 2.13.1 to 2.13.2
  • Bump docker/setup-qemu-action from 3.6.0 to 3.7.0

v4.9.1

Compare Source

Version 4.x is JDK17 LTS bytecode compatible, with Docker and JUnit / direct Java integration.

• Features and fixes
  • Remove Content-Type expectation from PutBucketVersioning (Fixes #​2635)
  • Let S3Mock validate bucket names according to AWS rules
• Refactorings
  • Let TaggingHeaderConverter convert XML tags
  • Let Spring convert StorageClass in postObject
  • Fix build errors: skip JavaDoc generation for POM type modules.
  • Build robustness: execute unit and integration tests in parallel and in random order.
  • Faster startup time through lazy initialization
  • Build: move "checkstyle.xml" to "etc/". The "build-config" module was never necessary.
  • Build: update Google Checkstyle to the latest version and fix violations.
  • Build: use ktlint-maven-plugin to validate Kotlin code style.
• Version updates (deliverable dependencies)
  • Bump spring-boot.version from 3.5.5 to 3.5.6
  • Bump aws-v2.version from 2.32.31 to 2.33.12
  • Bump aws.version from 1.12.788 to 1.12.791
• Version updates (build dependencies)
  • Bump Java 21 to Java 25 to build S3Mock.
  • Bump kotlin.version from 2.2.10 to 2.2.20
  • Bump aws.sdk.kotlin:s3-jvm from 1.5.26 to 1.5.41
  • Bump org.xmlunit:xmlunit-assertj3 from 2.10.3 to 2.10.4
  • Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.3 to 3.5.4
  • Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.3 to 3.5.4
  • Bump com.puppycrawl.tools:checkstyle from 11.0.0 to 11.0.1
  • Bump digital.pragmatech.testing:spring-test-profiler from 0.0.11 to 0.0.12
  • Bump actions/stale from 9.1.0 to 10.0.0
  • Bump github/codeql-action from 3.29.11 to 3.30.3
  • Bump step-security/harden-runner from 2.13.0 to 2.13.1
  • Bump maven from 3.9.9 to 3.9.11
  • Bump maven wrapper from 3.3.2 to 3.3.3

v4.8.0

Compare Source

Version 4.x is JDK17 LTS bytecode compatible, with Docker and JUnit / direct Java integration.

• Features and fixes
  • CompleteMultipartUpload is idempotent (fixes #​2586)
• Refactorings
  • UploadId is always a UUID. Use UUID type in S3Mock instead of String.
  • Validate that partNumbers to be positive integers.
  • Force convergence on the newest available transitive dependency versions.
  • Optimize file storage for large objects by using buffered streams.
• Version updates (deliverable dependencies)
  • Bump spring-boot.version from 3.5.4 to 3.5.5
  • Bump aws-v2.version from 2.32.7 to 2.32.31
  • Bump org.apache.commons:commons-compress from 1.27.1 to 1.28.0
• Version updates (build dependencies)
  • Bump kotlin.version from 2.2.0 to 2.2.10
  • Bump aws.sdk.kotlin:s3-jvm from 1.4.125 to 1.5.26
  • Bump digital.pragmatech.testing:spring-test-profiler from 0.0.5 to 0.0.11
  • Bump com.puppycrawl.tools:checkstyle from 10.26.1 to 11.0.0
  • Bump github/codeql-action from 3.29.4 to 3.29.11
  • Bump actions/checkout from 4.2.2 to 5.0.0
  • Bump actions/setup-java from 4.7.1 to 5.0.0
  • Bump actions/dependency-review-action from 4.7.2 to 4.7.3

v4.7.0

Compare Source

Version 4.x is JDK17 LTS bytecode compatible, with Docker and JUnit / direct Java integration.

• Features and fixes
  • Fix store property overrides for "com.adobe.testing.s3mock.store" properties. (Fixes #​2524)
• Refactorings
  • Enable Spring Boot Actuator in "debug" and "trace" profiles.
  • Enable Spring Test Profiler during test runs.
• Version updates (deliverable dependencies)
  • Bump spring-boot.version from 3.5.3 to 3.5.4
  • Bump aws-v2.version from 2.31.77 to 2.32.7
  • Bump aws.version from 1.12.787 to 1.12.788
  • Bump commons-io:commons-io from 2.19.0 to 2.20.0
  • Bump alpine from 3.22.0 to 3.22.1 in /docker
• Version updates (build dependencies)
  • Bump aws.sdk.kotlin:s3-jvm from 1.4.109 to 1.4.125
  • Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.0 to 3.6.1
  • Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.2 to 3.11.3
  • Bump org.mockito.kotlin:mockito-kotlin from 5.4.0 to 6.0.0
  • Bump step-security/harden-runner from 2.12.2 to 2.13.0
  • Bump github/codeql-action from 3.29.2 to 3.29.10
  • Bump actions/dependency-review-action from 4.7.1 to 4.7.2

v4.6.0

Compare Source

Version 4.x is JDK17 LTS bytecode compatible, with Docker and JUnit / direct Java integration.

• Features and fixes
  • Fail PUT object with match on non-existent keys (fixes #​2502)
• Refactorings
  • Remove unused imports
  • Fix Kotlin 2.2 usage
  • Ignore .vscode and .cursor configurations
  • Minor refactorings for clarity.
  • Use fixed list of StorageClass values in tests. New values added by AWS sometimes break tests. We want to make sure to test a few different storage classes, no need to test every one.
• Version updates (deliverable dependencies)
  • Bump aws-v2.version from 2.31.67 to 2.31.77
  • Bump testcontainers.version from 1.21.2 to 1.21.3
• Version updates (build dependencies)
  • Bump aws.sdk.kotlin:s3-jvm from 1.4.109 to 1.4.119
  • Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8
  • Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.5.0 to 3.6.0
  • Bump com.puppycrawl.tools:checkstyle from 10.26.0 to 10.26.1
  • Bump github/codeql-action from 3.29.1 to 3.29.2
  • Bump step-security/harden-runner from 2.12.1 to 2.12.2

v4.5.1

Compare Source

Version 4.x is JDK17 LTS bytecode compatible, with Docker and JUnit / direct Java integration.

• Features and fixes
  • ListObjectVersions API returns "isLatest=true" if versioning is not enabled. (fixes #​2481)
  • Tags are now verified for correctness.
• Refactorings
  • README.md fixes, typos, wording, clarifications
• Version updates (deliverable dependencies)
  • None
• Version updates (build dependencies)
  • Bump kotlin.version from 2.1.21 to 2.2.0
  • Bump github/codeql-action from 3.29.0 to 3.29.1
  • Bump com.puppycrawl.tools:checkstyle from 10.25.0 to 10.26.0

v4.5.0

Compare Source

Version 4.x is JDK17 LTS bytecode compatible, with Docker and JUnit / direct Java integration.

• Features and fixes
  • Implement DeleteObjectTagging API
• Refactorings
  • Add JSpecify annotations to S3Mock code
  • Migrate unit tests in "testsupport" modules to Kotlin
  • Deprecation of legacy-style Spring properties in favor of current environment variables.
  • Various fixes and clarifications in README.md
• Version updates (deliverable dependencies)
  • Bump alpine from 3.21.3 to 3.22.0 in /docker
  • Bump aws-v2.version from 2.31.50 to 2.31.67
  • Bump aws.version from 1.12.783 to 1.12.787
  • Bump spring-boot.version from 3.5.0 to 3.5.3
  • Bump testcontainers.version from 1.21.0 to 1.21.2
• Version updates (build dependencies)
  • Bump aws.sdk.kotlin:s3-jvm from 1.4.91 to 1.4.109
  • Bump org.xmlunit:xmlunit-assertj3 from 2.10.2 to 2.10.3
  • Bump org.codehaus.mojo:exec-maven-plugin from 3.5.0 to 3.5.1
  • Bump org.apache.maven.plugins:maven-clean-plugin from 3.4.1 to 3.5.0
  • Bump com.puppycrawl.tools:checkstyle from 10.24.0 to 10.25.0
  • Bump maven from 3.9.6 to 3.9.9
  • Bump maven-wrapper from 3.2.0 to 3.3.2
  • Bump ossf/scorecard-action from 2.4.1 to 2.4.2
  • Bump github/codeql-action from 3.28.18 to 3.29.0
  • Bump step-security/harden-runner from 2.12.0 to 2.12.1

v4.4.0

Compare Source

Version 4.x is JDK17 LTS bytecode compatible, with Docker and JUnit / direct Java integration.

• Features and fixes
  • Fix order of ListObjectVersions (fixes #​2412)
• Refactorings
  • Remove configuration exclusions for Spring Security classes
    • We don't include Spring Security dependencies anymore.
• Version updates (deliverable dependencies)
  • Bump spring-boot.version from 3.4.5 to 3.5.0
  • Bump aws-v2.version from 2.31.42 to 2.31.50
• Version updates (build dependencies)
  • Bump aws.sdk.kotlin:s3-jvm from 1.4.83 to 1.4.91
  • Bump org.xmlunit:xmlunit-assertj3 from 2.10.0 to 2.10.2
  • Bump com.puppycrawl.tools:checkstyle from 10.23.1 to 10.24.0
  • Bump github/codeql-action from 3.28.17 to 3.28.18

v4.3.0

Compare Source

Version 4.x is JDK17 LTS bytecode compatible, with Docker and JUnit / direct Java integration.

• Features and fixes
  • S3Mock accepts * for conditional requests on all APIs. (fixes #​2371)
  • Clarifications for S3Mock with custom SSL certificate usage in README.md
  • Clarifications for S3Mock with provided SSL certificate usage in README.md
• Refactorings
  • none
• Version updates (deliverable dependencies)
  • Bump aws-v2.version from 2.31.38 to 2.31.42
• Version updates (build dependencies)
  • Bump aws.sdk.kotlin:s3-jvm from 1.4.80 to 1.4.83
  • Bump kotlin.version from 2.1.20 to 2.1.21
  • Bump actions/dependency-review-action from 4.7.0 to 4.7.1

v4.2.0

Compare Source

Version 4.x is JDK17 LTS bytecode compatible, with Docker and JUnit / direct Java integration.

• Features and fixes
  • Support checksum algorithm CRC64NVME (fixes #​2334)
• Refactorings
  • API / DTO consistency check 2025/04
    • Check AWS API for changes
      • Update S3Mock API / DTOs
      • Add tests for changed API / DTOs
    • CreateBucket API now accepts "CreateBucketConfiguration" request body
    • HeadBucket API now returns region and location headers
    • CompleteMultipartUpload API now accepts checksums and returns checksums
    • ListObjects API now returns "delimiter"
    • ListObjects V2 API now accepts "fetch-owner" and returns "delimiter"
    • ListBuckets API now accepts parameters listed in AWS S3 API
    • ListMultipartUploads now accepts parameters listed in AWS S3 API
    • ListParts now accepts parameters listed in AWS S3 API
    • UploadPartCopy now accepts and returns encryption headers
    • CreateMultipartUpload now accepts checksum headers and returns checksum and encryption headers
    • CompleteMultipartUpload now accepts checksum headers and returns checksum and encryption headers
      • Checksum validation on complete
    • DeleteObject now supports conditional requests
    • PutObject now supports conditional requests
• Version updates (deliverable dependencies)
  • Bump aws-v2.version from 2.31.25 to 2.31.38
  • Bump aws.version from 1.12.782 to 1.12.783
  • Bump spring-boot.version from 3.4.4 to 3.4.5
  • Bump testcontainers.version from 1.20.6 to 1.21.0
• Version updates (build dependencies)
  • Bump aws.sdk.kotlin:s3-jvm from 1.4.67 to 1.4.80
  • Bump actions/dependency-review-action from 4.6.0 to 4.7.0
  • Bump github/codeql-action from 3.28.15 to 3.28.17
  • Bump com.puppycrawl.tools:checkstyle from 10.23.0 to 10.23.1

v4.1.1

Compare Source

Version 4.x is JDK17 LTS bytecode compatible, with Docker and JUnit / direct Java integration.

• Features and fixes
  • Content-Encoding: aws-chunked should not be stored (fixes #​2218)
• Refactorings
  • none
• Version updates (deliverable dependencies)
  • none
• Version updates (build dependencies)
  • none

v4.1.0

Compare Source

Version 4.x is JDK17 LTS bytecode compatible, with Docker and JUnit / direct Java integration.

• Features and fixes
  • Support Browser-Based Uploads Using POST (fixes #​2200)
    • https://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-UsingHTTPPOST.html
• Refactorings
  • Validate all integration tests against S3, fix S3Mock where necessary
    • These were corner cases where error messages were incorrect, or proper validations were missing.
  • Migrate all integration tests to AWS SDK v2, remove AWS SDK v1 tests from the integration-tests module
• Version updates (deliverable dependencies)
  • Bump aws-v2.version from 2.31.17 to 2.31.25
  • Bump commons-io:commons-io from 2.18.0 to 2.19.0
• Version updates (build dependencies)
  • Bump aws.sdk.kotlin:s3-jvm from 1.4.59 to 1.4.67
  • Bump step-security/harden-runner from 2.11.1 to 2.12.0
  • Bump actions/setup-java from 4.7.0 to 4.7.1

v4.0.0

Compare Source

Version 4.x is JDK17 LTS bytecode compatible, with Docker and JUnit / direct Java integration.

• Features and fixes
  • Basic support for versions in API (fixes #​64)
  • Allow overriding headers in head object
  • Implement If-(Un)modified-Since handling (fixes #​829)
  • Close all InputStreams and OutputStreams
  • Checksums are returned for MultipartUploads as part of the response body
  • Add AWS SDK V1 deprecation notice
    • AWS has deprecated SDK for Java v1, and will remove support EOY 2025.
    • S3Mock will remove usage of Java v1 early 2026.
• Refactorings
  • Use Tomcat instead of Jetty as the application container (fixes #​2136)
  • "FROM" in Dockerfile did not match "as"
  • Delete files on shutdown using a DisposableBean instead of File#deleteOnExit()
• Version updates (deliverable dependencies)
  • Bump spring-boot.version from 3.3.3 to 3.4.4
  • Jackson 2.18.2 to 2.17.2 (remove override, use Spring-Boot supplied version)
  • Bump aws-v2.version from 2.29.29 to 2.31.17
  • Bump aws.version from 1.12.779 to 1.12.780
  • Bump kotlin.version from 2.1.0 to 2.1.20
  • Bump testcontainers.version from 1.20.4 to 1.20.6
  • Bump org.testng:testng from 7.10.2 to 7.11.0
  • Bump aws.version from 1.12.780 to 1.12.782
  • Bump alpine from 3.21.0 to 3.21.3 in /docker
• Version updates (build dependencies)
  • Bump aws.sdk.kotlin:s3-jvm from 1.4.41 to 1.4.59
  • Bump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.0
  • Bump org.apache.maven.plugins:maven-clean-plugin from 3.4.0 to 3.4.1
  • Bump org.apache.maven.plugins:maven-install-plugin from 3.1.3 to 3.1.4
  • Bump org.apache.maven.plugins:maven-deploy-plugin from 3.1.3 to 3.1.4
  • Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.2 to 3.5.3
  • Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.2 to 3.5.3
  • Bump io.fabric8:docker-maven-plugin from 0.45.1 to 0.46.0
  • Bump org.jacoco:jacoco-maven-plugin from 0.8.12 to 0.8.13
  • Bump license-maven-plugin-git.version from 4.6 to 5.0.0
  • Bump github/codeql-action from 3.27.6 to 3.28.15
  • Bump docker/setup-qemu-action from 3.2.0 to 3.6.0
  • Bump actions/upload-artifact from 4.4.3 to 4.6.2
  • Bump actions/setup-java from 4.5.0 to 4.7.0
  • Bump actions/dependency-review-action from 4.5.0 to 4.6.0
  • Bump step-security/harden-runner from 2.10.2 to 2.11.1
  • Bump ossf/scorecard-action from 2.4.0 to 2.4.1
  • Bump com.puppycrawl.tools:checkstyle from 10.20.2 to 10.23.0
  • Bump advanced-security/sbom-generator-action from 0.0.1 to 0.0.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Sunday (* * * * 0)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot

[malliaridis]

See #3002 (comment)

[github-actions]

This PR has had no activity for 60 days and is now labeled as stale. Any new activity will remove the stale label. To attract more reviewers, please tag people who might be familiar with the code area and/or notify the dev@solr.apache.org mailing list. To exempt this PR from being marked as stale, make it a draft PR or add the label "exempt-stale". If left unattended, this PR will be closed after another 60 days of inactivity. Thank you for your contribution!

[janhoy]

Pushed a commit to complete this major upgrade. s3mock 4.x swapped its embedded server from Jetty to Tomcat, which caused two failures:

1. Licenses — new transitive tomcat-embed-core/tomcat-embed-websocket jars had no LICENSE/NOTICE. Renamed the existing tomcat-embed-el-LICENSE/NOTICE to the shared tomcat- prefix so it covers all tomcat-embed-* artifacts (all Apache-2.0).
2. All tests failing (HTTP 500) — Tomcat 10.1 is incompatible with Solr's test SecurityManager (PrivilegedSetAccessControlContext throws under an SM). Disabled the SecurityManager for this test-only module via ext { useSecurityManager = false }, matching what extraction and gcs-repository already do.

Verified locally: :solr:modules:s3-repository:check and the full test suite pass.

[janhoy]

@malliaridis Your concern wrt JUnit 5 is not a new concern for s3mock v4. We eventually have to move, but this upgrade can safely be done first.

[anshumg]

Looks good to me.

[solrbot]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.