Update all gradle dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
au.com.dius.pact.provider:junit5spring	4.6.12 -> 4.6.16
org.apache.commons:commons-csv (source)	1.11.0 -> 1.13.0
org.postgresql:postgresql (source)	42.7.3 -> 42.7.5
io.hypersistence:hypersistence-utils-hibernate-63	3.8.2 -> 3.9.0
org.hibernate:hibernate-core (source)	6.5.2.Final -> 6.6.5.Final
com.h2database:h2 (source)	2.3.230 -> 2.3.232
com.nimbusds:oauth2-oidc-sdk	11.14 -> 11.21.2
org.springframework.boot:spring-boot-starter-oauth2-client (source)	3.3.2 -> 3.4.2
org.springframework.boot:spring-boot-starter-oauth2-resource-server (source)	3.3.2 -> 3.4.2
org.springframework.boot:spring-boot-starter-webflux (source)	3.3.2 -> 3.4.2
software.amazon.awssdk:sts	2.26.31 -> 2.30.9
software.amazon.awssdk:s3	2.26.31 -> 2.30.9
software.amazon.awssdk:sns	2.26.31 -> 2.30.9
uk.gov.service.notify:notifications-java-client (source)	5.2.0-RELEASE -> 5.2.1-RELEASE
org.springdoc:springdoc-openapi-starter-webmvc-ui (source)	2.6.0 -> 2.8.4
com.fasterxml.jackson.datatype:jackson-datatype-jsr310	2.17.2 -> 2.18.2
io.sentry:sentry-logback	7.13.0 -> 7.21.0
io.sentry:sentry-spring-boot-starter	7.13.0 -> 7.21.0
uk.gov.justice.hmpps.gradle-spring-boot	6.0.9 -> 6.1.2
org.jetbrains.kotlin.plugin.jpa	2.0.10 -> 2.1.10
org.jetbrains.kotlin.plugin.spring	2.0.10 -> 2.1.10

---

Release Notes

pact-foundation/pact-jvm (au.com.dius.pact.provider:junit5spring)

v4.6.16

Compare Source

• 2d20163 - fix: Dependency conflict with org.slf4j:slf4j-api was causing Spring tests to fail (Ronald Holshausen, Wed Dec 4 14:21:15 2024 +1100)
• 38c0d27 - feat: Update LambdaDsl.newJsonArray to allow setting the number of examples (Ronald Holshausen, Wed Dec 4 10:59:23 2024 +1100)
• 19c663c - chore: The pact-jvm-server main spec was not configured correctly (Ronald Holshausen, Wed Dec 4 10:24:23 2024 +1100)
• 147a2a6 - fix: LambdaDslJsonArray has no datetime function #​1839 (Ronald Holshausen, Wed Dec 4 10:23:10 2024 +1100)
• c791170 - chore: Update readme (Ronald Holshausen, Wed Dec 4 09:59:01 2024 +1100)
• 7229244 - Merge pull request #​1837 from cburgmer/patch-1 (Ronald Holshausen, Fri Nov 15 10:03:21 2024 +1100)
• e95461a - Fix path to Clojure example (Christoph Burgmer, Thu Nov 14 14:21:10 2024 +0100)
• 9f6b209 - chore: Add a test + update docs on JUnit 4 report dir default #​1836 (Ronald Holshausen, Thu Nov 14 15:58:48 2024 +1100)
• 3e501f5 - chore: Add a test for pact-jvm-server (Ronald Holshausen, Tue Oct 29 17:40:28 2024 +1100)
• 85c9236 - Update README.md (Ronald Holshausen, Tue Oct 29 11:32:02 2024 +1100)
• 5c41e17 - bump version to 4.6.16 (Ronald Holshausen, Tue Oct 29 10:38:07 2024 +1100)

v4.6.15

Compare Source

• 93fe196 - fix: Log the error response bodies from the Pact Broker #​1830 (Ronald Holshausen, Thu Oct 24 11:41:59 2024 +1100)
• 3b25199 - fix(mock-server): Setting content length == 0 causes the HTTP exchange to use chunked encoding #​1828 (Ronald Holshausen, Wed Oct 23 16:00:35 2024 +1100)
• ec066a0 - fix: Trim regex anchors before generating random strings from the regex #​1826 (Ronald Holshausen, Wed Oct 23 14:27:53 2024 +1100)
• 0554c1a - Merge pull request #​1831 from timvahlbrock/patch-1 (Ronald Holshausen, Fri Oct 11 08:59:24 2024 +1100)
• 62f40d5 - Document usage of pactbroker.providerBranch with the matching branch selector (Tim Vahlbrock, Mon Oct 7 09:30:56 2024 +0200)
• 883f3e5 - chore: add JSON parser test for Windows #​1827 (Ronald Holshausen, Thu Sep 26 11:03:22 2024 +1000)
• ab4c88c - Merge pull request #​1825 from pact-foundation/docs/links (Ronald Holshausen, Thu Sep 26 10:29:23 2024 +1000)
• 43655c8 - docs: update obsolete links [ci skip] (Yousaf Nabi, Fri Sep 6 13:05:08 2024 +0100)
• 5e9ac00 - fix: faiing test after merging PR (Ronald Holshausen, Thu Aug 29 09:38:17 2024 +1000)
• 122db09 - Merge pull request #​1823 from huehnerlady/update-httpclient5 (Ronald Holshausen, Thu Aug 29 09:11:00 2024 +1000)
• 7a28b1e - Merge pull request #​1822 from huehnerlady/update-plugin-driver (Ronald Holshausen, Thu Aug 29 09:09:48 2024 +1000)
• 0c2fe9a - Update httpclient5 (Ruth Bassindale, Wed Aug 28 11:34:38 2024 +0200)
• 67d9576 - Make plugindriver version consistent (Ruth Bassindale, Wed Aug 28 09:49:35 2024 +0200)
• f5ee0eb - bump version to 4.6.15 (Ronald Holshausen, Tue Aug 27 16:49:49 2024 +1000)

v4.6.14

Compare Source

• 4cf45a1 - fix: Allow the Pact publish task to set insecure TLS flag #​1817 (Ronald Holshausen, Tue Aug 27 16:22:48 2024 +1000)
• ba845e8 - fix: Support provider tests with multiple targets using different transports #​1819 (Ronald Holshausen, Mon Aug 26 14:41:47 2024 +1000)
• ae9b230 - chore: Upgrade plugin driver to 0.5.1 which upgrades gRPC libs to 1.66.0 #​1816 (Ronald Holshausen, Mon Aug 26 14:38:25 2024 +1000)
• f19f1cf - fix(V4): Http mock server was incorrectly setting the trasnport to https (Ronald Holshausen, Thu Aug 22 15:37:09 2024 +1000)
• 9ddf126 - chore: Upgrade plugin driver to 0.5.0 (Ronald Holshausen, Wed Aug 21 16:37:51 2024 +1000)
• 00442e6 - Update README.md (Ronald Holshausen, Fri Aug 9 15:06:16 2024 +1000)
• 5cdf0cb - bump version to 4.6.14 (Ronald Holshausen, Fri Aug 9 15:01:54 2024 +1000)

v4.6.13

Compare Source

• ea14386 - fix: Need to pass any provider state data through to the plugins (Ronald Holshausen, Wed Aug 7 12:09:02 2024 +1000)
• aa5770a - Update README.md (Ronald Holshausen, Tue Aug 6 10:49:30 2024 +1000)
• 9289a3c - bump version to 4.6.13 (Ronald Holshausen, Tue Aug 6 10:36:04 2024 +1000)

pgjdbc/pgjdbc (org.postgresql:postgresql)

v42.7.5

Added

• ci: Test with Java 23 PR #​3381

Fixed

• regression: revert change in fc60537 PR #​3476
• fix: PgDatabaseMetaData implementation of catalog as param and return value PR #​3390
• fix: Support default GSS credentials in the Java Postgres client PR #​3451
• fix: return only the transactions accessible by the current_user in XAResource.recover PR #​3450
• feat: don't force send extra_float_digits for PostgreSQL >= 12 fix Issue #​3432 PR #​3446
• fix: exclude "include columns" from the list of primary keys PR #​3434
• perf: Enhance the meta query performance by specifying the oid. PR #​3427
• feat: support getObject(int, byte[].class) for bytea PR #​3274
• docs: document infinity and some minor edits PR #​3407
• fix: Added way to check for major server version, fixed check for RULE PR #​3402
• docs: fixed remaining paragraphs PR #​3398
• docs: fixed paragraphs in javadoc comments PR #​3397
• fix: Reuse buffers and reduce allocations in GSSInputStream addresses Issue #​3251 PR #​3255
• chore: Update Gradle to 8.10.2 PR #​3388
• fix: getSchemas() PR #​3386
• fix: Update rpm postgresql-jdbc.spec.tpl with scram-client PR #​3324
• fix: Clearing thisRow and rowBuffer on close() of ResultSet Issue #​3383 PR #​3384
• fix: Package was renamed to maven-bundle-plugin PR #​3382
• fix: As of version 18 the RULE privilege has been removed PR #​3378
• fix: use buffered inputstream to create GSSInputStream PR #​3373
• test: get rid of 8.4, 9.0 pg versions and use >= jdk version 17 PR #​3372
• Changed docker-compose version and renamed script file in instructions to match the real file name PR #​3363
• test:Do not assume "test" database in DatabaseMetaDataTransactionIsolationTest PR #​3364
• try to categorize dependencies PR #​3362

v42.7.4

Added

• chore: SCRAM dependency to 3.1 and support channel binding PR #​3188
• chore: Add PostgreSQL 15, 16, and 17beta1 to CI tests PR #​3299
• test: Update to 17beta3 PR #​3308
• chore: Implement direct SSL ALPN connections PR #​3252
• translation: Add Korean translation file PR #​3276

Fixed

• fix: PgInterval ignores case for represented interval string PR #​3344
• perf: Avoid extra copies when receiving int4 and int2 in PGStream PR #​3295
• fix: Add support for Infinity::numeric values in ResultSet.getObject PR #​3304
• fix: Ensure order of results for getDouble PR #​3301
• perf: Replace BufferedOutputStream with unsynchronized PgBufferedOutputStream, allow configuring different Java and SO_SNDBUF buffer sizes PR #​3248
• fix: Fix SSL tests PR #​3260
• fix: Support bytea in preferQueryMode=simple PR #​3243
• fix: Fix #​3234 - Return -1 as update count for stored procedure calls PR #​3235
• fix: Fix #​3224 - conversion for TIME '24:00' to LocalTime breaks in binary-mode PR #​3225
• perf: Speed up getDate by parsing bytes instead of String PR #​3141
• fix: support PreparedStatement.setBlob(1, Blob) and PreparedStatement.setClob(1, Clob) for lobs that return -1 for length PR #​3136
• fix: Validates resultset Params in PGStatement constructor. uses assertThro… PR #​3171
• fix: Validates resultset parameters PR #​3167
• docs: Replace greater to with greater than PR #​3315
• docs: Clarify binaryTransfer and prepareThreshold PR #​3338
• docs: use.md, typo PR #​3314
• test: Use docker v2 which changes docker-compose to docker compose #​3339
• refactor: Merge PgPreparedStatement#setBinaryStream int and long methods PR #​3165
• test: Test both binaryMode=true,false when creating connections in DatabaseMetaDataTest PR #​3231
• docs: Fixed typos in all source code and documentations PR #​3242
• chore: Remove self-hosted runner PR #​3227
• docs: Add cancelSignalTimeout in README PR #​3190
• docs: Document READ_ONLY_MODE in README PR #​3175
• test: Test for +/- infinity double values PR #​3294
• test: Switch localhost and auth-test around for test-gss PR #​3343
• fix: remove preDescribe from internalExecuteBatch PR #​2883

Deprecated

• test: Deprecate all PostgreSQL versions older than 9.1 PR #​3335

vladmihalcea/hypersistence-utils (io.hypersistence:hypersistence-utils-hibernate-63)

v3.9.0

================================================================================

Remove PostgreSQLIntervalType from HibernateTypesContributor #​750

Add support for SortedSet in ListArrayType #​749

Allow PostgreSQLCITextType entity attributes to be used in the LIKE query clause #​743

Add support for GraalVM native image #​740

v3.8.3

================================================================================

Fix Hibernate 6.6 JSON mapping on Oracle BLOB column type #​742

hibernate/hibernate-orm (org.hibernate:hibernate-core)

v6.6.5.Final

Compare Source

v6.6.4.Final

Compare Source

v6.6.3.Final

Compare Source

v6.6.2.Final

Compare Source

v6.6.1.Final

Compare Source

v6.6.0.Final

Compare Source

v6.5.3.Final

Compare Source

connect2id/oauth-2.0-sdk-with-openid-connect-extensions (com.nimbusds:oauth2-oidc-sdk)

v11.21.2

Compare Source

v11.21.1

Compare Source

v11.21

Compare Source

v11.20.2

Compare Source

v11.20.1

Compare Source

v11.20

Compare Source

v11.19.1

Compare Source

v11.19

Compare Source

v11.18

Compare Source

v11.17

Compare Source

v11.16.1

Compare Source

v11.16

Compare Source

v11.15

Compare Source

spring-projects/spring-boot (org.springframework.boot:spring-boot-starter-oauth2-client)

v3.4.2

🐞 Bug Fixes

• Property metadata for "logging.structured.json.customizer" has incorrect type #​43916
• GraylogExtendedLogFormatProperties throws NullPointerException when only 'logging.structured.gelf.host' is specified #​43863
• Structured logging properties have no effect in a native image #​43862
• Docker Compose support for ClickHouse does not allow an empty password when ALLOW_EMPTY_PASSWORD=yes #​43790
• docker compose ps now fails due to unknown --orphans flag with 2.23 or earlier #​43717
• Build info timestamp is truncated to seconds #​43617
• FileWatcher used for SSL reload does not support symlinks #​43604
• BindableRuntimeHintsRegistrar should handle TypeNotPresentException #​43600
• CapturedOutput is empty when using Log4J2 StatusLogger #​43578
• Spring Boot 3.4 is not compatible with Gson 2.10 #​43442
• NoClassDefFoundError when using JUnit to test a Gradle 7.6.x app that depends on spring-boot-actuator-autoconfigure but not on org.junit.platform:junit-platform-launcher #​43340

📔 Documentation

• Document that the @ConfigurationProperties annotation processor cannot generate description and defaultValue metadata for external types #​43929
• Fix description of management.metrics.graphql.autotime.enabled #​43905
• Document 'base64:' prefix support #​43835
• Document handling of @Fallback beans in ConditionalOnSingleCandidate's javadoc #​43826
• Javadoc of DataSourceBuilder does not reference all supported types #​43732
• Update OpenTelemetry section in Supported Monitoring Systems to refer to OTLP instead #​43729
• Consistently document the minimum supported versions of Gradle #​43725
• Document that system libraries are a reason to customize the builder and switch away from builder-jammy-java-tiny #​43716
• Links to the Javadoc of Jakarta Messaging are invalid #​43662
• Paragraph HTML tags are rendered as-is in Maven Plugin reference documentation #​43623
• Javadoc link for jakarta.xml.bind is invalid #​43607
• Documentation still has references to 'layertools' #​43605
• Javadoc of ConstructorBinding should not use markdown formatting #​43599
• Managed Dependency Coordinates lists Spock and OkHttp dependencies that are not managed #​43584

🔨 Dependency Upgrades

• Upgrade to ActiveMQ 6.1.5 #​43791
• Upgrade to Commons Codec 1.17.2 #​43720
• Upgrade to Couchbase Client 3.7.7 #​43843
• Upgrade to FreeMarker 2.3.34 #​43721
• Upgrade to Hibernate 6.6.5.Final #​43910
• Upgrade to HttpCore5 5.3.2 #​43792
• Upgrade to Infinispan 15.0.12.Final #​43911
• Upgrade to Jersey 3.1.10 #​43793
• Upgrade to jOOQ 3.19.18 #​43844
• Upgrade to Lettuce 6.4.2.RELEASE #​43609
• Upgrade to Logback 1.5.16 #​43715
• Upgrade to Micrometer 1.14.3 #​43745
• Upgrade to Micrometer Tracing 1.4.2 #​43746
• Upgrade to Netty 4.1.117.Final #​43845
• Upgrade to Postgresql 42.7.5 #​43846
• Upgrade to Pulsar 3.3.4 #​43912
• Upgrade to R2DBC MySQL 1.3.1 #​43722
• Upgrade to Reactor Bom 2024.0.2 #​43747
• Upgrade to Spring AMQP 3.2.2 #​43748
• Upgrade to Spring Data Bom 2024.1.2 #​43749
• Upgrade to Spring Framework 6.2.2 #​43750
• Upgrade to Spring Kafka 3.3.2 #​43751
• Upgrade to Spring Pulsar 1.2.2 #​43752
• Upgrade to SQLite JDBC 3.47.2.0 #​43723

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​arefbehboudi, @​dreis2211, @​gavarava, @​hezean, @​izeye, @​jxblum, @​ngocnhan-tran1996, @​nosan, @​quaff, and @​tmaciejewski

v3.4.1

🐞 Bug Fixes

• KafkaProperties fail to build SSL properties when the bundle name is an empty string #​43563
• Diagnostics are poor when property resolution throws a ConversionFailedException #​43559
• SpringApplicationShutdownHandlers do not run in deterministic order #​43536
• Unable to find a @SpringBootConfiguration results in misleading error message #​43507
• With multiple ResourceHandlerRegistrationCustomizer beans in the context, only one of them is used #​43497
• Unable to use Docker Compose support when mixing dedicated and shared services #​43472
• Kafka dependency management does not include the kafka-server module #​43454
• Docker API version is incorrectly reported when '/_ping` calls fail and version should be fixed #​43452
• Methods to build producer / consumer properties from KafkaProperties are inconvienenent to use without an SSL bundle #​43448
• Failures in -Djarmode=tools do not consistently return a non-zero exit #​43436
• HttpComponentsClientHttpRequestFactoryBuilder replaces the existing defaultRequestConfigCustomizer rather than adding to it #​43429
• spring-boot-maven-plugin sets imagePlatform even if it's empty #​43424
• OnBeanCondition fails to match on annotations when using Scoped Proxies #​43423
• Failure analysis for InvalidConfigurationPropertyValueException doesn't correctly handle fuzzy matching of environment variables #​43382
• H2ConsoleAutoConfiguration causes early initialization of DataSource beans #​43359
• Accept progress on numbers >2GB #​43356
• Servlet-based UserDetailsServiceAutoConfiguration is active in a reactive app #​43334
• StructuredLoggingJsonMembersCustomizer implementations declared in spring.factories with a generic type more specific than Object are not called #​43312
• Overriding log level with an environment variable does not work when using an environment prefix #​43307
• Management endpoint access and enabled properties are ignored unless the endpoint ID is an exact match #​43302
• UnsupportedOperationException when starting a Maven shaded application on Java 21 with virtual threads enabled #​43291
• JmsListener failing with Narayana (pooled ConnectionFactory) since 3.4.0 #​43277
• SslBundle can no longer open store file locations without using a 'file:' prefix #​43274
• TestRestTemplate does not allow redirects to be customized #​43258
• Testcontainers start() methods may be started multiple times #​43253

📔 Documentation

• Fix typo in documentation #​43558
• Document that server.ssl.cipher and server.ssl.enabled-protocols are not fallbacks used with SSL bundles #​43552
• Use <annotationProcessorPaths> in Maven examples for configuring an annotation processor #​43544
• Fix typo #​43519
• Links to logback javadoc are incorrect #​43456
• Fix JUnit javadoc links #​43428
• Reference documentation incorrectly uses 'disabled' rather than 'none' for access restrictions #​43351
• Restore System property in Logging section of the reference documentation #​43342
• Fix link to proxyBeanMethods in @AutoConfiguration javadoc #​43325
• Fix links to Servlet and JPA javadoc #​43324
• Link to @EnableMethodSecurity instead of the deprecated @EnableGlobalMethodSecurity #​43315
• Document that StructuredLoggingJsonMembersCustomizer implementations may optionally take constructor parameters #​43314
• Update javadoc of StructuredLoggingJsonMembersCustomizer to note that implementations can registered through spring.factories #​43313
• Fix Javadoc link for Hikari #​43311
• Document how to use structured logging with custom log configuration #​43301
• Update Javadoc since for OtlpMetricsProperties and OtlpTracingProperties #​43249

🔨 Dependency Upgrades

• Upgrade to Byte Buddy 1.15.11 #​43529
• Upgrade to Couchbase Client 3.7.6 #​43500
• Upgrade to CycloneDX Maven Plugin 2.9.1 #​43398
• Upgrade to Dependency Management Plugin 1.1.7 #​43543
• Upgrade to Elasticsearch Client 8.15.5 #​43399
• Upgrade to Hibernate 6.6.4.Final #​43566
• Upgrade to Hibernate Validator 8.0.2.Final #​43510
• Upgrade to Jackson Bom 2.18.2 #​43401
• Upgrade to Jetty 12.0.16 #​43488
• Upgrade to jOOQ 3.19.16 #​43468
• Upgrade to JUnit Jupiter 5.11.4 #​43530
• Upgrade to Log4j2 2.24.3 #​43501
• Upgrade to Micrometer 1.14.2 #​43408
• Upgrade to Micrometer Tracing 1.4.1 #​43409
• Upgrade to Native Build Tools Plugin 0.10.4 #​43403
• Upgrade to Netty 4.1.116.Final #​43548
• Upgrade to Prometheus Client 1.3.5 #​43503
• Upgrade to Pulsar 3.3.3 [#​43405](h

---

Configuration

📅 Schedule: Branch creation - "after 9am every weekday,before 5pm every weekday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[kth13]

LGTM