Skip to content

build(deps): Bump the dev-dependencies group with 16 updates - #184

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/gradle/dev-dependencies-6ae9f417b2
Oct 14, 2026
Merged

build(deps): Bump the dev-dependencies group with 16 updates#184
github-actions[bot] merged 1 commit into
mainfrom
dependabot/gradle/dev-dependencies-6ae9f417b2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 16 updates:

Package From To
gradle-wrapper 9.8.0 9.8.1
org.flywaydb:flyway-core 13.9.0 13.10.0
org.flywaydb:flyway-database-postgresql 13.9.0 13.10.0
org.postgresql:postgresql 42.7.13 42.7.14
software.amazon.awssdk:dynamodb 2.55.11 2.55.14
software.amazon.awssdk:dynamodb-enhanced 2.55.11 2.55.14
io.micronaut:micronaut-core 4.10.30 4.10.31
io.micronaut:micronaut-context 4.10.30 4.10.31
io.micronaut:micronaut-inject-java 4.10.30 4.10.31
io.micronaut:micronaut-http 4.10.30 4.10.31
io.micronaut:micronaut-http-server-netty 4.10.30 4.10.31
io.micronaut:micronaut-http-client 4.10.30 4.10.31
io.micronaut:micronaut-jackson-databind 4.10.30 4.10.31
io.micronaut:micronaut-runtime 4.10.30 4.10.31
com.diffplug.spotless:spotless-plugin-gradle 8.10.3 8.10.4
com.diffplug.spotless 8.10.3 8.10.4

Updates gradle-wrapper from 9.8.0 to 9.8.1

Release notes

Sourced from gradle-wrapper's releases.

9.8.1

This is a patch release for Gradle 9.8.0. We recommend using 9.8.1 instead of 9.8.0.

This release addresses three high rated vulnerabilities:

The following issues were resolved:

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aman Gautam, Björn Kautler, Eng Zer Jun, Hashim Khan, Julian Krannich, KBS, Labh R Jethe, Mark Dodgson, Maxim, monkey, nataphon-ktsystems, Paul King, Qiu Tian, rg_sandesh, Roberto Perez Alcolea, Sean, Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.1 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.1 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

... (truncated)

Commits
  • 39daf39 Release notes for Gradle 9.8.1 (#39409)
  • 4fc92e5 Release notes for Gradle 9.8.1
  • bfbd14a Make repository disabling stricter (#39403)
  • 95e0bf9 Check daemon & worker preamble earlier (#39402)
  • 7aa9a5b Improve display for distribution url in wrapper (#39401)
  • 74a7720 Wrap GCP & S3 resolution errors into HTTP to reuse repository disabling mecha...
  • 651110a Check worker token before any serialization similarly to daemon
  • 8a6b9d9 Harden repository disabling: disable them by default on failure unless there'...
  • f28e514 Check the daemon token before any serialization
  • 86ab273 Replace credentials for distribution url with *** and avoid showing the plain...
  • Additional commits viewable in compare view

Updates org.flywaydb:flyway-core from 13.9.0 to 13.10.0

Updates org.flywaydb:flyway-database-postgresql from 13.9.0 to 13.10.0

Updates org.flywaydb:flyway-database-postgresql from 13.9.0 to 13.10.0

Updates org.postgresql:postgresql from 42.7.13 to 42.7.14

Release notes

Sourced from org.postgresql:postgresql's releases.

v42.7.14

Security

This release fixes two security vulnerabilities.

requireAuth is silently not enforced when the value excludes every authentication method (GHSA-rhp9-mr79-r74h, CVE-2026-107314)

Severity: Moderate (CVSS 5.9) | Affected versions: 42.7.11 – 42.7.13

If the requireAuth connection property excluded all six authentication methods the driver knows (for example requireAuth=!password,!md5,!gss,!sspi,!scram-sha-256,!none) or contained no method at all (for example requireAuth=,), the driver applied no restriction and accepted whatever method the server asked for, including cleartext password. An attacker positioned between the application and the server could use this to request cleartext password authentication and receive the database password.

Unset values, positive lists (such as requireAuth=scram-sha-256) and partial exclusions (such as requireAuth=!password,!md5) were not affected, and neither were deployments that do not set requireAuth.

Behavior after upgrading:

  • A value that excludes every method now refuses the connection with SQLState 08004 and the message Authentication method is not allowed by requireAuth (or the channel binding error when channelBinding=require is also set).
  • A value that names no method is rejected as an invalid requireAuth value.

Because affected deployments had this value by mistake, and connections worked normally on affected versions, connections with such a value will fail after upgrading. Replace it with a positive list of the methods your server uses, for example requireAuth=scram-sha-256.

Independently of this fix, use sslmode=verify-full with a trusted CA so that an attacker cannot present a substitute server.

Thanks to @​manus-pi for finding and reporting this issue.

Driver stores bytes of earlier statements when it pads a value shorter than its declared length (GHSA-f64h-wr5q-3qf3, CVE-2026-107315)

Severity: Moderate (CVSS 5.3) | Affected versions: 42.7.4 – 42.7.13

When an application sent a value shorter than the length it declared, the driver padded the missing bytes with data from earlier messages on the same connection instead of zeros, and the server stored them. The stored value could contain SQL text and parameter values of earlier, unrelated statements (up to 8192 bytes, or 16320 with GSS encryption). On pooled connections, those statements could come from other requests. 42.7.3 and earlier padded with zeros.

This is reachable through the following public API when the declared length is larger than the data:

  • PreparedStatement.setObject(int, ByteStreamWriter)
  • CopyIn.writeToCopy(ByteStreamWriter) and CopyIn.writeToCopy(byte[], int, int)
  • PGCopyOutputStream.write(byte[], int, int) (writes over 64 KiB)
  • LargeObject.write(byte[], int, int)
  • java.sql.Blob.setBytes(long, byte[], int, int)

Padding is now always zeros. Applications whose declared length always matches the data were not affected. Values stored by an affected version through such a call may already contain leaked data, so you may want to review affected columns. There is no connection property to disable the old behavior; the workaround on older versions is to make the declared length match the data.

Thanks to @​vlsi for finding and reporting this issue.

Full Changelog: pgjdbc/pgjdbc@REL42.7.13...REL42.7.14

Changelog

Sourced from org.postgresql:postgresql's changelog.

Changelog

Notable changes since version 42.0.0, read the complete History of Changes.

The format is based on Keep a Changelog.

[Unreleased]

Fixed

  • fix: PGStream.skip no longer loops forever when the connection ends while the driver is discarding bytes, and no longer mistakes a stream that skips nothing for one that has ended. InputStream.skip may return zero with more data still coming, which a stream supplied through the socketFactory property is free to do; the driver now reads a byte in that case and treats only -1 as the end [PR #4358](pgjdbc/pgjdbc#4358)
  • fix: LargeObjectManager operations now work inside an active XA transaction. Since 42.7.13 an XA branch keeps the caller's autoCommit=true, and the guard rejected large objects as if the connection were idle. It now checks the server transaction state (getTransactionState()) instead of autoCommit, so a genuine auto-commit connection with no open transaction is still refused [Issue #4309](pgjdbc/pgjdbc#4309) [PR #4310](pgjdbc/pgjdbc#4310)
  • fix: batch update counts are no longer secured as committed inside an XA transaction. BatchResultHandler treated per-statement progress as durable whenever autoCommit=true, but an XA branch keeps autoCommit=true while the transaction is open, so a batch that flushed mid-way and then failed could report rolled-back statements as succeeded. Progress is now secured only when no server transaction is open [Issue #4309](pgjdbc/pgjdbc#4309) [PR #4311](pgjdbc/pgjdbc#4311)

Changed

  • fix: backend message lengths are checked before anything is sized from them. Each length is checked against the message layout and a limit for its type, the lengths inside DataRow and FunctionCallResponse are checked against the message, and the NegotiateProtocolVersion option count is bounded. A hostile or out of sync backend could previously force an allocation of up to two gigabytes with a five byte header [Issue #4015](pgjdbc/pgjdbc#4015)
  • fix: the read buffer is limited to 32 MiB and grows once per request rather than once per socket read. It previously doubled on every read while a large request was outstanding, so a peer that declared a large length and sent it slowly grew the buffer until the doubling past 1 GiB overflowed to a negative size [Issue #4015](pgjdbc/pgjdbc#4015)
  • fix: a zero-length CopyData body is accepted. It is valid on the wire and was previously rejected by an assertion, so it failed only on JVMs started with -ea [Issue #4015](pgjdbc/pgjdbc#4015)
  • fix: GSS packet lengths are bounded. The encrypted transport is limited to a 16380 byte payload and the handshake to a 65532 byte token, matching PQ_GSS_MAX_PACKET_SIZE and PQ_GSS_AUTH_BUFFER_SIZE [Issue #4015](pgjdbc/pgjdbc#4015)
  • fix: a connection whose stream has been refused is no longer reusable. Any refused length or count marks the stream broken, so Connection.isClosed() reports it closed and a pool that tests on borrow discards it. The socket is dropped with SO_LINGER 0 [Issue #4015](pgjdbc/pgjdbc#4015)
  • fix: a protocol violation before authentication is reported as PSQLException with SQLState 08P01 rather than as a plain I/O error, and is no longer retried under sslMode=allow or sslMode=prefer [Issue #4015](pgjdbc/pgjdbc#4015)
  • fix: the counts inside RowDescription, ParameterDescription, CopyInResponse and CopyOutResponse are checked against the declared message length. A RowDescription claiming more fields than its length can hold previously read its field descriptions out of the messages that followed it [Issue #4015](pgjdbc/pgjdbc#4015)
  • fix: the driver checks that each backend message was consumed exactly before reading the next message type, so a reader that stops short of its declared length is refused rather than misreading what follows [Issue #4015](pgjdbc/pgjdbc#4015)
  • fix: the authentication loop, the GSS encryption handshake and the GSS authentication handshake each stop after 64 round trips. A zero-length GSS token is a valid continuation, so a server could previously keep a client exchanging tokens forever before any credentials were exchanged [Issue #4015](pgjdbc/pgjdbc#4015)
  • fix: ErrorResponse before authentication is limited to 30000 bytes rather than 32 MiB, matching libpq's limit for messages outside VALID_LONG_MESSAGE_TYPE, and a C string inside a declared message is no longer scanned past the end of that message. Both were allocations an unauthenticated peer could cause [Issue #4015](pgjdbc/pgjdbc#4015)
  • fix: an ErrorResponse or NoticeResponse longer than 32 MiB is truncated to that size rather than refused. The body past the limit is drained and the shortened message is delivered, so the connection stays usable [Issue #4015](pgjdbc/pgjdbc#4015)
  • fix: the read buffer returns to its initial size once the message that grew it is drained, so a connection no longer retains 32 MiB after one large error [Issue #4015](pgjdbc/pgjdbc#4015)
  • fix: exceeding maxResultBuffer closes the connection. The row is not read past the limit, so the connection cannot continue, and it is now dropped where the limit is exceeded rather than refused as a protocol violation at the next message. The error reported is the limit alone, with SQLState 08S01 as before [Issue #4015](pgjdbc/pgjdbc#4015)

Security

  • fix: a requireAuth value that excludes every authentication method, such as !password,!md5,!gss,!sspi,!scram-sha-256,!none, now refuses every method. A connection with such a value now fails with SQLState 08004. Before, the driver treated the value as if requireAuth were not set, and used any method the server asked for, even a cleartext password. This affects 42.7.11 through 42.7.13 GHSA-rhp9-mr79-r74h
  • fix: a requireAuth value without a method in it, such as , or ,,, now fails with SQLState 22023. Before, the driver treated it as if requireAuth were not set. Commas at the very end of a value are still ignored, as in password,. This affects 42.7.11 through 42.7.13 GHSA-rhp9-mr79-r74h
Commits
  • ebdd9d0 chore: bump version to 42.7.14
  • 0e764c8 test: Add additional PgBufferedOutputStream.writeZeros(...) tests
  • c8998c8 fix: writeZeros() could send stale buffer contents instead of zeros
  • a65ef98 fix: refuse every method when requireAuth excludes them all
  • See full diff in compare view

Updates software.amazon.awssdk:dynamodb from 2.55.11 to 2.55.14

Updates software.amazon.awssdk:dynamodb-enhanced from 2.55.11 to 2.55.14

Updates software.amazon.awssdk:dynamodb-enhanced from 2.55.11 to 2.55.14

Updates io.micronaut:micronaut-core from 4.10.30 to 4.10.31

Release notes

Sourced from io.micronaut:micronaut-core's releases.

Micronaut Core 4.10.31

Full Changelog: micronaut-projects/micronaut-core@v4.10.30...v4.10.31

Commits
  • d1d56e3 [skip ci] Release v4.10.31
  • 4abc8ce Update to Jackson 2.21.7
  • fc255f7 Update managed-netty version to 4.2.19.Final
  • 3d68e0c chore: Bump version to 4.10.31-SNAPSHOT
  • See full diff in compare view

Updates io.micronaut:micronaut-context from 4.10.30 to 4.10.31

Release notes

Sourced from io.micronaut:micronaut-context's releases.

Micronaut Core 4.10.31

Full Changelog: micronaut-projects/micronaut-core@v4.10.30...v4.10.31

Commits
  • d1d56e3 [skip ci] Release v4.10.31
  • 4abc8ce Update to Jackson 2.21.7
  • fc255f7 Update managed-netty version to 4.2.19.Final
  • 3d68e0c chore: Bump version to 4.10.31-SNAPSHOT
  • See full diff in compare view

Updates io.micronaut:micronaut-inject-java from 4.10.30 to 4.10.31

Release notes

Sourced from io.micronaut:micronaut-inject-java's releases.

Micronaut Core 4.10.31

Full Changelog: micronaut-projects/micronaut-core@v4.10.30...v4.10.31

Commits
  • d1d56e3 [skip ci] Release v4.10.31
  • 4abc8ce Update to Jackson 2.21.7
  • fc255f7 Update managed-netty version to 4.2.19.Final
  • 3d68e0c chore: Bump version to 4.10.31-SNAPSHOT
  • See full diff in compare view

Updates io.micronaut:micronaut-http from 4.10.30 to 4.10.31

Release notes

Sourced from io.micronaut:micronaut-http's releases.

Micronaut Core 4.10.31

Full Changelog: micronaut-projects/micronaut-core@v4.10.30...v4.10.31

Commits
  • d1d56e3 [skip ci] Release v4.10.31
  • 4abc8ce Update to Jackson 2.21.7
  • fc255f7 Update managed-netty version to 4.2.19.Final
  • 3d68e0c chore: Bump version to 4.10.31-SNAPSHOT
  • See full diff in compare view

Updates io.micronaut:micronaut-http-server-netty from 4.10.30 to 4.10.31

Release notes

Sourced from io.micronaut:micronaut-http-server-netty's releases.

Micronaut Core 4.10.31

Full Changelog: micronaut-projects/micronaut-core@v4.10.30...v4.10.31

Commits
  • d1d56e3 [skip ci] Release v4.10.31
  • 4abc8ce Update to Jackson 2.21.7
  • fc255f7 Update managed-netty version to 4.2.19.Final
  • 3d68e0c chore: Bump version to 4.10.31-SNAPSHOT
  • See full diff in compare view

Updates io.micronaut:micronaut-http-client from 4.10.30 to 4.10.31

Release notes

Sourced from io.micronaut:micronaut-http-client's releases.

Micronaut Core 4.10.31

Full Changelog: micronaut-projects/micronaut-core@v4.10.30...v4.10.31

Commits
  • d1d56e3 [skip ci] Release v4.10.31
  • 4abc8ce Update to Jackson 2.21.7
  • fc255f7 Update managed-netty version to 4.2.19.Final
  • 3d68e0c chore: Bump version to 4.10.31-SNAPSHOT
  • See full diff in compare view

Updates io.micronaut:micronaut-jackson-databind from 4.10.30 to 4.10.31

Release notes

Sourced from io.micronaut:micronaut-jackson-databind's releases.

Micronaut Core 4.10.31

Full Changelog: micronaut-projects/micronaut-core@v4.10.30...v4.10.31

Commits
  • d1d56e3 [skip ci] Release v4.10.31
  • 4abc8ce Update to Jackson 2.21.7
  • fc255f7 Update managed-netty version to 4.2.19.Final
  • 3d68e0c chore: Bump version to 4.10.31-SNAPSHOT
  • See full diff in compare view

Updates io.micronaut:micronaut-runtime from 4.10.30 to 4.10.31

Release notes

Sourced from io.micronaut:micronaut-runtime's releases.

Micronaut Core 4.10.31

Full Changelog: micronaut-projects/micronaut-core@v4.10.30...v4.10.31

Commits
  • d1d56e3 [skip ci] Release v4.10.31
  • 4abc8ce Update to Jackson 2.21.7
  • fc255f7 Update managed-netty version to 4.2.19.Final
  • 3d68e0c chore: Bump version to 4.10.31-SNAPSHOT
  • See full diff in compare view

Updates io.micronaut:micronaut-context from 4.10.30 to 4.10.31

Release notes

Sourced from io.micronaut:micronaut-context's releases.

Micronaut Core 4.10.31

Full Changelog: micronaut-projects/micronaut-core@v4.10.30...v4.10.31

Commits
  • d1d56e3 [skip ci] Release v4.10.31
  • 4abc8ce Update to Jackson 2.21.7
  • fc255f7 Update managed-netty version to 4.2.19.Final
  • 3d68e0c chore: Bump version to 4.10.31-SNAPSHOT
  • See full diff in compare view

Updates io.micronaut:micronaut-inject-java from 4.10.30 to 4.10.31

Release notes

Sourced from io.micronaut:micronaut-inject-java's releases.

Micronaut Core 4.10.31

Full Changelog: micronaut-projects/micronaut-core@v4.10.30...v4.10.31

Commits
  • d1d56e3 [skip ci] Release v4.10.31
  • 4abc8ce Update to Jackson 2.21.7
  • fc255f7 Update managed-netty version to 4.2.19.Final
  • 3d68e0c chore: Bump version to 4.10.31-SNAPSHOT
  • See full diff in compare view

Updates io.micronaut:micronaut-http from 4.10.30 to 4.10.31

Release notes

Sourced from io.micronaut:micronaut-http's releases.

Micronaut Core 4.10.31

Full Changelog: micronaut-projects/micronaut-core@v4.10.30...v4.10.31

Commits
  • d1d56e3 [skip ci] Release v4.10.31
  • 4abc8ce Update to Jackson 2.21.7
  • fc255f7 Update managed-netty version to 4.2.19.Final
  • 3d68e0c chore: Bump version to 4.10.31-SNAPSHOT
  • See full diff in compare view

Updates io.micronaut:micronaut-http-server-netty from 4.10.30 to 4.10.31

Release notes

Sourced from io.micronaut:micronaut-http-server-netty's releases.

Micronaut Core 4.10.31

Full Changelog: micronaut-projects/micronaut-core@v4.10.30...v4.10.31

Commits
  • d1d56e3 [skip ci] Release v4.10.31
  • 4abc8ce Update to Jackson 2.21.7
  • fc255f7 Update managed-netty version to 4.2.19.Final
  • 3d68e0c chore: Bump version to 4.10.31-SNAPSHOT
  • See full diff in compare view

Updates io.micronaut:micronaut-http-client from 4.10.30 to 4.10.31

Release notes

Sourced from io.micronaut:micronaut-http-client's releases.

Micronaut Core 4.10.31

Full Changelog: micronaut-projects/micronaut-core@v4.10.30...v4.10.31

Commits
  • d1d56e3 [skip ci] Release v4.10.31
  • 4abc8ce Update to Jackson 2.21.7
  • fc255f7 Update managed-netty version to 4.2.19.Final
  • 3d68e0c chore: Bump version to 4.10.31-SNAPSHOT
  • See full diff in compare view

Updates io.micronaut:micronaut-jackson-databind from 4.10.30 to 4.10.31

Release notes

Sourced from io.micronaut:micronaut-jackson-databind's releases.

Micronaut Core 4.10.31

Full Changelog: micronaut-projects/micronaut-core@v4.10.30...v4.10.31

Commits
  • d1d56e3 [skip ci] Release v4.10.31
  • 4abc8ce Update to Jackson 2.21.7
  • fc255f7 Update managed-netty version to 4.2.19.Final
  • 3d68e0c chore: Bump version to 4.10.31-SNAPSHOT
  • See full diff in compare view

Updates io.micronaut:micronaut-runtime from 4.10.30 to 4.10.31

Release notes

Sourced from io.micronaut:micronaut-runtime's releases.

Micronaut Core 4.10.31

Full Changelog: micronaut-projects/micronaut-core@v4.10.30...v4.10.31

Commits
  • d1d56e3 [skip ci] Release v4.10.31
  • 4abc8ce Update to Jackson 2.21.7
  • fc255f7 Update managed-netty version to 4.2.19.Final
  • 3d68e0c chore: Bump version to 4.10.31-SNAPSHOT
  • See full diff in compare view

Updates com.diffplug.spotless:spotless-plugin-gradle from 8.10.3 to 8.10.4

Release notes

Sourced from com.diffplug.spotless:spotless-plugin-gradle's releases.

Gradle Plugin v8.10.4

Changes

  • Bump default eclipse version from 4.40 to 4.41.
  • spotlessInstallGitPrePushHook now respects Git’s core.hooksPath when installing the pre-push hook, instead of always writing to .git/hooks. (#3115
  • Bump default gherkin version 42.0.0 -> 42.0.1. (#3088)
  • Bump default jackson version 2.22.2 -> 2.22.3. (#3101)
  • Bump default palantir-java-format version 2.98.0 -> 2.102.0. (#3103, #3132)
  • Bump default mockito-core version 5.23.0 -> 5.24.0. (#3106)
  • Bump default greclipse version to latest 4.40 -> 4.41. (#3123)
  • Bump default ktfmt version 0.64 -> 0.65. (#3135)
    Which moved to the org.jetbrains.kotlinx:ktfmt coordinate and org.jetbrains.kotlinx.ktfmt package. Older versions are still supported.
  • Bump default palantir-java-format version 2.99.0 -> 2.102.0. (#3132)

Fixed

  • shortenFullyQualifiedTypes leaves a qualified name alone when the enclosing type extends or implements a type that is not in the same file, so an inherited member type cannot take the simple name. (#3117)
  • expandWildcardImports no longer drops the import of a type that is only used to qualify a static member (such as Collections.sort(list) or TimeUnit.SECONDS), or the static import of a field or enum constant (such as PI from import static java.lang.Math.*), which produced code that did not compile. (#2833)
Commits
  • d9e7a41 Published gradle/8.10.4
  • c006d66 Published lib/4.10.4
  • 8adb835 Merge release publishing fixes into main (#3138)
  • 67b4dbf Remove internal publishing changes from release notes
  • b9c4830 Keep Rewrite plugin on publicly resolvable releases (#3036)
  • 1c93df4 Update dependency com.palantir.javaformat:palantir-java-format to v2.102.0 (#...
  • ab153a9 Keep Rewrite plugin on publicly resolvable releases
  • feb10d8 Update plugin rewrite to v7.41.0
  • 2083664 Update changelogs for default formatter version bump (#3132)
  • 7742abc Consolidate Palantir formatter changelog entries (#3132)
  • Additional commits viewable in compare view

Updates com.diffplug.spotless from 8.10.3 to 8.10.4

Updates com.diffplug.spotless from 8.10.3 to 8.10.4

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): Bump the dev-dependencies group with 16 updates
69c2c14 
Bumps the dev-dependencies group with 16 updates:

| Package | From | To |
| --- | --- | --- |
| [gradle-wrapper](https://github.com/gradle/gradle) | `9.8.0` | `9.8.1` |
| org.flywaydb:flyway-core | `13.9.0` | `13.10.0` |
| org.flywaydb:flyway-database-postgresql | `13.9.0` | `13.10.0` |
| [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) | `42.7.13` | `42.7.14` |
| software.amazon.awssdk:dynamodb | `2.55.11` | `2.55.14` |
| software.amazon.awssdk:dynamodb-enhanced | `2.55.11` | `2.55.14` |
| [io.micronaut:micronaut-core](https://github.com/micronaut-projects/micronaut-core) | `4.10.30` | `4.10.31` |
| [io.micronaut:micronaut-context](https://github.com/micronaut-projects/micronaut-core) | `4.10.30` | `4.10.31` |
| [io.micronaut:micronaut-inject-java](https://github.com/micronaut-projects/micronaut-core) | `4.10.30` | `4.10.31` |
| [io.micronaut:micronaut-http](https://github.com/micronaut-projects/micronaut-core) | `4.10.30` | `4.10.31` |
| [io.micronaut:micronaut-http-server-netty](https://github.com/micronaut-projects/micronaut-core) | `4.10.30` | `4.10.31` |
| [io.micronaut:micronaut-http-client](https://github.com/micronaut-projects/micronaut-core) | `4.10.30` | `4.10.31` |
| [io.micronaut:micronaut-jackson-databind](https://github.com/micronaut-projects/micronaut-core) | `4.10.30` | `4.10.31` |
| [io.micronaut:micronaut-runtime](https://github.com/micronaut-projects/micronaut-core) | `4.10.30` | `4.10.31` |
| [com.diffplug.spotless:spotless-plugin-gradle](https://github.com/diffplug/spotless) | `8.10.3` | `8.10.4` |
| com.diffplug.spotless | `8.10.3` | `8.10.4` |


Updates `gradle-wrapper` from 9.8.0 to 9.8.1
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.8.0...v9.8.1)

Updates `org.flywaydb:flyway-core` from 13.9.0 to 13.10.0

Updates `org.flywaydb:flyway-database-postgresql` from 13.9.0 to 13.10.0

Updates `org.flywaydb:flyway-database-postgresql` from 13.9.0 to 13.10.0

Updates `org.postgresql:postgresql` from 42.7.13 to 42.7.14
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](pgjdbc/pgjdbc@REL42.7.13...REL42.7.14)

Updates `software.amazon.awssdk:dynamodb` from 2.55.11 to 2.55.14

Updates `software.amazon.awssdk:dynamodb-enhanced` from 2.55.11 to 2.55.14

Updates `software.amazon.awssdk:dynamodb-enhanced` from 2.55.11 to 2.55.14

Updates `io.micronaut:micronaut-core` from 4.10.30 to 4.10.31
- [Release notes](https://github.com/micronaut-projects/micronaut-core/releases)
- [Changelog](https://github.com/micronaut-projects/micronaut-core/blob/5.3.x/RELEASE.adoc)
- [Commits](micronaut-projects/micronaut-core@v4.10.30...v4.10.31)

Updates `io.micronaut:micronaut-context` from 4.10.30 to 4.10.31
- [Release notes](https://github.com/micronaut-projects/micronaut-core/releases)
- [Changelog](https://github.com/micronaut-projects/micronaut-core/blob/5.3.x/RELEASE.adoc)
- [Commits](micronaut-projects/micronaut-core@v4.10.30...v4.10.31)

Updates `io.micronaut:micronaut-inject-java` from 4.10.30 to 4.10.31
- [Release notes](https://github.com/micronaut-projects/micronaut-core/releases)
- [Changelog](https://github.com/micronaut-projects/micronaut-core/blob/5.3.x/RELEASE.adoc)
- [Commits](micronaut-projects/micronaut-core@v4.10.30...v4.10.31)

Updates `io.micronaut:micronaut-http` from 4.10.30 to 4.10.31
- [Release notes](https://github.com/micronaut-projects/micronaut-core/releases)
- [Changelog](https://github.com/micronaut-projects/micronaut-core/blob/5.3.x/RELEASE.adoc)
- [Commits](micronaut-projects/micronaut-core@v4.10.30...v4.10.31)

Updates `io.micronaut:micronaut-http-server-netty` from 4.10.30 to 4.10.31
- [Release notes](https://github.com/micronaut-projects/micronaut-core/releases)
- [Changelog](https://github.com/micronaut-projects/micronaut-core/blob/5.3.x/RELEASE.adoc)
- [Commits](micronaut-projects/micronaut-core@v4.10.30...v4.10.31)

Updates `io.micronaut:micronaut-http-client` from 4.10.30 to 4.10.31
- [Release notes](https://github.com/micronaut-projects/micronaut-core/releases)
- [Changelog](https://github.com/micronaut-projects/micronaut-core/blob/5.3.x/RELEASE.adoc)
- [Commits](micronaut-projects/micronaut-core@v4.10.30...v4.10.31)

Updates `io.micronaut:micronaut-jackson-databind` from 4.10.30 to 4.10.31
- [Release notes](https://github.com/micronaut-projects/micronaut-core/releases)
- [Changelog](https://github.com/micronaut-projects/micronaut-core/blob/5.3.x/RELEASE.adoc)
- [Commits](micronaut-projects/micronaut-core@v4.10.30...v4.10.31)

Updates `io.micronaut:micronaut-runtime` from 4.10.30 to 4.10.31
- [Release notes](https://github.com/micronaut-projects/micronaut-core/releases)
- [Changelog](https://github.com/micronaut-projects/micronaut-core/blob/5.3.x/RELEASE.adoc)
- [Commits](micronaut-projects/micronaut-core@v4.10.30...v4.10.31)

Updates `io.micronaut:micronaut-context` from 4.10.30 to 4.10.31
- [Release notes](https://github.com/micronaut-projects/micronaut-core/releases)
- [Changelog](https://github.com/micronaut-projects/micronaut-core/blob/5.3.x/RELEASE.adoc)
- [Commits](micronaut-projects/micronaut-core@v4.10.30...v4.10.31)

Updates `io.micronaut:micronaut-inject-java` from 4.10.30 to 4.10.31
- [Release notes](https://github.com/micronaut-projects/micronaut-core/releases)
- [Changelog](https://github.com/micronaut-projects/micronaut-core/blob/5.3.x/RELEASE.adoc)
- [Commits](micronaut-projects/micronaut-core@v4.10.30...v4.10.31)

Updates `io.micronaut:micronaut-http` from 4.10.30 to 4.10.31
- [Release notes](https://github.com/micronaut-projects/micronaut-core/releases)
- [Changelog](https://github.com/micronaut-projects/micronaut-core/blob/5.3.x/RELEASE.adoc)
- [Commits](micronaut-projects/micronaut-core@v4.10.30...v4.10.31)

Updates `io.micronaut:micronaut-http-server-netty` from 4.10.30 to 4.10.31
- [Release notes](https://github.com/micronaut-projects/micronaut-core/releases)
- [Changelog](https://github.com/micronaut-projects/micronaut-core/blob/5.3.x/RELEASE.adoc)
- [Commits](micronaut-projects/micronaut-core@v4.10.30...v4.10.31)

Updates `io.micronaut:micronaut-http-client` from 4.10.30 to 4.10.31
- [Release notes](https://github.com/micronaut-projects/micronaut-core/releases)
- [Changelog](https://github.com/micronaut-projects/micronaut-core/blob/5.3.x/RELEASE.adoc)
- [Commits](micronaut-projects/micronaut-core@v4.10.30...v4.10.31)

Updates `io.micronaut:micronaut-jackson-databind` from 4.10.30 to 4.10.31
- [Release notes](https://github.com/micronaut-projects/micronaut-core/releases)
- [Changelog](https://github.com/micronaut-projects/micronaut-core/blob/5.3.x/RELEASE.adoc)
- [Commits](micronaut-projects/micronaut-core@v4.10.30...v4.10.31)

Updates `io.micronaut:micronaut-runtime` from 4.10.30 to 4.10.31
- [Release notes](https://github.com/micronaut-projects/micronaut-core/releases)
- [Changelog](https://github.com/micronaut-projects/micronaut-core/blob/5.3.x/RELEASE.adoc)
- [Commits](micronaut-projects/micronaut-core@v4.10.30...v4.10.31)

Updates `com.diffplug.spotless:spotless-plugin-gradle` from 8.10.3 to 8.10.4
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@gradle/8.10.3...gradle/8.10.4)

Updates `com.diffplug.spotless` from 8.10.3 to 8.10.4

Updates `com.diffplug.spotless` from 8.10.3 to 8.10.4

---
updated-dependencies:
- dependency-name: gradle-wrapper
  dependency-version: 9.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.flywaydb:flyway-core
  dependency-version: 13.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.flywaydb:flyway-database-postgresql
  dependency-version: 13.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.flywaydb:flyway-database-postgresql
  dependency-version: 13.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.postgresql:postgresql
  dependency-version: 42.7.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: software.amazon.awssdk:dynamodb
  dependency-version: 2.55.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: software.amazon.awssdk:dynamodb-enhanced
  dependency-version: 2.55.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: software.amazon.awssdk:dynamodb-enhanced
  dependency-version: 2.55.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: io.micronaut:micronaut-core
  dependency-version: 4.10.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: io.micronaut:micronaut-context
  dependency-version: 4.10.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: io.micronaut:micronaut-inject-java
  dependency-version: 4.10.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: io.micronaut:micronaut-http
  dependency-version: 4.10.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: io.micronaut:micronaut-http-server-netty
  dependency-version: 4.10.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: io.micronaut:micronaut-http-client
  dependency-version: 4.10.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: io.micronaut:micronaut-jackson-databind
  dependency-version: 4.10.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: io.micronaut:micronaut-runtime
  dependency-version: 4.10.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: io.micronaut:micronaut-context
  dependency-version: 4.10.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: io.micronaut:micronaut-inject-java
  dependency-version: 4.10.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: io.micronaut:micronaut-http
  dependency-version: 4.10.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: io.micronaut:micronaut-http-server-netty
  dependency-version: 4.10.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: io.micronaut:micronaut-http-client
  dependency-version: 4.10.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: io.micronaut:micronaut-jackson-databind
  dependency-version: 4.10.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: io.micronaut:micronaut-runtime
  dependency-version: 4.10.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: com.diffplug.spotless:spotless-plugin-gradle
  dependency-version: 8.10.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: com.diffplug.spotless
  dependency-version: 8.10.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: com.diffplug.spotless
  dependency-version: 8.10.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 14, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) October 14, 2026 19:41
@github-actions
github-actions Bot merged commit 5daaf47 into main Oct 14, 2026
7 checks passed
@dependabot
dependabot Bot deleted the dependabot/gradle/dev-dependencies-6ae9f417b2 branch October 14, 2026 19:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants