From 94f029d5cc72ceac07a7875af8b6b9f526f2d826 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Fri, 6 Mar 2026 14:49:23 +0100 Subject: [PATCH 1/8] Upgrade to Hibernate 6.6.44.Final Closes gh-49457 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 192bbbc3acf..eff91adabcd 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -557,7 +557,7 @@ bom { releaseNotes("https://github.com/hazelcast/hazelcast/releases/tag/v{version}") } } - library("Hibernate", "6.6.42.Final") { + library("Hibernate", "6.6.44.Final") { prohibit { versionRange "[7.0.0.Alpha1,)" because "it exceeds our Jakarta EE 10 baseline" From adfbb2da0dc0c0db4121db6e660c36298ca07287 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Fri, 6 Mar 2026 14:49:28 +0100 Subject: [PATCH 2/8] Upgrade to Jakarta XML WS 4.0.3 Closes gh-49458 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index eff91adabcd..47f98b27c33 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -952,7 +952,7 @@ bom { releaseNotes("https://github.com/jakartaee/saaj-api/releases/tag/{version}") } } - library("Jakarta XML WS", "4.0.2") { + library("Jakarta XML WS", "4.0.3") { group("jakarta.xml.ws") { modules = [ "jakarta.xml.ws-api" From 41c7d09e7e178b5fb52edff5aeab16e21d8f615e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Fri, 6 Mar 2026 14:49:32 +0100 Subject: [PATCH 3/8] Upgrade to Jetty 12.0.33 Closes gh-49459 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 47f98b27c33..f319bfe8c84 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1072,7 +1072,7 @@ bom { ] } } - library("Jetty", "12.0.32") { + library("Jetty", "12.0.33") { prohibit { contains ".alpha" because "we don't want alpha dependencies" From 928fb89d0a4b62356bb4f776e6943703a5706960 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Fri, 6 Mar 2026 14:49:36 +0100 Subject: [PATCH 4/8] Upgrade to Kafka 3.9.2 Closes gh-49460 --- spring-boot-project/spring-boot-autoconfigure/build.gradle | 4 +++- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/spring-boot-project/spring-boot-autoconfigure/build.gradle b/spring-boot-project/spring-boot-autoconfigure/build.gradle index 30770102477..ac4f381747e 100644 --- a/spring-boot-project/spring-boot-autoconfigure/build.gradle +++ b/spring-boot-project/spring-boot-autoconfigure/build.gradle @@ -236,7 +236,9 @@ dependencies { optional("org.springframework.session:spring-session-hazelcast") optional("org.springframework.session:spring-session-jdbc") optional("org.springframework.amqp:spring-rabbit") - optional("org.springframework.amqp:spring-rabbit-stream") + optional("org.springframework.amqp:spring-rabbit-stream") { + exclude group: "org.lz4", module: "lz4-java" + } optional("org.springframework.kafka:spring-kafka") optional("org.springframework.ws:spring-ws-core") { exclude group: "com.sun.mail", module: "jakarta.mail" diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index f319bfe8c84..12cf461f77a 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1190,7 +1190,7 @@ bom { releaseNotes("https://junit.org/junit5/docs/{version}/release-notes") } } - library("Kafka", "3.9.1") { + library("Kafka", "3.9.2") { group("org.apache.kafka") { modules = [ "connect", From 9fd3e26044bf81af2b208db4d0ab6efadbd5e185 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Fri, 6 Mar 2026 14:49:40 +0100 Subject: [PATCH 5/8] Upgrade to Maven Failsafe Plugin 3.5.5 Closes gh-49461 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 12cf461f77a..644f0dc403a 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1466,7 +1466,7 @@ bom { releaseNotes("https://github.com/apache/maven-enforcer/releases/tag/enforcer-{version}") } } - library("Maven Failsafe Plugin", "3.5.4") { + library("Maven Failsafe Plugin", "3.5.5") { group("org.apache.maven.plugins") { plugins = [ "maven-failsafe-plugin" From 6b1a7bd1ff025a2fbff0869356caeb48b559315c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Fri, 6 Mar 2026 14:49:45 +0100 Subject: [PATCH 6/8] Upgrade to Maven Shade Plugin 3.6.2 Closes gh-49462 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 644f0dc403a..46152f60d7b 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1545,7 +1545,7 @@ bom { releaseNotes("https://github.com/apache/maven-resources-plugin/releases/tag/maven-resources-plugin-{version}") } } - library("Maven Shade Plugin", "3.6.1") { + library("Maven Shade Plugin", "3.6.2") { group("org.apache.maven.plugins") { plugins = [ "maven-shade-plugin" From f0a53d44171a7e0e43bcb85f34e436ea209d7a8c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Fri, 6 Mar 2026 14:49:49 +0100 Subject: [PATCH 7/8] Upgrade to Maven Surefire Plugin 3.5.5 Closes gh-49463 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 46152f60d7b..883c6de93f4 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1569,7 +1569,7 @@ bom { releaseNotes("https://github.com/apache/maven-source-plugin/releases/tag/maven-source-plugin-{version}") } } - library("Maven Surefire Plugin", "3.5.4") { + library("Maven Surefire Plugin", "3.5.5") { group("org.apache.maven.plugins") { plugins = [ "maven-surefire-plugin" From 013389c9b309dccfeb9992d9575b86b547f6b332 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Fri, 6 Mar 2026 14:49:53 +0100 Subject: [PATCH 8/8] Upgrade to Pulsar 4.0.9 Closes gh-49464 --- .../spring-boot-autoconfigure/build.gradle | 12 +++--------- .../spring-boot-dependencies/build.gradle | 2 +- spring-boot-project/spring-boot-docs/build.gradle | 8 ++------ .../spring-boot-starter-pulsar-reactive/build.gradle | 4 +--- .../spring-boot-starter-pulsar/build.gradle | 4 +--- .../spring-boot-testcontainers/build.gradle | 4 +--- 6 files changed, 9 insertions(+), 25 deletions(-) diff --git a/spring-boot-project/spring-boot-autoconfigure/build.gradle b/spring-boot-project/spring-boot-autoconfigure/build.gradle index ac4f381747e..e863a9dc008 100644 --- a/spring-boot-project/spring-boot-autoconfigure/build.gradle +++ b/spring-boot-project/spring-boot-autoconfigure/build.gradle @@ -53,9 +53,7 @@ dependencies { dockerTestImplementation("org.testcontainers:junit-jupiter") dockerTestImplementation("org.testcontainers:mongodb") dockerTestImplementation("org.testcontainers:neo4j") - dockerTestImplementation("org.testcontainers:pulsar") { - exclude group: "commons-logging", module: "commons-logging" - } + dockerTestImplementation("org.testcontainers:pulsar") dockerTestImplementation("org.testcontainers:testcontainers") optional("co.elastic.clients:elasticsearch-java") { @@ -209,12 +207,8 @@ dependencies { optional("org.springframework.data:spring-data-redis") optional("org.springframework.graphql:spring-graphql") optional("org.springframework.hateoas:spring-hateoas") - optional("org.springframework.pulsar:spring-pulsar") { - exclude group: "commons-logging", module: "commons-logging" - } - optional("org.springframework.pulsar:spring-pulsar-reactive") { - exclude group: "commons-logging", module: "commons-logging" - } + optional("org.springframework.pulsar:spring-pulsar") + optional("org.springframework.pulsar:spring-pulsar-reactive") optional("org.springframework.security:spring-security-acl") optional("org.springframework.security:spring-security-config") optional("org.springframework.security:spring-security-data") diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 883c6de93f4..13ded8f8cb1 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1864,7 +1864,7 @@ bom { releaseNotes("https://github.com/prometheus/client_java/releases/tag/parent-{version}") } } - library("Pulsar", "4.0.8") { + library("Pulsar", "4.0.9") { group("org.apache.pulsar") { bom("pulsar-bom") } diff --git a/spring-boot-project/spring-boot-docs/build.gradle b/spring-boot-project/spring-boot-docs/build.gradle index 1be5d7dbdad..fd0736c5837 100644 --- a/spring-boot-project/spring-boot-docs/build.gradle +++ b/spring-boot-project/spring-boot-docs/build.gradle @@ -157,12 +157,8 @@ dependencies { implementation("org.springframework.kafka:spring-kafka-test") { exclude group: "commons-logging", module: "commons-logging" } - implementation("org.springframework.pulsar:spring-pulsar") { - exclude group: "commons-logging", module: "commons-logging" - } - implementation("org.springframework.pulsar:spring-pulsar-reactive") { - exclude group: "commons-logging", module: "commons-logging" - } + implementation("org.springframework.pulsar:spring-pulsar") + implementation("org.springframework.pulsar:spring-pulsar-reactive") implementation("org.springframework.restdocs:spring-restdocs-mockmvc") implementation("org.springframework.restdocs:spring-restdocs-restassured") implementation("org.springframework.restdocs:spring-restdocs-webtestclient") diff --git a/spring-boot-project/spring-boot-starters/spring-boot-starter-pulsar-reactive/build.gradle b/spring-boot-project/spring-boot-starters/spring-boot-starter-pulsar-reactive/build.gradle index 0a71a42c112..672670780c8 100644 --- a/spring-boot-project/spring-boot-starters/spring-boot-starter-pulsar-reactive/build.gradle +++ b/spring-boot-project/spring-boot-starters/spring-boot-starter-pulsar-reactive/build.gradle @@ -22,9 +22,7 @@ description = "Starter for using Spring for Apache Pulsar Reactive" dependencies { api(project(":spring-boot-project:spring-boot-starters:spring-boot-starter")) - api("org.springframework.pulsar:spring-pulsar-reactive") { - exclude group: "commons-logging", module: "commons-logging" - } + api("org.springframework.pulsar:spring-pulsar-reactive") } checkRuntimeClasspathForConflicts { diff --git a/spring-boot-project/spring-boot-starters/spring-boot-starter-pulsar/build.gradle b/spring-boot-project/spring-boot-starters/spring-boot-starter-pulsar/build.gradle index 69505deadb6..f9e8a895276 100644 --- a/spring-boot-project/spring-boot-starters/spring-boot-starter-pulsar/build.gradle +++ b/spring-boot-project/spring-boot-starters/spring-boot-starter-pulsar/build.gradle @@ -22,9 +22,7 @@ description = "Starter for using Spring for Apache Pulsar" dependencies { api(project(":spring-boot-project:spring-boot-starters:spring-boot-starter")) - api("org.springframework.pulsar:spring-pulsar") { - exclude group: "commons-logging", module: "commons-logging" - } + api("org.springframework.pulsar:spring-pulsar") } checkRuntimeClasspathForConflicts { diff --git a/spring-boot-project/spring-boot-testcontainers/build.gradle b/spring-boot-project/spring-boot-testcontainers/build.gradle index c7861bb4678..d249ffdc418 100644 --- a/spring-boot-project/spring-boot-testcontainers/build.gradle +++ b/spring-boot-project/spring-boot-testcontainers/build.gradle @@ -65,9 +65,7 @@ dependencies { dockerTestImplementation("org.springframework.data:spring-data-redis") dockerTestImplementation("org.springframework.kafka:spring-kafka") dockerTestImplementation("org.springframework.ldap:spring-ldap-core") - dockerTestImplementation("org.springframework.pulsar:spring-pulsar") { - exclude group: "commons-logging", module: "commons-logging" - } + dockerTestImplementation("org.springframework.pulsar:spring-pulsar") dockerTestImplementation("org.testcontainers:junit-jupiter") dockerTestRuntimeOnly("com.oracle.database.r2dbc:oracle-r2dbc")