Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 17, 2025

This PR contains the following updates:

Package Type Update Change Age Confidence
github/codeql-action action patch v4.31.2 -> v4.31.4 age confidence
gradle (source) patch 9.2.0 -> 9.2.1 age confidence
com.vanniktech.maven.publish plugin minor 0.34.0 -> 0.35.0 age confidence
com.diffplug.spotless plugin minor 8.0.0 -> 8.1.0 age confidence
com.pinterest.ktlint:ktlint-cli dependencies minor 1.7.1 -> 1.8.0 age confidence
org.springframework.boot:spring-boot-starter-test (source) dependencies patch 3.5.7 -> 3.5.8 age confidence
org.springframework.boot:spring-boot-autoconfigure (source) dependencies patch 3.5.7 -> 3.5.8 age confidence
org.springframework.boot:spring-boot-starter (source) dependencies patch 3.5.7 -> 3.5.8 age confidence
io.quarkus plugin minor 3.29.2 -> 3.30.0 age confidence
io.quarkus:quarkus-junit5 dependencies minor 3.29.2 -> 3.30.0 age confidence
io.quarkus:quarkus-arc dependencies minor 3.29.2 -> 3.30.0 age confidence
io.quarkus:quarkus-bom dependencies minor 3.29.2 -> 3.30.0 age confidence
io.kotest:kotest-assertions-table dependencies patch 6.0.4 -> 6.0.5 age confidence
io.kotest:kotest-assertions-core dependencies patch 6.0.4 -> 6.0.5 age confidence
io.kotest:kotest-framework-engine dependencies patch 6.0.4 -> 6.0.5 age confidence
io.kotest:kotest-runner-junit5 dependencies patch 6.0.4 -> 6.0.5 age confidence

Release Notes

github/codeql-action (github/codeql-action)

v4.31.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.4 - 18 Nov 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v4.31.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.3 - 13 Nov 2025
  • CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
  • Update default CodeQL bundle version to 2.23.5. #​3288

See the full CHANGELOG.md for more information.

gradle/gradle (gradle)

v9.2.1: 9.2.1

Compare Source

The Gradle team is excited to announce Gradle 9.2.1.

Here are the highlights of this release:

  • Windows ARM support
  • Improved publishing APIs
  • Better guidance for dependency verification failures

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Adam,
Björn Kautler,
hasunzo,
HYEON,
Hyunjoon Park,
HYUNJUN SON,
Jendrik Johannes,
Kirill Gavrilov,
Madalin Valceleanu,
Martin Bonnin,
Matthew Haughton,
Mikhail Polivakha,
Na Minhyeok,
Philip Wedemann,
Philipp Schneider,
Róbert Papp,
Simon Marquis,
TheGoesen,
Vincent Potucek,
Xin Wang.

Upgrade instructions

Switch your build to use Gradle 9.2.1 by updating your wrapper:

./gradlew wrapper --gradle-version=9.2.1 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

vanniktech/gradle-maven-publish-plugin (com.vanniktech.maven.publish)

v0.35.0

Compare Source

  • Add support for publishing Kotlin Multiplatform libraries that use com.android.kotlin.multiplatform.library.
  • Add support for validating deployments to Central Portal
  • Raise minimum Gradle version to 8.13
  • Raise minimum Android Gradle Plugin version to 8.2.2
  • Do not unconditionally disable DocLint
  • Fail publishing if SONATYPE_HOST is not set to CENTRAL_PORTAL.
  • Fix misleading error message when Android library variant is not found.
  • Downgrade transitive OkHttp version.
  • Don't check project heirarchy for POM properties when Isolated proejcts is enabled.

Thanks to @​joshfriend, @​Flowdalic and @​Goooler for their contributions to this release.

Minimum supported versions
  • JDK 11
  • Gradle 8.13
  • Android Gradle Plugin 8.2.2
  • Kotlin Gradle Plugin 1.9.20
Compatibility tested up to
  • JDK 24
  • Gradle 9.2.0
  • Gradle 9.3.0-milestone-1
  • Android Gradle Plugin 8.13.1
  • Android Gradle Plugin 9.0.0-alpha14
  • Kotlin Gradle Plugin 2.2.21
  • Kotlin Gradle Plugin 2.3.0-Beta2
pinterest/ktlint (com.pinterest.ktlint:ktlint-cli)

v1.8.0

Compare Source

🆕 Features
🔧 Fixes
💬 Other
spring-projects/spring-boot (org.springframework.boot:spring-boot-starter-test)

v3.5.8

quarkusio/quarkus (io.quarkus:quarkus-junit5)

v3.30.0

Compare Source

v3.29.4

Compare Source

Complete changelog
  • #​50955 - Entity not found?
  • #​51001 - Add information about how to put realm config file into target/classes
  • #​51052 - Prevent multiple contributions to Panache's "entityToPersistenceUnit" from overriding each other
  • #​51054 - Make it clearer in OIDC bearer token tutorial when to copy the realm file
  • #​51057 - Correct comments and descriptions in Hibernate Feature
  • #​51095 - TestContainers fail to run on Docker 24.x (3.29.3)
  • #​51100 - Respect docker api version when present

v3.29.3

Compare Source

Complete changelog
  • #​50804 - Explicit null string in json payload is treated as string "null" when reflection-free-serializers enabled
  • #​50886 - Closing in gRPC interceptor causes double close in Vert.x gRPC implementation
  • #​50890 - Account for random order of DevservicesElasticsearchBuildItems when comparing versions/distributions
  • #​50913 - Duplicate Key in Kafka Message crashes Dev UI
  • #​50933 - gRPC: Avoid repeatedly starting call and closing call on a server call closed by custom interceptor
  • #​50945 - Bump version of Hibernate Reactive to 3.1.8.Final
  • #​50951 - ReactiveRoutesProcessor works in 3.25.4, fails in 3.29.2
  • #​50953 - Recognize null value in json payload using the reflection free serializer
  • #​50961 - Bump org.cyclonedx:cyclonedx-core-java from 9.0.5 to 11.0.1 in /bom/application
  • #​50969 - rest-link: Links not added to header for type List
  • #​50970 - Ensure that @InjectRestLinks works correctly on lists of entities
  • #​50971 - Fix Kafka consumer group.id to default to quarkus.application.name in production
  • #​50972 - Reactive Routes: fix usage of the Gizmo 2 API
  • #​50974 - Fix Quotes for Kotlin example in gradle-tooling.adoc
  • #​50983 - Upgrade to Narayana 7.3.3
  • #​50984 - Jandex: upgrade to 3.5.2
  • #​50985 - Update Oracle JDBC version to 23.26.0.0.0
  • #​50988 - Fix Dev UI crash when Kafka messages contain duplicate headers
  • #​51002 - Quarkus 3.29.2 - Testcontainers version: 1.21.3 - Docker environment not found Linux Fedora
  • #​51009 - Manually set api.version for TestContainers
kotest/kotest (io.kotest:kotest-assertions-table)

v6.0.5

Compare Source

What's Changed

New Contributors

Full Changelog: kotest/kotest@6.0.4...v6.0.5


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 8fea3d6 to 77367fd Compare November 18, 2025 22:11
# Commenting out will disable upload of results to your repo's Code Scanning dashboard
- name: "Upload to code-scanning"
uses: github/codeql-action/[email protected].2
uses: github/codeql-action/[email protected].4

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 20fa315 to d85f3c4 Compare November 19, 2025 17:51
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from d85f3c4 to 02e4462 Compare November 20, 2025 18:09
@osoykan osoykan merged commit a9d2560 into main Nov 21, 2025
4 of 5 checks passed
@renovate renovate bot deleted the renovate/all-minor-patch branch November 21, 2025 10:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants