)]}' { "log": [ { "commit": "c91027de3de04090f60af2cc77e962f2a98d78cb", "tree": "72239765a8ef85d003bae1a192da6d08571bbc8c", "parents": [ "c587ff67c0aaccb7c459851e65ac19cbc8a1d3f4" ], "author": { "name": "uuuyuqi", "email": "qihuai.wyq@alibaba-inc.com", "time": "Fri Jul 10 17:59:27 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 10 17:59:27 2026 +0800" }, "message": "fix: support plaintext PU when AuthPolicy is NONE (#16374)\n\nChange-Id: Ic201a42623151d99369a2692b8e8206a2b281007" }, { "commit": "c587ff67c0aaccb7c459851e65ac19cbc8a1d3f4", "tree": "525554c0ace9459c6d87099aafd23441fb01b619", "parents": [ "316df8e57677cc8c1ed6d92bd40ca0daba27393f" ], "author": { "name": "uuuyuqi", "email": "uuuyuqi@gmail.com", "time": "Thu Jul 09 10:45:44 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 09 10:45:44 2026 +0800" }, "message": "Close channel on TLS exception to prevent half-open connections (#16202)\n\n* fix: close channel on TLS exception to prevent half-open connections\n\nSslServerTlsHandler.exceptionCaught() only logged the error without\nclosing the channel or propagating the exception. This caused channels\nto remain TCP-active but application-dead when exceptions like\nNoClassDefFoundError occurred during Netty read loops.\n\nSimilarly, SslClientTlsHandler did not close the channel on TLS\nhandshake failure, only firing exceptionCaught to downstream handlers.\n\nThis fix ensures both handlers close the channel on failure, allowing\nDubbo\u0027s existing health-check mechanism (isAvailable/addInvalidateInvoker)\nto properly detect and remove broken invokers.\n\nChange-Id: Ia466bc4db9e59b1f5c1f01a3062c619aabbbb4e1\nCo-developed-by: Cursor \u003cnoreply@cursor.com\u003e\n\n* style: apply spotless formatting to test file\n\nChange-Id: Ie3ac6e2e6d1ce5e8f6bd2ad4fe2a5c9286d66fbf\nCo-developed-by: Cursor \u003cnoreply@cursor.com\u003e\n\n* Address Copilot review: preserve exception propagation, fix client log message, clean up test\n\n- Restore ctx.fireExceptionCaught() before ctx.close() in SslClientTlsHandler\n so downstream handlers can observe the TLS handshake failure cause\n- Fix misleading \"accept new connection\" log message to \"connecting to remote server\"\n- Remove unused ChannelPipeline mock and when() stub in test\n\n🤖 Generated with [Qoder][https://qoder.com]\n\nChange-Id: Ic8d46b8ab340d5d9b40a5e48caf1df7aaccad532\nCo-developed-by: Qoder CLI \u003cnoreply@qoder.com\u003e\n\n---------\n\nCo-authored-by: Ken Liu \u003cken.lj.hz@gmail.com\u003e" }, { "commit": "316df8e57677cc8c1ed6d92bd40ca0daba27393f", "tree": "8fcaa98ac6f0430a0dbaef640cb3049393814fd2", "parents": [ "ed0e11e1cca847b632b32a3e5f61ff8f072ada84" ], "author": { "name": "Aurélien Pupier", "email": "apupier@ibm.com", "time": "Mon Jul 06 08:11:53 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 06 14:11:53 2026 +0800" }, "message": "Restrict trigger push branch for GitHub Workflow (#16367)\n\nFeature branches rarely need their own CI runs: the code is already\ntested when a pull request is opened against a release branch. If the\npush trigger has no branch restriction and pull_request is also\nconfigured, every push to a branch with an open PR runs the workflow\ntwice: once for the push and once for the PR synchronisation.\n\nAlways give the push trigger an explicit list of branches: this stops\nbranches created from a release branch from inheriting its workflow\nruns.\n\nsee https://cwiki.apache.org/confluence/pages/viewpage.action?pageId\u003d430408443#GitHubActionsRecommendedPractices-Restrictthepushtriggertospecificbranches\n\nSigned-off-by: Aurélien Pupier \u003capupier@ibm.com\u003e" }, { "commit": "ed0e11e1cca847b632b32a3e5f61ff8f072ada84", "tree": "b4825186cf42f87bf618c8946ff9b0e6e62e2ee9", "parents": [ "2626e28c16193a099b9cf89e133cd9d55b7d9add" ], "author": { "name": "shinyruo", "email": "1654388696@qq.com", "time": "Mon Jun 29 16:17:32 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 29 16:17:32 2026 +0800" }, "message": "Fix Triple method resolution for overloaded wrapper methods (#16325)\n\n* Fix Triple method resolution for overloaded wrapper methods\n\nFixes #14939\n\nSigned-off-by: bubu \u003c1654388696@qq.com\u003e\n\n* Address response type comparison review\n\n* Handle ambiguous Triple reflection resolution\n\n---------\n\nSigned-off-by: bubu \u003c1654388696@qq.com\u003e\nCo-authored-by: zrlw \u003czrlw@sina.com\u003e" }, { "commit": "2626e28c16193a099b9cf89e133cd9d55b7d9add", "tree": "e82af2c01c118ff18d4ec5f5bddda711568a5ef1", "parents": [ "b16c837be7203b9d1c320799a1857ec530c8a29b" ], "author": { "name": "代码不加冰", "email": "3196766829@qq.com", "time": "Wed Jun 24 17:06:10 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jun 24 17:06:10 2026 +0800" }, "message": "Fix misleading NPE when request parameter is not Serializable (#16299)\n\n* Fix misleading NPE when request parameter is not Serializable\n\nWhen a Dubbo service is called with non-serializable parameters, the\ninvocation deserialization fails silently and `path` becomes null. This\nnull path is then passed to GroupServiceKeyCache which uses a\nConcurrentHashMap that does not accept null keys, resulting in a\nconfusing NullPointerException.\n\nAdded a null check for `path` in DubboProtocol.getInvoker() to throw\na clear RemotingException with a meaningful message pointing users to\nthe actual cause (non-serializable parameters).\n\nFixes #16293\n\nCo-Authored-By: Claude Opus 4.7 \u003cnoreply@anthropic.com\u003e\n\n* Make null path error message generic to avoid misleading diagnosis\n\n---------\n\nCo-authored-by: Claude Opus 4.7 \u003cnoreply@anthropic.com\u003e" }, { "commit": "b16c837be7203b9d1c320799a1857ec530c8a29b", "tree": "342d949e208b47acbca3cd06af3a245b8730c015", "parents": [ "eb2eb29536f240f08e14b4cf7185d4b2f0ce9317" ], "author": { "name": "Jason", "email": "31175216+wsyjh8@users.noreply.github.com", "time": "Wed Jun 24 05:03:38 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jun 24 17:03:38 2026 +0800" }, "message": "Fix UnsupportedOperationException in DubboDefaultPropertiesEnvironmentPostProcessor on immutable defaultProperties (#16268) (#16313)" }, { "commit": "eb2eb29536f240f08e14b4cf7185d4b2f0ce9317", "tree": "f99e2034855acb463588534dacb53f18f1ee6a80", "parents": [ "b75adde95997f6fdd195e8dd8ed5986ceefcd7de" ], "author": { "name": "yang", "email": "397827222@qq.com", "time": "Wed Jun 24 11:19:55 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jun 24 11:19:55 2026 +0800" }, "message": "Fix StringUtils.substringAfter to return empty string when separator is absent (#16350)\n\nCo-authored-by: zrlw \u003czrlw@sina.com\u003e" }, { "commit": "b75adde95997f6fdd195e8dd8ed5986ceefcd7de", "tree": "c9402ef134f4816e1d7a0aaa8611344092be5d73", "parents": [ "866860d01395870ce010606f14326c963e040f56" ], "author": { "name": "RohithV", "email": "15104448+rohithvegesna@users.noreply.github.com", "time": "Tue Jun 23 04:29:24 2026 -0500" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 23 17:29:24 2026 +0800" }, "message": "Fix StringUtils.toBoolean to return false for \"off\" (#16348)\n\nStringUtils.toBoolean(\"off\") returned Boolean.TRUE, copy-pasted from the\nadjacent \"yes\" branch, even though the Javadoc lists \u0027on\u0027/\u0027off\u0027 as a\nboolean pair and every other falsy token (\"no\", \"false\", \"0\", \"n\")\nreturns false.\n\nThis affects Triple REST argument binding (GeneralTypeConverter) and\nREST/OpenAPI config parsing (ConfigFactory, Helper), where \"off\" was\ninterpreted as true.\n\nAlso add unit coverage for toBoolean, which previously had none.\n\nFixes #16347" }, { "commit": "866860d01395870ce010606f14326c963e040f56", "tree": "9aa9acd49dcba99e8b0651c5f96c66116648aa3e", "parents": [ "3c9264241c43fec153411a201c7cdaf387bc2775" ], "author": { "name": "Aurélien Pupier", "email": "apupier@ibm.com", "time": "Mon Jun 15 09:02:36 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 15 15:02:36 2026 +0800" }, "message": "Configure GitHub workflows to use concurrency cancel-in-progress for pull requests (#16323)\n\n* Configure GitHub workflows to use concurrency cancel-in-progress for\npull requests\n\nsee recommended best practices at Apache\nhttps://cwiki.apache.org/confluence/pages/viewpage.action?spaceKey\u003dINFRA\u0026title\u003dGitHub+Actions+Recommended+Practices\n\nSigned-off-by: Aurélien Pupier \u003capupier@ibm.com\u003e\n\n* Enhance build-and-test workflow with concurrency\n\nAdd concurrency settings for pull request workflows.\n\n---------\n\nSigned-off-by: Aurélien Pupier \u003capupier@ibm.com\u003e\nCo-authored-by: zrlw \u003czrlw@sina.com\u003e" }, { "commit": "3c9264241c43fec153411a201c7cdaf387bc2775", "tree": "71785f2c8eb5f6ce627b324ace09fd3f7ece68a8", "parents": [ "be6dabc8c68dc81448bc23f02f1d2cfb25e21379" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 15 14:58:48 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 15 14:58:48 2026 +0800" }, "message": "build(deps): bump prometheus_metrics.version from 1.6.1 to 1.7.0 (#16316)\n\nBumps `prometheus_metrics.version` from 1.6.1 to 1.7.0.\n\nUpdates `io.prometheus:prometheus-metrics-bom` from 1.6.1 to 1.7.0\n- [Release notes](https://github.com/prometheus/client_java/releases)\n- [Changelog](https://github.com/prometheus/client_java/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/client_java/compare/v1.6.1...v1.7.0)\n\nUpdates `io.prometheus:prometheus-metrics-exporter-pushgateway` from 1.6.1 to 1.7.0\n\n---\nupdated-dependencies:\n- dependency-name: io.prometheus:prometheus-metrics-bom\n dependency-version: 1.7.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: io.prometheus:prometheus-metrics-exporter-pushgateway\n dependency-version: 1.7.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "be6dabc8c68dc81448bc23f02f1d2cfb25e21379", "tree": "f8cc0d76fe6d1e7b310e4e72966362f962e1e95e", "parents": [ "da751953742d31d4ade13cf8fcf2caccc3fcb7e5" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 15 14:58:42 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 15 14:58:42 2026 +0800" }, "message": "build(deps-dev): bump org.jacoco:jacoco-maven-plugin (#16317)\n\nBumps [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) from 0.8.14 to 0.8.15.\n- [Release notes](https://github.com/jacoco/jacoco/releases)\n- [Commits](https://github.com/jacoco/jacoco/compare/v0.8.14...v0.8.15)\n\n---\nupdated-dependencies:\n- dependency-name: org.jacoco:jacoco-maven-plugin\n dependency-version: 0.8.15\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "da751953742d31d4ade13cf8fcf2caccc3fcb7e5", "tree": "df7e69a8d830308a684c2fa975698da59e7dc429", "parents": [ "8ca0d22810ce6518ea1b1335374b92faf33fecfb" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 15 14:58:37 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 15 14:58:37 2026 +0800" }, "message": "build(deps): bump byte-buddy_version from 1.18.8 to 1.18.10 (#16318)\n\nBumps `byte-buddy_version` from 1.18.8 to 1.18.10.\n\nUpdates `net.bytebuddy:byte-buddy` from 1.18.8 to 1.18.10\n- [Release notes](https://github.com/raphw/byte-buddy/releases)\n- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)\n- [Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.8...byte-buddy-1.18.10)\n\nUpdates `net.bytebuddy:byte-buddy-agent` from 1.18.8 to 1.18.10\n- [Release notes](https://github.com/raphw/byte-buddy/releases)\n- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)\n- [Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.8...byte-buddy-1.18.10)\n\n---\nupdated-dependencies:\n- dependency-name: net.bytebuddy:byte-buddy\n dependency-version: 1.18.10\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: net.bytebuddy:byte-buddy-agent\n dependency-version: 1.18.10\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "8ca0d22810ce6518ea1b1335374b92faf33fecfb", "tree": "98d5ae6faf8ea09e2a1c5d049f7000afa76d3cc3", "parents": [ "4135d13988d03d673e135773f04a64673c8ac74a" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 15 14:58:31 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 15 14:58:31 2026 +0800" }, "message": "build(deps): bump netty4_version from 4.2.14.Final to 4.2.15.Final (#16319)\n\nBumps `netty4_version` from 4.2.14.Final to 4.2.15.Final.\n\nUpdates `io.netty:netty-all` from 4.2.14.Final to 4.2.15.Final\n- [Release notes](https://github.com/netty/netty/releases)\n- [Commits](https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final)\n\nUpdates `io.netty:netty-bom` from 4.2.14.Final to 4.2.15.Final\n- [Release notes](https://github.com/netty/netty/releases)\n- [Commits](https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final)\n\n---\nupdated-dependencies:\n- dependency-name: io.netty:netty-all\n dependency-version: 4.2.15.Final\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: io.netty:netty-bom\n dependency-version: 4.2.15.Final\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "4135d13988d03d673e135773f04a64673c8ac74a", "tree": "b82afb46500a0980679838fdaf80f225064b4fc4", "parents": [ "9b6e0d19a97906b84a3bb23fa06d8e5b9b98b034" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 15 14:58:22 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 15 14:58:22 2026 +0800" }, "message": "build(deps): bump io.micrometer:micrometer-core from 1.16.5 to 1.16.6 (#16321)\n\nBumps [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) from 1.16.5 to 1.16.6.\n- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)\n- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.16.5...v1.16.6)\n\n---\nupdated-dependencies:\n- dependency-name: io.micrometer:micrometer-core\n dependency-version: 1.16.6\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "9b6e0d19a97906b84a3bb23fa06d8e5b9b98b034", "tree": "dea3276f873e67866719b12d8421e9885f46844b", "parents": [ "c3ceb276ffc0c0f8e8ffca2282a990440150aa73" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 15 14:58:17 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 15 14:58:17 2026 +0800" }, "message": "build(deps): bump io.micrometer:micrometer-bom from 1.16.5 to 1.16.6 (#16322)\n\nBumps [io.micrometer:micrometer-bom](https://github.com/micrometer-metrics/micrometer) from 1.16.5 to 1.16.6.\n- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)\n- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.16.5...v1.16.6)\n\n---\nupdated-dependencies:\n- dependency-name: io.micrometer:micrometer-bom\n dependency-version: 1.16.6\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "c3ceb276ffc0c0f8e8ffca2282a990440150aa73", "tree": "436d7f5fa656395aac1093be5c29cf7251344796", "parents": [ "8c24ee71ae31b7d76e8d82188cd78f1dc979629d" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 08 18:43:48 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 08 18:43:48 2026 +0800" }, "message": "build(deps): bump com.fasterxml.jackson:jackson-bom (#16302)\n\nBumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 2.21.3 to 2.22.0.\n- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.21.3...jackson-bom-2.22.0)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson:jackson-bom\n dependency-version: 2.22.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "8c24ee71ae31b7d76e8d82188cd78f1dc979629d", "tree": "0e3e63105dba16fed13210a1e8b58b0d114048c1", "parents": [ "a310aa39091c07087b25b03d53a9e4a9d329022a" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 08 18:43:43 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 08 18:43:43 2026 +0800" }, "message": "build(deps): bump org.apache.maven.plugins:maven-surefire-plugin (#16303)\n\nBumps [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) from 3.5.5 to 3.5.6.\n- [Release notes](https://github.com/apache/maven-surefire/releases)\n- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.5...surefire-3.5.6)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-surefire-plugin\n dependency-version: 3.5.6\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "a310aa39091c07087b25b03d53a9e4a9d329022a", "tree": "28ecaad1ed1cf0ae1c407db33a063960d11f1d7b", "parents": [ "d535eacf480e37ac3b6bee1ff309a932bd7b783c" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 08 18:43:37 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 08 18:43:37 2026 +0800" }, "message": "build(deps): bump org.webjars:swagger-ui from 5.32.4 to 5.32.6 (#16304)\n\nBumps [org.webjars:swagger-ui](https://github.com/swagger-api/swagger-ui) from 5.32.4 to 5.32.6.\n- [Release notes](https://github.com/swagger-api/swagger-ui/releases)\n- [Commits](https://github.com/swagger-api/swagger-ui/compare/v5.32.4...v5.32.6)\n\n---\nupdated-dependencies:\n- dependency-name: org.webjars:swagger-ui\n dependency-version: 5.32.6\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "d535eacf480e37ac3b6bee1ff309a932bd7b783c", "tree": "d4911197eff246adce2513115844dcb7122851dc", "parents": [ "8cce1548e69583fdc2df7361918ed714ecad23ac" ], "author": { "name": "Yukina", "email": "rainyu@apache.org", "time": "Mon Jun 08 10:08:40 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 08 10:08:40 2026 +0800" }, "message": "Add threat model, AGENTS.md and SECURITY.md pointer (#16312)\n\n- docs/threat-model.md: comprehensive threat model covering trust\n boundaries, adversary model, serialization negotiation, QoS,\n authentication, and triage dispositions\n- AGENTS.md: discoverability entry point pointing to threat model\n with triage guidance for reporters and automated tools\n- SECURITY.md: add threat model section with pointer to\n docs/threat-model.md" }, { "commit": "8cce1548e69583fdc2df7361918ed714ecad23ac", "tree": "c711b516b744c713fd061379e58ec6bd93a93c58", "parents": [ "990c5131a1fc62a687d57723d816ff94b3b4235e" ], "author": { "name": "shinyruo", "email": "1654388696@qq.com", "time": "Mon Jun 08 09:51:08 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 08 09:51:08 2026 +0800" }, "message": "Improve type safety of CollectionUtils.toTreeSet (#16306)\n\n* Improve type safety of CollectionUtils.toTreeSet\n\nFixes #16297\n\n* Add null coverage for toTreeSet comparator overload" }, { "commit": "990c5131a1fc62a687d57723d816ff94b3b4235e", "tree": "00db8976634a167b8c46eaacaf4e1752579854af", "parents": [ "ee9c1906315c7644ff250cd152dd0e7715d7746e" ], "author": { "name": "yin_bo_", "email": "3557545112@qq.com", "time": "Sat Jun 06 17:37:09 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Jun 06 17:37:09 2026 +0800" }, "message": "Migrate mesh address matching to host and port API (#16309)\n\nDeprecate the two-argument NetUtils.matchIpExpression method and migrate mesh address matching to the existing three-argument overload so IPv4 host:port inputs are matched with a separated port.\n\nFixes #16308" }, { "commit": "ee9c1906315c7644ff250cd152dd0e7715d7746e", "tree": "463dea683bfc85852d220ca503c9387f94a456c9", "parents": [ "a6df7a9b48f5c71f257fa7a01ce93d2e9b314606" ], "author": { "name": "yzy", "email": "80751592+yuzhiyang1@users.noreply.github.com", "time": "Wed Jun 03 10:25:40 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jun 03 10:25:40 2026 +0800" }, "message": "Fix order-sensitive thread pool status test (#16300)\n\nFixes #16152" }, { "commit": "a6df7a9b48f5c71f257fa7a01ce93d2e9b314606", "tree": "eb3097180e332c2d700958df6fc9e0cf51de498e", "parents": [ "b65573e5ca2ed81383fd2973e32cb3ed185a90a4" ], "author": { "name": "shinyruo", "email": "1654388696@qq.com", "time": "Wed Jun 03 10:24:33 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jun 03 10:24:33 2026 +0800" }, "message": "Fix CompositeInputStream close handling (#16305)\n\nFixes #16117" }, { "commit": "b65573e5ca2ed81383fd2973e32cb3ed185a90a4", "tree": "9de8b0539533b946fc207c3e1491721f81e56ddb", "parents": [ "6538e34e44d0c4d68841d35493961d8457d934fe" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 01 10:50:50 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 10:50:50 2026 +0800" }, "message": "build(deps): bump org.apache.maven:maven-plugin-api (#16278)\n\nBumps [org.apache.maven:maven-plugin-api](https://github.com/apache/maven) from 3.9.15 to 3.9.16.\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.15...maven-3.9.16)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven:maven-plugin-api\n dependency-version: 3.9.16\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "6538e34e44d0c4d68841d35493961d8457d934fe", "tree": "fa0b41141f1256c43526b94422e576dc435671e6", "parents": [ "3f2823e5ae93889eb34abf70fb9ad0ea8bcac722" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 01 10:50:46 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 10:50:46 2026 +0800" }, "message": "build(deps): bump org.asynchttpclient:async-http-client (#16279)\n\nBumps [org.asynchttpclient:async-http-client](https://github.com/AsyncHttpClient/async-http-client) from 2.14.5 to 2.15.0.\n- [Release notes](https://github.com/AsyncHttpClient/async-http-client/releases)\n- [Commits](https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.14.5...async-http-client-project-2.15.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.asynchttpclient:async-http-client\n dependency-version: 2.15.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "3f2823e5ae93889eb34abf70fb9ad0ea8bcac722", "tree": "fa0b41141f1256c43526b94422e576dc435671e6", "parents": [ "ae274f6224bbc97087486932fc27c443e500729d" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 01 10:50:43 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 10:50:43 2026 +0800" }, "message": "build(deps): bump tomcat.version from 9.0.117 to 10.1.55 (#16280)\n\nBumps `tomcat.version` from 9.0.117 to 10.1.55.\n\nUpdates `org.apache.tomcat.embed:tomcat-embed-core` from 9.0.117 to 10.1.55\n\nUpdates `org.apache.tomcat.embed:tomcat-embed-el` from 10.1.52 to 10.1.55\n\nUpdates `org.apache.tomcat.embed:tomcat-embed-websocket` from 10.1.52 to 10.1.55\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.tomcat.embed:tomcat-embed-core\n dependency-version: 10.1.55\n dependency-type: direct:development\n update-type: version-update:semver-major\n- dependency-name: org.apache.tomcat.embed:tomcat-embed-el\n dependency-version: 10.1.55\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket\n dependency-version: 10.1.55\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "ae274f6224bbc97087486932fc27c443e500729d", "tree": "412f1605356b6edcd1972b675bf608fe7cb63f5c", "parents": [ "6fb8ec87673be4f65099c5791b6be863495c14cd" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 01 10:50:39 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 10:50:39 2026 +0800" }, "message": "build(deps): bump org.apache.tomcat.embed:tomcat-embed-core (#16284)\n\nBumps org.apache.tomcat.embed:tomcat-embed-core from 9.0.117 to 9.0.118.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.tomcat.embed:tomcat-embed-core\n dependency-version: 9.0.118\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "6fb8ec87673be4f65099c5791b6be863495c14cd", "tree": "9326c36ca13adb492f4fe361131735f619d3227b", "parents": [ "8a78785a6142d7f8b2b7a1bcf02ffa699abc8924" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 01 10:49:01 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 10:49:01 2026 +0800" }, "message": "build(deps): bump org.apache.maven:maven-core from 3.9.15 to 3.9.16 (#16277)\n\nBumps org.apache.maven:maven-core from 3.9.15 to 3.9.16.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven:maven-core\n dependency-version: 3.9.16\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "8a78785a6142d7f8b2b7a1bcf02ffa699abc8924", "tree": "6d2da943408a406b9d59f70e9da18588ec83b006", "parents": [ "c18825ab9f7fbe2560f8eaf2e8fb72e061a08ab5" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 01 10:47:31 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 10:47:31 2026 +0800" }, "message": "build(deps): bump sentinel.version from 1.8.9 to 1.8.10 (#16290)\n\nBumps `sentinel.version` from 1.8.9 to 1.8.10.\n\nUpdates `com.alibaba.csp:sentinel-apache-dubbo3-adapter` from 1.8.9 to 1.8.10\n\nUpdates `com.alibaba.csp:sentinel-transport-simple-http` from 1.8.9 to 1.8.10\n\n---\nupdated-dependencies:\n- dependency-name: com.alibaba.csp:sentinel-apache-dubbo3-adapter\n dependency-version: 1.8.10\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: com.alibaba.csp:sentinel-transport-simple-http\n dependency-version: 1.8.10\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "c18825ab9f7fbe2560f8eaf2e8fb72e061a08ab5", "tree": "da81e982b3ca58147407111c9645595573753078", "parents": [ "c7c1806c2deb39ae9933fe8ca8daeeee5e99382f" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 01 10:46:54 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 10:46:54 2026 +0800" }, "message": "build(deps): bump protobuf-java_version from 4.33.4 to 4.35.0 (#16289)\n\nBumps `protobuf-java_version` from 4.33.4 to 4.35.0.\n\nUpdates `com.google.protobuf:protobuf-java` from 4.33.4 to 4.35.0\n- [Release notes](https://github.com/protocolbuffers/protobuf/releases)\n- [Commits](https://github.com/protocolbuffers/protobuf/commits)\n\nUpdates `com.google.protobuf:protobuf-java-util` from 4.34.1 to 4.35.0\n\n---\nupdated-dependencies:\n- dependency-name: com.google.protobuf:protobuf-java\n dependency-version: 4.35.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: com.google.protobuf:protobuf-java-util\n dependency-version: 4.35.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "c7c1806c2deb39ae9933fe8ca8daeeee5e99382f", "tree": "8fe5e8a2e8f4e1948aa922bd535015a80c3e8d3d", "parents": [ "18bd1695836d7d8153167ab07d469265aeb96641" ], "author": { "name": "yijie zhao", "email": "1368334952@qq.com", "time": "Mon Jun 01 10:20:20 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 10:20:20 2026 +0800" }, "message": "test: add YamlCodec security tests (#16282)" }, { "commit": "18bd1695836d7d8153167ab07d469265aeb96641", "tree": "e7a4d8f1fd17b3a6b2a78ff387e71d611bdf2cae", "parents": [ "6696d2d260c12c0cbd2a08d2666afd5742079348" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 01 10:19:36 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 10:19:36 2026 +0800" }, "message": "build(deps): bump io.swagger.core.v3:swagger-annotations (#16281)\n\nBumps io.swagger.core.v3:swagger-annotations from 2.2.49 to 2.2.50.\n\n---\nupdated-dependencies:\n- dependency-name: io.swagger.core.v3:swagger-annotations\n dependency-version: 2.2.50\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "6696d2d260c12c0cbd2a08d2666afd5742079348", "tree": "d8f14a4e1de481e5f0f9106b1328166856eadb4c", "parents": [ "d65cb96efbc6667613a651602f56921d3c0f9083" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 01 10:19:30 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 10:19:30 2026 +0800" }, "message": "build(deps): bump org.asynchttpclient:async-http-client (#16283)\n\nBumps [org.asynchttpclient:async-http-client](https://github.com/AsyncHttpClient/async-http-client) from 2.14.5 to 2.15.0.\n- [Release notes](https://github.com/AsyncHttpClient/async-http-client/releases)\n- [Commits](https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.14.5...async-http-client-project-2.15.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.asynchttpclient:async-http-client\n dependency-version: 2.15.0\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "d65cb96efbc6667613a651602f56921d3c0f9083", "tree": "43bd53169d4ea2190d69efcfb7f924f40fc523cf", "parents": [ "d9262cce17bc27483fa9b05d635b42f6c7b8702d" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 01 10:19:24 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 10:19:24 2026 +0800" }, "message": "build(deps): bump netty4_version from 4.2.13.Final to 4.2.14.Final (#16291)\n\nBumps `netty4_version` from 4.2.13.Final to 4.2.14.Final.\n\nUpdates `io.netty:netty-all` from 4.2.13.Final to 4.2.14.Final\n- [Release notes](https://github.com/netty/netty/releases)\n- [Commits](https://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final)\n\nUpdates `io.netty:netty-bom` from 4.2.13.Final to 4.2.14.Final\n- [Release notes](https://github.com/netty/netty/releases)\n- [Commits](https://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final)\n\n---\nupdated-dependencies:\n- dependency-name: io.netty:netty-all\n dependency-version: 4.2.14.Final\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: io.netty:netty-bom\n dependency-version: 4.2.14.Final\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "d9262cce17bc27483fa9b05d635b42f6c7b8702d", "tree": "ced6009c9663297603e9bd4228e442856d10ae11", "parents": [ "dfdf39bbdd9fed1ffef73cb487ab059ce0b1b4ec" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 01 10:19:18 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 10:19:18 2026 +0800" }, "message": "build(deps): bump org.apache.maven.plugins:maven-enforcer-plugin (#16292)\n\nBumps [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) from 3.6.2 to 3.6.3.\n- [Release notes](https://github.com/apache/maven-enforcer/releases)\n- [Commits](https://github.com/apache/maven-enforcer/compare/enforcer-3.6.2...enforcer-3.6.3)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin\n dependency-version: 3.6.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "dfdf39bbdd9fed1ffef73cb487ab059ce0b1b4ec", "tree": "6aeb03296662d621183063e5401a731c1e544253", "parents": [ "abf4e985815aa70aaa79294b680f0ad814a2f45d" ], "author": { "name": "conellimo", "email": "conellimo@gmail.com", "time": "Fri May 29 09:39:03 2026 +0300" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri May 29 14:39:03 2026 +0800" }, "message": "[FIX] Close channel on TLS negotiation failure to prevent zombie conn… (#16255)\n\n* [FIX] Close channel on TLS negotiation failure to prevent zombie connections\n\n* [CI] trigger re-run for flaky test\n\n* updated the order of calling the ctx.close\n\n* [TEST] Add unit test to verify channel closure on TLS failure" }, { "commit": "abf4e985815aa70aaa79294b680f0ad814a2f45d", "tree": "e8c3992a9563b6e7cca21782be7288f405c8a9e4", "parents": [ "3dbba260caee92e3adc63fd2e982c4bbd60e4861" ], "author": { "name": "Vinod Kumar M ( codingkiddo )", "email": "codingkiddo@gmail.com", "time": "Wed May 20 23:03:55 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu May 21 01:33:55 2026 +0800" }, "message": "Improve generic type safety of CollectionUtils.sort (#16236)\n\nCo-authored-by: Vinod Kumar \u003cvinodkumar@192.168.1.3\u003e" }, { "commit": "3dbba260caee92e3adc63fd2e982c4bbd60e4861", "tree": "661e68b5e79113ab04ec11de899dddede3727690", "parents": [ "d5243b49622cfab2fa8dbf1cf3c8f0cb1bbcd35e" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 12 19:48:49 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 12 19:48:49 2026 +0800" }, "message": "build(deps): bump prometheus_metrics.version from 1.5.1 to 1.6.1 (#16250)\n\nBumps `prometheus_metrics.version` from 1.5.1 to 1.6.1.\n\nUpdates `io.prometheus:prometheus-metrics-bom` from 1.5.1 to 1.6.1\n- [Release notes](https://github.com/prometheus/client_java/releases)\n- [Changelog](https://github.com/prometheus/client_java/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/client_java/compare/v1.5.1...v1.6.1)\n\nUpdates `io.prometheus:prometheus-metrics-exporter-pushgateway` from 1.5.1 to 1.6.1\n\n---\nupdated-dependencies:\n- dependency-name: io.prometheus:prometheus-metrics-bom\n dependency-version: 1.6.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: io.prometheus:prometheus-metrics-exporter-pushgateway\n dependency-version: 1.6.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "d5243b49622cfab2fa8dbf1cf3c8f0cb1bbcd35e", "tree": "c4f462cfc7fb80923103c427054fa220f212d2e0", "parents": [ "c3176fb0c1419c08d1ae81d8fbd104cb991bf14b" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 12 19:47:43 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 12 19:47:43 2026 +0800" }, "message": "build(deps): bump io.swagger.core.v3:swagger-annotations (#16252)\n\nBumps io.swagger.core.v3:swagger-annotations from 2.2.48 to 2.2.49.\n\n---\nupdated-dependencies:\n- dependency-name: io.swagger.core.v3:swagger-annotations\n dependency-version: 2.2.49\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "c3176fb0c1419c08d1ae81d8fbd104cb991bf14b", "tree": "29565e9e528a724adbebed3db345385db0d1889a", "parents": [ "9aedd9fe56096a7f5bf7a4b81b2fd92f906a5727" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 12 19:46:59 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 12 19:46:59 2026 +0800" }, "message": "build(deps): bump grpc.version from 1.80.0 to 1.81.0 (#16253)\n\nBumps `grpc.version` from 1.80.0 to 1.81.0.\n\nUpdates `io.grpc:grpc-core` from 1.80.0 to 1.81.0\n- [Release notes](https://github.com/grpc/grpc-java/releases)\n- [Commits](https://github.com/grpc/grpc-java/compare/v1.80.0...v1.81.0)\n\nUpdates `io.grpc:grpc-netty-shaded` from 1.80.0 to 1.81.0\n- [Release notes](https://github.com/grpc/grpc-java/releases)\n- [Commits](https://github.com/grpc/grpc-java/compare/v1.80.0...v1.81.0)\n\nUpdates `io.grpc:grpc-netty` from 1.80.0 to 1.81.0\n- [Release notes](https://github.com/grpc/grpc-java/releases)\n- [Commits](https://github.com/grpc/grpc-java/compare/v1.80.0...v1.81.0)\n\nUpdates `io.grpc:grpc-protobuf` from 1.80.0 to 1.81.0\n- [Release notes](https://github.com/grpc/grpc-java/releases)\n- [Commits](https://github.com/grpc/grpc-java/compare/v1.80.0...v1.81.0)\n\nUpdates `io.grpc:grpc-stub` from 1.80.0 to 1.81.0\n- [Release notes](https://github.com/grpc/grpc-java/releases)\n- [Commits](https://github.com/grpc/grpc-java/compare/v1.80.0...v1.81.0)\n\nUpdates `io.grpc:grpc-grpclb` from 1.80.0 to 1.81.0\n- [Release notes](https://github.com/grpc/grpc-java/releases)\n- [Commits](https://github.com/grpc/grpc-java/compare/v1.80.0...v1.81.0)\n\nUpdates `io.grpc:grpc-context` from 1.80.0 to 1.81.0\n- [Release notes](https://github.com/grpc/grpc-java/releases)\n- [Commits](https://github.com/grpc/grpc-java/compare/v1.80.0...v1.81.0)\n\n---\nupdated-dependencies:\n- dependency-name: io.grpc:grpc-core\n dependency-version: 1.81.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: io.grpc:grpc-netty-shaded\n dependency-version: 1.81.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: io.grpc:grpc-netty\n dependency-version: 1.81.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: io.grpc:grpc-protobuf\n dependency-version: 1.81.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: io.grpc:grpc-stub\n dependency-version: 1.81.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: io.grpc:grpc-grpclb\n dependency-version: 1.81.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: io.grpc:grpc-context\n dependency-version: 1.81.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "9aedd9fe56096a7f5bf7a4b81b2fd92f906a5727", "tree": "7acf65627fa5c42d3cd1b759f05539232671c3f2", "parents": [ "5c0b2cdd6bc81a9aff522fbca5b2103274bdfc29" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 12 19:46:19 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 12 19:46:19 2026 +0800" }, "message": "build(deps): bump com.fasterxml.jackson:jackson-bom (#16254)\n\nBumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 2.21.2 to 2.21.3.\n- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.21.2...jackson-bom-2.21.3)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson:jackson-bom\n dependency-version: 2.21.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "5c0b2cdd6bc81a9aff522fbca5b2103274bdfc29", "tree": "8aa716d0eac7130fc63680ecc3a45d57bc53a71c", "parents": [ "af29b81d1ddf38392ab182f126e89a4234fcc73f" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 12 19:45:33 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 12 19:45:33 2026 +0800" }, "message": "build(deps): bump com.alibaba.fastjson2:fastjson2 from 2.0.61 to 2.0.62 (#16261)\n\nBumps [com.alibaba.fastjson2:fastjson2](https://github.com/alibaba/fastjson2) from 2.0.61 to 2.0.62.\n- [Release notes](https://github.com/alibaba/fastjson2/releases)\n- [Commits](https://github.com/alibaba/fastjson2/compare/2.0.61...2.0.62)\n\n---\nupdated-dependencies:\n- dependency-name: com.alibaba.fastjson2:fastjson2\n dependency-version: 2.0.62\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "af29b81d1ddf38392ab182f126e89a4234fcc73f", "tree": "81888222ea41b5b275973eb5f75516a1fdf04ab9", "parents": [ "a6f82c17a6390c8d7fe98391a277b6e13e51d428" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 12 19:45:11 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 12 19:45:11 2026 +0800" }, "message": "build(deps): bump log4j2_version from 2.25.4 to 2.26.0 (#16260)\n\nBumps `log4j2_version` from 2.25.4 to 2.26.0.\n\nUpdates `org.apache.logging.log4j:log4j-api` from 2.25.4 to 2.26.0\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.25.4 to 2.26.0\n\nUpdates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.25.4 to 2.26.0\n\nUpdates `org.apache.logging.log4j:log4j-slf4j2-impl` from 2.25.4 to 2.26.0\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.logging.log4j:log4j-api\n dependency-version: 2.26.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.logging.log4j:log4j-core\n dependency-version: 2.26.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.logging.log4j:log4j-slf4j-impl\n dependency-version: 2.26.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.logging.log4j:log4j-slf4j2-impl\n dependency-version: 2.26.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "a6f82c17a6390c8d7fe98391a277b6e13e51d428", "tree": "fb2e258d954204a9f8e7bdac79e1f30cd7fdf88d", "parents": [ "a01dc8609896bde218f9686be431ed35e2a0b776" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 12 19:44:35 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 12 19:44:35 2026 +0800" }, "message": "build(deps): bump io.opentelemetry:opentelemetry-bom (#16263)\n\nBumps [io.opentelemetry:opentelemetry-bom](https://github.com/open-telemetry/opentelemetry-java) from 1.61.0 to 1.62.0.\n- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)\n- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/open-telemetry/opentelemetry-java/compare/v1.61.0...v1.62.0)\n\n---\nupdated-dependencies:\n- dependency-name: io.opentelemetry:opentelemetry-bom\n dependency-version: 1.62.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "a01dc8609896bde218f9686be431ed35e2a0b776", "tree": "6b73085727ea1b99267ae6d1a0d09ded8b69a4d9", "parents": [ "aa193e4de3e07a225579e75f9d11071d01532fd0" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 12 19:43:25 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 12 19:43:25 2026 +0800" }, "message": "build(deps): bump netty4_version from 4.2.12.Final to 4.2.13.Final (#16264)\n\nBumps `netty4_version` from 4.2.12.Final to 4.2.13.Final.\n\nUpdates `io.netty:netty-all` from 4.2.12.Final to 4.2.13.Final\n- [Release notes](https://github.com/netty/netty/releases)\n- [Commits](https://github.com/netty/netty/compare/netty-4.2.12.Final...netty-4.2.13.Final)\n\nUpdates `io.netty:netty-bom` from 4.2.12.Final to 4.2.13.Final\n- [Release notes](https://github.com/netty/netty/releases)\n- [Commits](https://github.com/netty/netty/compare/netty-4.2.12.Final...netty-4.2.13.Final)\n\n---\nupdated-dependencies:\n- dependency-name: io.netty:netty-all\n dependency-version: 4.2.13.Final\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: io.netty:netty-bom\n dependency-version: 4.2.13.Final\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "aa193e4de3e07a225579e75f9d11071d01532fd0", "tree": "cd80d65b58f943bb26f6f0863778456b5c13158b", "parents": [ "6916d1bb49823b15ff2f7443398d5663168bea64" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 12 19:43:01 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 12 19:43:01 2026 +0800" }, "message": "build(deps): bump org.apache.groovy:groovy from 4.0.31 to 4.0.32 (#16266)\n\nBumps [org.apache.groovy:groovy](https://github.com/apache/groovy) from 4.0.31 to 4.0.32.\n- [Commits](https://github.com/apache/groovy/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.groovy:groovy\n dependency-version: 4.0.32\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "6916d1bb49823b15ff2f7443398d5663168bea64", "tree": "ec1893cdd7729b50776c70f370d2d91f71cfb9b8", "parents": [ "ca723074ee768e35d580e8026a55b6edf9876b89" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Apr 29 16:23:44 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 29 16:23:44 2026 +0800" }, "message": "build(deps): bump spring-security-6.version from 6.5.9 to 6.5.10 (#16237)\n\nBumps `spring-security-6.version` from 6.5.9 to 6.5.10.\n\nUpdates `org.springframework.security:spring-security-core` from 6.5.9 to 6.5.10\n- [Release notes](https://github.com/spring-projects/spring-security/releases)\n- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)\n- [Commits](https://github.com/spring-projects/spring-security/compare/6.5.9...6.5.10)\n\nUpdates `org.springframework.security:spring-security-oauth2-client` from 6.5.9 to 6.5.10\n- [Release notes](https://github.com/spring-projects/spring-security/releases)\n- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)\n- [Commits](https://github.com/spring-projects/spring-security/compare/6.5.9...6.5.10)\n\nUpdates `org.springframework.security:spring-security-config` from 6.5.9 to 6.5.10\n- [Release notes](https://github.com/spring-projects/spring-security/releases)\n- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)\n- [Commits](https://github.com/spring-projects/spring-security/compare/6.5.9...6.5.10)\n\nUpdates `org.springframework.security:spring-security-web` from 6.5.9 to 6.5.10\n- [Release notes](https://github.com/spring-projects/spring-security/releases)\n- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)\n- [Commits](https://github.com/spring-projects/spring-security/compare/6.5.9...6.5.10)\n\nUpdates `org.springframework.security:spring-security-crypto` from 6.5.9 to 6.5.10\n- [Release notes](https://github.com/spring-projects/spring-security/releases)\n- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)\n- [Commits](https://github.com/spring-projects/spring-security/compare/6.5.9...6.5.10)\n\nUpdates `org.springframework.security:spring-security-oauth2-core` from 6.5.9 to 6.5.10\n- [Release notes](https://github.com/spring-projects/spring-security/releases)\n- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)\n- [Commits](https://github.com/spring-projects/spring-security/compare/6.5.9...6.5.10)\n\nUpdates `org.springframework.security:spring-security-oauth2-jose` from 6.5.9 to 6.5.10\n- [Release notes](https://github.com/spring-projects/spring-security/releases)\n- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)\n- [Commits](https://github.com/spring-projects/spring-security/compare/6.5.9...6.5.10)\n\nUpdates `org.springframework.security:spring-security-oauth2-resource-server` from 6.5.9 to 6.5.10\n- [Release notes](https://github.com/spring-projects/spring-security/releases)\n- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)\n- [Commits](https://github.com/spring-projects/spring-security/compare/6.5.9...6.5.10)\n\n---\nupdated-dependencies:\n- dependency-name: org.springframework.security:spring-security-config\n dependency-version: 6.5.10\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.security:spring-security-core\n dependency-version: 6.5.10\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.security:spring-security-crypto\n dependency-version: 6.5.10\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.security:spring-security-oauth2-client\n dependency-version: 6.5.10\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.security:spring-security-oauth2-core\n dependency-version: 6.5.10\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.security:spring-security-oauth2-jose\n dependency-version: 6.5.10\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.security:spring-security-oauth2-resource-server\n dependency-version: 6.5.10\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.security:spring-security-web\n dependency-version: 6.5.10\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "ca723074ee768e35d580e8026a55b6edf9876b89", "tree": "db833cf57946fefe0bf8d35f4d4ce693018d5982", "parents": [ "7ef40bcdf5aed66456cf3c5b32f3236f22024cbe" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Apr 29 15:24:57 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 29 15:24:57 2026 +0800" }, "message": "build(deps): bump junit_jupiter_version from 5.14.3 to 5.14.4 (#16241)\n\n* build(deps): bump junit_jupiter_version from 5.14.3 to 5.14.4\n\nBumps `junit_jupiter_version` from 5.14.3 to 5.14.4.\n\nUpdates `org.junit.jupiter:junit-jupiter-engine` from 5.14.3 to 5.14.4\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r5.14.3...r5.14.4)\n\nUpdates `org.junit.jupiter:junit-jupiter-params` from 5.14.3 to 5.14.4\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r5.14.3...r5.14.4)\n\nUpdates `org.junit.jupiter:junit-jupiter-api` from 5.14.3 to 5.14.4\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r5.14.3...r5.14.4)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit.jupiter:junit-jupiter-engine\n dependency-version: 5.14.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.junit.jupiter:junit-jupiter-params\n dependency-version: 5.14.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.junit.jupiter:junit-jupiter-api\n dependency-version: 5.14.4\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\n\n* Update JUnit platform version and remove duplicate\n\nUpdated junit_platform_version to 1.14.3 and removed duplicate junit_jupiter_version.\n\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: zrlw \u003czrlw@sina.com\u003e" }, { "commit": "7ef40bcdf5aed66456cf3c5b32f3236f22024cbe", "tree": "8513fa441b1e78895d7e5c54c668ac33f5682b0e", "parents": [ "98e45385a6b41f120b5fbb2963b6f133c153b78a" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Apr 29 15:24:52 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 29 15:24:52 2026 +0800" }, "message": "build(deps): bump commons-codec:commons-codec from 1.21.0 to 1.22.0 (#16243)\n\nBumps [commons-codec:commons-codec](https://github.com/apache/commons-codec) from 1.21.0 to 1.22.0.\n- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)\n- [Commits](https://github.com/apache/commons-codec/compare/rel/commons-codec-1.21.0...rel/commons-codec-1.22.0)\n\n---\nupdated-dependencies:\n- dependency-name: commons-codec:commons-codec\n dependency-version: 1.22.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "98e45385a6b41f120b5fbb2963b6f133c153b78a", "tree": "46b62b00f45a82f6fcfa5d4ef2a1c4a00b8b0c1e", "parents": [ "ea7077379f5ade43fa1942945c230f802482e68d" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Apr 29 12:07:19 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 29 12:07:19 2026 +0800" }, "message": "build(deps): bump spring-boot-3.version from 3.5.12 to 3.5.14 (#16238)\n\nBumps `spring-boot-3.version` from 3.5.12 to 3.5.14.\n\nUpdates `org.springframework.boot:spring-boot` from 3.5.12 to 3.5.14\n- [Release notes](https://github.com/spring-projects/spring-boot/releases)\n- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.12...v3.5.14)\n\nUpdates `org.springframework.boot:spring-boot-autoconfigure` from 3.5.12 to 3.5.14\n- [Release notes](https://github.com/spring-projects/spring-boot/releases)\n- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.12...v3.5.14)\n\nUpdates `org.springframework.boot:spring-boot-starter` from 2.7.18 to 3.5.14\n- [Release notes](https://github.com/spring-projects/spring-boot/releases)\n- [Commits](https://github.com/spring-projects/spring-boot/compare/v2.7.18...v3.5.14)\n\nUpdates `org.springframework.boot:spring-boot-test` from 3.5.12 to 3.5.14\n- [Release notes](https://github.com/spring-projects/spring-boot/releases)\n- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.12...v3.5.14)\n\nUpdates `org.springframework.boot:spring-boot-test-autoconfigure` from 3.5.12 to 3.5.14\n- [Release notes](https://github.com/spring-projects/spring-boot/releases)\n- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.12...v3.5.14)\n\nUpdates `org.springframework.boot:spring-boot-starter-test` from 2.7.18 to 3.5.14\n- [Release notes](https://github.com/spring-projects/spring-boot/releases)\n- [Commits](https://github.com/spring-projects/spring-boot/compare/v2.7.18...v3.5.14)\n\nUpdates `org.springframework.boot:spring-boot-actuator` from 3.5.12 to 3.5.14\n- [Release notes](https://github.com/spring-projects/spring-boot/releases)\n- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.12...v3.5.14)\n\nUpdates `org.springframework.boot:spring-boot-actuator-autoconfigure` from 3.5.12 to 3.5.14\n- [Release notes](https://github.com/spring-projects/spring-boot/releases)\n- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.12...v3.5.14)\n\nUpdates `org.springframework.boot:spring-boot-starter-actuator` from 3.5.12 to 3.5.14\n- [Release notes](https://github.com/spring-projects/spring-boot/releases)\n- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.12...v3.5.14)\n\nUpdates `org.springframework.boot:spring-boot-configuration-processor` from 3.5.12 to 3.5.14\n- [Release notes](https://github.com/spring-projects/spring-boot/releases)\n- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.12...v3.5.14)\n\nUpdates `org.springframework.boot:spring-boot-starter-aop` from 3.5.12 to 3.5.14\n- [Release notes](https://github.com/spring-projects/spring-boot/releases)\n- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.12...v3.5.14)\n\nUpdates `org.springframework.boot:spring-boot-starter-json` from 3.5.12 to 3.5.14\n- [Release notes](https://github.com/spring-projects/spring-boot/releases)\n- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.12...v3.5.14)\n\nUpdates `org.springframework.boot:spring-boot-starter-log4j2` from 3.5.12 to 3.5.14\n- [Release notes](https://github.com/spring-projects/spring-boot/releases)\n- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.12...v3.5.14)\n\nUpdates `org.springframework.boot:spring-boot-starter-logging` from 1.5.22.RELEASE to 3.5.14\n- [Release notes](https://github.com/spring-projects/spring-boot/releases)\n- [Commits](https://github.com/spring-projects/spring-boot/compare/v1.5.22.RELEASE...v3.5.14)\n\nUpdates `org.springframework.boot:spring-boot-starter-tomcat` from 3.5.12 to 3.5.14\n- [Release notes](https://github.com/spring-projects/spring-boot/releases)\n- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.12...v3.5.14)\n\nUpdates `org.springframework.boot:spring-boot-starter-validation` from 3.5.12 to 3.5.14\n- [Release notes](https://github.com/spring-projects/spring-boot/releases)\n- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.12...v3.5.14)\n\nUpdates `org.springframework.boot:spring-boot-starter-web` from 3.5.12 to 3.5.14\n- [Release notes](https://github.com/spring-projects/spring-boot/releases)\n- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.12...v3.5.14)\n\nUpdates `org.springframework.boot:spring-boot-dependencies` from 1.5.22.RELEASE to 3.5.14\n- [Release notes](https://github.com/spring-projects/spring-boot/releases)\n- [Commits](https://github.com/spring-projects/spring-boot/compare/v1.5.22.RELEASE...v3.5.14)\n\n---\nupdated-dependencies:\n- dependency-name: org.springframework.boot:spring-boot\n dependency-version: 3.5.14\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.boot:spring-boot-autoconfigure\n dependency-version: 3.5.14\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.boot:spring-boot-starter\n dependency-version: 3.5.14\n dependency-type: direct:development\n update-type: version-update:semver-major\n- dependency-name: org.springframework.boot:spring-boot-test\n dependency-version: 3.5.14\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.boot:spring-boot-test-autoconfigure\n dependency-version: 3.5.14\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.boot:spring-boot-starter-test\n dependency-version: 3.5.14\n dependency-type: direct:production\n update-type: version-update:semver-major\n- dependency-name: org.springframework.boot:spring-boot-actuator\n dependency-version: 3.5.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.boot:spring-boot-actuator-autoconfigure\n dependency-version: 3.5.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.boot:spring-boot-starter-actuator\n dependency-version: 3.5.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.boot:spring-boot-configuration-processor\n dependency-version: 3.5.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.boot:spring-boot-starter-aop\n dependency-version: 3.5.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.boot:spring-boot-starter-json\n dependency-version: 3.5.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.boot:spring-boot-starter-log4j2\n dependency-version: 3.5.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.boot:spring-boot-starter-logging\n dependency-version: 3.5.14\n dependency-type: direct:development\n update-type: version-update:semver-major\n- dependency-name: org.springframework.boot:spring-boot-starter-tomcat\n dependency-version: 3.5.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.boot:spring-boot-starter-validation\n dependency-version: 3.5.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.boot:spring-boot-starter-web\n dependency-version: 3.5.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.boot:spring-boot-dependencies\n dependency-version: 3.5.14\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "ea7077379f5ade43fa1942945c230f802482e68d", "tree": "fddba7268acf74684727d62c98482dcc90efb890", "parents": [ "13edde28c8701d96adf0e8caea17c6537b4d02b9" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Apr 29 12:07:13 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 29 12:07:13 2026 +0800" }, "message": "build(deps): bump org.springframework.security:spring-security-oauth2-authorization-server (#16239)\n\nBumps [org.springframework.security:spring-security-oauth2-authorization-server](https://github.com/spring-projects/spring-authorization-server) from 1.5.6 to 1.5.7.\n- [Release notes](https://github.com/spring-projects/spring-authorization-server/releases)\n- [Commits](https://github.com/spring-projects/spring-authorization-server/compare/1.5.6...1.5.7)\n\n---\nupdated-dependencies:\n- dependency-name: org.springframework.security:spring-security-oauth2-authorization-server\n dependency-version: 1.5.7\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "13edde28c8701d96adf0e8caea17c6537b4d02b9", "tree": "f33a33ba8d6ec32e9445f701076dc3d289f35fe8", "parents": [ "6aae25858ffb4073864a2b669564b29c63120cb1" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Apr 29 12:07:08 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 29 12:07:08 2026 +0800" }, "message": "build(deps): bump prometheus_metrics.version from 1.5.0 to 1.5.1 (#16240)\n\nBumps `prometheus_metrics.version` from 1.5.0 to 1.5.1.\n\nUpdates `io.prometheus:prometheus-metrics-bom` from 1.5.0 to 1.5.1\n- [Release notes](https://github.com/prometheus/client_java/releases)\n- [Changelog](https://github.com/prometheus/client_java/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prometheus/client_java/compare/v1.5.0...v1.5.1)\n\nUpdates `io.prometheus:prometheus-metrics-exporter-pushgateway` from 1.5.0 to 1.5.1\n\n---\nupdated-dependencies:\n- dependency-name: io.prometheus:prometheus-metrics-bom\n dependency-version: 1.5.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: io.prometheus:prometheus-metrics-exporter-pushgateway\n dependency-version: 1.5.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "6aae25858ffb4073864a2b669564b29c63120cb1", "tree": "4581df8cdf934a91ca24d95a7a14d8da5697e752", "parents": [ "de95ddab1ca6cdc1b6449d96e6277c55c1a8fb5b" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Apr 29 12:07:01 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 29 12:07:01 2026 +0800" }, "message": "build(deps): bump com.google.code.gson:gson from 2.13.2 to 2.14.0 (#16242)\n\nBumps [com.google.code.gson:gson](https://github.com/google/gson) from 2.13.2 to 2.14.0.\n- [Release notes](https://github.com/google/gson/releases)\n- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/google/gson/compare/gson-parent-2.13.2...gson-parent-2.14.0)\n\n---\nupdated-dependencies:\n- dependency-name: com.google.code.gson:gson\n dependency-version: 2.14.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "de95ddab1ca6cdc1b6449d96e6277c55c1a8fb5b", "tree": "875e259b3ea58fbf5b340a47864b009d9f5caa8a", "parents": [ "58ab3c9ec3820d799a43bc541dba7d9ba4cca287" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Apr 29 12:06:52 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 29 12:06:52 2026 +0800" }, "message": "build(deps-dev): bump junit_platform_version from 1.14.3 to 1.14.4 (#16244)\n\n* build(deps-dev): bump junit_platform_version from 1.14.3 to 1.14.4\n\nBumps `junit_platform_version` from 1.14.3 to 1.14.4.\n\nUpdates `org.junit.platform:junit-platform-engine` from 1.14.3 to 1.14.4\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/commits)\n\nUpdates `org.junit.platform:junit-platform-commons` from 1.14.3 to 1.14.4\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/commits)\n\nUpdates `org.junit.platform:junit-platform-launcher` from 1.14.3 to 1.14.4\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit.platform:junit-platform-engine\n dependency-version: 1.14.4\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: org.junit.platform:junit-platform-commons\n dependency-version: 1.14.4\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: org.junit.platform:junit-platform-launcher\n dependency-version: 1.14.4\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\n\n* Update junit platform version and remove duplicate\n\nUpdated junit_platform_version to 1.14.4 and removed duplicate junit_jupiter_version.\n\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: zrlw \u003czrlw@sina.com\u003e" }, { "commit": "58ab3c9ec3820d799a43bc541dba7d9ba4cca287", "tree": "afae977067277d28f920bc0448d87628d9edc3ee", "parents": [ "11043904f27f081922839253c628eee2e1cd8ffa" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Apr 29 12:06:47 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 29 12:06:47 2026 +0800" }, "message": "build(deps): bump commons-io:commons-io from 2.21.0 to 2.22.0 (#16245)\n\nBumps commons-io:commons-io from 2.21.0 to 2.22.0.\n\n---\nupdated-dependencies:\n- dependency-name: commons-io:commons-io\n dependency-version: 2.22.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "11043904f27f081922839253c628eee2e1cd8ffa", "tree": "5c6596bf09f26ac35aa0887368fcc99a08c167ec", "parents": [ "21bdf4937b2ba1cd80589c527df3e386be5ef288" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Apr 29 12:06:41 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 29 12:06:41 2026 +0800" }, "message": "build(deps): bump io.micrometer:micrometer-core from 1.16.4 to 1.16.5 (#16246)\n\nBumps [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) from 1.16.4 to 1.16.5.\n- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)\n- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.16.4...v1.16.5)\n\n---\nupdated-dependencies:\n- dependency-name: io.micrometer:micrometer-core\n dependency-version: 1.16.5\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "21bdf4937b2ba1cd80589c527df3e386be5ef288", "tree": "57d5d0f58ade38d6a47d3e3dbedaa09c509a0396", "parents": [ "3eb5a5c9b1be5f27710a20f7bfa0f0dabf7efd1f" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Apr 23 18:47:51 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 23 18:47:51 2026 +0800" }, "message": "build(deps): bump io.zipkin.reporter2:zipkin-reporter-bom (#16183)\n\nBumps [io.zipkin.reporter2:zipkin-reporter-bom](https://github.com/openzipkin/zipkin-reporter-java) from 3.5.1 to 3.5.3.\n- [Release notes](https://github.com/openzipkin/zipkin-reporter-java/releases)\n- [Changelog](https://github.com/openzipkin/zipkin-reporter-java/blob/master/RELEASE.md)\n- [Commits](https://github.com/openzipkin/zipkin-reporter-java/compare/3.5.1...3.5.3)\n\n---\nupdated-dependencies:\n- dependency-name: io.zipkin.reporter2:zipkin-reporter-bom\n dependency-version: 3.5.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "3eb5a5c9b1be5f27710a20f7bfa0f0dabf7efd1f", "tree": "fc4d7aa36908fe796e6b787c6869c028b732445e", "parents": [ "a8dccb8467ddb4b4850ace8c85a7265a7739ad1a" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Apr 23 16:45:58 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 23 16:45:58 2026 +0800" }, "message": "build(deps): bump org.springframework.boot:spring-boot-starter-actuator from 3.5.11 to 3.5.12 (#16151)\n\n* build(deps): bump org.springframework.boot:spring-boot-starter-actuator\n\nBumps [org.springframework.boot:spring-boot-starter-actuator](https://github.com/spring-projects/spring-boot) from 3.5.11 to 3.5.12.\n- [Release notes](https://github.com/spring-projects/spring-boot/releases)\n- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.11...v3.5.12)\n\n---\nupdated-dependencies:\n- dependency-name: org.springframework.boot:spring-boot-starter-actuator\n dependency-version: 3.5.12\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\n\n* Update Spring Boot and Spring Security versions\n\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: zrlw \u003czrlw@sina.com\u003e" }, { "commit": "a8dccb8467ddb4b4850ace8c85a7265a7739ad1a", "tree": "ca4518988aff417309eb20f738ab29b32beda948", "parents": [ "25b885a20f992f4bbee2bc47da5494ff44c306f9" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Apr 23 16:45:52 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 23 16:45:52 2026 +0800" }, "message": "build(deps): bump log4j2_version from 2.25.3 to 2.25.4 (#16181)\n\nBumps `log4j2_version` from 2.25.3 to 2.25.4.\n\nUpdates `org.apache.logging.log4j:log4j-api` from 2.25.3 to 2.25.4\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.25.3 to 2.25.4\n\nUpdates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.25.3 to 2.25.4\n\nUpdates `org.apache.logging.log4j:log4j-slf4j2-impl` from 2.25.3 to 2.25.4\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.logging.log4j:log4j-api\n dependency-version: 2.25.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.logging.log4j:log4j-core\n dependency-version: 2.25.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.logging.log4j:log4j-slf4j-impl\n dependency-version: 2.25.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.logging.log4j:log4j-slf4j2-impl\n dependency-version: 2.25.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "25b885a20f992f4bbee2bc47da5494ff44c306f9", "tree": "ca4518988aff417309eb20f738ab29b32beda948", "parents": [ "cb6581ff940bbd057cd7481fd35955b9c21be683" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Apr 23 16:45:41 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 23 16:45:41 2026 +0800" }, "message": "build(deps): bump org.codehaus.plexus:plexus-utils from 3.6.0 to 3.6.1 (#16189)\n\nBumps [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 3.6.0 to 3.6.1.\n- [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-utils/compare/plexus-utils-3.6.0...plexus-utils-3.6.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.plexus:plexus-utils\n dependency-version: 3.6.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "cb6581ff940bbd057cd7481fd35955b9c21be683", "tree": "e5127085d0a02b81801269af7084663fbb1215c6", "parents": [ "e80a772eeab455216719b405e9d424616af98629" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Apr 23 16:45:35 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 23 16:45:35 2026 +0800" }, "message": "build(deps): bump byte-buddy_version from 1.18.7 to 1.18.8 (#16192)\n\nBumps `byte-buddy_version` from 1.18.7 to 1.18.8.\n\nUpdates `net.bytebuddy:byte-buddy` from 1.18.7 to 1.18.8\n- [Release notes](https://github.com/raphw/byte-buddy/releases)\n- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)\n- [Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.7...byte-buddy-1.18.8)\n\nUpdates `net.bytebuddy:byte-buddy-agent` from 1.18.7 to 1.18.8\n- [Release notes](https://github.com/raphw/byte-buddy/releases)\n- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)\n- [Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.7...byte-buddy-1.18.8)\n\n---\nupdated-dependencies:\n- dependency-name: net.bytebuddy:byte-buddy\n dependency-version: 1.18.8\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: net.bytebuddy:byte-buddy-agent\n dependency-version: 1.18.8\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "e80a772eeab455216719b405e9d424616af98629", "tree": "a9e03026e0ff69a6dccabad4a59fbce5169d248a", "parents": [ "0b60d5dd6497257a35bf47c27dea0ca0f9bdcb05" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Apr 23 16:45:30 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 23 16:45:30 2026 +0800" }, "message": "build(deps): bump org.apache.tomcat.embed:tomcat-embed-core (#16203)\n\nBumps org.apache.tomcat.embed:tomcat-embed-core from 9.0.115 to 9.0.117.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.tomcat.embed:tomcat-embed-core\n dependency-version: 9.0.117\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "0b60d5dd6497257a35bf47c27dea0ca0f9bdcb05", "tree": "bef8c7556e73a8258643c0fe3200d450a58881f7", "parents": [ "7694fe73367c966fb163005702794e2e39bbda60" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Apr 23 16:45:23 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 23 16:45:23 2026 +0800" }, "message": "build(deps): bump io.opentelemetry:opentelemetry-bom (#16206)\n\nBumps [io.opentelemetry:opentelemetry-bom](https://github.com/open-telemetry/opentelemetry-java) from 1.60.1 to 1.61.0.\n- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)\n- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/open-telemetry/opentelemetry-java/compare/v1.60.1...v1.61.0)\n\n---\nupdated-dependencies:\n- dependency-name: io.opentelemetry:opentelemetry-bom\n dependency-version: 1.61.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "7694fe73367c966fb163005702794e2e39bbda60", "tree": "4a7a434c02054bc1000b78eaa9c5e60587229c97", "parents": [ "3b7d6a5367f50a1691b907f574865ff7863d35d4" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Apr 23 16:45:17 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 23 16:45:17 2026 +0800" }, "message": "build(deps): bump io.zipkin.zipkin2:zipkin from 3.5.1 to 3.6.1 (#16210)\n\nBumps [io.zipkin.zipkin2:zipkin](https://github.com/openzipkin/zipkin) from 3.5.1 to 3.6.1.\n- [Release notes](https://github.com/openzipkin/zipkin/releases)\n- [Changelog](https://github.com/openzipkin/zipkin/blob/master/RELEASE.md)\n- [Commits](https://github.com/openzipkin/zipkin/compare/3.5.1...3.6.1)\n\n---\nupdated-dependencies:\n- dependency-name: io.zipkin.zipkin2:zipkin\n dependency-version: 3.6.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "3b7d6a5367f50a1691b907f574865ff7863d35d4", "tree": "8c134713627c20b1d9c5e31da4da02eb66c36531", "parents": [ "cfec8a9d7ee1ed56ec5e6414ad67fdc82855f533" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Apr 23 16:45:10 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 23 16:45:10 2026 +0800" }, "message": "build(deps): bump org.bouncycastle:bcpkix-jdk18on (#16215)\n\nBumps [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) from 1.83 to 1.84.\n- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)\n- [Commits](https://github.com/bcgit/bc-java/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.bouncycastle:bcpkix-jdk18on\n dependency-version: \u00271.84\u0027\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "cfec8a9d7ee1ed56ec5e6414ad67fdc82855f533", "tree": "8c134713627c20b1d9c5e31da4da02eb66c36531", "parents": [ "b4ed71b2c6b91b3bcfdfcb3241fab819877e2c98" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Apr 23 16:45:05 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 23 16:45:05 2026 +0800" }, "message": "build(deps): bump io.swagger.core.v3:swagger-annotations from 2.2.45 to 2.2.48 (#16222)\n\n* build(deps): bump io.swagger.core.v3:swagger-annotations\n\nBumps io.swagger.core.v3:swagger-annotations from 2.2.45 to 2.2.48.\n\n---\nupdated-dependencies:\n- dependency-name: io.swagger.core.v3:swagger-annotations\n dependency-version: 2.2.48\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\n\n* Update swagger-annotations version in pom.xml\n\nUpdated swagger-annotations version to 2.2.48.\n\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: Yukina \u003crainyu@apache.org\u003e\nCo-authored-by: zrlw \u003czrlw@sina.com\u003e" }, { "commit": "b4ed71b2c6b91b3bcfdfcb3241fab819877e2c98", "tree": "28798ccc9519c6acd9ad06b8dcdc8f58d5a83167", "parents": [ "60714e5deb997dfcc1be4162eec5802c2a6e91bc" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Apr 23 14:14:55 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 23 14:14:55 2026 +0800" }, "message": "build(deps): bump org.apache.groovy:groovy from 4.0.30 to 4.0.31 (#16184)\n\nBumps [org.apache.groovy:groovy](https://github.com/apache/groovy) from 4.0.30 to 4.0.31.\n- [Commits](https://github.com/apache/groovy/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.groovy:groovy\n dependency-version: 4.0.31\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "60714e5deb997dfcc1be4162eec5802c2a6e91bc", "tree": "cbeaa798122bb9a049d527469fa95b6fa10e1ffb", "parents": [ "27fc75b643f929a14392ac8eed70357bc63ad6b5" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Apr 23 14:13:31 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 23 14:13:31 2026 +0800" }, "message": "build(deps): bump spring-6.version from 6.2.17 to 6.2.18 (#16219)\n\nBumps `spring-6.version` from 6.2.17 to 6.2.18.\n\nUpdates `org.springframework:spring-aop` from 6.2.17 to 6.2.18\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.17...v6.2.18)\n\nUpdates `org.springframework:spring-aspects` from 6.2.17 to 6.2.18\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.17...v6.2.18)\n\nUpdates `org.springframework:spring-beans` from 6.2.17 to 6.2.18\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.17...v6.2.18)\n\nUpdates `org.springframework:spring-context` from 6.2.17 to 6.2.18\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.17...v6.2.18)\n\nUpdates `org.springframework:spring-context-indexer` from 6.2.17 to 6.2.18\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.17...v6.2.18)\n\nUpdates `org.springframework:spring-context-support` from 6.2.17 to 6.2.18\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.17...v6.2.18)\n\nUpdates `org.springframework:spring-core` from 6.2.17 to 6.2.18\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.17...v6.2.18)\n\nUpdates `org.springframework:spring-core-test` from 6.2.17 to 6.2.18\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.17...v6.2.18)\n\nUpdates `org.springframework:spring-expression` from 6.2.17 to 6.2.18\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.17...v6.2.18)\n\nUpdates `org.springframework:spring-instrument` from 6.2.17 to 6.2.18\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.17...v6.2.18)\n\nUpdates `org.springframework:spring-jcl` from 6.2.17 to 6.2.18\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.17...v6.2.18)\n\nUpdates `org.springframework:spring-jdbc` from 6.2.17 to 6.2.18\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.17...v6.2.18)\n\nUpdates `org.springframework:spring-test` from 5.3.39 to 6.2.18\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v5.3.39...v6.2.18)\n\nUpdates `org.springframework:spring-tx` from 6.2.17 to 6.2.18\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.17...v6.2.18)\n\nUpdates `org.springframework:spring-web` from 6.2.17 to 6.2.18\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.17...v6.2.18)\n\nUpdates `org.springframework:spring-webmvc` from 6.2.17 to 6.2.18\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.17...v6.2.18)\n\n---\nupdated-dependencies:\n- dependency-name: org.springframework:spring-aop\n dependency-version: 6.2.18\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-aspects\n dependency-version: 6.2.18\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-beans\n dependency-version: 6.2.18\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-context\n dependency-version: 6.2.18\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-context-indexer\n dependency-version: 6.2.18\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-context-support\n dependency-version: 6.2.18\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-core\n dependency-version: 6.2.18\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-core-test\n dependency-version: 6.2.18\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-expression\n dependency-version: 6.2.18\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-instrument\n dependency-version: 6.2.18\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-jcl\n dependency-version: 6.2.18\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-jdbc\n dependency-version: 6.2.18\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-test\n dependency-version: 6.2.18\n dependency-type: direct:production\n update-type: version-update:semver-major\n- dependency-name: org.springframework:spring-tx\n dependency-version: 6.2.18\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-web\n dependency-version: 6.2.18\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-webmvc\n dependency-version: 6.2.18\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "27fc75b643f929a14392ac8eed70357bc63ad6b5", "tree": "2220f9ef64231dff6bf886b4c751dbf779d2a570", "parents": [ "21cd2ca2762b91f852f2cc5ee9a343aafacec6d3" ], "author": { "name": "Ran", "email": "8403607+eddieran@users.noreply.github.com", "time": "Thu Apr 23 14:13:29 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 23 14:13:29 2026 +0800" }, "message": "fix: disable lockedSynchronizers in dumpAllThreads to avoid ZGC safepoint heap scan (#16195)\n\n* fix: disable lockedSynchronizers in dumpAllThreads to avoid safepoint heap scan (#16194)\n\n`ThreadMXBean.dumpAllThreads(true, true)` with lockedSynchronizers\u003dtrue\nforces the JVM to scan the entire heap at a safepoint to find all\nAbstractOwnableSynchronizer instances. On ZGC with large heaps (65GB+),\nthis causes ~37-second safepoint pauses that freeze all application\nthreads, leading to cascading thread pool exhaustion.\n\nChange lockedSynchronizers from true to false. This retains locked\nmonitor information (derived from thread stacks, cheap) but skips the\nexpensive heap scan. Only java.util.concurrent.locks ownership info\nis lost from the thread dump output.\n\nFixes #16194\n\n* chore: remove inline comments from JVMUtil.jstack()\n\nContext is documented in the issue and PR description.\n\nFixes #16194\n\n* Make locked synchronizer scan opt-in via system property\n\nPer @RainYuY: allow users to restore the legacy dumpAllThreads(true, true)\nbehaviour by setting dubbo.jstack-dump.locked-synchronizers\u003dtrue. Default\nremains false, since on ZGC + large heaps the full-heap safepoint scan\ntriggered by this flag can freeze the JVM for tens of seconds (#16194)." }, { "commit": "21cd2ca2762b91f852f2cc5ee9a343aafacec6d3", "tree": "a49654e653837eed79143e9a2910d5731539fb8b", "parents": [ "68a16cb533e2c1036234a5a4a7bc35de25cf7069" ], "author": { "name": "zrlw", "email": "zrlw@sina.com", "time": "Thu Apr 23 12:09:17 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 23 12:09:17 2026 +0800" }, "message": "Reset ApplicationModel after running AbstractServiceDiscoveryFactoryTest (#16234)" }, { "commit": "68a16cb533e2c1036234a5a4a7bc35de25cf7069", "tree": "bb3d4170f1e7777722e8b9883072df5083dea3b3", "parents": [ "af9a3551d45421da181e4367f58b4d87d8814328" ], "author": { "name": "SavitarC", "email": "71271200+SavitarC@users.noreply.github.com", "time": "Wed Apr 22 12:56:58 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 22 12:56:58 2026 +0800" }, "message": "feat: support legacy and new prometheus client stacks (#16132)\n\n* feat: support legacy and new prometheus client stacks\n\n- add an adapter-based Prometheus reporter for both Micrometer registries\n- detect both legacy and new Prometheus dependencies at runtime\n- wire new Prometheus pushgateway dependencies into the BOM and Spring Boot autoconfigure\n\n* spotless apply\n\n---------\n\nCo-authored-by: zrlw \u003czrlw@sina.com\u003e" }, { "commit": "af9a3551d45421da181e4367f58b4d87d8814328", "tree": "249b49e8481079ab74a8c479df48a2f69fddcd60", "parents": [ "5279ba87bfc752bd2b924c014fa48dbe976a53be" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 21 20:53:30 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 21 20:53:30 2026 +0800" }, "message": "build(deps): bump org.webjars:swagger-ui from 5.32.1 to 5.32.4 (#16220)\n\nBumps [org.webjars:swagger-ui](https://github.com/swagger-api/swagger-ui) from 5.32.1 to 5.32.4.\n- [Release notes](https://github.com/swagger-api/swagger-ui/releases)\n- [Commits](https://github.com/swagger-api/swagger-ui/compare/v5.32.1...v5.32.4)\n\n---\nupdated-dependencies:\n- dependency-name: org.webjars:swagger-ui\n dependency-version: 5.32.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "5279ba87bfc752bd2b924c014fa48dbe976a53be", "tree": "49e2c0ed020551f03136594c2a1afe791f175429", "parents": [ "a44786320be73d4039e5ea12c7aa3eb0b5667e77" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 21 20:52:53 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 21 20:52:53 2026 +0800" }, "message": "build(deps): bump io.micrometer:micrometer-bom from 1.16.4 to 1.16.5 (#16221)\n\nBumps [io.micrometer:micrometer-bom](https://github.com/micrometer-metrics/micrometer) from 1.16.4 to 1.16.5.\n- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)\n- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.16.4...v1.16.5)\n\n---\nupdated-dependencies:\n- dependency-name: io.micrometer:micrometer-bom\n dependency-version: 1.16.5\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "a44786320be73d4039e5ea12c7aa3eb0b5667e77", "tree": "561c956f05e957cbf04ab93cb215c6c3122cdd9a", "parents": [ "82fc6a3708238c67586753d74c6fa96a98d43c03" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 21 20:50:47 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 21 20:50:47 2026 +0800" }, "message": "build(deps): bump bouncycastle-bcprov_version from 1.83 to 1.84 (#16223)\n\nBumps `bouncycastle-bcprov_version` from 1.83 to 1.84.\n\nUpdates `org.bouncycastle:bcprov-jdk18on` from 1.83 to 1.84\n- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)\n- [Commits](https://github.com/bcgit/bc-java/commits)\n\nUpdates `org.bouncycastle:bcpkix-jdk18on` from 1.83 to 1.84\n- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)\n- [Commits](https://github.com/bcgit/bc-java/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.bouncycastle:bcprov-jdk18on\n dependency-version: \u00271.84\u0027\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.bouncycastle:bcpkix-jdk18on\n dependency-version: \u00271.84\u0027\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "82fc6a3708238c67586753d74c6fa96a98d43c03", "tree": "128ae21cf737111761ee04558af0730bdca7dc66", "parents": [ "d4d94069b8ae7e33270b3429055879496743da42" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 21 20:49:32 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 21 20:49:32 2026 +0800" }, "message": "build(deps): bump io.micrometer:micrometer-tracing-bom (#16224)\n\nBumps [io.micrometer:micrometer-tracing-bom](https://github.com/micrometer-metrics/tracing) from 1.6.4 to 1.6.5.\n- [Release notes](https://github.com/micrometer-metrics/tracing/releases)\n- [Commits](https://github.com/micrometer-metrics/tracing/compare/v1.6.4...v1.6.5)\n\n---\nupdated-dependencies:\n- dependency-name: io.micrometer:micrometer-tracing-bom\n dependency-version: 1.6.5\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "d4d94069b8ae7e33270b3429055879496743da42", "tree": "e81cb185d5ad63e42e309c9f7ba9e59af99ee4c3", "parents": [ "0287b854ae2e0c5a137ef4ec8f3a182a6130e99c" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 21 20:48:10 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 21 20:48:10 2026 +0800" }, "message": "build(deps-dev): bump io.projectreactor:reactor-core from 3.8.4 to 3.8.5 (#16225)\n\nBumps [io.projectreactor:reactor-core](https://github.com/reactor/reactor-core) from 3.8.4 to 3.8.5.\n- [Release notes](https://github.com/reactor/reactor-core/releases)\n- [Commits](https://github.com/reactor/reactor-core/compare/v3.8.4...v3.8.5)\n\n---\nupdated-dependencies:\n- dependency-name: io.projectreactor:reactor-core\n dependency-version: 3.8.5\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "0287b854ae2e0c5a137ef4ec8f3a182a6130e99c", "tree": "1e166502e5d4f02505a625fdd4540e3e19248fa5", "parents": [ "821fd73bc6a1159a0567eca9c2c79d4bc3d80ff7" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 21 20:47:44 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 21 20:47:44 2026 +0800" }, "message": "build(deps): bump org.apache.maven:maven-core from 3.9.14 to 3.9.15 (#16226)\n\nBumps org.apache.maven:maven-core from 3.9.14 to 3.9.15.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven:maven-core\n dependency-version: 3.9.15\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "821fd73bc6a1159a0567eca9c2c79d4bc3d80ff7", "tree": "86364279eb288e38da0d134c0aaae26e4659ef62", "parents": [ "7018128bbed8132dbb09886fdfd29fd8738d5dae" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 21 20:46:11 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 21 20:46:11 2026 +0800" }, "message": "build(deps): bump org.asynchttpclient:async-http-client (#16228)\n\nBumps [org.asynchttpclient:async-http-client](https://github.com/AsyncHttpClient/async-http-client) from 2.12.4 to 2.14.5.\n- [Release notes](https://github.com/AsyncHttpClient/async-http-client/releases)\n- [Commits](https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.12.4...async-http-client-project-2.14.5)\n\n---\nupdated-dependencies:\n- dependency-name: org.asynchttpclient:async-http-client\n dependency-version: 2.14.5\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "7018128bbed8132dbb09886fdfd29fd8738d5dae", "tree": "a4857488bb44671c967ca0ce032b071e168f1234", "parents": [ "c954223ddd98b372c86af17d7374833190bbb585" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 21 20:44:51 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 21 20:44:51 2026 +0800" }, "message": "build(deps): bump org.apache.maven:maven-plugin-api (#16227)\n\nBumps [org.apache.maven:maven-plugin-api](https://github.com/apache/maven) from 3.9.14 to 3.9.15.\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.14...maven-3.9.15)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven:maven-plugin-api\n dependency-version: 3.9.15\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "c954223ddd98b372c86af17d7374833190bbb585", "tree": "2b28eb767b4501c91bd6678d59abe0db4ff2491b", "parents": [ "d95086ca29bce4b41a8181f17ae67e42afc9ed02" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 21 20:44:23 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 21 20:44:23 2026 +0800" }, "message": "build(deps): bump org.javassist:javassist from 3.30.2-GA to 3.31.0-GA (#16229)\n\nBumps [org.javassist:javassist](https://github.com/jboss-javassist/javassist) from 3.30.2-GA to 3.31.0-GA.\n- [Release notes](https://github.com/jboss-javassist/javassist/releases)\n- [Changelog](https://github.com/jboss-javassist/javassist/blob/master/Changes.md)\n- [Commits](https://github.com/jboss-javassist/javassist/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.javassist:javassist\n dependency-version: 3.31.0-GA\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "d95086ca29bce4b41a8181f17ae67e42afc9ed02", "tree": "6890ce772f31ac17a889b8b8fc490304f568a547", "parents": [ "8814afac6b2106cfc0d4050ac8318df5774e560d" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Apr 13 11:36:15 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Apr 13 11:36:15 2026 +0800" }, "message": "build(deps): bump org.apache.logging.log4j:log4j-core (#16204)\n\nBumps org.apache.logging.log4j:log4j-core from 2.25.3 to 2.25.4.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.logging.log4j:log4j-core\n dependency-version: 2.25.4\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "8814afac6b2106cfc0d4050ac8318df5774e560d", "tree": "e41aa5c687913047fddbcba8e80445bbc375d492", "parents": [ "69084bd6744d8542e0bee100a4a07f2d883dc669" ], "author": { "name": "Yukina", "email": "rainyu@apache.org", "time": "Thu Apr 09 10:54:04 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 09 10:54:04 2026 +0800" }, "message": "Update netty4_version to 4.2.12.Final (#16196)\n\n* Update netty4_version to 4.2.12.Final\n\n* Disable endpoint identification algorithm in SSL context\n\n* Remove endpoint identification algorithm setting" }, { "commit": "69084bd6744d8542e0bee100a4a07f2d883dc669", "tree": "7846ca78c2b485aa494b270830956fab101c8c52", "parents": [ "93229301946906779262f8d38dd731593b820146" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Mar 27 11:40:17 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Mar 27 11:40:17 2026 +0800" }, "message": "build(deps): bump org.apache.tomcat.embed:tomcat-embed-core (#16147)\n\nBumps org.apache.tomcat.embed:tomcat-embed-core from 9.0.113 to 9.0.115.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.tomcat.embed:tomcat-embed-core\n dependency-version: 9.0.115\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "93229301946906779262f8d38dd731593b820146", "tree": "19662993efde33d3ce191a33cee79a3c6e12fbfd", "parents": [ "67bda6da7b95151926d6edd97516cc131a8e2b57" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Mar 27 11:40:10 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Mar 27 11:40:10 2026 +0800" }, "message": "build(deps): bump org.webjars:swagger-ui from 5.32.0 to 5.32.1 (#16158)\n\nBumps [org.webjars:swagger-ui](https://github.com/swagger-api/swagger-ui) from 5.32.0 to 5.32.1.\n- [Release notes](https://github.com/swagger-api/swagger-ui/releases)\n- [Commits](https://github.com/swagger-api/swagger-ui/compare/v5.32.0...v5.32.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.webjars:swagger-ui\n dependency-version: 5.32.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: zrlw \u003czrlw@sina.com\u003e" }, { "commit": "67bda6da7b95151926d6edd97516cc131a8e2b57", "tree": "dc6b31ae40754cd5852f31d39e4eda17acf41a74", "parents": [ "53b485394b938a19c6a666932aabfeab41b3267f" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Mar 27 11:40:05 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Mar 27 11:40:05 2026 +0800" }, "message": "build(deps): bump grpc.version from 1.79.0 to 1.80.0 (#16159)\n\nBumps `grpc.version` from 1.79.0 to 1.80.0.\n\nUpdates `io.grpc:grpc-core` from 1.79.0 to 1.80.0\n- [Release notes](https://github.com/grpc/grpc-java/releases)\n- [Commits](https://github.com/grpc/grpc-java/compare/v1.79.0...v1.80.0)\n\nUpdates `io.grpc:grpc-netty-shaded` from 1.79.0 to 1.80.0\n- [Release notes](https://github.com/grpc/grpc-java/releases)\n- [Commits](https://github.com/grpc/grpc-java/compare/v1.79.0...v1.80.0)\n\nUpdates `io.grpc:grpc-netty` from 1.79.0 to 1.80.0\n- [Release notes](https://github.com/grpc/grpc-java/releases)\n- [Commits](https://github.com/grpc/grpc-java/compare/v1.79.0...v1.80.0)\n\nUpdates `io.grpc:grpc-protobuf` from 1.79.0 to 1.80.0\n- [Release notes](https://github.com/grpc/grpc-java/releases)\n- [Commits](https://github.com/grpc/grpc-java/compare/v1.79.0...v1.80.0)\n\nUpdates `io.grpc:grpc-stub` from 1.79.0 to 1.80.0\n- [Release notes](https://github.com/grpc/grpc-java/releases)\n- [Commits](https://github.com/grpc/grpc-java/compare/v1.79.0...v1.80.0)\n\nUpdates `io.grpc:grpc-grpclb` from 1.79.0 to 1.80.0\n- [Release notes](https://github.com/grpc/grpc-java/releases)\n- [Commits](https://github.com/grpc/grpc-java/compare/v1.79.0...v1.80.0)\n\nUpdates `io.grpc:grpc-context` from 1.79.0 to 1.80.0\n- [Release notes](https://github.com/grpc/grpc-java/releases)\n- [Commits](https://github.com/grpc/grpc-java/compare/v1.79.0...v1.80.0)\n\n---\nupdated-dependencies:\n- dependency-name: io.grpc:grpc-core\n dependency-version: 1.80.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: io.grpc:grpc-netty-shaded\n dependency-version: 1.80.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: io.grpc:grpc-netty\n dependency-version: 1.80.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: io.grpc:grpc-protobuf\n dependency-version: 1.80.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: io.grpc:grpc-stub\n dependency-version: 1.80.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: io.grpc:grpc-grpclb\n dependency-version: 1.80.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: io.grpc:grpc-context\n dependency-version: 1.80.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: zrlw \u003czrlw@sina.com\u003e" }, { "commit": "53b485394b938a19c6a666932aabfeab41b3267f", "tree": "a089eea3bbbf7350b0e085b67501b612c3d73981", "parents": [ "f3ea80c777ccc17f4b98e80bd1d111017495d42a" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Mar 27 11:40:01 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Mar 27 11:40:01 2026 +0800" }, "message": "build(deps): bump spring-security-6.version from 6.5.8 to 6.5.9 (#16160)\n\nBumps `spring-security-6.version` from 6.5.8 to 6.5.9.\n\nUpdates `org.springframework.security:spring-security-core` from 6.5.8 to 6.5.9\n- [Release notes](https://github.com/spring-projects/spring-security/releases)\n- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)\n- [Commits](https://github.com/spring-projects/spring-security/compare/6.5.8...6.5.9)\n\nUpdates `org.springframework.security:spring-security-oauth2-client` from 6.5.8 to 6.5.9\n- [Release notes](https://github.com/spring-projects/spring-security/releases)\n- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)\n- [Commits](https://github.com/spring-projects/spring-security/compare/6.5.8...6.5.9)\n\nUpdates `org.springframework.security:spring-security-config` from 6.5.8 to 6.5.9\n- [Release notes](https://github.com/spring-projects/spring-security/releases)\n- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)\n- [Commits](https://github.com/spring-projects/spring-security/compare/6.5.8...6.5.9)\n\nUpdates `org.springframework.security:spring-security-web` from 6.5.8 to 6.5.9\n- [Release notes](https://github.com/spring-projects/spring-security/releases)\n- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)\n- [Commits](https://github.com/spring-projects/spring-security/compare/6.5.8...6.5.9)\n\nUpdates `org.springframework.security:spring-security-crypto` from 6.5.8 to 6.5.9\n- [Release notes](https://github.com/spring-projects/spring-security/releases)\n- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)\n- [Commits](https://github.com/spring-projects/spring-security/compare/6.5.8...6.5.9)\n\nUpdates `org.springframework.security:spring-security-oauth2-core` from 6.5.8 to 6.5.9\n- [Release notes](https://github.com/spring-projects/spring-security/releases)\n- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)\n- [Commits](https://github.com/spring-projects/spring-security/compare/6.5.8...6.5.9)\n\nUpdates `org.springframework.security:spring-security-oauth2-jose` from 6.5.8 to 6.5.9\n- [Release notes](https://github.com/spring-projects/spring-security/releases)\n- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)\n- [Commits](https://github.com/spring-projects/spring-security/compare/6.5.8...6.5.9)\n\nUpdates `org.springframework.security:spring-security-oauth2-resource-server` from 6.5.8 to 6.5.9\n- [Release notes](https://github.com/spring-projects/spring-security/releases)\n- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)\n- [Commits](https://github.com/spring-projects/spring-security/compare/6.5.8...6.5.9)\n\n---\nupdated-dependencies:\n- dependency-name: org.springframework.security:spring-security-core\n dependency-version: 6.5.9\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.security:spring-security-oauth2-client\n dependency-version: 6.5.9\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.security:spring-security-config\n dependency-version: 6.5.9\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.security:spring-security-web\n dependency-version: 6.5.9\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.security:spring-security-crypto\n dependency-version: 6.5.9\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.security:spring-security-oauth2-core\n dependency-version: 6.5.9\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.security:spring-security-oauth2-jose\n dependency-version: 6.5.9\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework.security:spring-security-oauth2-resource-server\n dependency-version: 6.5.9\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: zrlw \u003czrlw@sina.com\u003e" }, { "commit": "f3ea80c777ccc17f4b98e80bd1d111017495d42a", "tree": "f81da96665a543acfde0d6abbb8be4ac67f9428e", "parents": [ "d55694e462859f49a63cdcab0a064ea8567279ca" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Mar 27 11:39:56 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Mar 27 11:39:56 2026 +0800" }, "message": "build(deps): bump protobuf-java_version from 4.33.4 to 4.34.1 (#16161)\n\nBumps `protobuf-java_version` from 4.33.4 to 4.34.1.\n\nUpdates `com.google.protobuf:protobuf-java` from 4.33.4 to 4.34.1\n- [Release notes](https://github.com/protocolbuffers/protobuf/releases)\n- [Commits](https://github.com/protocolbuffers/protobuf/commits)\n\nUpdates `com.google.protobuf:protobuf-java-util` from 4.34.0 to 4.34.1\n\n---\nupdated-dependencies:\n- dependency-name: com.google.protobuf:protobuf-java\n dependency-version: 4.34.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: com.google.protobuf:protobuf-java-util\n dependency-version: 4.34.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: zrlw \u003czrlw@sina.com\u003e" }, { "commit": "d55694e462859f49a63cdcab0a064ea8567279ca", "tree": "8bca6b50adc71ba7162c9918de5b8c7bac7ca5b7", "parents": [ "f788772766cf96520138092b0813a8a20578142c" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Mar 27 11:39:52 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Mar 27 11:39:52 2026 +0800" }, "message": "build(deps): bump com.alibaba.fastjson2:fastjson2 from 2.0.60 to 2.0.61 (#16162)\n\nBumps [com.alibaba.fastjson2:fastjson2](https://github.com/alibaba/fastjson2) from 2.0.60 to 2.0.61.\n- [Release notes](https://github.com/alibaba/fastjson2/releases)\n- [Commits](https://github.com/alibaba/fastjson2/compare/2.0.60...2.0.61)\n\n---\nupdated-dependencies:\n- dependency-name: com.alibaba.fastjson2:fastjson2\n dependency-version: 2.0.61\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: zrlw \u003czrlw@sina.com\u003e" }, { "commit": "f788772766cf96520138092b0813a8a20578142c", "tree": "b70092ea7427708e5e755e22e54af50e39633b02", "parents": [ "b54059dac4ecadc46a65a2c0b3244589fb3892cb" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Mar 27 11:39:47 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Mar 27 11:39:47 2026 +0800" }, "message": "build(deps): bump com.fasterxml.jackson:jackson-bom (#16163)\n\nBumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 2.21.1 to 2.21.2.\n- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.21.1...jackson-bom-2.21.2)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson:jackson-bom\n dependency-version: 2.21.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: zrlw \u003czrlw@sina.com\u003e" }, { "commit": "b54059dac4ecadc46a65a2c0b3244589fb3892cb", "tree": "57ec8952d47df7677a763b4dd0e4e4f12f006ebc", "parents": [ "63fe8c3a982a554ba40cd5e62f07d74cebb45e39" ], "author": { "name": "zrlw", "email": "zrlw@sina.com", "time": "Wed Mar 25 17:54:34 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Mar 25 17:54:34 2026 +0800" }, "message": "Remove job native-image-inspecting from build-and-test-scheduled-3.3.yml as action setup-graalvm was not allowed anymore (#16166)" }, { "commit": "63fe8c3a982a554ba40cd5e62f07d74cebb45e39", "tree": "d8be593115b24a3a7b4487cb8b682995c72c4565", "parents": [ "1d92ea4dec62955aca2b161e8d7417799b6f934b" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Mar 18 15:36:29 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Mar 18 15:36:29 2026 +0800" }, "message": "build(deps): bump org.webjars:swagger-ui from 5.31.2 to 5.32.0 (#16115)\n\nBumps [org.webjars:swagger-ui](https://github.com/swagger-api/swagger-ui) from 5.31.2 to 5.32.0.\n- [Release notes](https://github.com/swagger-api/swagger-ui/releases)\n- [Commits](https://github.com/swagger-api/swagger-ui/compare/v5.31.2...v5.32.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.webjars:swagger-ui\n dependency-version: 5.32.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: zrlw \u003czrlw@sina.com\u003e" }, { "commit": "1d92ea4dec62955aca2b161e8d7417799b6f934b", "tree": "3c085c9cbefa9d838a5e5bf21f17f44f1939f044", "parents": [ "cce03be03f7f930ce47002481f983d8183dc479f" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Mar 18 15:36:24 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Mar 18 15:36:24 2026 +0800" }, "message": "build(deps): bump io.opentelemetry:opentelemetry-bom (#16119)\n\nBumps [io.opentelemetry:opentelemetry-bom](https://github.com/open-telemetry/opentelemetry-java) from 1.59.0 to 1.60.1.\n- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)\n- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/v1.60.1/CHANGELOG.md)\n- [Commits](https://github.com/open-telemetry/opentelemetry-java/compare/v1.59.0...v1.60.1)\n\n---\nupdated-dependencies:\n- dependency-name: io.opentelemetry:opentelemetry-bom\n dependency-version: 1.60.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: zrlw \u003czrlw@sina.com\u003e" }, { "commit": "cce03be03f7f930ce47002481f983d8183dc479f", "tree": "f883c830df7a996d9207a010cf4eedad744ab4bb", "parents": [ "17bfa9094257445930d65f219453067c383384d7" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Mar 18 14:02:50 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Mar 18 14:02:50 2026 +0800" }, "message": "build(deps): bump io.micrometer:micrometer-tracing-bom (#16137)\n\nBumps [io.micrometer:micrometer-tracing-bom](https://github.com/micrometer-metrics/tracing) from 1.6.3 to 1.6.4.\n- [Release notes](https://github.com/micrometer-metrics/tracing/releases)\n- [Commits](https://github.com/micrometer-metrics/tracing/compare/v1.6.3...v1.6.4)\n\n---\nupdated-dependencies:\n- dependency-name: io.micrometer:micrometer-tracing-bom\n dependency-version: 1.6.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "17bfa9094257445930d65f219453067c383384d7", "tree": "2635da103ce2d74422b109b98079d4920310996e", "parents": [ "bb9ab98cf40ad764c20458a91820bd8384aafccc" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Mar 17 17:45:48 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 17 17:45:48 2026 +0800" }, "message": "build(deps): bump protobuf-java_version from 4.33.4 to 4.34.0 (#16114)\n\nBumps `protobuf-java_version` from 4.33.4 to 4.34.0.\n\nUpdates `com.google.protobuf:protobuf-java` from 4.33.4 to 4.34.0\n- [Release notes](https://github.com/protocolbuffers/protobuf/releases)\n- [Commits](https://github.com/protocolbuffers/protobuf/commits)\n\nUpdates `com.google.protobuf:protobuf-java-util` from 4.33.5 to 4.34.0\n\n---\nupdated-dependencies:\n- dependency-name: com.google.protobuf:protobuf-java\n dependency-version: 4.34.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: com.google.protobuf:protobuf-java-util\n dependency-version: 4.34.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "bb9ab98cf40ad764c20458a91820bd8384aafccc", "tree": "8635e0a93999fbc712d30d8d08919611ac87feca", "parents": [ "53ed28558a9bc6423d7478dd08a9947953d020e3" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Mar 17 17:45:32 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 17 17:45:32 2026 +0800" }, "message": "build(deps): bump org.apache.tomcat.embed:tomcat-embed-core (#16127)\n\nBumps org.apache.tomcat.embed:tomcat-embed-core from 9.0.112 to 9.0.113.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.tomcat.embed:tomcat-embed-core\n dependency-version: 9.0.113\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "53ed28558a9bc6423d7478dd08a9947953d020e3", "tree": "5dfd098ac1bc1bd90c6f4db78d2e7e4cab3e45c5", "parents": [ "ae1641eef8fe3be1f5cebe32ba6fd66dd9a1c265" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Mar 17 17:45:27 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 17 17:45:27 2026 +0800" }, "message": "build(deps): bump spring-6.version from 6.2.16 to 6.2.17 (#16136)\n\nBumps `spring-6.version` from 6.2.16 to 6.2.17.\n\nUpdates `org.springframework:spring-aop` from 6.2.16 to 6.2.17\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.16...v6.2.17)\n\nUpdates `org.springframework:spring-aspects` from 6.2.16 to 6.2.17\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.16...v6.2.17)\n\nUpdates `org.springframework:spring-beans` from 6.2.16 to 6.2.17\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.16...v6.2.17)\n\nUpdates `org.springframework:spring-context` from 6.2.16 to 6.2.17\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.16...v6.2.17)\n\nUpdates `org.springframework:spring-context-indexer` from 6.2.16 to 6.2.17\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.16...v6.2.17)\n\nUpdates `org.springframework:spring-context-support` from 6.2.16 to 6.2.17\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.16...v6.2.17)\n\nUpdates `org.springframework:spring-core` from 6.2.16 to 6.2.17\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.16...v6.2.17)\n\nUpdates `org.springframework:spring-core-test` from 6.2.16 to 6.2.17\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.16...v6.2.17)\n\nUpdates `org.springframework:spring-expression` from 6.2.16 to 6.2.17\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.16...v6.2.17)\n\nUpdates `org.springframework:spring-instrument` from 6.2.16 to 6.2.17\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.16...v6.2.17)\n\nUpdates `org.springframework:spring-jcl` from 6.2.16 to 6.2.17\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.16...v6.2.17)\n\nUpdates `org.springframework:spring-jdbc` from 6.2.16 to 6.2.17\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.16...v6.2.17)\n\nUpdates `org.springframework:spring-test` from 5.3.39 to 6.2.17\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v5.3.39...v6.2.17)\n\nUpdates `org.springframework:spring-tx` from 6.2.16 to 6.2.17\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.16...v6.2.17)\n\nUpdates `org.springframework:spring-web` from 6.2.16 to 6.2.17\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.16...v6.2.17)\n\nUpdates `org.springframework:spring-webmvc` from 6.2.16 to 6.2.17\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.16...v6.2.17)\n\n---\nupdated-dependencies:\n- dependency-name: org.springframework:spring-aop\n dependency-version: 6.2.17\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-aspects\n dependency-version: 6.2.17\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-beans\n dependency-version: 6.2.17\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-context\n dependency-version: 6.2.17\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-context-indexer\n dependency-version: 6.2.17\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-context-support\n dependency-version: 6.2.17\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-core\n dependency-version: 6.2.17\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-core-test\n dependency-version: 6.2.17\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-expression\n dependency-version: 6.2.17\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-instrument\n dependency-version: 6.2.17\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-jcl\n dependency-version: 6.2.17\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-jdbc\n dependency-version: 6.2.17\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-test\n dependency-version: 6.2.17\n dependency-type: direct:production\n update-type: version-update:semver-major\n- dependency-name: org.springframework:spring-tx\n dependency-version: 6.2.17\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-web\n dependency-version: 6.2.17\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: org.springframework:spring-webmvc\n dependency-version: 6.2.17\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "ae1641eef8fe3be1f5cebe32ba6fd66dd9a1c265", "tree": "6062752c1965725f960de520bc8f0eadbef8438e", "parents": [ "3ae91fe40062bc896c2332e10a21c01c9c0447e5" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Mar 17 17:45:16 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 17 17:45:16 2026 +0800" }, "message": "build(deps): bump io.swagger.core.v3:swagger-annotations (#16138)\n\nBumps io.swagger.core.v3:swagger-annotations from 2.2.44 to 2.2.45.\n\n---\nupdated-dependencies:\n- dependency-name: io.swagger.core.v3:swagger-annotations\n dependency-version: 2.2.45\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "3ae91fe40062bc896c2332e10a21c01c9c0447e5", "tree": "c0bbd1f1e3a37264354d16142bf0dd2cd9a3c1e0", "parents": [ "ad72331488543faecb8b83f7990c88025fee89c7" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Mar 17 17:45:10 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 17 17:45:10 2026 +0800" }, "message": "build(deps): bump io.micrometer:micrometer-bom from 1.16.3 to 1.16.4 (#16139)\n\nBumps [io.micrometer:micrometer-bom](https://github.com/micrometer-metrics/micrometer) from 1.16.3 to 1.16.4.\n- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)\n- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.16.3...v1.16.4)\n\n---\nupdated-dependencies:\n- dependency-name: io.micrometer:micrometer-bom\n dependency-version: 1.16.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "ad72331488543faecb8b83f7990c88025fee89c7", "tree": "cd109369b6dfc23d93a700c016cce0cbbb514c2a", "parents": [ "d5c5e22d2ae6f7b367dec5823b515196cc89dc61" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Mar 17 17:45:04 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 17 17:45:04 2026 +0800" }, "message": "build(deps): bump io.micrometer:micrometer-core from 1.16.3 to 1.16.4 (#16140)\n\nBumps [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) from 1.16.3 to 1.16.4.\n- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)\n- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.16.3...v1.16.4)\n\n---\nupdated-dependencies:\n- dependency-name: io.micrometer:micrometer-core\n dependency-version: 1.16.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "d5c5e22d2ae6f7b367dec5823b515196cc89dc61", "tree": "97851425863b74e9f80dc10aece80b25e1bdcc49", "parents": [ "616cb6a550fe39146caa4270e26428ec7228a98f" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Mar 17 17:44:56 2026 +0800" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 17 17:44:56 2026 +0800" }, "message": "build(deps): bump org.apache.maven:maven-plugin-api (#16141)\n\nBumps [org.apache.maven:maven-plugin-api](https://github.com/apache/maven) from 3.9.13 to 3.9.14.\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.13...maven-3.9.14)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven:maven-plugin-api\n dependency-version: 3.9.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" } ], "next": "616cb6a550fe39146caa4270e26428ec7228a98f" }