fix(deps): update all non-major notification-server dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
gradle (source)		patch	8.14.1 -> 8.14.3
gradle	stage	patch	8.14.1-jdk21-alpine -> 8.14.3-jdk21-alpine
org.springframework:spring-instrument	dependencies	patch	6.2.7 -> 6.2.11
io.nats:jnats	dependencies	minor	2.21.1 -> 2.22.0
org.openapitools:jackson-databind-nullable	dependencies	patch	0.2.6 -> 0.2.7
org.springdoc:springdoc-openapi-starter-webmvc-ui (source)	dependencies	patch	2.8.8 -> 2.8.13

---

Release Notes

gradle/gradle (gradle)

v8.14.3: 8.14.3

Compare Source

The Gradle team is excited to announce Gradle 8.14.3.

This is a patch release for 8.14. We recommend using 8.14.3 instead of 8.14.

Here are the highlights of this release:

• Java 24 support
• GraalVM Native Image toolchain selection
• Enhancements to test reporting
• Build Authoring improvements

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14.3 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.3 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.14.2

Compare Source

spring-projects/spring-framework (org.springframework:spring-instrument)

v6.2.11

⭐ New Features

• Missing @Nullable on JsonPathAssertions.isEqualTo #​35445
• Graceful fallback for non-default NIO.2 FileSystems #​35443
• Avoid thread pinning in SseEmitter, ResponseBodyEmitter #​35423
• Detect Informix error codes as DuplicateKeyException #​35400
• Inconsistent nullability for String value arguments in ResponseCookie from*() factory methods #​35377
• Revisit taskTerminationTimeout semantics on SimpleAsyncTaskExecutor/Scheduler #​35372
• StandardEvaluationContext.setBeanResolver should allow @Nullable BeanResolver #​35371

🐞 Bug Fixes

• "mainThreadPrefix = null " Causing multiple background bean locks to be blocked #​35409
• Annotation not found on parameter in overridden method unless method is public #​35349
• Annotations on overridden methods not found in type hierarchy with unresolved generics #​35342
• Performance degradation when using singleton beans with Provider #​35330
• JettyClientHttpConnector buffer leak in Spring Framework 6.2 #​35319
• Spring application hangs on shutdown with @Scheduled(cron=…) when custom ScheduledExecutorService bean is defined (Java 19+) #​35316

📔 Documentation

• Document potential need to use Mockito.doXxx() to stub a @MockitoSpyBean #​35410
• Fix links to Reactive Libraries and RestTemplate #​35392
• Fix broken link in WebDriver docs #​35374
• Document Web DataBinder support for RouterFunction #​35367
• Improve documentation for ApplicationEvents to clarify recommended usage #​35335
• Document terms and units in DataSize.parse() #​35298
• Refine @Contract Javadoc #​35285
• Correct the default value of nestedTransactionAllowed in JpaTransactionManager javadoc #​35212

🔨 Dependency Upgrades

• Upgrade to Micrometer 1.14.11 #​35455
• Upgrade to Reactor 2024.0.10 #​35454

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Dockerel, @​Kehrlann, @​acktsap, @​khj68, @​ngocnhan-tran1996, @​scordio, and @​sgflt

v6.2.10

⭐ New Features

• Optimize NIO path resolution in PathEditor #​35304
• Make type in ProblemDetail nullable #​35294
• Refine UriUtils#decode and StringUtils#uriDecode implementation and documentation #​35253
• Provide configurable useCaches option for URLConnection usage in UrlResource (avoiding jar file leak) #​35218

🐞 Bug Fixes

• @Scheduled tasks running in SimpleAsyncTaskScheduler are interrupted immediately on context close #​35254
• ScriptUtils.executeSqlScript() does not support multiple results per statement #​35248
• Successful Autowiring Dependent on Configuration ordering and Primary Bean flag #​35239
• Locale parameter in MessageSource#getMessage methods should be nullable #​35230
• Allow any @Transactional propagation for @TransactionalEventListener with BEFORE_COMMIT phase #​35150
• Catalog name should be handled with the provided case #​35064
• Accept support for generated keys column name array on HSQLDB and Derby as well #​34790
• Handle direct CanncelationException on timeout in JdkClientHttpRequest #​34721

📔 Documentation

• Add documentation of RequestMapping about SpEL #​35232
• Document SqlBinaryValue behaviour with PostgreSQL #​34786

🔨 Dependency Upgrades

• Upgrade to Micrometer 1.14.10 #​35313
• Upgrade to Reactor 2024.0.9 #​35312

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Allan-QLB, @​carsago, @​cw-dimedis, and @​giampa91

v6.2.9

⭐ New Features

• OncePerRequestFilter cannot be CGLib-proxied #​35198
• Consistently catch InaccessibleObjectException next to IllegalAccessException #​35190
• Introduce Date-to-Instant and Instant-to-Date converters #​35175
• Consistent nullability and exception declarations in AbstractMessagingTemplate hierarchy #​35159
• Register runtime hints for Instant-to-Timestamp conversion #​35156
• Improve handling of ResponseEntity<?> in Spring MVC #​35153
• Support @CacheConfig("myCacheName") declarations for simplified configuration #​35152
• Declare messageSelector parameters in JmsOperations as @Nullable #​35151
• Add getter for OverflowStrategy in ConcurrentWebSocketSessionDecorator #​35132
• Use preset Content-Type for streaming and reactive responses in Spring MVC #​35130
• Leniently tolerate null @Aspect bean #​35074
• DataAccessResourceFailureException thrown when transaction times out on PostgreSQL #​35073
• MethodInvokingFactoryBean fails to invoke publicly exported methods overridden by internal classes when using JPMS #​34028

🐞 Bug Fixes

• Restore preference for interface (most abstract) method in getPubliclyAccessibleMethodIfPossible #​35189
• Make targetBeanName field in AbstractBeanFactoryBasedTargetSource protected to avoid exceptions in logging and toString() #​35172
• Fix inconsistencies in StaticListableBeanFactory #​35119
• Support StreamingHttpOutputMessage in RestClient #​35102
• When building DELETE requests, the request body is not used in JdkClientHttpRequest.buildRequest #​35068
• AOT-generated bean registration file contains "too many constants" when building with many beans #​35044
• Prevent cache pollution by storing only the factories #​34732
• WebFlux decodes wildcard content-types as form-data/multipart #​34660
• AOT-generated CGLib proxies do not contain method overrides #​34642
• 500 response for ResourceHttpRequestHandler when requested range is not satisfied #​34490

📔 Documentation

• Document how to register runtime hints for convention-based conversion #​35178
• Link to @ContextConfiguration Javadoc from reference manual #​35088

🔨 Dependency Upgrades

• Upgrade to JUnit 5.13.3 #​35103
• Upgrade to Micrometer 1.14.9 #​35202
• Upgrade to Reactor 2024.0.8 #​35201

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Meijuh, @​RazorNd, @​chenggwang, @​izeye, @​mjd507, @​ngocnhan-tran1996, and @​philwebb

v6.2.8

⭐ New Features

• Nullability @Contract declaration for CodeFlow.isIntegerForNumericOp() is unnecessary #​34985
• Serializer hint registration is broken for some Kotlin classes #​34979
• Clients created using JdkClientHttpRequestFactory set content-length for GET, DELETE and HEAD requests #​34971
• Support registration of non-public BeanDefinitionReader via @ImportResource #​34928
• Make max size for pattern cache in PathPatternMatchableHandlerMapping configurable #​34918
• Add optimized DataBufferInputStream overrides #​34799

🐞 Bug Fixes

• Encode non-printable character in Content-Disposition parameter #​35034
• Allow update of existing WebSession after max sessions limit is reached #​35013
• Fix support for collections in AbstractKotlinSerializationHttpMessageConverter #​34992
• PathPattern#combine throws StringIndexOutOfBoundsException #​34986
• Fix AOT code generation for autowired inner class constructor #​34974
• AbstractFileResolvingResource.exists closes JAR resource input streams with v6.2.7 #​34955
• Enhanced configuration class fails to call package-visible superclass constructor on WebSphere #​34950
• Fix REPLY_CHANNEL header check in MessageHeaderAccessor #​34949
• MockEnvironment does not accept Object property values #​34947
• PropertySourcesPlaceholderConfigurer no longer uses ConversionService from Environment #​34936
• @Contract for StreamUtils.drain() incorrectly declares null results in an exception #​34933
• Inconsistent behavior injecting null @Bean factory parameter #​34929
• MockHttpServletRequest.addHeader duplicates "Content-Type" header #​34913
• BeanUtils.getParameterNames fails for Kotlin data classes #​34760
• JAXB message converters ignore Content-Type charset #​34745
• Aspect Not Triggered After Restart in Spring Boot 3.4.x (But Works in 3.3.10) #​34735
• Add caching headers to unmodified static resources #​34614

📔 Documentation

• Apply gh-34856 to MockClientHttpRequest in testfixture package #​35031
• Fix ResourceHttpRequestHandler#setHeaders JavaDoc #​35004
• Remove reference to AspectJ Eclipse Javadoc #​35000
• Mention CompletableFuture in Spring MVC "Asynchronous Requests" section of reference manual #​34991
• Fix exception name in ModelAttribute docs #​34980
• Fix syntax in @SqlGroup example #​34972
• Update X-Forwarded-Proto doc to say https / http #​34959
• Update Guidance on Best Practices To Test Code That Uses RestClient and RestTemplate #​34892
• Add a section for WebAsyncTask in mvc-ann-async.adoc #​34885
• Clarify what @RestControllerAdvice vs @ControllerAdvice apply to by default #​34866
• Improve Javadoc for @ExceptionHandler #​34554

🔨 Dependency Upgrades

• Upgrade to HttpComponents HttpClient 5.5 #​34941
• Upgrade to Micrometer 1.14.8 #​35020
• Upgrade to Reactor 2024.0.7 #​35021

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Allan-QLB, @​Aurh1l, @​BowieDu, @​DhruvTheDev1, @​Dongnyoung, @​JimmyAx, @​addoDev, @​dmitrysulman, @​izeye, @​jjank, @​kilink, @​mbazos, @​msnsaeed71, @​ngocnhan-tran1996, @​nosan, @​remeio, @​vpavic, and @​yuzawa-san

nats-io/nats.java (io.nats:jnats)

v2.22.0

Compare Source

Core

• Expose connection outgoingPendingMessageCount and outgoingPendingBytes #​1412 @​scottf

JetStream

• Add publish header "Nats-Expected-Last-Subject-Sequence-Subject" #​1401 @​scottf
• Add publish header "Nats-Expected-Last-Subject-Sequence-Subject" part b. #​1402 @​scottf
• [Fix] Reset cached consumer info when re-making ordered consumers #​1405 @​scottf
• consumers - metadata comparison #​1410 @​scottf

ObjectStore

• ObjectMeta metadata #​1399 @​scottf

Misc

• Clarify documentation for JetStreamSubscription #​1400 @​davidmorley
• Build (CI/CD) Stuff #​1404 @​scottf
• Update version of bouncycastle to resolve CVE-2025-9341 #​1406 @​vkolomeyko

v2.21.5

Compare Source

Core

• Implement Fast fallback algorithm in SocketDataPort #​1351 @​jitinsharma
• [FIX] Shutdown internal executors on connection close. #​1357 @​scottf
• Convert serverAuthErrors to ConcurrentHashMap #​1359 @​scottf
• Fix SSL handshake listeners never removed, preventing garbage collection #​1360 @​scottf
• Fix core unsubscribe by subject #​1363 @​scottf
• Move from JetBrains nullability annotations to JSpecify #​1366
• Fix timeout computing to address possible nano time overflow #​1375 @​scottf @​magicprinc
• Create NatsInetAddress to allow replacement of InetAddress #​1378 @​scottf @​jitinsharma
• Json parser tuning. #​1382 @​scottf
• Connection and adjacent objects nullability markers. #​1383 @​scottf
• Headers +toString(), fixes #​1385 @​magicprinc
• Header nullability #​1395 @​scottf
• Updated SSL Files and Build preparing for server 2.12 #​1397 @​scottf

JetStream

• [Fix] Simplified Ordered Consumer - Getting name early can cause NPE #​1354 @​scottf
• Stream Name cannot be null #​1377 @​scottf
• Fix JetStreamApiException constructor nullability conflict #​1379 @​scottf
• Ensuring nullability contracts #​1387 @​scottf

Key Value

• Add revision guard on KV key "create" #​1356 @​scottf
• Fixed limit marker test for server change #​1367 @​scottf
• Additional KV Marker / TTL testing #​1391 @​scottf

Testing / Examples / Docs / Etc

• Ordered Consumer Examples #​1352 @​scottf
• Update readme for fast fallback option #​1353 @​jitinsharma
• Improved Consumer Name Testing #​1365 @​scottf
• Review for Issues (#​1361 and #​1362) #​1368 @​scottf
• Unit test refactor #​1369
• Use String.replace instead of String.replaceAll #​1381 @​scottf @​magicprinc
• Fixed Jacoco from considering test classes #​1390 @​scottf
• Fixing flapping tests #​1393 @​scottf
• Fix test flappers #​1396 @​scottf

v2.21.4

Compare Source

Core

• Fix race condition during reconnect sends UNSUB messages #​1321 @​ajax-surovskyi-y
• Add connection auth token supplier option #​1324 @​buleuszmatak
• Nano time for elapsed timings and Nats System Clock #​1334 @​scottf
• Replace Timer with scheduled tasks #​1335 @​scottf
• [Bug] Fix UNSUBs after disconnect can cause auth violations #​1336 @​scottf @​ajax-surovskyi-y
• Options allow token supplier from property, not just api method #​1349 @​scottf

JetStream

• Annotating API objects with NotNull and Nullable #​1333 @​scottf
• [Bug] MessageConsumer.isFinished() not set properly in certain conditions #​1339 @​scottf
• [Bug] Pull Heartbeat handler intermittent failure after switch to scheduler #​1345 @​scottf
• Fix heartbeat timer handling broken when replacing timer with scheduler. #​1348 @​scottf

Key Value

• Nats-Marker-Reason must be mapped to a Key Value Operation #​1323 @​scottf
• KV Purge Per Message TTL #​1344 @​scottf

Tests

• Addition validation and test for token / token supplier #​1325 @​scottf
• Add test for auth violations during reconnect #​1328 @​ajax-surovskyi-y
• Fixed KV Limit Marker Test to only run against 2.11.2 or later #​1338 @​scottf
• Fix flapping test: testOverflowFetch #​1340 @​scottf
• Set the test timeout default to 3 minutes. #​1343 @​scottf

Misc

• Better Json Print Formatter #​1327 @​scottf

v2.21.3

Compare Source

** DO NOT USE **

Use 2.21.4 instead

┌─────────────────────┬───────────────────┬─────────────────┬──────────────────────────┬──────────────────┐
│                     │             count │            time │                 msgs/sec │        bytes/sec │
├─────────────────────┼───────────────────┼─────────────────┼──────────────────────────┼──────────────────┤
│ PubAsync            │  250,000,000 msgs │       136.2:821 │      30,863.438 msgs/sec │      7.36 mb/sec │
├─────────────────────┼───────────────────┼─────────────────┼──────────────────────────┼──────────────────┤
│ SubFetch            │  250,000,000 msgs │      174.52:136 │      23,914.410 msgs/sec │      5.70 mb/sec │
├─────────────────────┼───────────────────┼─────────────────┼──────────────────────────┼──────────────────┤
│ SubIterate          │  250,000,000 msgs │       100.7:909 │      41,654.780 msgs/sec │      9.93 mb/sec │
└─────────────────────┴───────────────────┴─────────────────┴──────────────────────────┴──────────────────┘

v2.21.2

Compare Source

Core

• Changed header value validation to accept any ascii except CR & LF #​1316 @​francoisprunier

JetStream

• Update account ApiStats with level and inflight #​1304 @​scottf
• Update account AccountTier with reserved memory and reserved storage #​1305 @​scottf
• Add StreamAlternate structure to StreamInfo response #​1306 @​scottf
• Better workflow for leadership change while pull consuming. #​1313 @​scottf
• Ability to supply a prefix for watches. Fixed ordered consumer naming bug. #​1314 @​scottf
• Use full NUID for generated consumer names #​1317 @​scottf

Key Value

• Update KV consumeKeys() to return the BlockingQueue immediately. #​1308 @​scottf
• KV Limit Marker #​1310 @​scottf
• KV LimitMarker add missing getter, additional docs and tests #​1311 @​scottf

General

• Update repository info and cleanup readme. #​1318 @​scottf

┌─────────────────────┬───────────────────┬─────────────────┬──────────────────────────┬──────────────────┐
│                     │             count │            time │                 msgs/sec │        bytes/sec │
├─────────────────────┼───────────────────┼─────────────────┼──────────────────────────┼──────────────────┤
│ PubAsync            │   50,000,000 msgs │       28:02.729 │      29,713.638 msgs/sec │      7.08 mb/sec │
├─────────────────────┼───────────────────┼─────────────────┼──────────────────────────┼──────────────────┤
│ SubFetch            │   49,999,991 msgs │       36:03.206 │      23,113.837 msgs/sec │      5.51 mb/sec │
├─────────────────────┼───────────────────┼─────────────────┼──────────────────────────┼──────────────────┤
│ SubIterate          │   50,000,000 msgs │       20:02.740 │      41,571.745 msgs/sec │      9.91 mb/sec │
└─────────────────────┴───────────────────┴─────────────────┴──────────────────────────┴──────────────────┘

OpenAPITools/jackson-databind-nullable (org.openapitools:jackson-databind-nullable)

v0.2.7: released

Compare Source

What's Changed

• Update parent and dependencies by @​Til7701 in #​61
• 0.2.7 release by @​wing328 in #​63
• update pom.xml to use central publishing maven plugin, add workflow by @​wing328 in #​66

New Contributors

• @​Til7701 made their first contribution in #​61

Full Changelog: OpenAPITools/jackson-databind-nullable@v0.2.6...v0.2.7

springdoc/springdoc-openapi (org.springdoc:springdoc-openapi-starter-webmvc-ui)

v2.8.13

Added

• #​3084 - Add Scalar Support

Changed

• Upgrade swagger-ui to v5.28.1

Fixed

• #​3076 - With oneOf the response schema contains an extra type: string

v2.8.12

Compare Source

Changed

• Upgrade swagger-ui to v5.28.0

Fixed

• #​3073 - Duplicate key class Parameter when documenting two GET methods with same path and PathVariable.
• #​3071 - @​io.swagger.v3.oas.annotations.parameters.RequestBody does not work well with @​RequestPart
• #​3066 - Parameter is now required after upgrading to springdoc-openapi 2.8.10

v2.8.11

Compare Source

Added

• #​3065 - javadoc and overall performance optimization

Changed

• Upgrade spring-boot to v3.5.5

Fixed

• #​3064 -ClassNotFoundException: kotlin.reflect.full.KClasses

v2.8.10

Compare Source

Added

• #​3046 - Feature Request: Support @​jakarta.annotation.Nonnull.
• #​3042 - Support externalDocs configure on SpecPropertiesCustomizer
• #​3057 - Refactor webhook discovery and scanning mechanism

Changed

• Upgrade spring-boot to v3.5.4
• Upgrade swagger-ui to v5.27.1
• Upgrade swagger-core to 2.2.36

Fixed

• #​3050 - @​RequestPart JSON parameters missing Content-Type in generated curl commands, causing 415 errors.
• #​2978 - Parameter is no longer optional after upgrade to 2.8.8
• #​3022 - NullPointerException thrown in SchemaUtils.
• #​3026 - Fix unexpected merging of media types
• #​3036 - Fixed "desciption"
• #​3039 - Fix: Property resolution for extensions within @​OpenAPIDefinition Info object
• #​3051 - Fixes so that a RequestPart with a Map is added to the RequestBody
• #​3060 - Use adaptFromForwardedHeaders instead of deprecated fromHttpRequest

v2.8.9

Added

• #​2944 - Support for @​Positive
• #​3011 - type-use for method parameters

Changed

• Upgrade spring-boot to version 3.5.0

Fixed

• #​2982 - application/problem+json content type is not set for ProblemDetails
• #​2990 - Issues with POST Request, application/x-www-form-urlencoded and only one parameter
• #​2998 - io.swagger.v3.oas.annotations.Webhook does not work when defined on the method level
• #​3012 - Order of examples is (sometimes) not preserved

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codacy-production]

Coverage summary from Codacy

See diff coverage on Codacy

Coverage variation	Diff coverage
✅ +0.00% (target: -1.00%)	✅ ∅

Coverage variation details

	Coverable lines	Covered lines	Coverage
Common ancestor commit (0fcbab4)	7872	2078	26.40%
Head commit (f0e9048)	7872 (+0)	2078 (+0)	26.40% (+0.00%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details

	Coverable lines	Covered lines	Diff coverage
Pull request (#782)	0	0	∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

See your quality gate settings    Change summary preferences

[github-actions]

There hasn't been any activity on this pull request recently. Therefore, this pull request has been automatically marked as stale and will be closed if no further activity occurs within seven days. Thank you for your contributions.