Skip to content

fix(deps): bump the prod-deps group across 1 directory with 8 updates#883

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/prod-deps-3e9da9e1d2
Open

fix(deps): bump the prod-deps group across 1 directory with 8 updates#883
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/prod-deps-3e9da9e1d2

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 18, 2026 •
edited
Loading

Bumps the prod-deps group with 7 updates in the / directory:

Package From To
org.springframework.boot:spring-boot-starter-parent 3.5.7 4.0.1
org.apache.commons:commons-lang3 3.19.0 3.20.0
org.opensearch.client:opensearch-rest-high-level-client 3.3.2 3.4.0
org.opensearch.client:opensearch-rest-client-sniffer 3.3.2 3.4.0
org.opensearch:opensearch 3.3.2 3.4.0
org.folio:cql2pgjson 35.4.0 35.4.2
com.puppycrawl.tools:checkstyle 12.1.2 13.0.0

Updates org.springframework.boot:spring-boot-starter-parent from 3.5.7 to 4.0.1

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.0.1

⚠️ Noteworthy Changes

  • Hibernate has been upgraded to 7.2.0.Final in response to Hibernate 7.1 moving to limited support
  • spring-boot-starter-kotlin-serialization has been renamed to to spring-boot-starter-kotlinx-serialization-json and spring-boot-starter-kotlin-serialization-test has been renamed to spring-boot-starter-kotlinx-serialization-json-test. This change aligns the starters' names with those of their respective modules
  • Using TestRestTemplate now requires a dependency on spring-boot-restclient

🐞 Bug Fixes

  • JsonMixinModuleEntriesBeanRegistrationAotProcessor does not handle deprecated code #48564
  • JdbcSessionAutoConfiguration may not match when using the auto-configured DataSource #48552
  • @ServiceConnection for LgtmStackContainer fails when logging endpoint is configured due to multiple OtlpLoggingConnectionDetails beans #48536
  • WebApplicationType does not consider modules when deduced from classpath #48517
  • Spring Session auto-configuration fails in a war deployment as ServerProperties is not available #48493
  • Opentelemetry logging export requires actuator module #48488
  • RabbitHealthIndicator reports an error when version is missing from the connection's server properties #48487
  • Actuator Info class has inconsistent nullability annotations and cannot be built with null value #48480
  • Profiles retained during AOT processing are not configured in a native image #48476
  • Security matchers and WebServerNamespace resolution can fail with NoClassDefFoundError when used in a traditional WAR deployment #48388
  • HealthEndpointGroupMembershipValidator does not consider reactive health indicators causing NoSuchHealthContributorException to be thrown #48387
  • spring.jackson.default-property-inclusion is not applied to content inclusion #48343
  • TestRestTemplate.getRootUri() returns empty string #48330
  • Redis health check reports an error when redis_version is missing from the INFO response #48328
  • Parent's MeterRegistry beans are closed when child context closes #48325
  • HttpMessageConverters picks up converter beans for both client and server #48310
  • Conditions to auto-configure a RestClient are outdated with the modularization #48308
  • A custom JwtTypeValidator that replaces the default can no longer be configured #48301
  • PropertiesRestClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #48296
  • SpringBootTest.UseMainMethod.WHEN_AVAILABLE and ALWAYS are incompatible with package-private or parameter-less main method #48275
  • Conditions to auto-configure RestClient-based HTTP service clients are outdated with the modularization #48274
  • Starter for Kotlinx Serialization Json is misnamed #48262
  • ApplicationServletEnvironment is no longer configured in war deployments #48254
  • RestClient.Builder bean present in @SpringBootTest due to spring-boot-starter-webmvc-test, but missing at runtime without restclient starter #48253
  • ProblemDetail is rendered to XML incorrectly #48222

📔 Documentation

  • Harmonize Kotlin example for HTTP Service client support #48577
  • Document HttpMessageConverters detection changes in 4.0.1 #48574
  • Improve javadoc for when to use class names rather than class references #48569
  • Documentation has an outdated reference to the Jackson Kotlin Module #48534
  • Caching documentation should clarify how to use a no-op implementation to run a test suite #48532
  • Document that the default rolling policy for Log4j2 requires logging.file.path to be set #48527
  • Review documentation and migration guide about changes in @AutoConfigureCache #48522
  • License header in build samples is displayed in the reference documentation #48478
  • Configuring Two DataSources How-To code sample is inconsistent #48449
  • Fix links to source files on GitHub #48398
  • Documentation contains broken links to GitHub source files #48394
  • Document that org.aspectj.weaver.Advice must be on the classpath to enable support for Micrometer's annotations #48360
  • Correct the annotation in the Kotlin @ConfigurationPropertiesSource example #48357
  • Polish TestRestTemplate examples in the reference guide #48336

... (truncated)

Commits
  • b2bc463 Release v4.0.1
  • 252b218 Correct renaming of Kotlinx Serialization JSON starters
  • 2fa73c2 Merge pull request #48577 from jwalter
  • 3e68988 Polish "Harmonize Kotlin example for HTTP Service client support"
  • 423373b Harmonize Kotlin example for HTTP Service client support
  • f61ac29 Document HttpMessageConverters detection changes
  • 2519a5d Merge branch '3.5.x'
  • 4fc3ca3 Next development version (v3.5.10-SNAPSHOT)
  • aaf66f4 Merge branch '3.5.x'
  • 08e2cab Polish javadoc for when to use class names rather than class references
  • Additional commits viewable in compare view

Updates org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0

Updates org.springframework.boot:spring-boot-configuration-processor from 3.5.7 to 4.0.1

Release notes

Sourced from org.springframework.boot:spring-boot-configuration-processor's releases.

v4.0.1

⚠️ Noteworthy Changes

  • Hibernate has been upgraded to 7.2.0.Final in response to Hibernate 7.1 moving to limited support
  • spring-boot-starter-kotlin-serialization has been renamed to to spring-boot-starter-kotlinx-serialization-json and spring-boot-starter-kotlin-serialization-test has been renamed to spring-boot-starter-kotlinx-serialization-json-test. This change aligns the starters' names with those of their respective modules
  • Using TestRestTemplate now requires a dependency on spring-boot-restclient

🐞 Bug Fixes

  • JsonMixinModuleEntriesBeanRegistrationAotProcessor does not handle deprecated code #48564
  • JdbcSessionAutoConfiguration may not match when using the auto-configured DataSource #48552
  • @ServiceConnection for LgtmStackContainer fails when logging endpoint is configured due to multiple OtlpLoggingConnectionDetails beans #48536
  • WebApplicationType does not consider modules when deduced from classpath #48517
  • Spring Session auto-configuration fails in a war deployment as ServerProperties is not available #48493
  • Opentelemetry logging export requires actuator module #48488
  • RabbitHealthIndicator reports an error when version is missing from the connection's server properties #48487
  • Actuator Info class has inconsistent nullability annotations and cannot be built with null value #48480
  • Profiles retained during AOT processing are not configured in a native image #48476
  • Security matchers and WebServerNamespace resolution can fail with NoClassDefFoundError when used in a traditional WAR deployment #48388
  • HealthEndpointGroupMembershipValidator does not consider reactive health indicators causing NoSuchHealthContributorException to be thrown #48387
  • spring.jackson.default-property-inclusion is not applied to content inclusion #48343
  • TestRestTemplate.getRootUri() returns empty string #48330
  • Redis health check reports an error when redis_version is missing from the INFO response #48328
  • Parent's MeterRegistry beans are closed when child context closes #48325
  • HttpMessageConverters picks up converter beans for both client and server #48310
  • Conditions to auto-configure a RestClient are outdated with the modularization #48308
  • A custom JwtTypeValidator that replaces the default can no longer be configured #48301
  • PropertiesRestClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #48296
  • SpringBootTest.UseMainMethod.WHEN_AVAILABLE and ALWAYS are incompatible with package-private or parameter-less main method #48275
  • Conditions to auto-configure RestClient-based HTTP service clients are outdated with the modularization #48274
  • Starter for Kotlinx Serialization Json is misnamed #48262
  • ApplicationServletEnvironment is no longer configured in war deployments #48254
  • RestClient.Builder bean present in @SpringBootTest due to spring-boot-starter-webmvc-test, but missing at runtime without restclient starter #48253
  • ProblemDetail is rendered to XML incorrectly #48222

📔 Documentation

  • Harmonize Kotlin example for HTTP Service client support #48577
  • Document HttpMessageConverters detection changes in 4.0.1 #48574
  • Improve javadoc for when to use class names rather than class references #48569
  • Documentation has an outdated reference to the Jackson Kotlin Module #48534
  • Caching documentation should clarify how to use a no-op implementation to run a test suite #48532
  • Document that the default rolling policy for Log4j2 requires logging.file.path to be set #48527
  • Review documentation and migration guide about changes in @AutoConfigureCache #48522
  • License header in build samples is displayed in the reference documentation #48478
  • Configuring Two DataSources How-To code sample is inconsistent #48449
  • Fix links to source files on GitHub #48398
  • Documentation contains broken links to GitHub source files #48394
  • Document that org.aspectj.weaver.Advice must be on the classpath to enable support for Micrometer's annotations #48360
  • Correct the annotation in the Kotlin @ConfigurationPropertiesSource example #48357
  • Polish TestRestTemplate examples in the reference guide #48336

... (truncated)

Commits
  • b2bc463 Release v4.0.1
  • 252b218 Correct renaming of Kotlinx Serialization JSON starters
  • 2fa73c2 Merge pull request #48577 from jwalter
  • 3e68988 Polish "Harmonize Kotlin example for HTTP Service client support"
  • 423373b Harmonize Kotlin example for HTTP Service client support
  • f61ac29 Document HttpMessageConverters detection changes
  • 2519a5d Merge branch '3.5.x'
  • 4fc3ca3 Next development version (v3.5.10-SNAPSHOT)
  • aaf66f4 Merge branch '3.5.x'
  • 08e2cab Polish javadoc for when to use class names rather than class references
  • Additional commits viewable in compare view

Updates org.opensearch.client:opensearch-rest-high-level-client from 3.3.2 to 3.4.0

Release notes

Sourced from org.opensearch.client:opensearch-rest-high-level-client's releases.

3.4.0

Version 3.4.0 Release Notes

Compatible with OpenSearch and OpenSearch Dashboards version 3.4.0

Added

  • Allow setting index.creation_date on index creation and restore for plugin compatibility and migrations (#19931)
  • Add support for a ForkJoinPool type (#19008)
  • Add seperate shard limit validation for local and remote indices (#19532)
  • Use Lucene pack method for half_float and unsigned_long when using ApproximatePointRangeQuery (#19553)
  • New cluster setting search.query.max_query_string_length_monitor_only (#19539)
  • Add a mapper for context aware segments grouping criteria (#19233)
  • Return full error for GRPC error response (#19568)
  • Add support for repository with Server side encryption enabled and client side encryption as well based on a flag (#19630)
  • Add pluggable gRPC interceptors with explicit ordering(#19005)
  • Add BindableServices extension point to transport-grpc-spi (#19304)
  • Add metrics for the merged segment warmer feature (#18929)
  • Handle deleted documents for filter rewrite sub-aggregation optimization (#19643)
  • Add bulk collect API for filter rewrite sub-aggregation optimization (#19933)
  • Allow collectors take advantage of preaggregated data using collectRange API (#20009)
  • Bulk collection logic for metrics and cardinality aggregations (#20067)
  • Add pointer based lag metric in pull-based ingestion (#19635)
  • Introduced internal API for retrieving metadata about requested indices from transport actions (#18523)
  • Add cluster defaults for merge autoThrottle, maxMergeThreads, and maxMergeCount; Add segment size filter to the merged segment warmer (#19629)
  • Add build-tooling to run in FIPS environment (#18921)
  • Add SMILE/CBOR/YAML document format support to Bulk GRPC endpoint (#19744)
  • Make test-suite runnable under FIPS compliance support (#18491)
  • Implement GRPC Search params Highlightand Sort (#19868)
  • Implement GRPC ConstantScoreQuery, FuzzyQuery, MatchBoolPrefixQuery, MatchPhrasePrefix, PrefixQuery, MatchQuery (#19854)
  • Add async periodic flush task support for pull-based ingestion (#19878)
  • Add support for context aware segments (#19098)
  • Implement GRPC FunctionScoreQuery (#19888)
  • Implement error_trace parameter for bulk requests (#19985)
  • Allow the truncate filter in normalizers (#19778)
  • Support pull-based ingestion message mappers and raw payload support (#19765)
  • Add search API tracker (#18601)
  • Support dynamic consumer configuration update in pull-based ingestion (#19963)
  • Cache the StoredFieldsReader for scroll query optimization (#20112)
  • Add Hybrid Cardinality collector to prioritize Ordinals Collector (#19524)

Changed

  • Combining filter rewrite and skip list to optimize sub aggregation(#19573)
  • Faster terms query creation for keyword field with index and docValues enabled (#19350)
  • Refactor to move prepareIndex and prepareDelete methods to Engine class (#19551)
  • Omit maxScoreCollector in SimpleTopDocsCollectorContext when concurrent segment search enabled (#19584)
  • Onboarding new maven snapshots publishing to s3 (#19619)
  • Remove MultiCollectorWrapper and use MultiCollector in Lucene instead (#19595)
  • Change implementation for percentiles aggregation for latency improvement (#19648)
  • Wrap checked exceptions in painless.DefBootstrap to support JDK-25 (#19706)
  • Refactor the ThreadPoolStats.Stats class to use the Builder pattern instead of constructors (#19317)

... (truncated)

Commits

Updates org.opensearch.client:opensearch-rest-client-sniffer from 3.3.2 to 3.4.0

Release notes

Sourced from org.opensearch.client:opensearch-rest-client-sniffer's releases.

3.4.0

Version 3.4.0 Release Notes

Compatible with OpenSearch and OpenSearch Dashboards version 3.4.0

Added

  • Allow setting index.creation_date on index creation and restore for plugin compatibility and migrations (#19931)
  • Add support for a ForkJoinPool type (#19008)
  • Add seperate shard limit validation for local and remote indices (#19532)
  • Use Lucene pack method for half_float and unsigned_long when using ApproximatePointRangeQuery (#19553)
  • New cluster setting search.query.max_query_string_length_monitor_only (#19539)
  • Add a mapper for context aware segments grouping criteria (#19233)
  • Return full error for GRPC error response (#19568)
  • Add support for repository with Server side encryption enabled and client side encryption as well based on a flag (#19630)
  • Add pluggable gRPC interceptors with explicit ordering(#19005)
  • Add BindableServices extension point to transport-grpc-spi (#19304)
  • Add metrics for the merged segment warmer feature (#18929)
  • Handle deleted documents for filter rewrite sub-aggregation optimization (#19643)
  • Add bulk collect API for filter rewrite sub-aggregation optimization (#19933)
  • Allow collectors take advantage of preaggregated data using collectRange API (#20009)
  • Bulk collection logic for metrics and cardinality aggregations (#20067)
  • Add pointer based lag metric in pull-based ingestion (#19635)
  • Introduced internal API for retrieving metadata about requested indices from transport actions (#18523)
  • Add cluster defaults for merge autoThrottle, maxMergeThreads, and maxMergeCount; Add segment size filter to the merged segment warmer (#19629)
  • Add build-tooling to run in FIPS environment (#18921)
  • Add SMILE/CBOR/YAML document format support to Bulk GRPC endpoint (#19744)
  • Make test-suite runnable under FIPS compliance support (#18491)
  • Implement GRPC Search params Highlightand Sort (#19868)
  • Implement GRPC ConstantScoreQuery, FuzzyQuery, MatchBoolPrefixQuery, MatchPhrasePrefix, PrefixQuery, MatchQuery (#19854)
  • Add async periodic flush task support for pull-based ingestion (#19878)
  • Add support for context aware segments (#19098)
  • Implement GRPC FunctionScoreQuery (#19888)
  • Implement error_trace parameter for bulk requests (#19985)
  • Allow the truncate filter in normalizers (#19778)
  • Support pull-based ingestion message mappers and raw payload support (#19765)
  • Add search API tracker (#18601)
  • Support dynamic consumer configuration update in pull-based ingestion (#19963)
  • Cache the StoredFieldsReader for scroll query optimization (#20112)
  • Add Hybrid Cardinality collector to prioritize Ordinals Collector (#19524)

Changed

  • Combining filter rewrite and skip list to optimize sub aggregation(#19573)
  • Faster terms query creation for keyword field with index and docValues enabled (#19350)
  • Refactor to move prepareIndex and prepareDelete methods to Engine class (#19551)
  • Omit maxScoreCollector in SimpleTopDocsCollectorContext when concurrent segment search enabled (#19584)
  • Onboarding new maven snapshots publishing to s3 (#19619)
  • Remove MultiCollectorWrapper and use MultiCollector in Lucene instead (#19595)
  • Change implementation for percentiles aggregation for latency improvement (#19648)
  • Wrap checked exceptions in painless.DefBootstrap to support JDK-25 (#19706)
  • Refactor the ThreadPoolStats.Stats class to use the Builder pattern instead of constructors (#19317)

... (truncated)

Commits

Updates org.opensearch:opensearch from 3.3.2 to 3.4.0

Release notes

Sourced from org.opensearch:opensearch's releases.

3.4.0

Version 3.4.0 Release Notes

Compatible with OpenSearch and OpenSearch Dashboards version 3.4.0

Added

  • Allow setting index.creation_date on index creation and restore for plugin compatibility and migrations (#19931)
  • Add support for a ForkJoinPool type (#19008)
  • Add seperate shard limit validation for local and remote indices (#19532)
  • Use Lucene pack method for half_float and unsigned_long when using ApproximatePointRangeQuery (#19553)
  • New cluster setting search.query.max_query_string_length_monitor_only (#19539)
  • Add a mapper for context aware segments grouping criteria (#19233)
  • Return full error for GRPC error response (#19568)
  • Add support for repository with Server side encryption enabled and client side encryption as well based on a flag (#19630)
  • Add pluggable gRPC interceptors with explicit ordering(#19005)
  • Add BindableServices extension point to transport-grpc-spi (#19304)
  • Add metrics for the merged segment warmer feature (#18929)
  • Handle deleted documents for filter rewrite sub-aggregation optimization (#19643)
  • Add bulk collect API for filter rewrite sub-aggregation optimization (#19933)
  • Allow collectors take advantage of preaggregated data using collectRange API (#20009)
  • Bulk collection logic for metrics and cardinality aggregations (#20067)
  • Add pointer based lag metric in pull-based ingestion (#19635)
  • Introduced internal API for retrieving metadata about requested indices from transport actions (#18523)
  • Add cluster defaults for merge autoThrottle, maxMergeThreads, and maxMergeCount; Add segment size filter to the merged segment warmer (#19629)
  • Add build-tooling to run in FIPS environment (#18921)
  • Add SMILE/CBOR/YAML document format support to Bulk GRPC endpoint (#19744)
  • Make test-suite runnable under FIPS compliance support (#18491)
  • Implement GRPC Search params Highlightand Sort (#19868)
  • Implement GRPC ConstantScoreQuery, FuzzyQuery, MatchBoolPrefixQuery, MatchPhrasePrefix, PrefixQuery, MatchQuery (#19854)
  • Add async periodic flush task support for pull-based ingestion (#19878)
  • Add support for context aware segments (#19098)
  • Implement GRPC FunctionScoreQuery (#19888)
  • Implement error_trace parameter for bulk requests (#19985)
  • Allow the truncate filter in normalizers (#19778)
  • Support pull-based ingestion message mappers and raw payload support (#19765)
  • Add search API tracker (#18601)
  • Support dynamic consumer configuration update in pull-based ingestion (#19963)
  • Cache the StoredFieldsReader for scroll query optimization (#20112)
  • Add Hybrid Cardinality collector to prioritize Ordinals Collector (#19524)

Changed

  • Combining filter rewrite and skip list to optimize sub aggregation(#19573)
  • Faster terms query creation for keyword field with index and docValues enabled (#19350)
  • Refactor to move prepareIndex and prepareDelete methods to Engine class (#19551)
  • Omit maxScoreCollector in SimpleTopDocsCollectorContext when concurrent segment search enabled (#19584)
  • Onboarding new maven snapshots publishing to s3 (#19619)
  • Remove MultiCollectorWrapper and use MultiCollector in Lucene instead (#19595)
  • Change implementation for percentiles aggregation for latency improvement (#19648)
  • Wrap checked exceptions in painless.DefBootstrap to support JDK-25 (#19706)
  • Refactor the ThreadPoolStats.Stats class to use the Builder pattern instead of constructors (#19317)

... (truncated)

Commits

Updates org.opensearch.client:opensearch-rest-client-sniffer from 3.3.2 to 3.4.0

Release notes

Sourced from org.opensearch.client:opensearch-rest-client-sniffer's releases.

3.4.0

Version 3.4.0 Release Notes

Compatible with OpenSearch and OpenSearch Dashboards version 3.4.0

Added

  • Allow setting index.creation_date on index creation and restore for plugin compatibility and migrations (#19931)
  • Add support for a ForkJoinPool type (#19008)
  • Add seperate shard limit validation for local and remote indices (#19532)
  • Use Lucene pack method for half_float and unsigned_long when using ApproximatePointRangeQuery (#19553)
  • New cluster setting search.query.max_query_string_length_monitor_only (#19539)
  • Add a mapper for context aware segments grouping criteria (#19233)
  • Return full error for GRPC error response (#19568)
  • Add support for repository with Server side encryption enabled and client side encryption as well based on a flag (#19630)
  • Add pluggable gRPC interceptors with explicit ordering(#19005)
  • Add BindableServices extension point to transport-grpc-spi (#19304)
  • Add metrics for the merged segment warmer feature (#18929)
  • Handle deleted documents for filter rewrite sub-aggregation optimization (#19643)
  • Add bulk collect API for filter rewrite sub-aggregation optimization (#19933)
  • Allow collectors take advantage of preaggregated data using collectRange API (#20009)
  • Bulk collection logic for metrics and cardinality aggregations (#20067)
  • Add pointer based lag metric in pull-based ingestion (#19635)
  • Introduced internal API for retrieving metadata about requested indices from transport actions (#18523)
  • Add cluster defaults for merge autoThrottle, maxMergeThreads, and maxMergeCount; Add segment size filter to the merged segment warmer (#19629)
  • Add build-tooling to run in FIPS environment (#18921)
  • Add SMILE/CBOR/YAML document format support to Bulk GRPC endpoint (#19744)
  • Make test-suite runnable under FIPS compliance support (#18491)
  • Implement GRPC Search params Highlightand Sort (#19868)
  • Implement GRPC ConstantScoreQuery, FuzzyQuery, MatchBoolPrefixQuery, MatchPhrasePrefix, PrefixQuery, MatchQuery (#19854)
  • Add async periodic flush task support for pull-based ingestion (#19878)
  • Add support for context aware segments (#19098)
  • Implement GRPC FunctionScoreQuery (#19888)
  • Implement error_trace parameter for bulk requests (#19985)
  • Allow the truncate filter in normalizers (#19778)
  • Support pull-based ingestion message mappers and raw payload support (#19765)
  • Add search API tracker (#18601)
  • Support dynamic consumer configuration update in pull-based ingestion (#19963)
  • Cache the StoredFieldsReader for scroll query optimization (#20112)
  • Add Hybrid Cardinality collector to prioritize Ordinals Collector (#19524)

Changed

  • Combining filter rewrite and skip list to optimize sub aggregation(#19573)
  • Faster terms query creation for keyword field with index and docValues enabled (#19350)
  • Refactor to move prepareIndex and prepareDelete methods to Engine class (#19551)
  • Omit maxScoreCollector in SimpleTopDocsCollectorContext when concurrent segment search enabled (#19584)
  • Onboarding new maven snapshots publishing to s3 (#19619)
  • Remove MultiCollectorWrapper and use MultiCollector in Lucene instead (#19595)
  • Change implementation for percentiles aggregation for latency improvement (#19648)
  • Wrap checked exceptions in painless.DefBootstrap to support JDK-25 (#19706)
  • Refactor the ThreadPoolStats.Stats class to use the Builder pattern instead of constructors (#19317)

... (truncated)

Commits
  • 0033614 [3.4] Prevent use of shared distribution on gradle builds (#20227)
  • 62c3bdc Aggregation Array OOB Error (#20204) (#20219)
  • 659942a [AUTO] Add release notes for 3.4.0 (#20181)
  • 7d87ca2 Add Hybrid Cardinality collector to prioritize Ordinals Collector (#19524) (#...
  • 3e83e79 Introduced monitoring mode for query string query max length. (#19539) (#20195)
  • 831b10a Add skiplist optimization to auto_date_histogram aggregation (#20057) (#20191)
  • f791594 Using cached StoredFieldsReader fo...

    Description has been truncated

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jan 18, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 18, 2026 03:04
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jan 18, 2026
@dependabot
fix(deps): bump the prod-deps group across 1 directory with 8 updates
b317e63 
Bumps the prod-deps group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `3.5.7` | `4.0.1` |
| org.apache.commons:commons-lang3 | `3.19.0` | `3.20.0` |
| [org.opensearch.client:opensearch-rest-high-level-client](https://github.com/opensearch-project/OpenSearch) | `3.3.2` | `3.4.0` |
| [org.opensearch.client:opensearch-rest-client-sniffer](https://github.com/opensearch-project/OpenSearch) | `3.3.2` | `3.4.0` |
| [org.opensearch:opensearch](https://github.com/opensearch-project/OpenSearch) | `3.3.2` | `3.4.0` |
| [org.folio:cql2pgjson](https://github.com/folio-org/raml-module-builder) | `35.4.0` | `35.4.2` |
| [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `12.1.2` | `13.0.0` |



Updates `org.springframework.boot:spring-boot-starter-parent` from 3.5.7 to 4.0.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.7...v4.0.1)

Updates `org.apache.commons:commons-lang3` from 3.19.0 to 3.20.0

Updates `org.springframework.boot:spring-boot-configuration-processor` from 3.5.7 to 4.0.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.7...v4.0.1)

Updates `org.opensearch.client:opensearch-rest-high-level-client` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/opensearch-project/OpenSearch/releases)
- [Changelog](https://github.com/opensearch-project/OpenSearch/blob/main/CHANGELOG.md)
- [Commits](opensearch-project/OpenSearch@3.3.2...3.4.0)

Updates `org.opensearch.client:opensearch-rest-client-sniffer` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/opensearch-project/OpenSearch/releases)
- [Changelog](https://github.com/opensearch-project/OpenSearch/blob/main/CHANGELOG.md)
- [Commits](opensearch-project/OpenSearch@3.3.2...3.4.0)

Updates `org.opensearch:opensearch` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/opensearch-project/OpenSearch/releases)
- [Changelog](https://github.com/opensearch-project/OpenSearch/blob/main/CHANGELOG.md)
- [Commits](opensearch-project/OpenSearch@3.3.2...3.4.0)

Updates `org.opensearch.client:opensearch-rest-client-sniffer` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/opensearch-project/OpenSearch/releases)
- [Changelog](https://github.com/opensearch-project/OpenSearch/blob/main/CHANGELOG.md)
- [Commits](opensearch-project/OpenSearch@3.3.2...3.4.0)

Updates `org.opensearch:opensearch` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/opensearch-project/OpenSearch/releases)
- [Changelog](https://github.com/opensearch-project/OpenSearch/blob/main/CHANGELOG.md)
- [Commits](opensearch-project/OpenSearch@3.3.2...3.4.0)

Updates `org.folio:cql2pgjson` from 35.4.0 to 35.4.2
- [Release notes](https://github.com/folio-org/raml-module-builder/releases)
- [Changelog](https://github.com/folio-org/raml-module-builder/blob/v35.4.2/NEWS.md)
- [Commits](folio-org/raml-module-builder@v35.4.0...v35.4.2)

Updates `com.puppycrawl.tools:checkstyle` from 12.1.2 to 13.0.0
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-12.1.2...checkstyle-13.0.0)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.springframework.boot:spring-boot-configuration-processor
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.opensearch.client:opensearch-rest-high-level-client
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.opensearch.client:opensearch-rest-client-sniffer
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.opensearch:opensearch
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.opensearch.client:opensearch-rest-client-sniffer
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.opensearch:opensearch
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.folio:cql2pgjson
  dependency-version: 35.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 13.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/maven/prod-deps-3e9da9e1d2 branch from f1df2b5 to b317e63 Compare February 1, 2026 03:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@psmagin psmagin Awaiting requested review from psmagin psmagin is a code owner automatically assigned from folio-org/spitfire-backend

@viacheslavkol viacheslavkol Awaiting requested review from viacheslavkol viacheslavkol is a code owner automatically assigned from folio-org/spitfire-backend

@SvitlanaKovalova1 SvitlanaKovalova1 Awaiting requested review from SvitlanaKovalova1 SvitlanaKovalova1 is a code owner automatically assigned from folio-org/spitfire-backend

At least 2 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants