Skip to content

chore: [DevOps] bump the production-minor-patch group with 4 updates - #1051

Merged
sap-ai-sdk-bot[bot] merged 2 commits into
mainfrom
dependabot/maven/main/production-minor-patch-86b55c9c28
Sep 18, 2026
Merged

sap-ai-sdk-bot[bot] merged 2 commits into
mainfrom
dependabot/maven/main/production-minor-patch-86b55c9c28

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-minor-patch group with 4 updates: com.openai:openai-java-core, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-websocket and com.sap.hcp.cf.logging:cf-java-logging-support-logback.

Updates com.openai:openai-java-core from 4.58.0 to 4.63.1

Release notes

Sourced from com.openai:openai-java-core's releases.

v4.63.1

4.63.1 (2026-09-10)

Bug Fixes

  • allow longer timeout for large Agents stream test (#995) (e2ac169)

v4.63.0

4.63.0 (2026-09-10)

Features

v4.62.0

4.62.0 (2026-09-10)

Features

Bug Fixes

  • clamp negative Retry-After delays before sleeping (#855) (0f9fe12)

Chores

  • raise custom-code budget to 3,000 lines (#989) (46bf1c1)

v4.61.0

4.61.0 (2026-09-09)

Features

  • api: Support API key expiration metadata (#984) (e8ca958)

Documentation

v4.60.0

4.60.0 (2026-09-08)

... (truncated)

Changelog

Sourced from com.openai:openai-java-core's changelog.

4.63.1 (2026-09-10)

Bug Fixes

  • allow longer timeout for large Agents stream test (#995) (e2ac169)

4.63.0 (2026-09-10)

Features

4.62.0 (2026-09-10)

Features

Bug Fixes

  • clamp negative Retry-After delays before sleeping (#855) (0f9fe12)

Chores

  • raise custom-code budget to 3,000 lines (#989) (46bf1c1)

4.61.0 (2026-09-09)

Features

  • api: Support API key expiration metadata (#984) (e8ca958)

Documentation

4.60.0 (2026-09-08)

Features

  • api: add GPT Image 2.5 models and image options (#982) (279ec25)

... (truncated)

Commits

Updates org.apache.tomcat.embed:tomcat-embed-core from 11.0.25 to 11.0.26

Updates org.apache.tomcat.embed:tomcat-embed-websocket from 11.0.25 to 11.0.26

Updates org.apache.tomcat.embed:tomcat-embed-websocket from 11.0.25 to 11.0.26

Updates com.sap.hcp.cf.logging:cf-java-logging-support-logback from 4.2.0 to 4.3.0

Release notes

Sourced from com.sap.hcp.cf.logging:cf-java-logging-support-logback's releases.

4.3.0

What's Changed

New Features

Deprecations

Dependency Upgrades (Selection)

Full Changelog: SAP/cf-java-logging-support@4.2.0...4.3.0

Commits
  • 807d5f6 Create Final Release 4.3.0
  • b718038 Bump org.jetbrains.kotlin:kotlin-stdlib from 2.2.21 to 2.4.10
  • b760af4 Bump com.squareup.okhttp3:okhttp from 5.4.0 to 5.5.0
  • fd5da47 Bump com.fasterxml.jackson:jackson-bom from 2.22.0 to 2.22.2
  • 9898a32 Bump spring.boot.version from 4.1.0 to 4.1.1
  • 9238b58 Bump org.slf4j:slf4j-api from 2.0.18 to 2.0.19
  • 25ae55b Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0
  • 177b501 Deprecate CaaS support
  • d7be63a Bump io.opentelemetry.javaagent:opentelemetry-javaagent
  • ce914c3 Bump io.opentelemetry.contrib:opentelemetry-cloudfoundry-resources
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-minor-patch group with 4 updates: [com.openai:openai-java-core](https://github.com/openai/openai-java), org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-websocket and [com.sap.hcp.cf.logging:cf-java-logging-support-logback](https://github.com/SAP/cf-java-logging-support).


Updates `com.openai:openai-java-core` from 4.58.0 to 4.63.1
- [Release notes](https://github.com/openai/openai-java/releases)
- [Changelog](https://github.com/openai/openai-java/blob/main/CHANGELOG.md)
- [Commits](openai/openai-java@v4.58.0...v4.63.1)

Updates `org.apache.tomcat.embed:tomcat-embed-core` from 11.0.25 to 11.0.26

Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 11.0.25 to 11.0.26

Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 11.0.25 to 11.0.26

Updates `com.sap.hcp.cf.logging:cf-java-logging-support-logback` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/SAP/cf-java-logging-support/releases)
- [Commits](SAP/cf-java-logging-support@4.2.0...4.3.0)

---
updated-dependencies:
- dependency-name: com.openai:openai-java-core
  dependency-version: 4.63.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: org.apache.tomcat.embed:tomcat-embed-core
  dependency-version: 11.0.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket
  dependency-version: 11.0.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket
  dependency-version: 11.0.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: com.sap.hcp.cf.logging:cf-java-logging-support-logback
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 17, 2026
@sap-ai-sdk-bot
sap-ai-sdk-bot Bot enabled auto-merge (squash) September 18, 2026 08:31
sap-ai-sdk-bot[bot]
sap-ai-sdk-bot Bot previously approved these changes Sep 18, 2026
@sap-ai-sdk-bot
sap-ai-sdk-bot Bot merged commit d8c10d1 into main Sep 18, 2026
7 checks passed
@sap-ai-sdk-bot
sap-ai-sdk-bot Bot deleted the dependabot/maven/main/production-minor-patch-86b55c9c28 branch September 18, 2026 08:58
CharlesDuboisSAP added a commit that referenced this pull request Sep 25, 2026
* chore: [DevOps] bump the production-minor-patch group with 2 updates (#1037)

Bumps the production-minor-patch group with 2 updates: [com.openai:openai-java-core](https://github.com/openai/openai-java) and [org.projectlombok:lombok](https://github.com/projectlombok/lombok).


Updates `com.openai:openai-java-core` from 4.54.0 to 4.58.0
- [Release notes](https://github.com/openai/openai-java/releases)
- [Changelog](https://github.com/openai/openai-java/blob/main/CHANGELOG.md)
- [Commits](openai/openai-java@v4.54.0...v4.58.0)

Updates `org.projectlombok:lombok` from 1.18.46 to 1.18.48
- [Changelog](https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown)
- [Commits](projectlombok/lombok@v1.18.46...v1.18.48)

---
updated-dependencies:
- dependency-name: com.openai:openai-java-core
  dependency-version: 4.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: org.projectlombok:lombok
  dependency-version: 1.18.48
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: [DevOps] bump the test group with 4 updates (#1042)

Bumps the test group with 4 updates: [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless), [org.apache.parquet:parquet-avro](https://github.com/apache/parquet-java), [org.apache.parquet:parquet-hadoop](https://github.com/apache/parquet-java) and [org.apache.parquet:parquet-common](https://github.com/apache/parquet-java).


Updates `com.diffplug.spotless:spotless-maven-plugin` from 3.10.1 to 3.10.2
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/3.10.1...maven/3.10.2)

Updates `org.apache.parquet:parquet-avro` from 1.18.0 to 1.18.1
- [Release notes](https://github.com/apache/parquet-java/releases)
- [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md)
- [Commits](apache/parquet-java@apache-parquet-1.18.0...apache-parquet-1.18.1)

Updates `org.apache.parquet:parquet-hadoop` from 1.18.0 to 1.18.1
- [Release notes](https://github.com/apache/parquet-java/releases)
- [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md)
- [Commits](apache/parquet-java@apache-parquet-1.18.0...apache-parquet-1.18.1)

Updates `org.apache.parquet:parquet-common` from 1.18.0 to 1.18.1
- [Release notes](https://github.com/apache/parquet-java/releases)
- [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md)
- [Commits](apache/parquet-java@apache-parquet-1.18.0...apache-parquet-1.18.1)

Updates `org.apache.parquet:parquet-hadoop` from 1.18.0 to 1.18.1
- [Release notes](https://github.com/apache/parquet-java/releases)
- [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md)
- [Commits](apache/parquet-java@apache-parquet-1.18.0...apache-parquet-1.18.1)

Updates `org.apache.parquet:parquet-common` from 1.18.0 to 1.18.1
- [Release notes](https://github.com/apache/parquet-java/releases)
- [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md)
- [Commits](apache/parquet-java@apache-parquet-1.18.0...apache-parquet-1.18.1)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.10.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: test
- dependency-name: org.apache.parquet:parquet-avro
  dependency-version: 1.18.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: test
- dependency-name: org.apache.parquet:parquet-hadoop
  dependency-version: 1.18.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: test
- dependency-name: org.apache.parquet:parquet-common
  dependency-version: 1.18.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: test
- dependency-name: org.apache.parquet:parquet-hadoop
  dependency-version: 1.18.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: test
- dependency-name: org.apache.parquet:parquet-common
  dependency-version: 1.18.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: test
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: [DevOps] bump the plugins group across 1 directory with 3 updates (#1040)

Bumps the plugins group with 3 updates in the / directory: [com.github.siom79.japicmp:japicmp-maven-plugin](https://github.com/siom79/japicmp), [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) and [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin).


Updates `com.github.siom79.japicmp:japicmp-maven-plugin` from 0.26.1 to 0.26.2
- [Release notes](https://github.com/siom79/japicmp/releases)
- [Changelog](https://github.com/siom79/japicmp/blob/master/release.py)
- [Commits](siom79/japicmp@japicmp-base-0.26.1...japicmp-base-0.26.2)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.6 to 3.6.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0)

Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.10.4.0 to 4.10.4.1
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.10.4.0...spotbugs-maven-plugin-4.10.4.1)

---
updated-dependencies:
- dependency-name: com.github.siom79.japicmp:japicmp-maven-plugin
  dependency-version: 0.26.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: plugins
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-version: 4.10.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: plugins
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: plugins
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: [DevOps] Separate main and v2 e2e test runs by one hour (#1044)

* fix: [DevOps] Fix e2e-test set up (#1048)

* feat: [Orchestration] Add fallback configs to Spring AI integration (#1047)

* feat: [SpringAI] Add fallback configs

* add demo app link

* release_notes.md

* small improvements

* fix: [DevOps] Fix e2e-tests (#1049)

* fix: [DevOps] Fix e2e-test set up

* fix: [DevOps] Fix e2e-tests

* chore: [DevOps] bump org.apache.maven.plugins:maven-deploy-plugin (#1053)

Bumps the test group with 1 update: [org.apache.maven.plugins:maven-deploy-plugin](https://github.com/apache/maven-deploy-plugin).


Updates `org.apache.maven.plugins:maven-deploy-plugin` from 3.1.4 to 3.2.0
- [Release notes](https://github.com/apache/maven-deploy-plugin/releases)
- [Commits](apache/maven-deploy-plugin@maven-deploy-plugin-3.1.4...maven-deploy-plugin-3.2.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-deploy-plugin
  dependency-version: 3.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: test
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: [DevOps] bump org.apache.maven.plugins:maven-install-plugin (#1052)

Bumps the plugins group with 1 update: [org.apache.maven.plugins:maven-install-plugin](https://github.com/apache/maven-install-plugin).


Updates `org.apache.maven.plugins:maven-install-plugin` from 3.1.4 to 3.2.0
- [Release notes](https://github.com/apache/maven-install-plugin/releases)
- [Commits](apache/maven-install-plugin@maven-install-plugin-3.1.4...maven-install-plugin-3.2.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-install-plugin
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: plugins
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: [DevOps] bump the production-minor-patch group with 4 updates (#1051)

* chore: [DevOps] bump the production-minor-patch group with 4 updates

Bumps the production-minor-patch group with 4 updates: [com.openai:openai-java-core](https://github.com/openai/openai-java), org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-websocket and [com.sap.hcp.cf.logging:cf-java-logging-support-logback](https://github.com/SAP/cf-java-logging-support).


Updates `com.openai:openai-java-core` from 4.58.0 to 4.63.1
- [Release notes](https://github.com/openai/openai-java/releases)
- [Changelog](https://github.com/openai/openai-java/blob/main/CHANGELOG.md)
- [Commits](openai/openai-java@v4.58.0...v4.63.1)

Updates `org.apache.tomcat.embed:tomcat-embed-core` from 11.0.25 to 11.0.26

Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 11.0.25 to 11.0.26

Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 11.0.25 to 11.0.26

Updates `com.sap.hcp.cf.logging:cf-java-logging-support-logback` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/SAP/cf-java-logging-support/releases)
- [Commits](SAP/cf-java-logging-support@4.2.0...4.3.0)

---
updated-dependencies:
- dependency-name: com.openai:openai-java-core
  dependency-version: 4.63.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: org.apache.tomcat.embed:tomcat-embed-core
  dependency-version: 11.0.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket
  dependency-version: 11.0.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket
  dependency-version: 11.0.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: com.sap.hcp.cf.logging:cf-java-logging-support-logback
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update jackson-jr-objects

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: I538344 <charles.dubois@sap.com>

* fix: [DevOps] Fix CVE-2026-71889 and CVE-2026-18040 (#1057)

* fix: [DevOps] Fix CVE-2026-71889 and CVE-2026-18040 properly (#1061)

* fix: fix e2e tests (#1064)

* chore: [DevOps] fix CVE-2026-71889 bouncycastle (#1066)

* chore: [DevOps] ignore CVE-2026-59318, AI SDK 2.0.0-ALPHA will contain the update to Spring AI 2 (#1068)

* chore: [DevOps] Fix CVE-2026-89407 and CVE-2026-89425 (#1070)

* chore: harmonize javadocs (#1075)

* harmonize javadocs
- no code changed, just javadocs
- added javadoc style guide
- added checkstyle check

---------

Co-authored-by: SAP Cloud SDK Bot <cloudsdk@sap.com>

* chore: [DevOps] bump org.apache.httpcomponents.core5:httpcore5 (#1079)

Bumps the test group with 1 update: [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core).


Updates `org.apache.httpcomponents.core5:httpcore5` from 5.4.3 to 5.4.4
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.4/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.4.3...rel/v5.4.4)

---
updated-dependencies:
- dependency-name: org.apache.httpcomponents.core5:httpcore5
  dependency-version: 5.4.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: test
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: [DevOps] bump the production-minor-patch group with 2 updates (#1078)

Bumps the production-minor-patch group with 2 updates: [org.apache.httpcomponents.core5:httpcore5-h2](https://github.com/apache/httpcomponents-core) and [com.openai:openai-java-core](https://github.com/openai/openai-java).


Updates `org.apache.httpcomponents.core5:httpcore5-h2` from 5.4.3 to 5.4.4
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.4/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.4.3...rel/v5.4.4)

Updates `com.openai:openai-java-core` from 4.63.1 to 4.65.0
- [Release notes](https://github.com/openai/openai-java/releases)
- [Changelog](https://github.com/openai/openai-java/blob/main/CHANGELOG.md)
- [Commits](openai/openai-java@v4.63.1...v4.65.0)

---
updated-dependencies:
- dependency-name: org.apache.httpcomponents.core5:httpcore5-h2
  dependency-version: 5.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: com.openai:openai-java-core
  dependency-version: 4.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: [DevOps] merge main

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jonas-Isr <jonas.israel@sap.com>
Co-authored-by: vladimir-a-sap <vladimir.aseev@sap.com>
Co-authored-by: SoleilHoffmann <amelie.hoffmann@sap.com>
Co-authored-by: SAP Cloud SDK Bot <cloudsdk@sap.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant