chore: [DevOps] bump the production-minor-patch group with 4 updates - #1051
Merged
sap-ai-sdk-bot[bot] merged 2 commits intoSep 18, 2026
Merged
sap-ai-sdk-bot[bot] merged 2 commits into
sap-ai-sdk-bot[bot] merged 2 commits into
Conversation
Bumps the production-minor-patch group with 4 updates: [com.openai:openai-java-core](https://github.com/openai/openai-java), org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-websocket and [com.sap.hcp.cf.logging:cf-java-logging-support-logback](https://github.com/SAP/cf-java-logging-support). Updates `com.openai:openai-java-core` from 4.58.0 to 4.63.1 - [Release notes](https://github.com/openai/openai-java/releases) - [Changelog](https://github.com/openai/openai-java/blob/main/CHANGELOG.md) - [Commits](openai/openai-java@v4.58.0...v4.63.1) Updates `org.apache.tomcat.embed:tomcat-embed-core` from 11.0.25 to 11.0.26 Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 11.0.25 to 11.0.26 Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 11.0.25 to 11.0.26 Updates `com.sap.hcp.cf.logging:cf-java-logging-support-logback` from 4.2.0 to 4.3.0 - [Release notes](https://github.com/SAP/cf-java-logging-support/releases) - [Commits](SAP/cf-java-logging-support@4.2.0...4.3.0) --- updated-dependencies: - dependency-name: com.openai:openai-java-core dependency-version: 4.63.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: org.apache.tomcat.embed:tomcat-embed-core dependency-version: 11.0.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket dependency-version: 11.0.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket dependency-version: 11.0.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: com.sap.hcp.cf.logging:cf-java-logging-support-logback dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
sap-ai-sdk-bot
Bot
deleted the
dependabot/maven/main/production-minor-patch-86b55c9c28
branch
September 18, 2026 08:58
CharlesDuboisSAP
added a commit
that referenced
this pull request
Sep 25, 2026
* chore: [DevOps] bump the production-minor-patch group with 2 updates (#1037) Bumps the production-minor-patch group with 2 updates: [com.openai:openai-java-core](https://github.com/openai/openai-java) and [org.projectlombok:lombok](https://github.com/projectlombok/lombok). Updates `com.openai:openai-java-core` from 4.54.0 to 4.58.0 - [Release notes](https://github.com/openai/openai-java/releases) - [Changelog](https://github.com/openai/openai-java/blob/main/CHANGELOG.md) - [Commits](openai/openai-java@v4.54.0...v4.58.0) Updates `org.projectlombok:lombok` from 1.18.46 to 1.18.48 - [Changelog](https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown) - [Commits](projectlombok/lombok@v1.18.46...v1.18.48) --- updated-dependencies: - dependency-name: com.openai:openai-java-core dependency-version: 4.58.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: org.projectlombok:lombok dependency-version: 1.18.48 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: [DevOps] bump the test group with 4 updates (#1042) Bumps the test group with 4 updates: [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless), [org.apache.parquet:parquet-avro](https://github.com/apache/parquet-java), [org.apache.parquet:parquet-hadoop](https://github.com/apache/parquet-java) and [org.apache.parquet:parquet-common](https://github.com/apache/parquet-java). Updates `com.diffplug.spotless:spotless-maven-plugin` from 3.10.1 to 3.10.2 - [Release notes](https://github.com/diffplug/spotless/releases) - [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md) - [Commits](diffplug/spotless@maven/3.10.1...maven/3.10.2) Updates `org.apache.parquet:parquet-avro` from 1.18.0 to 1.18.1 - [Release notes](https://github.com/apache/parquet-java/releases) - [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md) - [Commits](apache/parquet-java@apache-parquet-1.18.0...apache-parquet-1.18.1) Updates `org.apache.parquet:parquet-hadoop` from 1.18.0 to 1.18.1 - [Release notes](https://github.com/apache/parquet-java/releases) - [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md) - [Commits](apache/parquet-java@apache-parquet-1.18.0...apache-parquet-1.18.1) Updates `org.apache.parquet:parquet-common` from 1.18.0 to 1.18.1 - [Release notes](https://github.com/apache/parquet-java/releases) - [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md) - [Commits](apache/parquet-java@apache-parquet-1.18.0...apache-parquet-1.18.1) Updates `org.apache.parquet:parquet-hadoop` from 1.18.0 to 1.18.1 - [Release notes](https://github.com/apache/parquet-java/releases) - [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md) - [Commits](apache/parquet-java@apache-parquet-1.18.0...apache-parquet-1.18.1) Updates `org.apache.parquet:parquet-common` from 1.18.0 to 1.18.1 - [Release notes](https://github.com/apache/parquet-java/releases) - [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md) - [Commits](apache/parquet-java@apache-parquet-1.18.0...apache-parquet-1.18.1) --- updated-dependencies: - dependency-name: com.diffplug.spotless:spotless-maven-plugin dependency-version: 3.10.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: test - dependency-name: org.apache.parquet:parquet-avro dependency-version: 1.18.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: test - dependency-name: org.apache.parquet:parquet-hadoop dependency-version: 1.18.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: test - dependency-name: org.apache.parquet:parquet-common dependency-version: 1.18.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: test - dependency-name: org.apache.parquet:parquet-hadoop dependency-version: 1.18.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: test - dependency-name: org.apache.parquet:parquet-common dependency-version: 1.18.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: test ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: [DevOps] bump the plugins group across 1 directory with 3 updates (#1040) Bumps the plugins group with 3 updates in the / directory: [com.github.siom79.japicmp:japicmp-maven-plugin](https://github.com/siom79/japicmp), [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) and [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin). Updates `com.github.siom79.japicmp:japicmp-maven-plugin` from 0.26.1 to 0.26.2 - [Release notes](https://github.com/siom79/japicmp/releases) - [Changelog](https://github.com/siom79/japicmp/blob/master/release.py) - [Commits](siom79/japicmp@japicmp-base-0.26.1...japicmp-base-0.26.2) Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.6 to 3.6.0 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0) Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.10.4.0 to 4.10.4.1 - [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases) - [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.10.4.0...spotbugs-maven-plugin-4.10.4.1) --- updated-dependencies: - dependency-name: com.github.siom79.japicmp:japicmp-maven-plugin dependency-version: 0.26.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: plugins - dependency-name: com.github.spotbugs:spotbugs-maven-plugin dependency-version: 4.10.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: plugins - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: plugins ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: [DevOps] Separate main and v2 e2e test runs by one hour (#1044) * fix: [DevOps] Fix e2e-test set up (#1048) * feat: [Orchestration] Add fallback configs to Spring AI integration (#1047) * feat: [SpringAI] Add fallback configs * add demo app link * release_notes.md * small improvements * fix: [DevOps] Fix e2e-tests (#1049) * fix: [DevOps] Fix e2e-test set up * fix: [DevOps] Fix e2e-tests * chore: [DevOps] bump org.apache.maven.plugins:maven-deploy-plugin (#1053) Bumps the test group with 1 update: [org.apache.maven.plugins:maven-deploy-plugin](https://github.com/apache/maven-deploy-plugin). Updates `org.apache.maven.plugins:maven-deploy-plugin` from 3.1.4 to 3.2.0 - [Release notes](https://github.com/apache/maven-deploy-plugin/releases) - [Commits](apache/maven-deploy-plugin@maven-deploy-plugin-3.1.4...maven-deploy-plugin-3.2.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-deploy-plugin dependency-version: 3.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: test ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: [DevOps] bump org.apache.maven.plugins:maven-install-plugin (#1052) Bumps the plugins group with 1 update: [org.apache.maven.plugins:maven-install-plugin](https://github.com/apache/maven-install-plugin). Updates `org.apache.maven.plugins:maven-install-plugin` from 3.1.4 to 3.2.0 - [Release notes](https://github.com/apache/maven-install-plugin/releases) - [Commits](apache/maven-install-plugin@maven-install-plugin-3.1.4...maven-install-plugin-3.2.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-install-plugin dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: plugins ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: [DevOps] bump the production-minor-patch group with 4 updates (#1051) * chore: [DevOps] bump the production-minor-patch group with 4 updates Bumps the production-minor-patch group with 4 updates: [com.openai:openai-java-core](https://github.com/openai/openai-java), org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-websocket and [com.sap.hcp.cf.logging:cf-java-logging-support-logback](https://github.com/SAP/cf-java-logging-support). Updates `com.openai:openai-java-core` from 4.58.0 to 4.63.1 - [Release notes](https://github.com/openai/openai-java/releases) - [Changelog](https://github.com/openai/openai-java/blob/main/CHANGELOG.md) - [Commits](openai/openai-java@v4.58.0...v4.63.1) Updates `org.apache.tomcat.embed:tomcat-embed-core` from 11.0.25 to 11.0.26 Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 11.0.25 to 11.0.26 Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 11.0.25 to 11.0.26 Updates `com.sap.hcp.cf.logging:cf-java-logging-support-logback` from 4.2.0 to 4.3.0 - [Release notes](https://github.com/SAP/cf-java-logging-support/releases) - [Commits](SAP/cf-java-logging-support@4.2.0...4.3.0) --- updated-dependencies: - dependency-name: com.openai:openai-java-core dependency-version: 4.63.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: org.apache.tomcat.embed:tomcat-embed-core dependency-version: 11.0.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket dependency-version: 11.0.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket dependency-version: 11.0.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: com.sap.hcp.cf.logging:cf-java-logging-support-logback dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com> * Update jackson-jr-objects --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: I538344 <charles.dubois@sap.com> * fix: [DevOps] Fix CVE-2026-71889 and CVE-2026-18040 (#1057) * fix: [DevOps] Fix CVE-2026-71889 and CVE-2026-18040 properly (#1061) * fix: fix e2e tests (#1064) * chore: [DevOps] fix CVE-2026-71889 bouncycastle (#1066) * chore: [DevOps] ignore CVE-2026-59318, AI SDK 2.0.0-ALPHA will contain the update to Spring AI 2 (#1068) * chore: [DevOps] Fix CVE-2026-89407 and CVE-2026-89425 (#1070) * chore: harmonize javadocs (#1075) * harmonize javadocs - no code changed, just javadocs - added javadoc style guide - added checkstyle check --------- Co-authored-by: SAP Cloud SDK Bot <cloudsdk@sap.com> * chore: [DevOps] bump org.apache.httpcomponents.core5:httpcore5 (#1079) Bumps the test group with 1 update: [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core). Updates `org.apache.httpcomponents.core5:httpcore5` from 5.4.3 to 5.4.4 - [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.4/RELEASE_NOTES.txt) - [Commits](apache/httpcomponents-core@rel/v5.4.3...rel/v5.4.4) --- updated-dependencies: - dependency-name: org.apache.httpcomponents.core5:httpcore5 dependency-version: 5.4.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: test ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: [DevOps] bump the production-minor-patch group with 2 updates (#1078) Bumps the production-minor-patch group with 2 updates: [org.apache.httpcomponents.core5:httpcore5-h2](https://github.com/apache/httpcomponents-core) and [com.openai:openai-java-core](https://github.com/openai/openai-java). Updates `org.apache.httpcomponents.core5:httpcore5-h2` from 5.4.3 to 5.4.4 - [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.4/RELEASE_NOTES.txt) - [Commits](apache/httpcomponents-core@rel/v5.4.3...rel/v5.4.4) Updates `com.openai:openai-java-core` from 4.63.1 to 4.65.0 - [Release notes](https://github.com/openai/openai-java/releases) - [Changelog](https://github.com/openai/openai-java/blob/main/CHANGELOG.md) - [Commits](openai/openai-java@v4.63.1...v4.65.0) --- updated-dependencies: - dependency-name: org.apache.httpcomponents.core5:httpcore5-h2 dependency-version: 5.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: com.openai:openai-java-core dependency-version: 4.65.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: [DevOps] merge main --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jonas-Isr <jonas.israel@sap.com> Co-authored-by: vladimir-a-sap <vladimir.aseev@sap.com> Co-authored-by: SoleilHoffmann <amelie.hoffmann@sap.com> Co-authored-by: SAP Cloud SDK Bot <cloudsdk@sap.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the production-minor-patch group with 4 updates: com.openai:openai-java-core, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-websocket and com.sap.hcp.cf.logging:cf-java-logging-support-logback.
Updates
com.openai:openai-java-corefrom 4.58.0 to 4.63.1Release notes
Sourced from com.openai:openai-java-core's releases.
... (truncated)
Changelog
Sourced from com.openai:openai-java-core's changelog.
... (truncated)
Commits
2a16efdrelease: 4.63.1 (#996)e2ac169fix: allow longer timeout for large Agents stream test (#995)e7acc8crelease: 4.63.0 (#993)10027a0feat(api): add Agents API (#992)6cf15d8release: 4.62.0 (#988)b638bacfeat(api): Add Live API (#991)46bf1c1chore: raise custom-code budget to 3,000 lines (#989)0f9fe12fix: clamp negative Retry-After delays before sleeping (#855)fe00c01release: 4.61.0 (#985)e8ca958feat(api): Support API key expiration metadata (#984)Updates
org.apache.tomcat.embed:tomcat-embed-corefrom 11.0.25 to 11.0.26Updates
org.apache.tomcat.embed:tomcat-embed-websocketfrom 11.0.25 to 11.0.26Updates
org.apache.tomcat.embed:tomcat-embed-websocketfrom 11.0.25 to 11.0.26Updates
com.sap.hcp.cf.logging:cf-java-logging-support-logbackfrom 4.2.0 to 4.3.0Release notes
Sourced from com.sap.hcp.cf.logging:cf-java-logging-support-logback's releases.
Commits
807d5f6Create Final Release 4.3.0b718038Bump org.jetbrains.kotlin:kotlin-stdlib from 2.2.21 to 2.4.10b760af4Bump com.squareup.okhttp3:okhttp from 5.4.0 to 5.5.0fd5da47Bump com.fasterxml.jackson:jackson-bom from 2.22.0 to 2.22.29898a32Bump spring.boot.version from 4.1.0 to 4.1.19238b58Bump org.slf4j:slf4j-api from 2.0.18 to 2.0.1925ae55bBump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0177b501Deprecate CaaS supportd7be63aBump io.opentelemetry.javaagent:opentelemetry-javaagentce914c3Bump io.opentelemetry.contrib:opentelemetry-cloudfoundry-resourcesDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions