From fe80b7530cf5212c88c71c20102494228502e02f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 17 Sep 2026 21:05:40 +0000
Subject: [PATCH 1/2] chore: [DevOps] bump the production-minor-patch group
 with 4 updates

Bumps the production-minor-patch group with 4 updates: [com.openai:openai-java-core](https://github.com/openai/openai-java), org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-websocket and [com.sap.hcp.cf.logging:cf-java-logging-support-logback](https://github.com/SAP/cf-java-logging-support).


Updates `com.openai:openai-java-core` from 4.58.0 to 4.63.1
- [Release notes](https://github.com/openai/openai-java/releases)
- [Changelog](https://github.com/openai/openai-java/blob/main/CHANGELOG.md)
- [Commits](https://github.com/openai/openai-java/compare/v4.58.0...v4.63.1)

Updates `org.apache.tomcat.embed:tomcat-embed-core` from 11.0.25 to 11.0.26

Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 11.0.25 to 11.0.26

Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 11.0.25 to 11.0.26

Updates `com.sap.hcp.cf.logging:cf-java-logging-support-logback` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/SAP/cf-java-logging-support/releases)
- [Commits](https://github.com/SAP/cf-java-logging-support/compare/4.2.0...4.3.0)

---
updated-dependencies:
- dependency-name: com.openai:openai-java-core
  dependency-version: 4.63.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: org.apache.tomcat.embed:tomcat-embed-core
  dependency-version: 11.0.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket
  dependency-version: 11.0.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket
  dependency-version: 11.0.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: com.sap.hcp.cf.logging:cf-java-logging-support-logback
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pom.xml                        | 2 +-
 sample-code/spring-app/pom.xml | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/pom.xml b/pom.xml
index b9ff5e92a..e9fe630ef 100644
--- a/pom.xml
+++ b/pom.xml
@@ -83,7 +83,7 @@
     <logback.version>1.6.3</logback.version>
     <commons-codec.version>1.22.1</commons-codec.version>
     <japicmp.version>0.26.2</japicmp.version>
-    <openai-java.version>4.58.0</openai-java.version>
+    <openai-java.version>4.63.1</openai-java.version>
     <!-- conflicts resolution -->
     <httpcomponents-core5.version>5.4.3</httpcomponents-core5.version>
     <httpcomponents-client5.version>5.6.4</httpcomponents-client5.version>
diff --git a/sample-code/spring-app/pom.xml b/sample-code/spring-app/pom.xml
index 933558439..5bb4fc219 100644
--- a/sample-code/spring-app/pom.xml
+++ b/sample-code/spring-app/pom.xml
@@ -34,8 +34,8 @@
   <properties>
     <project.rootdir>${project.basedir}/../../</project.rootdir>
     <spring-boot.version>4.1.1</spring-boot.version>
-    <cf-logging.version>4.2.0</cf-logging.version>
-    <apache-tomcat-embed.version>11.0.25</apache-tomcat-embed.version>
+    <cf-logging.version>4.3.0</cf-logging.version>
+    <apache-tomcat-embed.version>11.0.26</apache-tomcat-embed.version>
     <jackson-annotations.version>2.22</jackson-annotations.version>
     <!-- Skip end-to-end tests by default, can be overridden with -DskipTests=false -->
     <skipTests>true</skipTests>

From f7e6dd8b7f74f1b8e944ecb4f2154395ce691e0c Mon Sep 17 00:00:00 2001
From: I538344 <charles.dubois@sap.com>
Date: Fri, 18 Sep 2026 10:53:44 +0200
Subject: [PATCH 2/2] Update jackson-jr-objects

---
 pom.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/pom.xml b/pom.xml
index e9fe630ef..224a25be6 100644
--- a/pom.xml
+++ b/pom.xml
@@ -211,6 +211,12 @@
         <artifactId>jackson-dataformat-yaml</artifactId>
         <version>${jackson.version}</version>
       </dependency>
+      <!-- Align dependency version with upper bound -->
+      <dependency>
+        <groupId>com.fasterxml.jackson.jr</groupId>
+        <artifactId>jackson-jr-objects</artifactId>
+        <version>${jackson.version}</version>
+      </dependency>
       <!-- conflicts resolution scope "compile" -->
       <!-- CVE-2026-CVE-2026-59313, 47892, 47893, 59283 pin spring deps >= 7.0.9 until we migrate to spring-ai 2 -->
       <dependency>
@@ -606,6 +612,7 @@
             </goals>
             <configuration>
               <rules>
+                <!-- Please ensure to build with dependencies of the highest versions among all modules -->
                 <requireUpperBoundDeps/>
               </rules>
             </configuration>