Skip to content

chore: update dependencies to latest non-beta versions - #81

Merged
devondragon merged 2 commits into
mainfrom
chore/dependency-updates
Aug 14, 2026
Merged

chore: update dependencies to latest non-beta versions#81
devondragon merged 2 commits into
mainfrom
chore/dependency-updates

Conversation

@devondragon

@devondragon devondragon commented Aug 14, 2026

Copy link
Copy Markdown
Owner

Runs dependencyUpdates and applies all newer non-beta versions that build clean.

Applied

Dependency From To
com.github.ben-manes.versions plugin 0.53.0 0.61.0
com.google.guava:guava 33.5.0-jre 33.6.0-jre
org.mariadb.jdbc:mariadb-java-client 3.5.7 3.5.10
org.springdoc:springdoc-openapi-starter-webmvc-ui 3.0.1 3.1.0
nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect 3.4.0 4.0.1
Gradle wrapper 9.4.1 9.7.0

The layout-dialect bump to 4.0.1 (a Groovy 5 build aligned with Spring Boot 4) let me remove the GROOVY-11745 workaround — the Groovy exclude plus the explicit org.apache.groovy:groovy:5.0.3 pin. Templates use only layout:decorate, layout:fragment, and layout:title-pattern, none of which changed in 4.0 (only the unused layout:collect was removed).

Skipped (beta / pre-release)

  • org.apache.groovy:groovy 5.0.3 → 6.0.0-beta-1 (beta; 5.0.3 is the latest stable 5.x)
  • org.wiremock:wiremock-standalone 3.13.2 → 4.0.0-beta.38 (beta)

Deferred — Spring Boot 4.0.4 → 4.1.0

Not included here. 4.1.0 bundles Thymeleaf 3.1.2 → 3.1.5, which evaluates ${@environment.getProperty(...)} in a restricted expression context during layout-dialect decoration and throws "access to static classes or parameters is forbidden." That pattern appears in ~20 places across ~10 templates. Confirmed it is the Thymeleaf bump (fails with both layout-dialect 3.4.0 and 4.0.1 under 4.1.0; passes on 4.0.4). Tracked separately in #82 since it likely affects every app using this framework idiom.

Verification

./gradlew clean buildBUILD SUCCESSFUL, 301 tests, 0 failures, 0 errors (on Gradle 9.7.0).

- ben-manes versions plugin 0.53.0 -> 0.61.0
- guava 33.5.0-jre -> 33.6.0-jre
- mariadb-java-client 3.5.7 -> 3.5.10
- springdoc-openapi-starter-webmvc-ui 3.0.1 -> 3.1.0
- thymeleaf-layout-dialect 3.4.0 -> 4.0.1

thymeleaf-layout-dialect 4.0.x is a Groovy 5 build aligned with Spring Boot 4,
so the GROOVY-11745 workaround (Groovy exclude + explicit groovy:5.0.3 pin) is
removed. Templates use only decorate/fragment/title-pattern processors, none of
which changed in 4.0.

Skipped: groovy 6.0.0-beta-1 and wiremock-standalone 4.0.0-beta.38 (beta).
Deferred: Spring Boot 4.1.0 (bundles Thymeleaf 3.1.5, which breaks the app-wide
${@environment.getProperty(...)} template pattern under restricted expression
evaluation) — tracked separately.

Build and full test suite (301 tests) pass.
Copilot AI lite review requested due to automatic review settings August 14, 2026 01:45

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Full build and test suite (301 tests) pass on 9.7.0.
@devondragon
devondragon merged commit ef5d5b1 into main Aug 14, 2026
8 checks passed
@devondragon
devondragon deleted the chore/dependency-updates branch August 14, 2026 01:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants