Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 24, 2025

Bumps the development-dependencies group with 2 updates: org.springframework.security:spring-security-bom and org.hibernate.orm:hibernate-core.

Updates org.springframework.security:spring-security-bom from 6.4.8 to 6.4.9

Release notes

Sourced from org.springframework.security:spring-security-bom's releases.

6.4.9

⭐ New Features

  • Add META-INF/LICENSE.txt to published jars #17638
  • Update Angular documentation links in csrf.adoc #17652
  • Update Shibboleth Repository URL #17636
  • Use 2004-present Copyright #17633

🪲 Bug Fixes

  • OpenSamlAssertingPartyDetails Should Be Serializable #17622

🔨 Dependency Upgrades

  • Bump io.micrometer:micrometer-observation from 1.14.8 to 1.14.9 #17611
  • Bump io.micrometer:micrometer-observation from 1.14.8 to 1.14.9 #17604
  • Bump io.micrometer:micrometer-observation from 1.14.9 to 1.14.10 #17756
  • Bump io.micrometer:micrometer-observation from 1.14.9 to 1.14.10 #17699
  • Bump io.spring.develocity.conventions from 0.0.23 to 0.0.24 #17643
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.10 to 1.0.11 #17741
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.10 to 1.0.11 #17717
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.6 to 1.0.10 #17609
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.6 to 1.0.10 #17603
  • Bump org-eclipse-jetty from 11.0.25 to 11.0.26 #17736
  • Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11 #17607
  • Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11 #17602
  • Bump org.gretty:gretty from 4.1.6 to 4.1.7 #17641
  • Bump org.hibernate.orm:hibernate-core from 6.6.20.Final to 6.6.23.Final #17630
  • Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.24.Final #17659
  • Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.25.Final #17695
  • Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.25.Final #17680
  • Bump org.springframework.data:spring-data-bom from 2024.1.7 to 2024.1.8 #17696
  • Bump org.springframework.data:spring-data-bom from 2024.1.7 to 2024.1.8 #17682
  • Bump org.springframework.data:spring-data-bom from 2024.1.7 to 2024.1.8 #17642
  • Bump org.springframework.data:spring-data-bom from 2024.1.7 to 2024.1.8 #17600
  • Bump org.springframework.data:spring-data-bom from 2024.1.7 to 2024.1.9 #17738
  • Bump org.springframework.ldap:spring-ldap-core from 3.2.13 to 3.2.14 #17745
  • Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.9 #17610
  • Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.9 #17601
  • Bump org.springframework:spring-framework-bom from 6.2.9 to 6.2.10 #17744
Commits
  • 01c8cea Release 6.4.9
  • 525601e Fix version 6.4.9-SNAPSHOT
  • c1869c1 Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.26.Final
  • d429780 Bump io.micrometer:micrometer-observation from 1.14.9 to 1.14.10
  • febf077 Bump io.micrometer:micrometer-observation from 1.14.9 to 1.14.10
  • a20ca88 Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.26.Final
  • 5eee702 Bump org.springframework.data:spring-data-bom from 2024.1.7 to 2024.1.9
  • 04ac04d Bump org.springframework:spring-framework-bom from 6.2.9 to 6.2.10
  • 80e0242 Bump org-eclipse-jetty from 11.0.25 to 11.0.26
  • ecefcf5 Bump io.spring.gradle:spring-security-release-plugin
  • Additional commits viewable in compare view

Updates org.hibernate.orm:hibernate-core from 6.6.26.Final to 6.6.27.Final

Release notes

Sourced from org.hibernate.orm:hibernate-core's releases.

Hibernate ORM 6.6.27.Final released

Today, we published a new release of Hibernate ORM 6.6: 6.6.27.Final.

You can find the full list of 6.6.27.Final changes here.

What's new

This release introduces a few minor improvements as well as bug fixes.

Conclusion

For additional details, see:

See also the following resources related to supported APIs:

Visit the website for details on getting in touch with us.

Changelog

Sourced from org.hibernate.orm:hibernate-core's changelog.

Changes in 6.6.27.Final (August 24, 2025)

https://hibernate.atlassian.net/projects/HHH/versions/34957

** Bug * [HHH-19719] - org.hibernate.query.sqm.function.SelfRenderingSqmWindowFunction#appendHqlString throws IndexOutOfBoundsException when has no arguments * [HHH-19712] - Column deduplication leads to wrong alias calculation for native query alias expansion * [HHH-19687] - Criteria query with lazy @​OneToOne and @​EmbeddedId throws exception

Commits
  • 3af44aa Pre-steps for release : 6.6.27.Final
  • d9f2b2f HHH-19687 Correctly instantiate id for circular key-to-one fetch within embed...
  • d9310c2 HHH-19719 Prevent IndexOutOfBoundsException when no arguments
  • 50c84ed HHH-19719 Test case - when SelfRenderingSqmWindowFunction has no arguments, a...
  • b20e686 HHH-19712 Rework select fragment generation to work with column selection ded...
  • e357528 HHH-19712 Reproduce faulty native query alias expansion with column selection...
  • d422259 Post-steps for release : 6.6.26.Final
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-dependencies group with 2 updates: [org.springframework.security:spring-security-bom](https://github.com/spring-projects/spring-security) and [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm).


Updates `org.springframework.security:spring-security-bom` from 6.4.8 to 6.4.9
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](spring-projects/spring-security@6.4.8...6.4.9)

Updates `org.hibernate.orm:hibernate-core` from 6.6.26.Final to 6.6.27.Final
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.27/changelog.txt)
- [Commits](hibernate/hibernate-orm@6.6.26...6.6.27)

---
updated-dependencies:
- dependency-name: org.springframework.security:spring-security-bom
  dependency-version: 6.4.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: org.hibernate.orm:hibernate-core
  dependency-version: 6.6.27.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the type: dependency-upgrade Pull requests that update a dependency file label Aug 24, 2025
@github-actions github-actions bot added type: task and removed type: dependency-upgrade Pull requests that update a dependency file labels Aug 24, 2025
@github-actions github-actions bot added this to the 6.4.7 milestone Aug 24, 2025
@github-actions github-actions bot enabled auto-merge (squash) August 24, 2025 01:25
@github-actions github-actions bot merged commit 6cdd6bf into 6.4.x Aug 24, 2025
3 checks passed
@github-actions github-actions bot deleted the dependabot/gradle/6.4.x/development-dependencies-0c9e9a833f branch August 24, 2025 01:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants