Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.0.6

🐞 Bug Fixes

• Default security is misconfigured when spring-boot-actuator-autoconfigure is present and spring-boot-health is not #50188
• Elasticsearch Rest5Client auto-configuration misconfigures underlying HTTP client #50187
• ApplicationPidFileWriter does not handle symlinks correctly #50185
• RandomValuePropertySource is not suitable for secrets #50183
• Cassandra auto-configuration misconfigures CqlSessionBuilder #50180
• ApplicationTemp does not handle symlinks correctly #50178
• Remote DevTools performs comparison incorrectly #50176
• spring.rabbitmq.ssl.verify-hostname is applied inconsistently #50174
• Whole number values are ignored when configuring min and max expected values and SLO boundaries for a distribution summary meter #50077
• Classic starters are missing several modules #50071
• Module spring-boot-resttestclient is missing from spring-boot-starter-test-classic #50069
• Annotations like @Ssl don't work on @Bean methods when using @ServiceConnection #50064
• EnversRevisionRepositoriesRegistrar should reuse @EnableEnversRepositories rather than configuring the JPA counterpart #50039
• WebFlux Cloud Foundry links endpoint includes query string from received request in resolved links #50017
• Imports on a containing test class are ignored when a nested class has imports #50012
• With spring.jackson.use-jackson2-defaults set to true, FAIL_ON_UNKNOWN_PROPERTIES is enabled #49951
• 500 response from env endpoint when supplied pattern is invalid #49946
• Reactive MongoDB starter has a transitive dependency on the synchronous MongoDB driver #49945
• HTTP method is lost when configuring excludes in EndpointRequest #49943
• Honor HttpMethod for reactive additional endpoint paths #49880
• Docker Compose support doesn't work with apache/artemis image #49869
• Docker Compose support doesn't work with apache/activemq image #49866
• Spring Security's PathPatternRequestMatcher.Builder is not auto-configured when using WebMvcTest and spring-boot-security-test #49854
• API versioning path strategy should be applied path last as it is not meant to yield #49800

📔 Documentation

• Update docs to encourage Java fundamentals for beginners that prefer to learn that way #50146
• HTTP Service Interface Clients still document that API versioning can be configured via properties #50126
• Link to the observability section of the Lettuce documentation is broken #50097
• Javadoc for StaticResourceLocation.FAVICON doesn't describe icons location #50085
• MySamlRelyingPartyConfiguration is missing a Kotlin sample #50024
• Incorrect default value for management.httpexchanges.recording.include in configuration metadata #50019
• Link to the Kubernetes documentation when discussing startup probes #50015
• Typo in JdbcSessionAutoConfiguration Javadoc #49873
• Clarify that configuration property default values are not available through the Environment #49851
• Document the need for Liquibase and Flyway starters #49839
• Kafka documentation refers to deprecated JSON serializer and deserializer classes #49826

🔨 Dependency Upgrades

• Upgrade to Elasticsearch Client 9.2.8 #50027
• Upgrade to Groovy 5.0.5 #49911
• Upgrade to Hibernate 7.2.12.Final #50134
• Upgrade to Jackson Bom 3.1.2 #50051
• Upgrade to Jaxen 2.0.1 #50104
• Upgrade to Jaybird 6.0.5 #49914

... (truncated)

• 8821ad2 Release v4.0.6
• 9e4048a Merge branch '3.5.x' into 4.0.x
• 20bb11c Next development version (v3.5.15-SNAPSHOT)
• 98daa8e Merge branch '3.5.x' into 4.0.x
• 9dc5aa2 Polish
• 874f629 Fix default security with actuator but without health
• e41b3bf Enable hostname verification for SSL connections to Elasticsearch
• ef8527b Merge branch '3.5.x' into 4.0.x
• f533a45 Do not follow symlinks when writing PID file
• 4a7bd33 Merge branch '3.5.x' into 4.0.x
• Additional commits viewable in compare view

Sourced from org.projectlombok:lombok's changelog.

v1.18.46 (April 22nd, 2026)

• PLATFORM: JDK26 support added #4019.
• PLATFORM: Spring Tools Suite 5 supported #3985.
• BUGFIX: @Jacksonized no longer stops generating @JsonProperty once an explicit @JsonIgnore annotations is encountered #4022.
• BUGFIX: In eclipse, mixing @Jacksonized and fluent = true no longer causes the error com.fasterxml.jackson.annotation.JsonProperty is not a repeatable annotation interface. #3934.
• BUGFIX: Some finishing touches for v1.18.44's support of Jackson3 #4004.

• 936ca59 [build] lombok's launcher is still intended to be 1.4 compatible, or at least...
• fcdab3f [version] pre-release version bump
• 1cb7d49 [changelog]#4004 Mention Jackson3 final touches in changelog.
• 12a15b0 Fix: Bump EA_JDK to 27 (25 and 26 have been released)
• 2be766c Merge branch 'jackson3-final-touches'
• 290fa4c [trivial] constantize the warning we spit out for ambiguous jackson2/3, and m...
• e6567b6 test: Add Jackson 3 test cases and version ambiguity warnings
• 45e72e2 feat: Add Jackson 3 databind/dataformat annotations to HandlerUtil copy lists
• 184d423 feat: Add Jackson 3 support to @​Jacksonized handlers
• e027ad0 refactored to ShadowClassLoader use Collections::enumeration instead of Vector
• Additional commits viewable in compare view

Sourced from org.mapstruct:mapstruct's releases.

1.6.3

Bugs

• Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
• Stackoverflow with Immutables custom builder (#3370)
• Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

• Add section to README.md comparing mapstruct with Java Records (#3751)

1.6.2

Bugs

• Regression from 1.6.1: ClassCastException when using records (#3717)

1.6.1

Enhancements

• Use Java LinkedHashSet and LinkedHashMap new factory method with known capacity when on Java 19 or later (#3113)

Bugs

• Inverse Inheritance Strategy not working for ignored mappings only with target (#3652)
• Inconsistent ambiguous mapping method error when using SubclassMapping: generic vs raw types (#3668)
• Fix regression when using InheritInverseConfiguration with nested target properties and reversing target = "." (#3670)
• Deep mapping with multiple mappings broken in 1.6.0 (#3667)
• Two different constants are ignored in 1.6.0 (#3673)
• Inconsistent ambiguous mapping method error: generic vs raw types in 1.6.0 (#3668)
• Fix cross module records with interfaces not recognizing accessors (#3661)
• @AfterMapping methods are called twice when using target with builder (#3678)
• Compile error when using @AfterMapping method with Builder and TargetObject (#3703)

Behaviour change

Inverse Inheritance Strategy not working for ignored mappings only with target

Prior to this fix @Mapping(target = "myProperty", ignore = true) was being ignored when using @InheritInverseConfiguration.

e.g.

@Mapper
public interface ModelMapper {
@Mapping(target = "creationDate", ignore = true)
Entity toEntity(Model model);    
@InheritInverseConfiguration
Model toModel(Entity entity);

</tr></table>

... (truncated)

• b4e25e4 Releasing version 1.6.3
• 772fae4 Prepare release notes for 1.6.3
• efdf435 #3751 Improve readme to include support for Java 16+ records
• c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
• 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
• 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
• 26c5bcd Update readme with 1.6.2
• 4e0d73d Next version 1.7.0-SNAPSHOT
• 212607b Releasing version 1.6.2
• 4fd22d6 Prepare release notes for 1.6.2
• Additional commits viewable in compare view

Sourced from org.mapstruct:mapstruct-processor's releases.

1.6.3

Bugs

• Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
• Stackoverflow with Immutables custom builder (#3370)
• Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

• Add section to README.md comparing mapstruct with Java Records (#3751)

1.6.2

Bugs

• Regression from 1.6.1: ClassCastException when using records (#3717)

1.6.1

Enhancements

• Use Java LinkedHashSet and LinkedHashMap new factory method with known capacity when on Java 19 or later (#3113)

Bugs

• Inverse Inheritance Strategy not working for ignored mappings only with target (#3652)
• Inconsistent ambiguous mapping method error when using SubclassMapping: generic vs raw types (#3668)
• Fix regression when using InheritInverseConfiguration with nested target properties and reversing target = "." (#3670)
• Deep mapping with multiple mappings broken in 1.6.0 (#3667)
• Two different constants are ignored in 1.6.0 (#3673)
• Inconsistent ambiguous mapping method error: generic vs raw types in 1.6.0 (#3668)
• Fix cross module records with interfaces not recognizing accessors (#3661)
• @AfterMapping methods are called twice when using target with builder (#3678)
• Compile error when using @AfterMapping method with Builder and TargetObject (#3703)

Behaviour change

Inverse Inheritance Strategy not working for ignored mappings only with target

Prior to this fix @Mapping(target = "myProperty", ignore = true) was being ignored when using @InheritInverseConfiguration.

e.g.

@Mapper
public interface ModelMapper {
@Mapping(target = "creationDate", ignore = true)
Entity toEntity(Model model);    
@InheritInverseConfiguration
Model toModel(Entity entity);

</tr></table>

... (truncated)

• b4e25e4 Releasing version 1.6.3
• 772fae4 Prepare release notes for 1.6.3
• efdf435 #3751 Improve readme to include support for Java 16+ records
• c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
• 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
• 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
• 26c5bcd Update readme with 1.6.2
• 4e0d73d Next version 1.7.0-SNAPSHOT
• 212607b Releasing version 1.6.2
• 4fd22d6 Prepare release notes for 1.6.2
• Additional commits viewable in compare view

Sourced from org.mapstruct:mapstruct-processor's releases.

1.6.3

Bugs

• Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
• Stackoverflow with Immutables custom builder (#3370)
• Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

• Add section to README.md comparing mapstruct with Java Records (#3751)

1.6.2

Bugs

• Regression from 1.6.1: ClassCastException when using records (#3717)

1.6.1

Enhancements

• Use Java LinkedHashSet and LinkedHashMap new factory method with known capacity when on Java 19 or later (#3113)

Bugs

• Inverse Inheritance Strategy not working for ignored mappings only with target (#3652)
• Inconsistent ambiguous mapping method error when using SubclassMapping: generic vs raw types (#3668)
• Fix regression when using InheritInverseConfiguration with nested target properties and reversing target = "." (#3670)
• Deep mapping with multiple mappings broken in 1.6.0 (#3667)
• Two different constants are ignored in 1.6.0 (#3673)
• Inconsistent ambiguous mapping method error: generic vs raw types in 1.6.0 (#3668)
• Fix cross module records with interfaces not recognizing accessors (#3661)
• @AfterMapping methods are called twice when using target with builder (#3678)
• Compile error when using @AfterMapping method with Builder and TargetObject (#3703)

Behaviour change

Inverse Inheritance Strategy not working for ignored mappings only with target

Prior to this fix @Mapping(target = "myProperty", ignore = true) was being ignored when using @InheritInverseConfiguration.

e.g.

@Mapper
public interface ModelMapper {
@Mapping(target = "creationDate", ignore = true)
Entity toEntity(Model model);    
@InheritInverseConfiguration
Model toModel(Entity entity);

</tr></table>

... (truncated)

• b4e25e4 Releasing version 1.6.3
• 772fae4 Prepare release notes for 1.6.3
• efdf435 #3751 Improve readme to include support for Java 16+ records
• c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
• 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
• 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
• 26c5bcd Update readme with 1.6.2
• 4e0d73d Next version 1.7.0-SNAPSHOT
• 212607b Releasing version 1.6.2
• 4fd22d6 Prepare release notes for 1.6.2
• Additional commits viewable in compare view

Sourced from io.swagger.parser.v3:swagger-parser's releases.

Swagger-parser 2.1.41 released!

• Bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.14 (#2317)
• chore: update v2 parser to 1.0.76 (#2314)
• Prevent StackOverflowError in ResolverFully (#2297)
• Fix thread-safety bug in OpenAPIDereferencer31 (#2294)
• fix(converter): keep x-nullable in shared $ref responses (#2276)

• 1d86e4a prepare release 2.1.41 (#2322)
• f0cb8e5 Fix thread-safety bug in OpenAPIDereferencer31 (#2294)
• 9e2ff91 Prevent StackOverflowError in ResolverFully (#2297)
• 57c0edb Bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.14 (#2317)
• bb8a82c fix(converter): keep x-nullable in shared $ref responses (#2276)
• b6ed0cc chore: update v2 parser to 1.0.76 (#2314)
• afc1742 Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.2 to 3.6.3 (#2025)
• 370c009 Bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.2 to 3.2.5 (#2045)
• bfd616c Bump org.jacoco:jacoco-maven-plugin from 0.8.8 to 0.8.11 (#2027)
• 81d8790 bump snapshot 2.1.41-SNAPSHOT (#2310)
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions