FINERACT-2181: Update all non-major dependencies

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
mariadb	service	minor	11.5.2 -> 11.8.5
mysql	service	minor	9.1 -> 9.5
postgres	service	minor	17.4 -> 17.7
io.netty:netty-codec-http (source)	devDependencies	minor	4.1.125.Final -> 4.2.7.Final
io.netty:netty-codec (source)	devDependencies	minor	4.1.125.Final -> 4.2.7.Final
org.springframework.security:spring-security-core (source)	devDependencies	patch	6.5.4 -> 6.5.7
org.springframework:spring-core	devDependencies	patch	6.2.11 -> 6.2.14
com.nimbusds:nimbus-jose-jwt	devDependencies	minor	10.0.2 -> 10.6
org.apache.commons:commons-lang3 (source)	devDependencies	minor	3.18.0 -> 3.20.0
org.yakworks:spring-icu4j	devDependencies	minor	0.4.2 -> 0.5.2
org.springframework.restdocs:spring-restdocs-restassured	devDependencies	patch	3.0.3 -> 3.0.5
org.springframework.restdocs:spring-restdocs-webtestclient	devDependencies	patch	3.0.3 -> 3.0.5
org.springframework.restdocs:spring-restdocs-mockmvc	devDependencies	patch	3.0.3 -> 3.0.5
org.springframework.restdocs:spring-restdocs-asciidoctor	devDependencies	patch	3.0.3 -> 3.0.5
io.cucumber:cucumber-spring (source)	devDependencies	minor	7.20.1 -> 7.32.0
io.cucumber:cucumber-junit-platform-engine (source)	devDependencies	minor	7.20.1 -> 7.32.0
io.cucumber:cucumber-java8 (source)	devDependencies	minor	7.20.1 -> 7.32.0
io.cucumber:cucumber-java (source)	devDependencies	minor	7.20.1 -> 7.32.0
org.apache.sshd:sshd-core (source)	devDependencies	minor	2.15.0 -> 2.16.0
org.apache.sshd:sshd-common (source)	devDependencies	minor	2.15.0 -> 2.16.0
org.wiremock:wiremock-standalone (source)	devDependencies	patch	3.13.0 -> 3.13.2
org.assertj:assertj-core (source)	devDependencies	minor	3.26.3 -> 3.27.6
com.mysql:mysql-connector-j (source)	devDependencies	minor	9.2.0 -> 9.5.0
org.mariadb.jdbc:mariadb-java-client (source)	devDependencies	patch	3.5.2 -> 3.5.6
org.apache.avro:avro (source)	devDependencies	patch	1.12.0 -> 1.12.1
org.apache.groovy:groovy-json (source)	devDependencies	patch	4.0.26 -> 4.0.29
org.apache.groovy:groovy-xml (source)	devDependencies	patch	4.0.26 -> 4.0.29
io.rest-assured:xml-path (source)	devDependencies	patch	5.5.1 -> 5.5.6
io.rest-assured:json-path (source)	devDependencies	patch	5.5.1 -> 5.5.6
io.rest-assured:rest-assured (source)	devDependencies	patch	5.5.1 -> 5.5.6
org.apache.poi:poi-ooxml	devDependencies	minor	5.4.1 -> 5.5.0
org.apache.poi:poi	devDependencies	minor	5.4.1 -> 5.5.0
org.awaitility:awaitility (source)	devDependencies	minor	4.2.2 -> 4.3.0
org.dom4j:dom4j (source)	devDependencies	minor	2.1.4 -> 2.2.0
org.hibernate.validator:hibernate-validator (source)	devDependencies	minor	9.0.1.Final -> 9.1.0.Final
jakarta.xml.bind:jakarta.xml.bind-api	devDependencies	patch	4.0.2 -> 4.0.4
jakarta.activation:jakarta.activation-api	devDependencies	patch	2.1.3 -> 2.1.4
org.apache.activemq:activemq-client (source)	devDependencies	minor	6.1.6 -> 6.2.0
com.google.cloud.sql:mysql-socket-factory-connector-j-8	devDependencies	minor	1.23.1 -> 1.27.0
org.springdoc:springdoc-openapi-starter-webmvc-ui (source)	devDependencies	minor	2.6.0 -> 2.8.14
com.tmatesoft.svnkit:svnkit (source)	devDependencies	patch	1.10.12 -> 1.10.13
org.eclipse.jgit:org.eclipse.jgit.ssh.apache	devDependencies	minor	7.2.0.202503040940-r -> 7.4.0.202509020913-r
org.eclipse.jgit:org.eclipse.jgit.gpg.bc	devDependencies	minor	7.2.0.202503040940-r -> 7.4.0.202509020913-r
org.eclipse.jgit:org.eclipse.jgit	devDependencies	minor	7.2.0.202503040940-r -> 7.4.0.202509020913-r
org.bouncycastle:bcpg-jdk18on (source)	devDependencies	minor	1.80 -> 1.82
org.bouncycastle:bcutil-jdk18on (source)	devDependencies	minor	1.80 -> 1.82
org.bouncycastle:bcprov-jdk18on (source)	devDependencies	minor	1.80 -> 1.82
org.bouncycastle:bcpkix-jdk18on (source)	devDependencies	minor	1.80 -> 1.82
org.projectlombok:lombok (source)	devDependencies	patch	1.18.36 -> 1.18.42
commons-codec:commons-codec (source)	devDependencies	minor	1.17.1 -> 1.20.0
com.squareup.retrofit2:converter-protobuf	devDependencies	minor	2.11.0 -> 2.12.0
com.squareup.retrofit2:converter-gson	devDependencies	minor	2.11.0 -> 2.12.0
com.squareup.retrofit2:converter-scalars	devDependencies	minor	2.11.0 -> 2.12.0
com.squareup.retrofit2:converter-java8	devDependencies	minor	2.11.0 -> 2.12.0
com.squareup.retrofit2:converter-jaxb	devDependencies	minor	2.11.0 -> 2.12.0
com.squareup.retrofit2:converter-simplexml	devDependencies	minor	2.11.0 -> 2.12.0
com.squareup.retrofit2:converter-jackson	devDependencies	minor	2.11.0 -> 2.12.0
com.squareup.retrofit2:converter-wire	devDependencies	minor	2.11.0 -> 2.12.0
com.squareup.retrofit2:adapter-guava	devDependencies	minor	2.11.0 -> 2.12.0
com.squareup.retrofit2:adapter-rxjava3	devDependencies	minor	2.11.0 -> 2.12.0
com.squareup.retrofit2:adapter-rxjava2	devDependencies	minor	2.11.0 -> 2.12.0
com.squareup.retrofit2:adapter-java8	devDependencies	minor	2.11.0 -> 2.12.0
com.squareup.retrofit2:retrofit-mock	devDependencies	minor	2.11.0 -> 2.12.0
com.squareup.retrofit2:retrofit	devDependencies	minor	2.11.0 -> 2.12.0
com.github.spotbugs:spotbugs-annotations (source)	devDependencies	minor	4.8.6 -> 4.9.8
io.github.classgraph:classgraph	devDependencies	patch	4.8.179 -> 4.8.184
joda-time:joda-time (source)	devDependencies	minor	2.13.1 -> 2.14.0
me.champeau.jmh	plugin	patch	0.7.1 -> 0.7.3
org.apache.tika:tika-parser-microsoft-module (source)	devDependencies	patch	2.9.3 -> 2.9.4
com.gradleup.shadow	plugin	patch	8.3.5 -> 8.3.9
org.openapi.generator	plugin	minor	7.8.0 -> 7.17.0
se.thinkcode.cucumber-runner	plugin	patch	0.0.11 -> 0.0.12
com.github.spotbugs	plugin	minor	6.0.26 -> 6.4.5
com.github.andygoossens.modernizer	plugin	minor	1.10.0 -> 1.12.0
org.sonarqube	plugin	minor	6.0.1.5171 -> 6.3.1.5724
com.google.cloud.tools.jib	plugin	minor	3.4.5 -> 3.5.1
com.gorylenko.gradle-git-properties	plugin	minor	2.4.2 -> 2.5.4
io.swagger.core.v3.swagger-gradle-plugin	plugin	patch	2.2.23 -> 2.2.40
net.ltgt.errorprone	plugin	minor	4.1.0 -> 4.3.0
org.apache.tika:tika-parser-miscoffice-module (source)	devDependencies	patch	2.9.3 -> 2.9.4
org.springframework.boot	plugin	patch	3.5.5 -> 3.5.8
org.zeroturnaround.gradle.jrebel	plugin	patch	1.2.0 -> 1.2.2
org.apache.tika:tika-core (source)	devDependencies	patch	2.9.3 -> 2.9.4
com.jayway.jsonpath:json-path	devDependencies	minor	2.9.0 -> 2.10.0
org.ehcache:ehcache (source)	devDependencies	minor	3.10.8 -> 3.11.1
org.quartz-scheduler:quartz (source)	devDependencies	patch	2.5.0 -> 2.5.1
org.apache.commons:commons-csv (source)	devDependencies	minor	1.12.0 -> 1.14.1
commons-io:commons-io (source)	devDependencies	minor	2.18.0 -> 2.21.0
software.amazon.msk:aws-msk-iam-auth (source)	devDependencies	minor	2.2.0 -> 2.3.5
org.apache.commons:commons-compress (source)	devDependencies	minor	1.26.0 -> 1.28.0
org.apache.commons:commons-collections4 (source)	devDependencies	minor	4.4 -> 4.5.0
com.google.googlejavaformat:google-java-format	devDependencies	minor	1.24.0 -> 1.32.0
com.google.code.gson:gson	devDependencies	minor	2.11.0 -> 2.13.2
ch.qos.logback:logback-classic (source, changelog)	devDependencies	patch	1.5.17 -> 1.5.21
ch.qos.logback:logback-core (source, changelog)	devDependencies	patch	1.5.17 -> 1.5.21
org.glassfish.jersey:jersey-bom (source)	devDependencies	patch	3.1.10 -> 3.1.11
org.testcontainers:testcontainers-bom (source)	devDependencies	minor	1.20.4 -> 1.21.3
io.github.resilience4j:resilience4j-bom (source)	devDependencies	minor	2.2.0 -> 2.3.0
software.amazon.awssdk:bom	devDependencies	minor	2.29.9 -> 2.39.2
org.mockito:mockito-bom	devDependencies	minor	5.14.2 -> 5.20.0
io.cucumber:cucumber-bom (source)	devDependencies	minor	7.20.1 -> 7.32.0
com.fasterxml.jackson:jackson-bom	devDependencies	minor	2.18.3 -> 2.20.1
org.junit:junit-bom (source)	devDependencies	minor	5.11.3 -> 5.14.1
org.jetbrains.kotlin:kotlin-bom (source)	devDependencies	minor	2.0.21 -> 2.2.21
io.opentelemetry:opentelemetry-bom	devDependencies	minor	1.44.1 -> 1.56.0
io.awspring.cloud:spring-cloud-aws-dependencies (source)	devDependencies	minor	3.2.1 -> 3.4.1
org.springframework.boot:spring-boot-dependencies (source)	devDependencies	patch	3.5.5 -> 3.5.8
io.micrometer:micrometer-bom	devDependencies	minor	1.13.6 -> 1.16.0
com.gradle.common-custom-user-data-gradle-plugin	plugin	minor	2.0.2 -> 2.4.0

---

Release Notes

spring-projects/spring-security (org.springframework.security:spring-security-core)

v6.5.7

Compare Source

⭐ New Features

• Add Include-Code for the Password Storage page #​18054
• Default WebAuthnConfigurer#rpName to rpId #​18131
• Document effects of disabling CORS #​18129

🪲 Bug Fixes

• typ values should not be case-sensitive in JwtTypeValidator #​18101
• BCryptPasswordEncoderTests should password limit of 72 bytes #​18136
• Fix GenerateOneTimeTokenRequestResolver ignored if username param not present #​18074
• GenerateOneTimeTokenFilter should not attempt to generate a token with a null token request #​18088

🔨 Dependency Upgrades

• Bump com.fasterxml.jackson:jackson-bom from 2.18.4.1 to 2.18.5 #​18110
• Bump io.micrometer:micrometer-observation from 1.14.12 to 1.14.13 #​18149
• Bump io.spring.gradle:spring-security-release-plugin from 1.0.11 to 1.0.13 #​18141
• Bump org-aspectj from 1.9.24 to 1.9.25 #​18142
• Bump org.hibernate.orm:hibernate-core from 6.6.33.Final to 6.6.34.Final [#&#8203

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.