Skip to content

chore: consolidate dependency updates - #50

Merged
yuluo-yx merged 23 commits into
mainfrom
chore/deps-batch-20260830
Aug 30, 2026
Merged

chore: consolidate dependency updates#50
yuluo-yx merged 23 commits into
mainfrom
chore/deps-batch-20260830

Conversation

@yuluo-yx

@yuluo-yx yuluo-yx commented Aug 30, 2026

Copy link
Copy Markdown
Contributor

Summary

Validation

  • JDK 17 full reactor tests: 11/11 modules passed.
  • JDK 21 full reactor compile: passed.
  • JDK 17 full reactor package with tests skipped: passed.
  • Checkstyle: zero violations.
  • Mycila License 4.6 profile: passed without deprecated configuration warnings.
  • Targeted Spring AI compatibility tests: passed.

Heavy CI intentionally runs only after this PR is merged to main.

dependabot Bot and others added 23 commits August 30, 2026 11:33
@dependabot @yuluo-yx
chore(deps): bump nacos3.version from 3.1.0 to 3.2.3
8415485 
Bumps `nacos3.version` from 3.1.0 to 3.2.3.

Updates `com.alibaba.nacos:nacos-client` from 3.1.0 to 3.2.3
- [Release notes](https://github.com/alibaba/nacos/releases)
- [Changelog](https://github.com/alibaba/nacos/blob/develop/CHANGELOG.md)
- [Commits](alibaba/nacos@3.1.0...3.2.3)

Updates `com.alibaba.nacos:nacos-maintainer-client` from 3.1.0 to 3.2.3
- [Release notes](https://github.com/alibaba/nacos/releases)
- [Changelog](https://github.com/alibaba/nacos/blob/develop/CHANGELOG.md)
- [Commits](alibaba/nacos@3.1.0...3.2.3)

---
updated-dependencies:
- dependency-name: com.alibaba.nacos:nacos-client
  dependency-version: 3.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: com.alibaba.nacos:nacos-maintainer-client
  dependency-version: 3.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @yuluo-yx
chore(deps): bump spring-boot.version from 4.1.0 to 4.1.1
38fc85c 
Bumps `spring-boot.version` from 4.1.0 to 4.1.1.

Updates `org.springframework.boot:spring-boot-dependencies` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.0...v4.1.1)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.0...v4.1.1)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @yuluo-yx
chore(deps): bump org.apache.maven.plugins:maven-site-plugin
c6bff2b 
Bumps [org.apache.maven.plugins:maven-site-plugin](https://github.com/apache/maven-site-plugin) from 4.0.0-M13 to 4.0.0-M16.
- [Release notes](https://github.com/apache/maven-site-plugin/releases)
- [Commits](apache/maven-site-plugin@maven-site-plugin-4.0.0-M13...maven-site-plugin-4.0.0-M16)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-site-plugin
  dependency-version: 4.0.0-M16
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @yuluo-yx
chore(deps): bump org.apache.maven.plugins:maven-deploy-plugin
837b111 
Bumps [org.apache.maven.plugins:maven-deploy-plugin](https://github.com/apache/maven-deploy-plugin) from 3.1.1 to 3.1.4.
- [Release notes](https://github.com/apache/maven-deploy-plugin/releases)
- [Commits](apache/maven-deploy-plugin@maven-deploy-plugin-3.1.1...maven-deploy-plugin-3.1.4)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-deploy-plugin
  dependency-version: 3.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @yuluo-yx
chore(deps): bump org.apache.maven.plugins:maven-checkstyle-plugin
ad927fc 
Bumps [org.apache.maven.plugins:maven-checkstyle-plugin](https://github.com/apache/maven-checkstyle-plugin) from 3.5.0 to 3.6.0.
- [Release notes](https://github.com/apache/maven-checkstyle-plugin/releases)
- [Commits](apache/maven-checkstyle-plugin@maven-checkstyle-plugin-3.5.0...maven-checkstyle-plugin-3.6.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-checkstyle-plugin
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @yuluo-yx
chore(deps): bump io.modelcontextprotocol.sdk:mcp-bom
0bba41d 
Bumps [io.modelcontextprotocol.sdk:mcp-bom](https://github.com/modelcontextprotocol/java-sdk) from 2.0.0 to 2.0.1.
- [Release notes](https://github.com/modelcontextprotocol/java-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/java-sdk/blob/main/CHANGELOG.md)
- [Commits](modelcontextprotocol/java-sdk@v2.0.0...v2.0.1)

---
updated-dependencies:
- dependency-name: io.modelcontextprotocol.sdk:mcp-bom
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @yuluo-yx
chore(deps): bump org.codehaus.mojo:flatten-maven-plugin
5773c59 
Bumps [org.codehaus.mojo:flatten-maven-plugin](https://github.com/mojohaus/flatten-maven-plugin) from 1.5.0 to 1.8.0.
- [Release notes](https://github.com/mojohaus/flatten-maven-plugin/releases)
- [Commits](mojohaus/flatten-maven-plugin@1.5.0...1.8.0)

---
updated-dependencies:
- dependency-name: org.codehaus.mojo:flatten-maven-plugin
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @yuluo-yx
chore(deps): bump org.springframework.ai:spring-ai-bom
9cc1dec 
Bumps [org.springframework.ai:spring-ai-bom](https://github.com/spring-projects/spring-ai) from 2.0.0 to 2.0.1.
- [Release notes](https://github.com/spring-projects/spring-ai/releases)
- [Changelog](https://github.com/spring-projects/spring-ai/blob/main/release-train-settings.xml)
- [Commits](spring-projects/spring-ai@v2.0.0...v2.0.1)

---
updated-dependencies:
- dependency-name: org.springframework.ai:spring-ai-bom
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @yuluo-yx
chore(deps-dev): bump org.apache.maven.plugins:maven-failsafe-plugin
72d5deb 
Bumps [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) from 3.1.2 to 3.5.6.
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.1.2...surefire-3.5.6)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.5.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @yuluo-yx
chore(deps): bump com.diffplug.spotless:spotless-maven-plugin
f06994d 
Bumps [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) from 2.44.5 to 2.46.1.
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/2.44.5...maven/2.46.1)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 2.46.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @yuluo-yx
chore(deps): bump commons-io:commons-io from 2.21.0 to 2.22.0
6100235 
Bumps commons-io:commons-io from 2.21.0 to 2.22.0.

---
updated-dependencies:
- dependency-name: commons-io:commons-io
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @yuluo-yx
chore(deps-dev): bump org.springdoc:springdoc-openapi-maven-plugin
25390fd 
Bumps [org.springdoc:springdoc-openapi-maven-plugin](https://github.com/springdoc/springdoc-openapi-maven-plugin) from 1.4 to 1.5.
- [Commits](springdoc/springdoc-openapi-maven-plugin@v1.4...v1.5)

---
updated-dependencies:
- dependency-name: org.springdoc:springdoc-openapi-maven-plugin
  dependency-version: '1.5'
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @yuluo-yx
chore(deps): bump org.apache.maven.plugins:maven-jar-plugin
e1fb1cf 
Bumps [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) from 3.3.0 to 3.5.1.
- [Release notes](https://github.com/apache/maven-jar-plugin/releases)
- [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.3.0...maven-jar-plugin-3.5.1)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-jar-plugin
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @yuluo-yx
chore(deps-dev): bump com.mycila:license-maven-plugin from 4.1 to 4.6
5e67978 
Bumps [com.mycila:license-maven-plugin](https://github.com/mathieucarbou/license-maven-plugin) from 4.1 to 4.6.
- [Release notes](https://github.com/mathieucarbou/license-maven-plugin/releases)
- [Changelog](https://github.com/mathieucarbou/license-maven-plugin/blob/master/docs/releases.md)
- [Commits](mathieucarbou/license-maven-plugin@license-maven-plugin-4.1...license-maven-plugin-4.6)

---
updated-dependencies:
- dependency-name: com.mycila:license-maven-plugin
  dependency-version: '4.6'
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @yuluo-yx
chore(deps): bump org.apache.maven.plugins:maven-source-plugin
663bd22 
Bumps [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) from 3.3.0 to 3.4.0.
- [Release notes](https://github.com/apache/maven-source-plugin/releases)
- [Commits](apache/maven-source-plugin@maven-source-plugin-3.3.0...maven-source-plugin-3.4.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-source-plugin
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @yuluo-yx
chore(deps): bump org.jspecify:jspecify from 1.0.0 to 1.0.1
05fafd5 
Bumps [org.jspecify:jspecify](https://github.com/jspecify/jspecify) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/jspecify/jspecify/releases)
- [Commits](jspecify/jspecify@v1.0.0...v1.0.1)

---
updated-dependencies:
- dependency-name: org.jspecify:jspecify
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @yuluo-yx
chore(deps): bump com.github.docker-java:docker-java-bom
cddc080 
Bumps [com.github.docker-java:docker-java-bom](https://github.com/docker-java/docker-java) from 3.5.3 to 3.7.1.
- [Release notes](https://github.com/docker-java/docker-java/releases)
- [Changelog](https://github.com/docker-java/docker-java/blob/main/CHANGELOG.md)
- [Commits](docker-java/docker-java@3.5.3...3.7.1)

---
updated-dependencies:
- dependency-name: com.github.docker-java:docker-java-bom
  dependency-version: 3.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @yuluo-yx
chore(deps-dev): bump graalvm.polyglot.version from 24.2.1 to 24.2.2
047a4ae 
Bumps `graalvm.polyglot.version` from 24.2.1 to 24.2.2.

Updates `org.graalvm.polyglot:polyglot` from 24.2.1 to 24.2.2
- [Release notes](https://github.com/oracle/graal/releases)
- [Commits](oracle/graal@vm-24.2.1...vm-24.2.2)

Updates `org.graalvm.polyglot:python-community` from 24.2.1 to 24.2.2
- [Release notes](https://github.com/oracle/graal/releases)
- [Commits](oracle/graal@vm-24.2.1...vm-24.2.2)

---
updated-dependencies:
- dependency-name: org.graalvm.polyglot:polyglot
  dependency-version: 24.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: org.graalvm.polyglot:python-community
  dependency-version: 24.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @yuluo-yx
chore(deps-dev): bump org.jacoco:jacoco-maven-plugin
d12ac09 
Bumps [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) from 0.8.10 to 0.8.15.
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.10...v0.8.15)

---
updated-dependencies:
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@yuluo-yx
fix(ci): use renamed extensions repository
e8f966d
@yuluo-yx
fix(agent): support Spring AI 2.0.1 media data
b8f1026
@yuluo-yx
fix(nacos): preserve Spring AI strict option
5698881
@yuluo-yx
fix(build): migrate license plugin configuration
cb379f7
@github-actions github-actions Bot added area/infra 工程基础设施：构建、发布与仓库维护 area/core 核心：智能体运行时基础与公共接口 labels Aug 30, 2026
@yuluo-yx yuluo-yx changed the title chore(deps): consolidate dependency updates chore: consolidate dependency updates Aug 30, 2026
@yuluo-yx
yuluo-yx merged commit f787e4f into main Aug 30, 2026
3 of 4 checks passed
@yuluo-yx
yuluo-yx deleted the chore/deps-batch-20260830 branch August 30, 2026 04:03
This was referenced Aug 30, 2026
Closed
Closed
This was referenced Aug 30, 2026
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
yuluo-yx added a commit that referenced this pull request Oct 17, 2026
@yuluo-yx
Merge pull request #50 from agentic-spring-ai/chore/deps-batch-20260830
c258b33 
chore: consolidate dependency updates
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

area/core 核心：智能体运行时基础与公共接口 area/infra 工程基础设施：构建、发布与仓库维护

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@yuluo-yx