From 4b8d11e99b0a68325ba3b0fda8a29d3f5e49713b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 5 Jun 2026 19:43:32 +0000 Subject: [PATCH] build(deps): bump the minor-and-patch group across 1 directory with 6 updates Bumps the minor-and-patch group with 6 updates in the /backend directory: | Package | From | To | | --- | --- | --- | | [com.google.cloud:spring-cloud-gcp-dependencies](https://github.com/GoogleCloudPlatform/spring-cloud-gcp) | `7.4.6` | `7.4.9` | | [org.springframework.ai:spring-ai-bom](https://github.com/spring-projects/spring-ai) | `1.1.6` | `1.1.7` | | [com.codeborne:selenide](https://github.com/selenide/selenide) | `7.16.1` | `7.16.2` | | [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) | `6.6.50.Final` | `6.6.52.Final` | | [io.hypersistence:hypersistence-utils-hibernate-63](https://github.com/vladmihalcea/hypersistence-utils) | `3.15.2` | `3.15.3` | | software.amazon.awssdk:bom | `2.45.1` | `2.46.4` | Updates `com.google.cloud:spring-cloud-gcp-dependencies` from 7.4.6 to 7.4.9 - [Release notes](https://github.com/GoogleCloudPlatform/spring-cloud-gcp/releases) - [Changelog](https://github.com/GoogleCloudPlatform/spring-cloud-gcp/blob/v7.4.9/CHANGELOG.md) - [Commits](https://github.com/GoogleCloudPlatform/spring-cloud-gcp/compare/v7.4.6...v7.4.9) Updates `org.springframework.ai:spring-ai-bom` from 1.1.6 to 1.1.7 - [Release notes](https://github.com/spring-projects/spring-ai/releases) - [Commits](https://github.com/spring-projects/spring-ai/compare/v1.1.6...v1.1.7) Updates `com.codeborne:selenide` from 7.16.1 to 7.16.2 - [Release notes](https://github.com/selenide/selenide/releases) - [Changelog](https://github.com/selenide/selenide/blob/main/CHANGELOG.md) - [Commits](https://github.com/selenide/selenide/compare/v7.16.1...v7.16.2) Updates `org.hibernate.orm:hibernate-core` from 6.6.50.Final to 6.6.52.Final - [Release notes](https://github.com/hibernate/hibernate-orm/releases) - [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.52/changelog.txt) - [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.50...6.6.52) Updates `io.hypersistence:hypersistence-utils-hibernate-63` from 3.15.2 to 3.15.3 - [Changelog](https://github.com/vladmihalcea/hypersistence-utils/blob/master/changelog.txt) - [Commits](https://github.com/vladmihalcea/hypersistence-utils/compare/hypersistence-utils-parent-3.15.2...hypersistence-utils-parent-3.15.3) Updates `software.amazon.awssdk:bom` from 2.45.1 to 2.46.4 --- updated-dependencies: - dependency-name: com.codeborne:selenide dependency-version: 7.16.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: com.google.cloud:spring-cloud-gcp-dependencies dependency-version: 7.4.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: io.hypersistence:hypersistence-utils-hibernate-63 dependency-version: 3.15.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: org.hibernate.orm:hibernate-core dependency-version: 6.6.52.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: org.springframework.ai:spring-ai-bom dependency-version: 1.1.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: software.amazon.awssdk:bom dependency-version: 2.46.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] --- backend/build.gradle | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/backend/build.gradle b/backend/build.gradle index 73a8d92e..7ae32609 100644 --- a/backend/build.gradle +++ b/backend/build.gradle @@ -27,7 +27,7 @@ repositories { // Spring AI BOM for dependency management ext { - springAiVersion = '1.1.6' + springAiVersion = '1.1.7' // セキュリティ修正: Spring Boot 管理下の推移的依存をパッチ版へ上書き（Dependabot 対応） set('tomcat.version', '10.1.55') // CVE: GHSA-5m62-pw8w-7w9f 他 (Critical) set('netty.version', '4.1.133.Final') // CVE: GHSA-57rv-r2g8-2cj3 他 (High) @@ -37,7 +37,7 @@ dependencyManagement { imports { // 順序重要: 後に宣言した BOM が優先される // spring-cloud-gcp が古い google-cloud-vertexai を引き込むため、spring-ai-bom を後に配置 - mavenBom "com.google.cloud:spring-cloud-gcp-dependencies:7.4.6" + mavenBom "com.google.cloud:spring-cloud-gcp-dependencies:7.4.9" mavenBom "org.springframework.ai:spring-ai-bom:${springAiVersion}" } } @@ -73,8 +73,8 @@ dependencies { } implementation 'commons-io:commons-io:2.22.0' implementation 'org.freemarker:freemarker:2.3.34' - implementation 'com.codeborne:selenide:7.16.1' - implementation 'org.hibernate.orm:hibernate-core:6.6.50.Final' + implementation 'com.codeborne:selenide:7.16.2' + implementation 'org.hibernate.orm:hibernate-core:6.6.52.Final' // implementation 'jakarta.servlet:jakarta.servlet-api:5.0.0' // Managed by Spring Boot implementation 'jakarta.validation:jakarta.validation-api:3.1.1' implementation 'jakarta.persistence:jakarta.persistence-api:3.1.0' // 3.2.xはHibernate 7.0向け、Spring Boot 3.xは3.1.xが必要 @@ -83,7 +83,7 @@ dependencies { // Redis (分散レート制限・セッション管理) implementation 'org.springframework.boot:spring-boot-starter-data-redis:3.5.14' // lettuce-core: Spring Bootの依存関係管理に任せる（6.3.xはSpring Boot 3.5+と互換性なし） - implementation 'io.hypersistence:hypersistence-utils-hibernate-63:3.15.2' + implementation 'io.hypersistence:hypersistence-utils-hibernate-63:3.15.3' // Azure Communication Services (メール送信) implementation 'com.azure:azure-communication-email:1.1.3' @@ -124,7 +124,7 @@ dependencies { implementation 'com.google.cloud:spring-cloud-gcp-starter-storage' // AWS SDK for S3 (Cloudflare R2 互換) - implementation platform('software.amazon.awssdk:bom:2.45.1') + implementation platform('software.amazon.awssdk:bom:2.46.4') implementation 'software.amazon.awssdk:s3' annotationProcessor 'org.springframework.boot:spring-boot-configuration-processor'