Skip to content

build(deps): bump the minor-and-patch group across 1 directory with 6 updates #308

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: master
Choose a base branch
from
Open

build(deps): bump the minor-and-patch group across 1 directory with 6 updates #308

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions backend/build.gradle
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ repositories {

// Spring AI BOM for dependency management
ext {
springAiVersion = '1.1.6'
springAiVersion = '1.1.7'
// セキュリティ修正: Spring Boot 管理下の推移的依存をパッチ版へ上書き（Dependabot 対応）
set('tomcat.version', '10.1.55') // CVE: GHSA-5m62-pw8w-7w9f 他 (Critical)
set('netty.version', '4.1.133.Final') // CVE: GHSA-57rv-r2g8-2cj3 他 (High)
Expand All @@ -37,7 +37,7 @@ dependencyManagement {
imports {
// 順序重要: 後に宣言した BOM が優先される
// spring-cloud-gcp が古い google-cloud-vertexai を引き込むため、spring-ai-bom を後に配置
mavenBom "com.google.cloud:spring-cloud-gcp-dependencies:7.4.6"
mavenBom "com.google.cloud:spring-cloud-gcp-dependencies:7.4.9"
mavenBom "org.springframework.ai:spring-ai-bom:${springAiVersion}"
}
}
Expand Down Expand Up @@ -73,8 +73,8 @@ dependencies {
}
implementation 'commons-io:commons-io:2.22.0'
implementation 'org.freemarker:freemarker:2.3.34'
implementation 'com.codeborne:selenide:7.16.1'
implementation 'org.hibernate.orm:hibernate-core:6.6.50.Final'
implementation 'com.codeborne:selenide:7.16.2'
implementation 'org.hibernate.orm:hibernate-core:6.6.52.Final'
// implementation 'jakarta.servlet:jakarta.servlet-api:5.0.0' // Managed by Spring Boot
implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
implementation 'jakarta.persistence:jakarta.persistence-api:3.1.0' // 3.2.xはHibernate 7.0向け、Spring Boot 3.xは3.1.xが必要
Expand All @@ -83,7 +83,7 @@ dependencies {
// Redis (分散レート制限・セッション管理)
implementation 'org.springframework.boot:spring-boot-starter-data-redis:3.5.14'
// lettuce-core: Spring Bootの依存関係管理に任せる（6.3.xはSpring Boot 3.5+と互換性なし）
implementation 'io.hypersistence:hypersistence-utils-hibernate-63:3.15.2'
implementation 'io.hypersistence:hypersistence-utils-hibernate-63:3.15.3'

// Azure Communication Services (メール送信)
implementation 'com.azure:azure-communication-email:1.1.3'
Expand Down Expand Up @@ -124,7 +124,7 @@ dependencies {
implementation 'com.google.cloud:spring-cloud-gcp-starter-storage'

// AWS SDK for S3 (Cloudflare R2 互換)
implementation platform('software.amazon.awssdk:bom:2.45.1')
implementation platform('software.amazon.awssdk:bom:2.46.4')
implementation 'software.amazon.awssdk:s3'

annotationProcessor 'org.springframework.boot:spring-boot-configuration-processor'
Expand Down
Loading