Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 27, 2025

Bumps the spring-boot-dependencies group with 1 update: io.spring.dependency-management.

Updates io.spring.dependency-management from 1.1.3 to 1.1.7

Release notes

Sourced from io.spring.dependency-management's releases.

v1.1.7

🐞 Bug Fixes

  • Dependency management report task produces a deprecation warning with Gradle 8.12-rc-1 #400
  • ExclusionResolver makes assumptions that won't hold true with Gradle 9 #394

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​octylFractal

v1.1.6

🐞 Bug Fixes

  • Applying Maven-style exclusions may cause a deprecation warning with Gradle 8.8 #384

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​quaff

v1.1.5

🐞 Bug Fixes

  • When a dependency has been substituted by changing its target, its version is managed based on its original group and artifact IDs #383
  • Plugin triggers a deprecation warning for LenientConfiguration#getArtifacts(Spec) with Gradle 8.8 #381
  • Exclusions are calculated unnecessarily for non-transitive configurations #372

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​fp7

v1.1.4

🐞 Bug Fixes

  • Dependencies declared in a platform are excluded unless applyMavenExclusions is set to false #368
  • Invalid pom is produced when using both the dependency management plugin and Gradle's bom support #257

📔 Documentation

  • Typo in "Importing a Maven Bom" example #366
Commits
  • 99c6a87 Release v1.1.7
  • e870ef7 Address another deprecation warning in report take
  • fc43f90 Stop report task from triggering a deprecation warning
  • 0d1b43d Merge pull request #394 from octylFractal
  • 09853a2 Check for ModuleComponentIdentifier explicitly
  • e85cd28 Next development version (v1.1.7-SNAPSHOT)
  • caad92a Apply exclusions earlier to avoid deprecation warning
  • 68f86ea Merge pull request #387 from quaff
  • 4d44a45 Remove stray backtick
  • 90d9e1a Rename property to address naming clash
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added scope/backend Related to backend changes type/dependencies A pull request/issue dedicated to updating the dependency(-ies) labels Aug 27, 2025
@dependabot dependabot bot requested a review from a team as a code owner August 27, 2025 05:02
@dependabot dependabot bot added scope/backend Related to backend changes type/dependencies A pull request/issue dedicated to updating the dependency(-ies) labels Aug 27, 2025
@kapybro kapybro bot added status/triage Issues pending maintainers triage status/triage/manual Manual triage in progress status/triage/completed Automatic triage completed and removed status/triage Issues pending maintainers triage labels Aug 27, 2025
@Haarolean Haarolean enabled auto-merge (squash) August 29, 2025 00:39
Bumps the spring-boot-dependencies group with 1 update: [io.spring.dependency-management](https://github.com/spring-gradle-plugins/dependency-management-plugin).


Updates `io.spring.dependency-management` from 1.1.3 to 1.1.7
- [Release notes](https://github.com/spring-gradle-plugins/dependency-management-plugin/releases)
- [Commits](spring-gradle-plugins/dependency-management-plugin@v1.1.3...v1.1.7)

---
updated-dependencies:
- dependency-name: io.spring.dependency-management
  dependency-version: 1.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring-boot-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/gradle/spring-boot-dependencies-a4fc79d5ca branch from 17ce0a1 to da5a9c5 Compare September 8, 2025 09:23
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 10, 2025

None of your dependencies match this group anymore, you may need to update your configuration file to remove it or change its rules.

@dependabot dependabot bot closed this Sep 10, 2025
auto-merge was automatically disabled September 10, 2025 17:15

Pull request was closed

@dependabot dependabot bot deleted the dependabot/gradle/spring-boot-dependencies-a4fc79d5ca branch September 10, 2025 17:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
scope/backend Related to backend changes status/triage/completed Automatic triage completed status/triage/manual Manual triage in progress type/dependencies A pull request/issue dedicated to updating the dependency(-ies)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant