[DT-400-gradle]: Bump the minor-patch-dependencies group across 1 directory with 7 updates

[dependabot]

Bumps the minor-patch-dependencies group with 7 updates in the / directory:

Package	From	To
com.google.cloud:libraries-bom	26.80.0	26.82.0
bio.terra:stairway-gcp	1.1.63-SNAPSHOT	1.1.69-SNAPSHOT
bio.terra:stairway-azure	1.1.63-SNAPSHOT	1.1.69-SNAPSHOT
com.github.ben-manes.versions	0.53.0	0.54.0
org.sonarqube	7.2.3.7755	7.3.0.8198
org.springframework.boot	3.5.13	3.5.14
gradle-wrapper	9.4.1	9.5.1

Updates com.google.cloud:libraries-bom from 26.80.0 to 26.82.0

Release notes

Sourced from com.google.cloud:libraries-bom's releases.

v26.82.0

26.82.0 (2026-05-12)

Datastore V3 Major Version Changes

Datastore V3 is now available in Maven Central and brings the following changes:

• gRPC transport is enabled by default (swapped from HttpJson transport)
• gRPC default ChannelPool configurations updated to dynamically resize and better support initial load and request spikes

The major version bump did not remove any major functionality. This major version bump primarily serves as a signal regarding the default transport swap and the possible behavioral breaking change. As part of the major version bump, we have removed the existing methods marked as @Deprecated from the client library and bumped the classes and methods marked as @ObsoleteApi to be @Deprecated.

Impact

Transport Swap

If you are an existing gRPC Datastore user, you should not experience any behavioral changes from this upgrade. Please monitor your applications after the upgrade.

If you are an existing HttpJson Datastore user, the default transport has been changed. If you cannot swap to use gRPC, then you will need to make the following changes to explicitly set the HttpTransportOptions if you wish to continue to use HttpJson.

   DatastoreOptions httpJsonTransportOptions =
        DatastoreOptions.newBuilder()
            .setTransportOptions(HttpTransportOptions.newBuilder().build())
            .build();
    Datastore datastore = httpJsonTransportOptions.getService();

New Feature: Client-Side Metrics

Datastore V3 introduces built-in client-side observability to help you monitor API performance and troubleshoot latency. The client library can now automatically record and export metrics (such as operation latencies and attempt counts) to Google Cloud Monitoring using a private OpenTelemetry pipeline. Additionally, you can configure the client to route these metrics to your own custom OpenTelemetry backend.

Note: Built-in export to Google Cloud Monitoring is currently disabled by default. To use this feature, you must explicitly enable it via DatastoreOpenTelemetryOptions.

@Deprecated annotation

Since we have added new methods with the @Deprecated annotation, you can experience new CI failures if you fail compilation from deprecated usages. The client library has marked the alternatives that you can migrate to properly move off these newly deprecated cases.

Dependencies

• update dependency com.google.cloud:gapic-libraries-bom to v1.86.1 (#7483) (14ae7a5)

v26.81.0

GCP Libraries BOM 26.81.0

Here are the differences from the previous version (26.80.0)

New Addition

• com.google.cloud:google-cloud-health:0.1.0

... (truncated)

Commits

• 2a7a6e0 chore: release main (#7484)
• 14ae7a5 deps: update dependency com.google.cloud:gapic-libraries-bom to v1.86.1 (#7483)
• 2b929a7 chore: release main (#7481)
• 083ab17 chore: release main (#7479)
• 33c49cf deps: update dependency com.google.guava:guava-bom to v33.6.0-jre (#7451)
• d60e8eb deps: update dependency com.google.guava:guava-bom to v33.6.0-jre (#7452)
• 87df62b chore: release main (#7459)
• c0a013b deps: update dependency com.google.cloud:gapic-libraries-bom to v1.86.0 (#7462)
• 4bdba3c deps: update dependency com.google.cloud:google-cloud-firestore-bom to v3.42....
• a1abc40 deps: update dependency com.google.cloud:google-cloud-pubsublite-bom to v1.16...
• Additional commits viewable in compare view

Updates bio.terra:stairway-gcp from 1.1.63-SNAPSHOT to 1.1.69-SNAPSHOT

Updates bio.terra:stairway-azure from 1.1.63-SNAPSHOT to 1.1.69-SNAPSHOT

Updates bio.terra:stairway-azure from 1.1.63-SNAPSHOT to 1.1.69-SNAPSHOT

Updates com.github.ben-manes.versions from 0.53.0 to 0.54.0

Updates org.sonarqube from 7.2.3.7755 to 7.3.0.8198

Updates org.springframework.boot from 3.5.13 to 3.5.14

Release notes

Sourced from org.springframework.boot's releases.

v3.5.14

🐞 Bug Fixes

• ApplicationPidFileWriter does not handle symlinks correctly #50173
• RandomValuePropertySource is not suitable for secrets #50172
• Cassandra auto-configuration misconfigures CqlSessionBuilder #50171
• ApplicationTemp does not handle symlinks correctly #50170
• Remote DevTools performs comparison incorrectly #50169
• spring.rabbitmq.ssl.verify-hostname is applied inconsistently #50168
• EnversRevisionRepositoriesRegistrar should reuse @EnableEnversRepositories rather than configuring the JPA counterpart #50035
• Annotations like @Ssl don't work on @Bean methods when using @ServiceConnection #50033
• Whole number values are ignored when configuring min and max expected values and SLO boundaries for a distribution summary meter #50021
• WebFlux Cloud Foundry links endpoint includes query string from received request in resolved links #50008
• 500 response from env endpoint when supplied pattern is invalid #49942
• HTTP method is lost when configuring excludes in EndpointRequest #49885
• Docker Compose support doesn't work with apache/artemis image #49865
• Honor HttpMethod for reactive additional endpoint paths #49864
• Docker Compose support doesn't work with apache/activemq image #49863
• Imports on a containing test class are ignored when a nested class has imports #49860

📔 Documentation

• Link to the observability section of the Lettuce documentation is broken #50092
• Javadoc for StaticResourceLocation.FAVICON doesn't describe icons location #50083
• MySamlRelyingPartyConfiguration is missing a Kotlin sample #50023
• Incorrect default value for management.httpexchanges.recording.include in configuration metadata #50010
• Link to the Kubernetes documentation when discussing startup probes #50007
• Update docs to encourage Java fundamentals for beginners that prefer to learn that way #49895
• Clarify that configuration property default values are not available through the Environment #49835

🔨 Dependency Upgrades

• Upgrade to Groovy 4.0.31 #49905
• Upgrade to Hibernate 6.6.49.Final #50140
• Upgrade to Jaxen 2.0.1 #50109
• Upgrade to Jaybird 6.0.5 #49907
• Upgrade to Jetty 12.0.34 #49908
• Upgrade to jOOQ 3.19.32 #50110
• Upgrade to Lombok 1.18.46 #50148
• Upgrade to MariaDB 3.5.8 #49909
• Upgrade to Micrometer 1.15.11 #49961
• Upgrade to Micrometer Tracing 1.5.11 #49962
• Upgrade to MySQL 9.7.0 #50161
• Upgrade to Neo4j Java Driver 5.28.13 #50074
• Upgrade to Reactor Bom 2024.0.17 #49963
• Upgrade to Spring AMQP 3.2.10 #49964
• Upgrade to Spring Authorization Server 1.5.7 #49965
• Upgrade to Spring Data Bom 2025.0.11 #49966
• Upgrade to Spring Framework 6.2.18 #49967
• Upgrade to Spring Kafka 3.3.15 #50129

... (truncated)

Commits

• 7d7b3ac Release v3.5.14
• 9dc5aa2 Polish
• f533a45 Do not follow symlinks when writing PID file
• f3b8eb0 Use SecureRandom in RandomValuePropertySource
• e22083a Enable hostname verification for SSL connections to Cassandra
• 5ceb1a2 Improve ApplicationTemp's temporary directory creation
• 4b0862c Use constant-time comparison for remote DevTools secret
• e4febe2 Apply verify-hostname consistently
• 2c2ffe5 Fix Windows test failure
• 0046a44 Protect against corrupt buildpack archives
• Additional commits viewable in compare view

Updates gradle-wrapper from 9.4.1 to 9.5.1

Release notes

Sourced from gradle-wrapper's releases.

9.5.1

The Gradle team is excited to announce Gradle 9.5.1.

Here are the highlights of this release:

• Task provenance in reports and failure messages
• Type-safe accessors for precompiled Kotlin Settings plugins

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: atm1020, mataha, Adam, Attila Kelemen, Benedikt Ritter, Björn Kautler, Caro Silva Rode, CHANHAN, Dmitry Nezavitin, Eng Zer Jun, KugelLibelle, Madalin Valceleanu, Markus Gaisbauer, Oliver Kopp, Philip Wedemann, ploober, Roberto Perez Alcolea, Rohit Anand, Suvrat Acharya, Ujwal Suresh Vanjare, Victor Merkulov

Upgrade instructions

Switch your build to use Gradle 9.5.1 by updating your wrapper:

./gradlew wrapper --gradle-version=9.5.1 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.5.0

... (truncated)

Commits

• fd78213 Update Documentation Infrastructure: Fix scrolling issue in user manual (#37861)
• 7758437 fix scroll
• 2fd605f Only try to run as worker thread in DefaultBuildOperationQueue (#37845)
• af69849 Release notes for Gradle 9.5.1 (#37853)
• f4d9d03 Release notes for Gradle 9.5.1
• 01eda3a Address review feedback on worker-lease retry changes
• 7024e15 Revert enrich file visitor with size info on release branch (#37848)
• d51476f Fix tryRunAsWorkerThread null-return test to match contract
• 090ebab Revert "Add getLength() to FilePropertyVisitor.VisitState"
• bceab24 Revert "Fix annotation"
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
org.springframework.boot	[>= 4.a, < 5]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud