From 2ae1c76b0682a3ce34cb355c1be89ea04bc9d816 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 10 Jun 2026 04:55:11 +0000 Subject: [PATCH] build(deps): Bump the dev-dependencies group with 4 updates Bumps the dev-dependencies group with 4 updates: [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j), software.amazon.awssdk:dynamodb, software.amazon.awssdk:dynamodb-enhanced and [org.springframework.security:spring-security-test](https://github.com/spring-projects/spring-security). Updates `com.webauthn4j:webauthn4j-core` from 0.31.6.RELEASE to 0.31.7.RELEASE - [Release notes](https://github.com/webauthn4j/webauthn4j/releases) - [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.31.6.RELEASE...0.31.7.RELEASE) Updates `software.amazon.awssdk:dynamodb` from 2.46.6 to 2.46.7 Updates `software.amazon.awssdk:dynamodb-enhanced` from 2.46.6 to 2.46.7 Updates `software.amazon.awssdk:dynamodb-enhanced` from 2.46.6 to 2.46.7 Updates `org.springframework.security:spring-security-test` from 7.0.5 to 7.1.0 - [Release notes](https://github.com/spring-projects/spring-security/releases) - [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc) - [Commits](https://github.com/spring-projects/spring-security/compare/7.0.5...7.1.0) --- updated-dependencies: - dependency-name: com.webauthn4j:webauthn4j-core dependency-version: 0.31.7.RELEASE dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: software.amazon.awssdk:dynamodb dependency-version: 2.46.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: software.amazon.awssdk:dynamodb-enhanced dependency-version: 2.46.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: software.amazon.awssdk:dynamodb-enhanced dependency-version: 2.46.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: org.springframework.security:spring-security-test dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] --- gradle/libs.versions.toml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml index f6a5ce1..dace5f3 100644 --- a/gradle/libs.versions.toml +++ b/gradle/libs.versions.toml @@ -20,7 +20,7 @@ google-java-format = "1.25.2" jspecify = "1.0.0" # Runtime — pk-auth-core -webauthn4j = "0.31.6.RELEASE" +webauthn4j = "0.31.7.RELEASE" nimbus-jose-jwt = "10.9.1" jackson = "3.2.0" jackson-annotations = "2.22" @@ -36,7 +36,7 @@ jdbi = "3.53.0" flyway = "12.8.1" postgresql = "42.7.11" hikaricp = "7.0.2" -aws-sdk = "2.46.6" +aws-sdk = "2.46.7" testcontainers = "1.21.4" # Spring Boot adapter (Phase 8). Spring Boot 4 / Spring Security 7. Spring Boot 4 standardized @@ -45,7 +45,7 @@ testcontainers = "1.21.4" # `PkAuthObjectMappers.pkAuthModule()` as a Spring bean. Brief §6.10 originally specified # 3.5.x / 6.5.x; the upgrade landed as a deliberate framework refresh. spring-boot = "4.0.6" -spring-security = "7.0.5" +spring-security = "7.1.0" # H2 in the demo so reviewers can run the spring-boot-demo without an external Postgres. # Confined to the demo's runtime; the starter does not pull it in. h2 = "2.4.240"