Skip to content

chore: [DevOps] bump the production-minor-patch group with 2 updates - #1266

Merged
sap-cloud-sdk-bot[bot] merged 1 commit into
mainfrom
dependabot/maven/main/production-minor-patch-3b187a75d4
Sep 1, 2026
Merged

chore: [DevOps] bump the production-minor-patch group with 2 updates#1266
sap-cloud-sdk-bot[bot] merged 1 commit into
mainfrom
dependabot/maven/main/production-minor-patch-3b187a75d4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-minor-patch group with 2 updates: org.openapitools:openapi-generator and com.sap.cloud.security:java-bom.

Updates org.openapitools:openapi-generator from 7.24.0 to 7.25.0

Release notes

Sourced from org.openapitools:openapi-generator's releases.

v7.25.0 released

v7.25.0 stable release (breaking changes with fallbacks) comes with 240+ enhancements and bug fixes.

Below are the highlights of the changes. For a full list of changes, please refer to the "Pull Request" tab.

General

  • Update parser to newer version (2.1.46) #24731
  • Fix missing imports for schemaMapping in API interfaces #24672
  • [GRADLE-WRAPPER] Generator status message visibility update #24670
  • Stable hash for determining if input specification changed (Maven Plugin) #24645
  • fix(normalizer): restore behavior of clearing a oneOf if the schema content cannot currently be used by the generator #24585
  • [generators] Give clients a way to inject vendor overrides #24571
  • Fix response isArray, isMap flags #24566
  • Move shared git push template to _common #24565
  • Add logic to handle any type (3.1) with additional properties #24559
  • Normalize map schema (3.1 spec) #24558
  • fix: keep allOf members that have properties alongside a validation keyword #24551
  • feat(core): add splitOperationsByContentType option to divide operations #23935

C#

  • fix(csharp): make generichost oneOf constructors public #24700
  • [csharp][generichost] Allow property accessor overrides #24652
  • [csharp][generichost] Refactor AsModel template #24650
  • [csharp][generichost] Make host configuration optional #24451
  • [csharp][generichost] Update partial to create HttpClient #24354

C++

  • fix(cpp-boost-beast): validate request components #24351

Crystal

  • fix(crystal): support Crystal 1.21 #24748

Dart

  • Fix nullable query param #24738
  • [dart] Do not convert format: date to UTC before formatting #24706
  • Fix anyOf serialization in dart-dio #24605
  • Fix Dart native nullable number deserialization (#20238) #24386
  • [BUG][DART] PATCH tri-state optional handling #23696

Go

  • fix(go): emit the oneOf no-match error once instead of once per member #24683
  • Update go-server deps #24527
  • Fix Golang pattern validation with regex fails on commas #24349
  • fix(golang): use datatype only for enums instead of format #24337

Java

  • [SPRING;KOTLIN-SPRING] Fix: enhance pageable parameter detection with OpenAPI reference resolution #24758
  • [JAVA] [Spring] JSpecify, fix nullable + required field #24711
  • Add support for interface only with vertx #24655

... (truncated)

Commits
  • ef964b0 v7.25.0 release (#24763)
  • 61c6a9a Fix missing imports for schemaMapping in API interfaces (#24672)
  • bb7c33b fix: keep allOf members that have properties alongside a validation keyword (...
  • b20cbb0 fix(spring): preserve original operation ID for pageable (#24724)
  • 0c3e1f7 [python] write back the fully qualified apiPackage/modelPackage (#24739)
  • 8674968 [FIX][KOTLIN][SPRING] mark @​param:JsonProperty as required in generated model...
  • da510a9 fix(spring;kotlin-spring): enhance pageable parameter detection with OpenAPI ...
  • 5dadfd8 [SPRING;KOTLIN-SPRING] bugfix - honor x-spring-paginated for spring-cloud (Fe...
  • 09bd211 [scala-sttp4-jsoniter] bump jsoniter-scala to 2.40.1 and sbt to 1.13.0 (#24759)
  • be73ed9 fix(kotlin-client): emit parameter table header before first parameter in jvm...
  • Additional commits viewable in compare view

Updates com.sap.cloud.security:java-bom from 4.1.0 to 4.1.1

Release notes

Sourced from com.sap.cloud.security:java-bom's releases.

4.1.1

  • Fix null X-App-Tid request header sent to IAS JWKS endpoint when token lacks app_tid claim
    • SapIdJwtSignatureValidator unconditionally placed the app_tid claim value as the X-App-Tid request header. When the claim is absent, token.getAppTid() returns null, causing a NullPointerException or a literal "null" header value on the outgoing JWKS request
    • The header is now only added when app_tid is present in the token; tokens without the claim omit the header entirely, which is the correct behaviour for provider-tenant requests
Changelog

Sourced from com.sap.cloud.security:java-bom's changelog.

4.1.1

  • Fix null X-App-Tid request header sent to IAS JWKS endpoint when token lacks app_tid claim
    • SapIdJwtSignatureValidator unconditionally placed the app_tid claim value as the X-App-Tid request header. When the claim is absent, token.getAppTid() returns null, causing a NullPointerException or a literal "null" header value on the outgoing JWKS request
    • The header is now only added when app_tid is present in the token; tokens without the claim omit the header entirely, which is the correct behaviour for provider-tenant requests
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-minor-patch group with 2 updates: [org.openapitools:openapi-generator](https://github.com/openapitools/openapi-generator) and [com.sap.cloud.security:java-bom](https://github.com/SAP/cloud-security-xsuaa-integration).


Updates `org.openapitools:openapi-generator` from 7.24.0 to 7.25.0
- [Release notes](https://github.com/openapitools/openapi-generator/releases)
- [Changelog](https://github.com/OpenAPITools/openapi-generator/blob/master/docs/release-summary.md)
- [Commits](OpenAPITools/openapi-generator@v7.24.0...v7.25.0)

Updates `com.sap.cloud.security:java-bom` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/SAP/cloud-security-xsuaa-integration/releases)
- [Changelog](https://github.com/SAP/cloud-security-services-integration-library/blob/main/CHANGELOG.md)
- [Commits](SAP/cloud-security-services-integration-library@4.1.0...4.1.1)

---
updated-dependencies:
- dependency-name: org.openapitools:openapi-generator
  dependency-version: 7.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: com.sap.cloud.security:java-bom
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 31, 2026
@sap-cloud-sdk-bot
sap-cloud-sdk-bot Bot enabled auto-merge (squash) September 1, 2026 10:28
@sap-cloud-sdk-bot
sap-cloud-sdk-bot Bot merged commit dbdd569 into main Sep 1, 2026
14 checks passed
@sap-cloud-sdk-bot
sap-cloud-sdk-bot Bot deleted the dependabot/maven/main/production-minor-patch-3b187a75d4 branch September 1, 2026 10:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants