Bump the minor-patch group across 1 directory with 6 updates

[dependabot]

Bumps the minor-patch group with 6 updates in the / directory:

Package	From	To
com.github.spotbugs:spotbugs-maven-plugin	4.10.3.0	4.10.4.0
com.github.spotbugs:spotbugs-annotations	4.10.3	4.10.4
software.amazon.awssdk:s3	2.53.2	2.54.3
com.azure:azure-storage-blob	12.35.0	12.35.1
com.google.cloud:google-cloud-storage	2.71.0	2.72.0
org.springframework.boot:spring-boot-dependencies	4.1.0	4.1.1

Updates com.github.spotbugs:spotbugs-maven-plugin from 4.10.3.0 to 4.10.4.0

Release notes

Sourced from com.github.spotbugs:spotbugs-maven-plugin's releases.

spotbugs-maven-plugin-4.10.4.0

What's Changed

• Fixes #1474 by @​gigabitzauber in spotbugs/spotbugs-maven-plugin#1487
• Update build by @​hazendaz in spotbugs/spotbugs-maven-plugin#1494
• Cleanup charset handling and remove never used sourceEncoding in spot… by @​hazendaz in spotbugs/spotbugs-maven-plugin#1495
• Improve javaExecutable usage to prefer current process by @​hazendaz in spotbugs/spotbugs-maven-plugin#1496
• Update deprecated artifact handling by @​hazendaz in spotbugs/spotbugs-maven-plugin#1497
• Require maven 3.8.9 or better by @​hazendaz in spotbugs/spotbugs-maven-plugin#1499
• Add missing javadocs by @​hazendaz in spotbugs/spotbugs-maven-plugin#1500
• Otherwise build updates and library updates

New Contributors

• @​gigabitzauber made their first contribution in spotbugs/spotbugs-maven-plugin#1487

Full Changelog: spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.10.3.0...spotbugs-maven-plugin-4.10.4.0

Commits

• 698cfa7 [maven-release-plugin] prepare release spotbugs-maven-plugin-4.10.4.0
• f12b09f [pom] Update spotbugs core to 4.10.4
• 2fc78c6 Merge pull request #1500 from hazendaz/master
• 87e41d6 Add more missing javadocs throughout
• b2149c3 [docs] Add missing javadocs to rest of integration tests
• 6cdda40 Merge pull request #1499 from hazendaz/master
• d9d54a6 Merge pull request #1498 from spotbugs/renovate/byte-buddy.version
• 54738d7 Require maven 3.8.9 or better
• d3646ee Update byte-buddy.version to v1.18.12
• 011cbec Merge pull request #1497 from hazendaz/master
• Additional commits viewable in compare view

Updates com.github.spotbugs:spotbugs-annotations from 4.10.3 to 4.10.4

Release notes

Sourced from com.github.spotbugs:spotbugs-annotations's releases.

4.10.4

SpotBugs 4.10.4

CHANGELOG

Fixed

• Fix NN_NAKED_NOTIFY false negatives when a field read is stored in a local variable before notify() or notifyAll() (#3884)
• Fix ASE_ASSERTION_WITH_SIDE_EFFECT and ASE_ASSERTION_WITH_SIDE_EFFECT_METHOD false positives in every method analysed after a method that reads $assertionsDisabled without throwing an AssertionError (#3483)
• Fix INT_BAD_COMPARISON_WITH_SIGNED_BYTE false positive for meaningful comparisons of a signed byte with 127 (b < 127, b >= 127) (#4201)
• Fix EI_EXPOSE_REP false negative for public getters in anonymous classes (#4237)
• Fix missing class report for java.util.Collections$EmptyNavigableSet and java.util.Collections$EmptyNavigableMap when the result of Collections.emptySortedSet(), emptyNavigableSet(), emptySortedMap() or emptyNavigableMap() is stored (#4244)
• Fix URF_UNREAD_FIELD false negative for unread instance fields declared in enums (#4246)
• Stop publishing global dependency-management constraints to consumer POMs. (#4223)

CHECKSUM

file	checksum (sha256)
spotbugs-4.10.4-javadoc.jar	06bfc9ccdcfb9b594b5053817199b9489dff6312dc35c8864faa9b9357cf5be4
spotbugs-4.10.4-sources.jar	d087c11e3b0714e8445b29f2bef9bb4c62b4ee13ad67caf7a4b64d61e82ea400
spotbugs-4.10.4.tgz	72bc0d4edd686e462c0f71f42a049b27bf4da6708797ff7b2b56dd202714b4e5
spotbugs-4.10.4.zip	771c8702beb2b4b6aa20df87ea85f22fda7280c7ce36fce4077b7b3c076d1e14
spotbugs-annotations-4.10.4-javadoc.jar	0fc9d3c529c6ee93aeddf9cfbd4b1438708e37fd53b5157aa47070446fbc7303
spotbugs-annotations-4.10.4-sources.jar	87974d23caffbc8c6e66c567747627267b5ed06573cee966d7af6d236b8d65bd
spotbugs-annotations.jar	28fa4befaddce5d7b79b07c68e7c12fa27c5d9282c4229528717971606661ea3
spotbugs-ant-4.10.4-javadoc.jar	eaa1ee0a4e004b7b12e2dfc65290c6324effff6ffc0e7b7ee94c98875997e51c
spotbugs-ant-4.10.4-sources.jar	af1c78c8e194c2f82ea3e0517ab38a5eb6ba608c8d0e776c9097605d6b7efca6
spotbugs-ant.jar	9ec240477b7c87270be7dfe3196180cd3763f04c369e5691feeb12e66110a065
spotbugs.jar	a88cad2e0ea9bb74b908ce82ae89416c61fa8f8ea5cfcc9368b1baac2da878d2
test-harness-4.10.4-javadoc.jar	c1ff7bcd0c4f61f4356ae9734be34567df680175651a3104fdee241e324d6df7
test-harness-4.10.4-sources.jar	805d2d124b0d4ea513ee9262d4ad6027c3471d45defd80fd7d20e23425d17df7
test-harness-4.10.4.jar	bd10d1f11a1b93e4ca4db4d27772f611bd3407f9452dbbd2d1ba62584ddc171f
test-harness-core-4.10.4-javadoc.jar	ac735a1508609001d122a91e43f6dfb10c4c691cf555d5ba386f216df904ac9b
test-harness-core-4.10.4-sources.jar	043a55d99a517c0d9cf702b0c183b4afd3f03af9eff4a86d59bb37df1b35b532
test-harness-core-4.10.4.jar	1f9a0ee8f150dd71f960ca4f59dcf7912a45d0e9e6aefc4585fd44b975454bc0
test-harness-jupiter-4.10.4-javadoc.jar	c9554b4a6509d0d24c6436b6e01171eb8e71fca96df6edf8f80c7b51ab5bda16
test-harness-jupiter-4.10.4-sources.jar	17144f315686bfd01c02fa4ae7c916060c41de8eed58d5b8470416fa08f46ced
test-harness-jupiter-4.10.4.jar	a91146da3e993479cfefd2690781cbd102c6360ecc63a96d88995be3bd60fcbb

Changelog

Sourced from com.github.spotbugs:spotbugs-annotations's changelog.

4.10.4 - 2026-08-19

Fixed

• Fix NN_NAKED_NOTIFY false negatives when a field read is stored in a local variable before notify() or notifyAll() (#3884)
• Fix ASE_ASSERTION_WITH_SIDE_EFFECT and ASE_ASSERTION_WITH_SIDE_EFFECT_METHOD false positives in every method analysed after a method that reads $assertionsDisabled without throwing an AssertionError (#3483)
• Fix INT_BAD_COMPARISON_WITH_SIGNED_BYTE false positive for meaningful comparisons of a signed byte with 127 (b < 127, b >= 127) (#4201)
• Fix EI_EXPOSE_REP false negative for public getters in anonymous classes (#4237)
• Fix missing class report for java.util.Collections$EmptyNavigableSet and java.util.Collections$EmptyNavigableMap when the result of Collections.emptySortedSet(), emptyNavigableSet(), emptySortedMap() or emptyNavigableMap() is stored (#4244)
• Fix URF_UNREAD_FIELD false negative for unread instance fields declared in enums (#4246)
• Stop publishing global dependency-management constraints to consumer POMs. (#4223)

Commits

• 1a58a48 release v4.10.4
• 160d4a6 Gradle build cleanup (#4255)
• 2354168 Fix EI_EXPOSE_REP not reported for anonymous-class getters (#4237)
• 4895bce Fix naked notify detection after local stores (#4245)
• 28348e5 Fixes #3955 : Fix URF_UNREAD_FIELD false negative for unread fields i… (#4246)
• 3ec259e chore(build): Add changelog regarding dependency management constraints remov...
• 33075ce Remove eclipse table latest as noted version 3.1 that is long retired and dis...
• 1bf27d8 Update Gradle to v9.7.1 (#4252)
• ee61d5b Update dependency com.google.guava:guava to v33.7.1-jre (#4250)
• f352226 Update plugin com.diffplug.spotless to v8.10.0 (#4249)
• Additional commits viewable in compare view

Updates software.amazon.awssdk:s3 from 2.53.2 to 2.54.3

Updates com.azure:azure-storage-blob from 12.35.0 to 12.35.1

Release notes

Sourced from com.azure:azure-storage-blob's releases.

com.azure+azure-storage-blob_12.35.1

12.35.1 (2026-08-18)

Other Changes

Dependency Updates

• Upgraded azure-storage-internal-avro from 12.20.0 to version 12.20.1.
• Upgraded azure-core from 1.58.1 to version 1.59.0.
• Upgraded azure-core-http-netty from 1.16.5 to version 1.16.6.
• Upgraded azure-storage-common from 12.34.0 to version 12.34.1.

Commits

• c923efa Prepare patch release 20260818 (#50173)
• c6b40a1 Add WireMock dependency version 2.35.2 to external dependencies
• 8c93dca Increment package versions for commvaultcontentstore releases (#50171)
• f3e1875 Configurations: 'specification/compute/resource-manager/Microsoft.Compute/Co...
• d39ffca Prepare OTel AutoConfigure release v1.6.0 (#50167)
• ac5a002 [AzureMonitorAutoConfigure] Validate ingestion and Live Metrics redirect targ...
• 53e6420 Increment versions for core releases (#50152)
• 168277b Update resources TypeSpec commit (#50164)
• 6cc7989 Migrate resource manager resources generation to TypeSpec (#50111)
• 645e30c Increment package versions for network auto-releases (#50162)
• Additional commits viewable in compare view

Updates com.google.cloud:google-cloud-storage from 2.71.0 to 2.72.0

Changelog

Sourced from com.google.cloud:google-cloud-storage's changelog.

2.72.0 (2025-07-11)

Dependencies

• update dependency com.google.cloud:sdk-platform-java-config to v3.50.1 (#11655) (9b34528)

Commits

• See full diff in compare view

Updates org.springframework.boot:spring-boot-dependencies from 4.1.0 to 4.1.1

Release notes

Sourced from org.springframework.boot:spring-boot-dependencies's releases.

v4.1.1

⚠️ Attention Required

• Spring Boot's Gradle plugin no longer automatically configures gRPC when the Protobuf plugin is applied. This behavior caused problems for those using Protobuf without gRPC. To opt in to the configuration of gRPC, configure the protobuf extension with the grpc plugin using an empty block. The Spring Boot Gradle plugin will then automatically configure the use of protoc-gen-grpc-java as before. #50822

🐞 Bug Fixes

• Kafka consumer-specific security protocol is not taken into account #51369
• Structured logging: a failed JSON encode corrupts the next log event written on the same thread #51156
• Micrometer registries pin the application context #51135
• Temporary file is not deleted when ExportedImageTar construction fails #51132
• Metadata annotation processor ignores getter-level @NestedConfigurationProperty for records #51098
• spring-boot-h2-console pulls servlet-api as transitive dependency #51095
• PropertiesLauncher does not log nested archive paths #51089
• Methods that return the result of Map#remove are not declared with a @Nullable return type #51087
• NativeImageResourceProvider flattens Flyway migration paths in subdirectories #50964
• Fix ordering of Kotlinx Serialization CodecCustomizer #50961
• JarFile is not closed when finding main class from archive #50959
• Application-managed JUL bridge handler should only be removed if installed #50950
• CloudFoundry reactive auto-configuration should not require a WebClient.Builder bean to be defined #50944
• Context refresh fails on reactive Cloud Foundry when using Actuator without spring-boot-health #50942
• Resources are not cleaned up when resolving an image that is not yet present in the builder #50941
• GraphQlWebMvcAutoConfiguration should apply customizers in order #50914
• Auto-configured RedisMessageListenerContainer does not use virtual threads when spring.threads.virtual.enabled is true #50884
• Context refresh fails when using Actuator on Jersey without spring-boot-health #50872
• Context refresh fails on Cloud Foundry when using Actuator without spring-boot-health #50871
• IllegalStateException when binding properties to a @Validated class that contains a map whose value type is a wildcard #50856
• High number of connections due to Mongo health indicator #50852
• Inconsistent handling of empty string values of spring.security.oauth2.resourceserver.jwt issuer-uri and jwk-set-uri #50849
• Return type nullability of ApplicationContextAssert's getBean methods does not indicate that bean may be null #50845
• PropertiesWebClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #50843
• Exposing gRPC test server port should backoff if gRPC is not present #50825
• JpaBaseConfiguration#entityManagerConfiguration can cause a dependency loop on beans declaring AsyncTaskExecutor #50801
• spring.grpc.server.health.include-overall-health is not taken into account #50799
• Setting 'server.servlet.session.cookie.partitioned' to false still emits the 'Partitioned' cookie attribute #50790
• Managed version of Prometheus Client is not aligned with Micrometer's micrometer-registry-prometheus #50780
• Map properties bound from empty strings fail with ConverterNotFoundException #50773
• Protobuf Common Protos should not be a managed dependency #50772
• An application that depends on spring-boot-security-oauth2-resource-server may fail to start with a ClassNotFoundException when Reactor is on the classpath but WebFlux is not #50764
• W3CHeaderParser's decoding is not compliant with RFC 3986 #50650

📔 Documentation

• Description of spring.graphql.websocket.connection-init-timeout does not render correctly in the reference guide #51348
• spring.profiles.group should have a 'spring-profile-name' hint provider #51284
• Remove reference to removed InfluxDB auto-configuration #51176
• Use JacksonJsonSerde in Kafka Streams documentation #51161
• Document alternatives to HttpMessageConverters #51129
• Fix stale type reference for OTLP logging transport metadata #51119
• Metadata for spring.test.mockmvc.htmlunit.url declares the wrong type #51115

... (truncated)

Commits

• 6fdf67e Release 4.1.1
• fde599b Upgrade to Spring Pulsar 2.0.7
• 9daa58f Upgrade to Spring HATEOAS 3.1.2
• 353993e Upgrade to Spring Data Bom 2026.0.1
• 24ba596 Upgrade to Spring Session 4.1.1
• 5cb5c29 Upgrade to Spring Security 7.1.1
• 4adc8eb Upgrade to Spring LDAP 4.1.1
• 4d9c19c Upgrade to Spring Kafka 4.1.1
• f30f612 Upgrade to Spring Integration 7.1.1
• b930283 Upgrade to Spring gRPC 1.1.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions