Commit Graph

4057 Commits

Author SHA1 Message Date
Avgustin Marinov
19eedab40e Optimize test logging (#3126)
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
2026-06-11 16:07:00 +03:00
dependabot[bot]
80898e776a Bump vaadin.version from 25.1.6 to 25.1.7 (#3122)
Bumps `vaadin.version` from 25.1.6 to 25.1.7.

Updates `com.vaadin:vaadin-bom` from 25.1.6 to 25.1.7

Updates `com.vaadin:vaadin-maven-plugin` from 25.1.6 to 25.1.7
- [Release notes](https://github.com/vaadin/platform/releases)
- [Commits](https://github.com/vaadin/platform/compare/25.1.6...25.1.7)

---
updated-dependencies:
- dependency-name: com.vaadin:vaadin-bom
  dependency-version: 25.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.vaadin:vaadin-maven-plugin
  dependency-version: 25.1.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-10 08:20:11 +03:00
Avgustin Marinov
08643a2087 Refactor AccessContext delegating authentication (#3121)
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
2026-06-09 08:52:30 +03:00
dependabot[bot]
b3c5bb6c45 Bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 (#3119)
Bumps [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) from 0.8.14 to 0.8.15.
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](https://github.com/jacoco/jacoco/compare/v0.8.14...v0.8.15)

---
updated-dependencies:
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-09 08:31:54 +03:00
Stanislav Trailov
f44b6268b0 Introduce soft deleted list option for soft deletable entities (#3093)
* Introduce soft deleted list option for soft deletable entities

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

* fix verify build

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

* fix typo in license

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

* Add sorting option on deleted field

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

* add missing import in tests

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

* Rename SoftDeletedFilter to SoftDeletedMode and its values

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

* Introduce MgmtSoftDeletedMode on api layer

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

* remove unused imports

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

* Integrate the enum on API layer

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

* Fix OpenApi spec

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

* address some comments

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

* Get rid of count(SoftDeletedMode) at all

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

* remove formatter for enum - stop supporting lowercase values in API

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

---------

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>
2026-06-08 16:37:05 +03:00
Stanislav Trailov
95680962cc Fix target group assignment with RSQL negation filters (e.g. tag!=tag… (#3116)
* Fix target group assignment with RSQL negation filters (e.g. tag!=tag1) failing on EclipseLink/MySQL

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

* address comments

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

* Fix test for chunked calls to use also negate operator

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

* address comments

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

---------

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>
2026-06-08 15:15:50 +03:00
Avgustin Marinov
6a85a43dde Swagger/Oauth add http bearer auth (#3118)
+ disable unsupported OAuth 2 flows

Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
2026-06-05 15:48:10 +03:00
Vasil Ilchev
97df5bf8d1 Fix Error/Success Conditions not evaluated case. Fix 'Cancel' final s… (#3110)
* Fix Error/Success Conditions not evaluated case. Fix 'Cancel' final status not mapped - now mapped to Error. Fix Delete Action does not update properly group count and percentage evaluation.

Signed-off-by: vasilchev <vasil.ilchev@bosch.com>

* Add ThreshholdRolloutGroupSuccessCondition

Signed-off-by: vasilchev <vasil.ilchev@bosch.com>

* Cancel Action not included in ERROR/SUCCESS. Trigger SuccessAction on SuccessCondition/GroupFINISHED.

Signed-off-by: vasilchev <vasil.ilchev@bosch.com>

* Review Findings add comments to tests

Signed-off-by: vasilchev <vasil.ilchev@bosch.com>

---------

Signed-off-by: vasilchev <vasil.ilchev@bosch.com>
2026-06-05 15:03:20 +03:00
dependabot[bot]
f43935edfc Bump actions/checkout from 6.0.2 to 6.0.3 (#3112)
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6.0.2...v6.0.3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-03 08:40:53 +03:00
dependabot[bot]
a15a49ce8d Bump com.ethlo.persistence.tools:eclipselink-maven-plugin (#3111)
Bumps [com.ethlo.persistence.tools:eclipselink-maven-plugin](https://github.com/ethlo/eclipselink-maven-plugin) from 3.0.2 to 4.0.2.
- [Release notes](https://github.com/ethlo/eclipselink-maven-plugin/releases)
- [Commits](https://github.com/ethlo/eclipselink-maven-plugin/compare/v3.0.2...v4.0.2)

---
updated-dependencies:
- dependency-name: com.ethlo.persistence.tools:eclipselink-maven-plugin
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-03 08:39:15 +03:00
dependabot[bot]
d8df706db9 Bump maven-surefire-plugin.version from 3.5.5 to 3.5.6 (#3108)
Bumps `maven-surefire-plugin.version` from 3.5.5 to 3.5.6.

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.5 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.5...surefire-3.5.6)

Updates `org.apache.maven.plugins:maven-surefire-report-plugin` from 3.5.5 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.5...surefire-3.5.6)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-report-plugin
  dependency-version: 3.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-02 11:05:55 +03:00
Stanislav Trailov
794455064f Fix RSQL filter in batch update query in assign target group (#3107)
* Fix RSQL filter in batch update query in assign target group

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

* Stick with old approach when using hibernate

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

* avoid fully qualified classname

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

* Refer review changes

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

* add link to the bug reported to eclipse link

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>

---------

Signed-off-by: strailov <Stanislav.Trailov@bosch.io>
2026-06-02 10:12:43 +03:00
github-actions[bot]
b0e279a3e8 [Release] Automated commit of .3rd-party/DEPENDENCIES changes 2026-06-01 03:14:37 +00:00
dependabot[bot]
211e5036db Bump com.diffplug.spotless:spotless-maven-plugin from 3.5.1 to 3.6.0 (#3105)
Bumps [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) from 3.5.1 to 3.6.0.
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](https://github.com/diffplug/spotless/compare/maven/3.5.1...maven/3.6.0)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-28 08:44:54 +03:00
Stanislav Trailov
d6fcbac047 Auto action cleanup rely on hard db update on last modified at rather than hard time limit (#3103) 2026-05-26 18:11:09 +03:00
Avgustin Marinov
36bde73716 Fix AuthenticationDelegate null delegate support (#3104)
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
2026-05-26 17:06:34 +03:00
dependabot[bot]
4f321e1381 Bump org.springframework.ai:spring-ai-bom from 1.1.6 to 1.1.7 (#3101)
Bumps [org.springframework.ai:spring-ai-bom](https://github.com/spring-projects/spring-ai) from 1.1.6 to 1.1.7.
- [Release notes](https://github.com/spring-projects/spring-ai/releases)
- [Commits](https://github.com/spring-projects/spring-ai/compare/v1.1.6...v1.1.7)

---
updated-dependencies:
- dependency-name: org.springframework.ai:spring-ai-bom
  dependency-version: 1.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 14:16:37 +03:00
dependabot[bot]
59f833f2ee Bump vaadin.version from 25.1.5 to 25.1.6 (#3100)
Bumps `vaadin.version` from 25.1.5 to 25.1.6.

Updates `com.vaadin:vaadin-bom` from 25.1.5 to 25.1.6

Updates `com.vaadin:vaadin-maven-plugin` from 25.1.5 to 25.1.6
- [Release notes](https://github.com/vaadin/platform/releases)
- [Commits](https://github.com/vaadin/platform/compare/25.1.5...25.1.6)

---
updated-dependencies:
- dependency-name: com.vaadin:vaadin-bom
  dependency-version: 25.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.vaadin:vaadin-maven-plugin
  dependency-version: 25.1.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 14:16:13 +03:00
dependabot[bot]
455d7b9c00 Bump docker/login-action from 4.1.0 to 4.2.0 (#3097)
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v4.1.0...v4.2.0)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 14:14:46 +03:00
github-actions[bot]
73d4d4701a [Release] Automated commit of .3rd-party/DEPENDENCIES changes 2026-05-25 03:12:42 +00:00
dependabot[bot]
8f802ecf2b Bump actions/stale from 10.2.0 to 10.3.0 (#3094)
Bumps [actions/stale](https://github.com/actions/stale) from 10.2.0 to 10.3.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/v10.2.0...v10.3.0)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-22 09:52:03 +03:00
dependabot[bot]
542e440ad7 Bump com.diffplug.spotless:spotless-maven-plugin from 3.5.0 to 3.5.1 (#3090)
Bumps [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) from 3.5.0 to 3.5.1.
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](https://github.com/diffplug/spotless/compare/maven/3.5.0...maven/3.5.1)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.5.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-19 09:59:27 +03:00
dependabot[bot]
f4323c18f0 Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 (#3089)
Bumps [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) from 3.6.2 to 3.6.3.
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](https://github.com/apache/maven-enforcer/compare/enforcer-3.6.2...enforcer-3.6.3)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-19 09:58:59 +03:00
Vasil Ilchev
2a4c12fd29 Fix/exception mapper (#3083)
* Added mapping for OptimisticLockingFailureException in ExceptionMapper for proper propagation

Signed-off-by: vasilchev <vasil.ilchev@bosch.com>

* Added ExceptionMapperTest

Signed-off-by: vasilchev <vasil.ilchev@bosch.com>

---------

Signed-off-by: vasilchev <vasil.ilchev@bosch.com>
2026-05-18 09:22:49 +03:00
dependabot[bot]
60f006cfa1 Bump com.diffplug.spotless:spotless-maven-plugin from 3.4.0 to 3.5.0 (#3085)
Bumps [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) from 3.4.0 to 3.5.0.
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](https://github.com/diffplug/spotless/compare/maven/3.4.0...maven/3.5.0)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-18 09:11:44 +03:00
github-actions[bot]
c3a738528f [Release] Automated commit of .3rd-party/DEPENDENCIES changes 2026-05-18 03:13:04 +00:00
Stanislav Trailov
39aaa8c943 remove duplicate ref definition (#3084)
Signed-off-by: strailov <Stanislav.Trailov@bosch.io>
2026-05-15 12:03:10 +03:00
clayly
eba16e529e Add indexes on sp_action.rollout and rollout_group (#3045)
* perf(repository): add indexes on sp_idx_action_rollout_group_status and sp_idx_action_rollout_status

Rollout monitoring queries (existsByRolloutId, getStatusCountByRolloutId, getStatusCountByRolloutGroupId) filter by rollout or rollout_group on sp_action. The flyway baseline did not index either column, so Postgres
falls back to Seq Scan on every monitoring poll. With 16k action rows this is meaningful — the group-count query takes ~500 ms without the index and ~27 ms with it (Index Only Scan, Heap Fetches: 0).

Bench (16k rows, 1000 iter):
- WHERE tenant=? AND rollout_group=?           18.6x faster on PG
                                               17.6x faster on YugabyteDB
- WHERE tenant=? AND rollout=? GROUP BY status  2.5x faster on PG
                                                1.5x faster on YugabyteDB

Adds V1_20_2 sibling migrations for POSTGRESQL, H2, and MYSQL.
2026-05-15 10:54:39 +03:00
clayly
663737396c Fix range download: use real seek instead of read-and-discard (#3044)
* perf(rest): fix range download to use real seek

FileStreamingUtil.copyStreams called IOUtils.skipFully(from, start),
which reads start bytes through a 2KB scratch buffer. Combined with
ArtifactStream not overriding skip(long), a Range request at offset
600MB on an 800MB artifact made the server read+discard 600MB before
serving any payload. With 80 concurrent devices this saturated CPU.

Fix:
- ArtifactStream.skip(long) now delegates to the wrapped stream so a
  FileInputStream can lseek(2). Non-seekable backends (CipherInputStream
  for encrypted artifacts, S3 streams) keep their existing behaviour.
- FileStreamingUtil.copyStreams uses InputStream.skipNBytes(start)
  instead of IOUtils.skipFully so the call chain reaches the underlying
  skip().

JMH (single thread, 600MB offset, 1MB read): 27.21 ms -> 0.034 ms (800x).
Real stack (80 parallel curl, 1MB range at 600MB offset): avg 728 ms ->
28 ms (26x), p99 966 ms -> 54 ms.

Adds JMH test-scope dep and FileStreamingBenchmark/BufferSizeBenchmark
for regression detection. Both gated on -Dperf=true so default test
runs stay fast.

* perf(rest): drop JMH benchmarks per upstream review

Eclipse hawkBit minimizes dependencies. Drop jmh-core / jmh-generator-annprocess
test-scope deps (also GPL-2.0 — not EPL-2.0 compatible) and the two
JMH benchmarks added with the seek fix. Move the BUFFER_SIZE rationale
into an inline comment in FileStreamingUtil so the empirical reasoning
behind keeping the 8 KiB constant stays discoverable.

The benchmarks may be reintroduced as a separate PR if upstream wants a
perf-regression harness later.
2026-05-14 11:17:32 +03:00
Avgustin Marinov
6311e64ea9 Clean up distribution lock (#3081)
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
2026-05-14 09:10:17 +03:00
Vasil Ilchev
275348d524 Fix JdbcLockRegistry ttl (#3080)
Signed-off-by: vasilchev <vasil.ilchev@bosch.com>
2026-05-13 11:51:29 +03:00
Stanislav Trailov
f7f94291ad Add ref & sha to upload sarif in trivy workflow (#3079)
Signed-off-by: strailov <Stanislav.Trailov@bosch.io>
2026-05-13 09:36:01 +03:00
dependabot[bot]
d4c95ca5e0 Bump io.swagger.core.v3:swagger-annotations-jakarta (#3078)
Bumps io.swagger.core.v3:swagger-annotations-jakarta from 2.2.49 to 2.2.50.

---
updated-dependencies:
- dependency-name: io.swagger.core.v3:swagger-annotations-jakarta
  dependency-version: 2.2.50
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-13 08:43:27 +03:00
Avgustin Marinov
601e770cc5 Restrict 1.0 org.springframework.shell versions (#3074)
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
2026-05-12 10:27:19 +03:00
Avgustin Marinov
94b32ae75b Fix vaadin 1.0 constaring in dependabot (#3073)
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
2026-05-12 09:58:08 +03:00
Avgustin Marinov
7ccba8ef86 Restrict updates for 1.0 branch (#3067)
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
2026-05-12 09:34:50 +03:00
dependabot[bot]
895463899e Bump org.springframework.ai:spring-ai-bom from 1.1.5 to 1.1.6 (#3061)
Bumps [org.springframework.ai:spring-ai-bom](https://github.com/spring-projects/spring-ai) from 1.1.5 to 1.1.6.
- [Release notes](https://github.com/spring-projects/spring-ai/releases)
- [Commits](https://github.com/spring-projects/spring-ai/compare/v1.1.5...v1.1.6)

---
updated-dependencies:
- dependency-name: org.springframework.ai:spring-ai-bom
  dependency-version: 1.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-12 08:40:20 +03:00
Florian BEZANNIER
8d83218dc8 Improve oauth2 (#3014)
* feat: add custom header to oauth2 req

* fix: current.getClass() raise NPE

* fix: use access token instead of id token

* fix: missing dependency

* feat: add oauth2 login from swagger-ui

* docs: update oauth2 configuration
2026-05-11 14:50:47 +03:00
Stanislav Trailov
394048a583 Allow input ref parameter in order to see a branch in the reports (#3060)
Signed-off-by: strailov <Stanislav.Trailov@bosch.io>
2026-05-11 10:50:19 +03:00
github-actions[bot]
0fff8c2660 [Release] Automated commit of .3rd-party/DEPENDENCIES changes 2026-05-11 03:11:31 +00:00
Desislava Marinova
792746728f Update java docker image version to 21.0.11_10 (#3057) 2026-05-08 11:05:22 +03:00
Stanislav Trailov
b28071933c Fix netty vulnerabilities (#3056)
Signed-off-by: strailov <Stanislav.Trailov@bosch.io>
2026-05-08 10:12:13 +03:00
dependabot[bot]
bbf71da6de Bump vaadin.version from 25.1.4 to 25.1.5 (#3047)
Bumps `vaadin.version` from 25.1.4 to 25.1.5.

Updates `com.vaadin:vaadin-bom` from 25.1.4 to 25.1.5

Updates `com.vaadin:vaadin-maven-plugin` from 25.1.4 to 25.1.5
- [Release notes](https://github.com/vaadin/platform/releases)
- [Commits](https://github.com/vaadin/platform/compare/25.1.4...25.1.5)

---
updated-dependencies:
- dependency-name: com.vaadin:vaadin-bom
  dependency-version: 25.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.vaadin:vaadin-maven-plugin
  dependency-version: 25.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-08 09:15:15 +03:00
Stanislav Trailov
976106c75f Enable trivy and dependabot on 1.0 branch (#3046)
Signed-off-by: strailov <Stanislav.Trailov@bosch.io>
2026-05-07 09:59:37 +03:00
github-actions[bot]
111658a548 [Release] Automated commit of .3rd-party/DEPENDENCIES changes 2026-05-04 03:10:53 +00:00
dependabot[bot]
eb53cfaaa2 Bump vaadin.version from 25.1.3 to 25.1.4 (#3043)
Bumps `vaadin.version` from 25.1.3 to 25.1.4.

Updates `com.vaadin:vaadin-bom` from 25.1.3 to 25.1.4

Updates `com.vaadin:vaadin-maven-plugin` from 25.1.3 to 25.1.4
- [Release notes](https://github.com/vaadin/platform/releases)
- [Commits](https://github.com/vaadin/platform/compare/25.1.3...25.1.4)

---
updated-dependencies:
- dependency-name: com.vaadin:vaadin-bom
  dependency-version: 25.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.vaadin:vaadin-maven-plugin
  dependency-version: 25.1.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-30 09:26:09 +03:00
dependabot[bot]
47e14cf042 Bump io.swagger.core.v3:swagger-annotations-jakarta (#3042)
Bumps io.swagger.core.v3:swagger-annotations-jakarta from 2.2.48 to 2.2.49.

---
updated-dependencies:
- dependency-name: io.swagger.core.v3:swagger-annotations-jakarta
  dependency-version: 2.2.49
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-29 08:33:02 +03:00
dependabot[bot]
a73b1ab3cf Bump org.springframework.ai:spring-ai-bom from 1.1.4 to 1.1.5 (#3040)
Bumps [org.springframework.ai:spring-ai-bom](https://github.com/spring-projects/spring-ai) from 1.1.4 to 1.1.5.
- [Commits](https://github.com/spring-projects/spring-ai/compare/v1.1.4...v1.1.5)

---
updated-dependencies:
- dependency-name: org.springframework.ai:spring-ai-bom
  dependency-version: 1.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-28 13:14:54 +03:00
Vasil Ilchev
4b83c78618 Fix cleaner clean reference to service before call on it - chain api (#3041)
* Fix cleaner clean reference to service before call on it - chain api

Signed-off-by: vasilchev <vasil.ilchev@bosch.com>

* style and comment fix

Signed-off-by: vasilchev <vasil.ilchev@bosch.com>

---------

Signed-off-by: vasilchev <vasil.ilchev@bosch.com>
2026-04-28 13:13:35 +03:00
dependabot[bot]
ce444f9934 Bump spring-shell.version from 4.0.0 to 4.0.2 (#3037)
Bumps `spring-shell.version` from 4.0.0 to 4.0.2.

Updates `org.springframework.shell:spring-shell-starter` from 4.0.0 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-shell/releases)
- [Commits](https://github.com/spring-projects/spring-shell/compare/v4.0.0...v4.0.2)

Updates `org.springframework.shell:spring-shell-jline` from 4.0.0 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-shell/releases)
- [Commits](https://github.com/spring-projects/spring-shell/compare/v4.0.0...v4.0.2)

---
updated-dependencies:
- dependency-name: org.springframework.shell:spring-shell-starter
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.shell:spring-shell-jline
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-27 08:36:05 +03:00