build(deps): bump the minor-and-patch group across 1 directory with 6 updates

[dependabot]

Bumps the minor-and-patch group with 6 updates in the / directory:

Package	From	To
org.springdoc:springdoc-openapi-starter-webmvc-ui	3.0.3	3.1.0
com.deepgram:deepgram-java-sdk	0.6.0	0.8.0
com.tngtech.archunit:archunit-junit5	1.4.2	1.5.0
org.springframework.boot	4.1.0	4.1.1
com.diffplug.spotless	8.8.0	8.10.0
gradle-wrapper	9.6.1	9.7.1

Updates org.springdoc:springdoc-openapi-starter-webmvc-ui from 3.0.3 to 3.1.0

Release notes

Sourced from org.springdoc:springdoc-openapi-starter-webmvc-ui's releases.

springdoc-openapi v3,1,0 released!

What's Changed

• Fix request-specific Swagger UI index transformations by @​limehee in springdoc/springdoc-openapi#3279
• Fix #3282: preserve nest() version predicate across all routes in nest by @​seonwooj0810 in springdoc/springdoc-openapi#3296
• Upgrade Spring Boot to version 4.1.0
• Upgrade Spring AI to version 2.0.0
• Upgrade swagger-core to version 2.2.52
• Upgrade swagger-ui to version 5.32.11
• #3307 – Act upon SonarQube warnings
• #3306 – Act upon SonarQube warnings

Added

• #3269 – Add mechanism to disable nullable for Kotlin properties
• Allow request-specific Swagger UI index transformation

Fixed

• #3304 – Kotlin parent class's field is not properly marked as nullable
• #3294 – Duplicated path getting swagger-config
• #3293 – Inconsistent OpenAPI schema naming with SNAKE_CASE: some Java record fields remain camelCase
• #3292 – Make WebProperties and WebMvcProperties optional in SwaggerConfig
• #3284 – Upgrade swagger-core from version 2.2.48 to 2.2.49
• #3282 – Preserve version from nest() predicate across all routes in nest
• #3281 – Stabilize Spring Data Page schema property order
• #3274 – Description disappears from the generated json after upgrade to 3.0.3
• #3270 – Validation annotation of ParameterObject property applied to PathVariable with the same name, even in unrelated endpoints
• #3266 – Upgrade swagger-core from version 2.2.47 to 2.2.48
• #3263 – Null key for a Map not allowed in JSON

Full Changelog: springdoc/springdoc-openapi@v3.0.3...v3.1.0

Changelog

Sourced from org.springdoc:springdoc-openapi-starter-webmvc-ui's changelog.

[3.1.0] - 2026-07-31

Added

• #3269 – Add mechanism to disable nullable for Kotlin properties
• Allow request-specific Swagger UI index transformation

Changed

• Upgrade Spring Boot to version 4.1.0
• Upgrade Spring AI to version 2.0.0
• Upgrade swagger-core to version 2.2.52
• Upgrade swagger-ui to version 5.32.11
• #3307 – Act upon SonarQube warnings
• #3306 – Act upon SonarQube warnings

Fixed

• #3304 – Kotlin parent class's field is not properly marked as nullable
• #3294 – Duplicated path getting swagger-config
• #3293 – Inconsistent OpenAPI schema naming with SNAKE_CASE: some Java record fields remain camelCase
• #3292 – Make WebProperties and WebMvcProperties optional in SwaggerConfig
• #3284 – Upgrade swagger-core from version 2.2.48 to 2.2.49
• #3282 – Preserve version from nest() predicate across all routes in nest
• #3281 – Stabilize Spring Data Page schema property order
• #3274 – Description disappears from the generated json after upgrade to 3.0.3
• #3270 – Validation annotation of ParameterObject property applied to PathVariable with the same name, even in unrelated endpoints
• #3266 – Upgrade swagger-core from version 2.2.47 to 2.2.48
• #3263 – Null key for a Map not allowed in JSON

Commits

• e04f91f [maven-release-plugin] prepare release v3.1.0
• 83551ce CHANGELOG.md update
• 4a2b5bd CHANGELOG.md update
• ad0a5a5 swagger-ui upgrade to version 5.32.11
• 6e14cb4 Fix sonarqube errors
• eae2056 Fix sonarqube errors
• b09a77b chore: act upon SonarQube warnings
• cc3d86d upgrade spring-ai to version 2.0.0
• df1c2ba spring-boot upgrade to 4.1.0
• b6e5212 Kotlin parent class's field is not properly marked as nullable. Fixes #3304
• Additional commits viewable in compare view

Updates com.deepgram:deepgram-java-sdk from 0.6.0 to 0.8.0

Release notes

Sourced from com.deepgram:deepgram-java-sdk's releases.

v0.8.0

0.8.0 (2026-08-12)

Speak v2 Flux TTS streaming controls, Listen v2 redaction, a provider/version retype, and generator-level HTTP improvements. This is a breaking release — see the migration guide.

⚠ BREAKING CHANGES

• regen: AgentV1UpdateListenListen.provider is now AgentV1UpdateListenListenProvider (V1/V2 union); Google.version is now Optional<GoogleThinkProviderVersion>; SpeakV2SpeechMetadataControlsApplied has a new required breaksApplied field. See docs/Migrating-v0.7-to-v0.8.md.

Features

• Speak v2 (Flux TTS streaming): barge-in and reconfigure via sendInterrupt() / sendConfigure(), with onSpeechInterrupted / onConfigureSuccess / onConfigureFailure callbacks; new speed and expressivity connect parameters; new Deepgram Flux TTS voices. (#92) (ec519da)
• Listen v2: redact connect parameter (ListenV2Redact: numbers, aggressive_numbers). (#92) (ec519da)
• Core HTTP (generator 4.10.1 → 4.16.0): automatic response decompression by default (ResponseDecompressionInterceptor; gzip/deflate transparently decoded), and new optional retry tuning on ClientOptions.Builder (initialRetryDelayMillis, maxRetryDelayMillis, retryJitterFactor, all defaulted). (#92) (ec519da)

Compatibility

• A provider payload that omits the optional version discriminator (what 0.7.x emits) now deserializes as V2 (defaultImpl = V2Value) instead of dropping to {"provider":null}, so existing agent configurations keep working.

v0.7.1

0.7.1 (2026-07-24)

Bug Fixes

• emit additionalProperties as query params on streaming connect (#86) (28229fc)
• emit repeated query params for all multi-value streaming options (#82) (746be15), closes #77
• emit repeated tag query params for multi-value speak v2 streaming (#85) (e748619)

What's in this release

Three related fixes to streaming (WebSocket) query-parameter serialization on listen and speak. All are bug fixes — no API changes.

Multi-keyterm streaming fix

• Streaming connections mis-serialized a multi-value keyterm (and other array-valued params): a List<String> was stringified into a single param (keyterm=[a, b]) instead of repeated params (keyterm=a&keyterm=b). The server treats the stringified list as one nonsense term, so multiple key terms were not boosted — recognition of them was actually degraded.
• Now fixed for every array-valued streaming query param — listen: keyterm, keywords, replace, search, tag, extra, language_hint; speak: tag — by routing them through the same repeated-param serialization the REST path already uses (#81, #82, #85; closes #77).
• If you worked around this by hand-joining terms into a single string, drop that workaround — pass a real List<String> (e.g. ListenV1Keyterm.of(List.of("a", "b"))) and each term is now sent as its own keyterm= param.

Unmodeled streaming query params now work (e.g. no_delay)

• The streaming connect(...) builders dropped additionalProperties, so unmodeled params set via .additionalProperty("no_delay", true) never reached the URL — it was impossible to set no_delay on a streaming connection.
• Now fixed on all four connect clients (listen v1/v2, speak v1/v2): additionalProperties are emitted as query params, so any not-yet-modeled param can be passed through until it gains a typed option (#86; closes #83).

All four streaming clients remain frozen in .fernignore; the durable fix belongs in the Fern generator's WebSocket template, tracked for the next generator upgrade.

v0.7.0

0.7.0 (2026-07-22)

... (truncated)

Changelog

Sourced from com.deepgram:deepgram-java-sdk's changelog.

0.8.0 (2026-08-12)

⚠ BREAKING CHANGES

• regen: AgentV1UpdateListenListen.provider is now AgentV1UpdateListenListenProvider (V1/V2 union); Google.version is now Optional<GoogleThinkProviderVersion>; SpeakV2SpeechMetadataControlsApplied has a new required breaksApplied field. See docs/Migrating-v0.7-to-v0.8.md.

Features

• Speak v2 (Flux TTS streaming): barge-in and reconfigure via sendInterrupt() / sendConfigure(), with onSpeechInterrupted / onConfigureSuccess / onConfigureFailure callbacks; new speed and expressivity connect parameters; new Deepgram Flux TTS voices. (#92) (ec519da)
• Listen v2: redact connect parameter (ListenV2Redact: numbers, aggressive_numbers). (#92) (ec519da)
• Core HTTP (generator 4.10.1 → 4.16.0): automatic response decompression by default (ResponseDecompressionInterceptor; gzip/deflate transparently decoded), and new optional retry tuning on ClientOptions.Builder (initialRetryDelayMillis, maxRetryDelayMillis, retryJitterFactor, all defaulted). (#92) (ec519da)

Compatibility

• A provider payload that omits the optional version discriminator (what 0.7.x emits) now deserializes as V2 (defaultImpl = V2Value) instead of dropping to {"provider":null}, so existing agent configurations keep working.

0.7.1 (2026-07-24)

Bug Fixes

• emit additionalProperties as query params on streaming connect (#86) (28229fc)
• emit repeated query params for all multi-value streaming options (#82) (746be15), closes #77
• emit repeated tag query params for multi-value speak v2 streaming (#85) (e748619)

0.7.0 (2026-07-22)

⚠ BREAKING CHANGES

• regen: flux stt numerals + aura-2 voices; remove AgentV1LatencyReport.stt_latency (#78)

Features

• regen: flux stt numerals + aura-2 voices; remove AgentV1LatencyReport.stt_latency (#78) (5cafdac)

0.6.1 (2026-07-14)

Features

• Streaming text-to-speech (Flux) via speak.v2 — new WebSocket TTS: client.speak().v2().v2WebSocket() streams Speak/Flush/Close and returns audio frames plus control messages. Also adds agent UpdateListen/ListenUpdated (swap the listen provider mid-session) and Flux end-of-turn tuning (eotThreshold, eagerEotThreshold, eotTimeoutMs). (#73) (a2b15aa)
• Flux text-to-speech batch (REST) endpoint and agent latency report. (#75) (5bfaf73)

Commits

• eb11942 chore(main): release 0.8.0 (#94)
• ec519da feat(regen)!: speak v2 interrupt/configure, listen v2 redact; retype provider...
• 19e02f5 revert: listen v2 force-end-turn + diarize/word-confidence regen (#89) (#91)
• 5b6323a feat(regen): add diarize_info, Flux force-end-turn, update-listen, word speak...
• 8b3c605 chore(main): release 0.7.1 (#84)
• 28229fc fix: emit additionalProperties as query params on streaming connect (#86)
• e748619 fix: emit repeated tag query params for multi-value speak v2 streaming (#85)
• 746be15 fix: emit repeated query params for all multi-value streaming options (#82)
• 8aa4e4a fix: emit repeated keyterm query params for multi-keyterm streaming (#81)
• 7fe6d46 chore(main): release 0.7.0 (#79)
• Additional commits viewable in compare view

Updates com.tngtech.archunit:archunit-junit5 from 1.4.2 to 1.5.0

Release notes

Sourced from com.tngtech.archunit:archunit-junit5's releases.

ArchUnit 1.5.0

Enhancements

Core

• Support Java 27 / class file major version 71 (#1618)
• Improve descriptions of JavaAccess.Predicates.originOwner and JavaAccess.Predicates.targetOwner (#1603; thanks to @​StefanGraeber 👋)
• Expose information on sealed classes via JavaClass: isSealed() and getPermittedSubclasses() (#1677)
• Consider dependencies from caught exceptions (#1555; thanks to @​bannmann 👋)
• ImportOption.DoNotIncludeTests and OnlyIncludeTests consider tests in custom Gradle source sets (#1660; thanks to @​Develop-KIM 👋)

Lang

• ArchConditions offers new ArchCondition<JavaClass> haveAnyDependenciesThat(DescribedPredicate<Dependency>) (#1580; thanks to @​wakingrufus 👋)

Library

• ArchitectureMetrics.lakosMetrics is computed much more performantly (#1629; thanks to @​ThanosTsiamis 👋)
• TextFileBasedViolationStore is now thread-safe under parallel test execution (#1656; thanks to @​kelunik 👋)
• ModuleDependency now provides stable descriptions (#1648; thanks to @​DragonFSKY 👋)

JUnit

• archunit-junit6 supports ArchUnit with JUnit 6 (#1556, #1658, #1659; many thanks to @​arukiidou & @​schulzjo-tng 👋)
• AnalyzeClasses supports individual classes (#1569; thanks to @​TheManWhoStaresAtCode 👋)
• Preparation: archunit-junit:0.9.0 (which was renamed with ArchUnit 0.9.0) now relocates to archunit-junit4:0.9.0 (#1673; thanks to @​schulzjo-tng 👋) – will be published after #1684 🙈

Documentation

• Document Priority (#1671; thanks to @​TheManWhoStaresAtCode 👋)
• Document Package Identifiers in User Guide (#1672; thanks to @​TheManWhoStaresAtCode 👋)

Internal Improvements

• Text files now use UNIX line breaks (#1602, #1611; thanks to @​StefanGraeber 👋)
• Update Gradle from 8 to 9; build & test with JDK 25 (#1550, and also #1612, #1619)
• Separate integration tests by JUnit version (#1636; many thanks to @​schulzjo-tng 👋)
• Replace junit-dataprovider with junit-jupiter-params (#1655)
• ArchUnit releases now update Maven examples (and Gradle wrapper) of ArchUnit-Examples (#1450)
• Avoid managing hamcrest dependency (#1467; thanks to @​TheManWhoStaresAtCode 👋)

Commits

• 502d782 prepare release 1.5.0
• 4f26fcc fix testRelease exec() and task registration for Gradle 9
• 96af984 add new developers
• e427828 consolidate POM checks during CI and release
• a30f6e3 Bump gradle/actions from 6 to 6.2.0
• a036c08 Bump com.github.ben-manes.versions from 0.57.0 to 0.58.0
• 24a9d9e Bump actions/setup-java from 5.6.0 to 5.7.0
• 9944244 detect custom Gradle test source sets in test import options (#1660)
• 51fd6c9 detect custom Gradle test source sets in test import options
• 65f4cd3 add support for dependencies from caught exceptions (#1555)
• Additional commits viewable in compare view

Updates org.springframework.boot from 4.1.0 to 4.1.1

Release notes

Sourced from org.springframework.boot's releases.

v4.1.1

⚠️ Attention Required

• Spring Boot's Gradle plugin no longer automatically configures gRPC when the Protobuf plugin is applied. This behavior caused problems for those using Protobuf without gRPC. To opt in to the configuration of gRPC, configure the protobuf extension with the grpc plugin using an empty block. The Spring Boot Gradle plugin will then automatically configure the use of protoc-gen-grpc-java as before. #50822

🐞 Bug Fixes

• Kafka consumer-specific security protocol is not taken into account #51369
• Structured logging: a failed JSON encode corrupts the next log event written on the same thread #51156
• Micrometer registries pin the application context #51135
• Temporary file is not deleted when ExportedImageTar construction fails #51132
• Metadata annotation processor ignores getter-level @NestedConfigurationProperty for records #51098
• spring-boot-h2-console pulls servlet-api as transitive dependency #51095
• PropertiesLauncher does not log nested archive paths #51089
• Methods that return the result of Map#remove are not declared with a @Nullable return type #51087
• NativeImageResourceProvider flattens Flyway migration paths in subdirectories #50964
• Fix ordering of Kotlinx Serialization CodecCustomizer #50961
• JarFile is not closed when finding main class from archive #50959
• Application-managed JUL bridge handler should only be removed if installed #50950
• CloudFoundry reactive auto-configuration should not require a WebClient.Builder bean to be defined #50944
• Context refresh fails on reactive Cloud Foundry when using Actuator without spring-boot-health #50942
• Resources are not cleaned up when resolving an image that is not yet present in the builder #50941
• GraphQlWebMvcAutoConfiguration should apply customizers in order #50914
• Auto-configured RedisMessageListenerContainer does not use virtual threads when spring.threads.virtual.enabled is true #50884
• Context refresh fails when using Actuator on Jersey without spring-boot-health #50872
• Context refresh fails on Cloud Foundry when using Actuator without spring-boot-health #50871
• IllegalStateException when binding properties to a @Validated class that contains a map whose value type is a wildcard #50856
• High number of connections due to Mongo health indicator #50852
• Inconsistent handling of empty string values of spring.security.oauth2.resourceserver.jwt issuer-uri and jwk-set-uri #50849
• Return type nullability of ApplicationContextAssert's getBean methods does not indicate that bean may be null #50845
• PropertiesWebClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #50843
• Exposing gRPC test server port should backoff if gRPC is not present #50825
• JpaBaseConfiguration#entityManagerConfiguration can cause a dependency loop on beans declaring AsyncTaskExecutor #50801
• spring.grpc.server.health.include-overall-health is not taken into account #50799
• Setting 'server.servlet.session.cookie.partitioned' to false still emits the 'Partitioned' cookie attribute #50790
• Managed version of Prometheus Client is not aligned with Micrometer's micrometer-registry-prometheus #50780
• Map properties bound from empty strings fail with ConverterNotFoundException #50773
• Protobuf Common Protos should not be a managed dependency #50772
• An application that depends on spring-boot-security-oauth2-resource-server may fail to start with a ClassNotFoundException when Reactor is on the classpath but WebFlux is not #50764
• W3CHeaderParser's decoding is not compliant with RFC 3986 #50650

📔 Documentation

• Description of spring.graphql.websocket.connection-init-timeout does not render correctly in the reference guide #51348
• spring.profiles.group should have a 'spring-profile-name' hint provider #51284
• Remove reference to removed InfluxDB auto-configuration #51176
• Use JacksonJsonSerde in Kafka Streams documentation #51161
• Document alternatives to HttpMessageConverters #51129
• Fix stale type reference for OTLP logging transport metadata #51119
• Metadata for spring.test.mockmvc.htmlunit.url declares the wrong type #51115

... (truncated)

Commits

• 6fdf67e Release 4.1.1
• fde599b Upgrade to Spring Pulsar 2.0.7
• 9daa58f Upgrade to Spring HATEOAS 3.1.2
• 353993e Upgrade to Spring Data Bom 2026.0.1
• 24ba596 Upgrade to Spring Session 4.1.1
• 5cb5c29 Upgrade to Spring Security 7.1.1
• 4adc8eb Upgrade to Spring LDAP 4.1.1
• 4d9c19c Upgrade to Spring Kafka 4.1.1
• f30f612 Upgrade to Spring Integration 7.1.1
• b930283 Upgrade to Spring gRPC 1.1.1
• Additional commits viewable in compare view

Updates com.diffplug.spotless from 8.8.0 to 8.10.0

Updates gradle-wrapper from 9.6.1 to 9.7.1

Release notes

Sourced from gradle-wrapper's releases.

9.7.1

The Gradle team is excited to announce Gradle 9.7.1.

This is a patch release for 9.7.0. We recommend using 9.7.1 instead of 9.7.0.

Here are the highlights of 9.7.0 release:

• Isolated Projects graduates to incubating
• Broader Configuration Cache compatibility
• Resilient Sync helps you fix broken builds
• More source locations in problem reports

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Adam, Aman Gautam, Aman Kumar, Anton Dubrouski, Aurimas, gbhavya07, Josh Friend, nicklauslittle-gov, Pragati, project516, Qin Mi, Ravi, sk-reddy17, Suvrat Acharya, Yongshun Ye.

Upgrade instructions

Switch your build to use Gradle 9.7.1 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.7.1 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.7.0

The Gradle team is excited to announce Gradle 9.7.0.

... (truncated)

Commits

• 92f0512 update fixed issues for 9.7.1 (#38892)
• 820ee75 update fixed issues for 9.7.1
• 82c23f9 Fix annotation parameter ordering problem in KTS (#38878)
• ef11a72 Fix annotation parameter ordering issue
• bb0d8a9 Make relevant tests polyglot (run for multiple DSLs)
• 336e129 Update signing configuration (#38874)
• 4bdf0da Update signing configuration
• cd9b92c List issues resolved in 9.7.1 (#38839)
• 5f4e381 List issues resolved in 9.7.1
• 1e08ab5 Keep type-use annotations in extracted ABI classes (#38810)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.