chore(deps): bump the backend-dependencies group across 1 directory with 4 updates by dependabot[bot] · Pull Request #764 · dallay/profiletailors.com

dependabot · 2026-08-10T10:42:44Z

Bumps the backend-dependencies group with 4 updates in the / directory: org.jetbrains.kotlin.jvm, org.jetbrains.kotlin.plugin.spring, org.springframework.boot and org.jetbrains.kotlinx.kover.

Updates org.jetbrains.kotlin.jvm from 2.3.21 to 2.4.10

Release notes

Sourced from org.jetbrains.kotlin.jvm's releases.

Kotlin 2.4.10

Changelog

Backend. Wasm

KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

Compiler

KT-86939 JVM: IllegalStateException "No value for annotation parameter" when using const val in nested Java annotation array argument

KT-83766 K2: Wrong sourcePsi is set for SymbolPsiLiteral in SLC for annotation arguments referencing a const val

KT-86728 Reified type inference: expected type not propagated into inline call inside lambda with elvis operator

Compose Compiler

b/522127447 Compose Compiler 2.4: classes previously inferred stable now reported runtime/Uncertain

Klibs

KT-86501 Native: IrTypeAliasSymbolImpl is already bound. Signature: kotlinx.datetime/Instant|null[0] on iosSimulatorArm64

Tools. CLI

KT-86930 Introduce kotlinr in the Kotlin distribution

Tools. Gradle. BCV

KT-87223 Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of 2.4.0

Tools. Gradle. JS

KT-87304 jsBrowserTest fails with "exited with errors (exit code: 1)"

KT-86057 kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall is up-to-date, causing kotlinStoreYarnLock to fail

Tools. Gradle. Multiplatform

KT-87084 False positive warning for JS and Wasm compilations when CRI is enabled

Tools. Scripts

KT-87076 @file:CompilerOptions("-jvm-target", ...) ignored in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target 1.8

KT-86352 K2 scripting: FirResolvedTypeRef exception when resolving extension functions from imported scripts

Kotlin 2.4.10-RC2

Changelog

Backend. Wasm

KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin.jvm's changelog.

2.4.10

Backend. Wasm

KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

Compiler

KT-86939 JVM: IllegalStateException "No value for annotation parameter" when using const val in nested Java annotation array argument

KT-83766 K2: Wrong sourcePsi is set for SymbolPsiLiteral in SLC for annotation arguments referencing a const val

KT-86728 Reified type inference: expected type not propagated into inline call inside lambda with elvis operator

Compose Compiler

b/522127447 Compose Compiler 2.4: classes previously inferred stable now reported runtime/Uncertain

Klibs

KT-86501 Native: IrTypeAliasSymbolImpl is already bound. Signature: kotlinx.datetime/Instant|null[0] on iosSimulatorArm64

Tools. CLI

KT-86930 Introduce kotlinr in the Kotlin distribution

Tools. Gradle. BCV

KT-87223 Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of 2.4.0

Tools. Gradle. JS

KT-87304 jsBrowserTest fails with "exited with errors (exit code: 1)"

KT-86057 kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall is up-to-date, causing kotlinStoreYarnLock to fail

Tools. Gradle. Multiplatform

KT-87084 False positive warning for JS and Wasm compilations when CRI is enabled

Tools. Scripts

KT-87076 @file:CompilerOptions("-jvm-target", ...) ignored in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target 1.8

KT-86352 K2 scripting: FirResolvedTypeRef exception when resolving extension functions from imported scripts

2.4.0

Analysis API

KT-83867 OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ repo

KT-83723 [Analysis API] Enable experimental KDoc resolver by default

KT-83388 Analysis API: properly support KMP in KotlinPackageProvider

... (truncated)

Commits

5687445 Add Changelog for 2.4.10-RC2
ba30392 [Wasm] Support regenerate unchanged modules flag on KGP
6307e73 [Wasm] Implement Xwasm-IC-generate-unchanged-modules flag
39d7aee Add ChangeLog for 2.4.10-RC2
a2956be [Gradle] Update karma.conf.js to use 'require(...)' instead plain strings
9b1361c [Gradle] KT-87223: Updated regression test
a4c153a [Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat config
bc04b90 Add ChangeLog for 2.4.10-RC
bbcb94b [CRI] explicitly disable CRI generation for non-JVM targets to avoid false-po...
6c2c458 Scripting: fix jvmTarget processing from script annotations
Additional commits viewable in compare view

Updates org.jetbrains.kotlin.plugin.spring from 2.3.21 to 2.4.10

Release notes

Sourced from org.jetbrains.kotlin.plugin.spring's releases.

Kotlin 2.4.10

Changelog

Backend. Wasm

KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

Compiler

KT-86939 JVM: IllegalStateException "No value for annotation parameter" when using const val in nested Java annotation array argument

KT-83766 K2: Wrong sourcePsi is set for SymbolPsiLiteral in SLC for annotation arguments referencing a const val

KT-86728 Reified type inference: expected type not propagated into inline call inside lambda with elvis operator

Compose Compiler

b/522127447 Compose Compiler 2.4: classes previously inferred stable now reported runtime/Uncertain

Klibs

KT-86501 Native: IrTypeAliasSymbolImpl is already bound. Signature: kotlinx.datetime/Instant|null[0] on iosSimulatorArm64

Tools. CLI

KT-86930 Introduce kotlinr in the Kotlin distribution

Tools. Gradle. BCV

KT-87223 Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of 2.4.0

Tools. Gradle. JS

KT-87304 jsBrowserTest fails with "exited with errors (exit code: 1)"

KT-86057 kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall is up-to-date, causing kotlinStoreYarnLock to fail

Tools. Gradle. Multiplatform

KT-87084 False positive warning for JS and Wasm compilations when CRI is enabled

Tools. Scripts

KT-87076 @file:CompilerOptions("-jvm-target", ...) ignored in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target 1.8

KT-86352 K2 scripting: FirResolvedTypeRef exception when resolving extension functions from imported scripts

Kotlin 2.4.10-RC2

Changelog

Backend. Wasm

KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin.plugin.spring's changelog.

2.4.10

Backend. Wasm

KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

Compiler

KT-86939 JVM: IllegalStateException "No value for annotation parameter" when using const val in nested Java annotation array argument

KT-83766 K2: Wrong sourcePsi is set for SymbolPsiLiteral in SLC for annotation arguments referencing a const val

KT-86728 Reified type inference: expected type not propagated into inline call inside lambda with elvis operator

Compose Compiler

b/522127447 Compose Compiler 2.4: classes previously inferred stable now reported runtime/Uncertain

Klibs

KT-86501 Native: IrTypeAliasSymbolImpl is already bound. Signature: kotlinx.datetime/Instant|null[0] on iosSimulatorArm64

Tools. CLI

KT-86930 Introduce kotlinr in the Kotlin distribution

Tools. Gradle. BCV

KT-87223 Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of 2.4.0

Tools. Gradle. JS

KT-87304 jsBrowserTest fails with "exited with errors (exit code: 1)"

KT-86057 kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall is up-to-date, causing kotlinStoreYarnLock to fail

Tools. Gradle. Multiplatform

KT-87084 False positive warning for JS and Wasm compilations when CRI is enabled

Tools. Scripts

KT-87076 @file:CompilerOptions("-jvm-target", ...) ignored in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target 1.8

KT-86352 K2 scripting: FirResolvedTypeRef exception when resolving extension functions from imported scripts

2.4.0

Analysis API

KT-83867 OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ repo

KT-83723 [Analysis API] Enable experimental KDoc resolver by default

KT-83388 Analysis API: properly support KMP in KotlinPackageProvider

... (truncated)

Commits

5687445 Add Changelog for 2.4.10-RC2
ba30392 [Wasm] Support regenerate unchanged modules flag on KGP
6307e73 [Wasm] Implement Xwasm-IC-generate-unchanged-modules flag
39d7aee Add ChangeLog for 2.4.10-RC2
a2956be [Gradle] Update karma.conf.js to use 'require(...)' instead plain strings
9b1361c [Gradle] KT-87223: Updated regression test
a4c153a [Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat config
bc04b90 Add ChangeLog for 2.4.10-RC
bbcb94b [CRI] explicitly disable CRI generation for non-JVM targets to avoid false-po...
6c2c458 Scripting: fix jvmTarget processing from script annotations
Additional commits viewable in compare view

Updates org.jetbrains.kotlin.plugin.spring from 2.3.21 to 2.4.10

Release notes

Sourced from org.jetbrains.kotlin.plugin.spring's releases.

Kotlin 2.4.10

Changelog

Backend. Wasm

KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

Compiler

KT-86939 JVM: IllegalStateException "No value for annotation parameter" when using const val in nested Java annotation array argument

KT-83766 K2: Wrong sourcePsi is set for SymbolPsiLiteral in SLC for annotation arguments referencing a const val

KT-86728 Reified type inference: expected type not propagated into inline call inside lambda with elvis operator

Compose Compiler

b/522127447 Compose Compiler 2.4: classes previously inferred stable now reported runtime/Uncertain

Klibs

KT-86501 Native: IrTypeAliasSymbolImpl is already bound. Signature: kotlinx.datetime/Instant|null[0] on iosSimulatorArm64

Tools. CLI

KT-86930 Introduce kotlinr in the Kotlin distribution

Tools. Gradle. BCV

KT-87223 Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of 2.4.0

Tools. Gradle. JS

KT-87304 jsBrowserTest fails with "exited with errors (exit code: 1)"

KT-86057 kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall is up-to-date, causing kotlinStoreYarnLock to fail

Tools. Gradle. Multiplatform

KT-87084 False positive warning for JS and Wasm compilations when CRI is enabled

Tools. Scripts

KT-87076 @file:CompilerOptions("-jvm-target", ...) ignored in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target 1.8

KT-86352 K2 scripting: FirResolvedTypeRef exception when resolving extension functions from imported scripts

Kotlin 2.4.10-RC2

Changelog

Backend. Wasm

KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin.plugin.spring's changelog.

2.4.10

Backend. Wasm

KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

Compiler

KT-86939 JVM: IllegalStateException "No value for annotation parameter" when using const val in nested Java annotation array argument

KT-83766 K2: Wrong sourcePsi is set for SymbolPsiLiteral in SLC for annotation arguments referencing a const val

KT-86728 Reified type inference: expected type not propagated into inline call inside lambda with elvis operator

Compose Compiler

b/522127447 Compose Compiler 2.4: classes previously inferred stable now reported runtime/Uncertain

Klibs

KT-86501 Native: IrTypeAliasSymbolImpl is already bound. Signature: kotlinx.datetime/Instant|null[0] on iosSimulatorArm64

Tools. CLI

KT-86930 Introduce kotlinr in the Kotlin distribution

Tools. Gradle. BCV

KT-87223 Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of 2.4.0

Tools. Gradle. JS

KT-87304 jsBrowserTest fails with "exited with errors (exit code: 1)"

KT-86057 kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall is up-to-date, causing kotlinStoreYarnLock to fail

Tools. Gradle. Multiplatform

KT-87084 False positive warning for JS and Wasm compilations when CRI is enabled

Tools. Scripts

KT-87076 @file:CompilerOptions("-jvm-target", ...) ignored in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target 1.8

KT-86352 K2 scripting: FirResolvedTypeRef exception when resolving extension functions from imported scripts

2.4.0

Analysis API

KT-83867 OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ repo

KT-83723 [Analysis API] Enable experimental KDoc resolver by default

KT-83388 Analysis API: properly support KMP in KotlinPackageProvider

... (truncated)

Commits

5687445 Add Changelog for 2.4.10-RC2
ba30392 [Wasm] Support regenerate unchanged modules flag on KGP
6307e73 [Wasm] Implement Xwasm-IC-generate-unchanged-modules flag
39d7aee Add ChangeLog for 2.4.10-RC2
a2956be [Gradle] Update karma.conf.js to use 'require(...)' instead plain strings
9b1361c [Gradle] KT-87223: Updated regression test
a4c153a [Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat config
bc04b90 Add ChangeLog for 2.4.10-RC
bbcb94b [CRI] explicitly disable CRI generation for non-JVM targets to avoid false-po...
6c2c458 Scripting: fix jvmTarget processing from script annotations
Additional commits viewable in compare view

Updates org.springframework.boot from 4.0.7 to 4.1.0

Release notes

Sourced from org.springframework.boot's releases.

v4.1.0

Full release notes for Spring Boot 4.1 are available on the wiki.

⭐ New Features

Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #50211

Reduce memory consumption when repeatedly calling WritableJson.toByteArray #49428

🐞 Bug Fixes

MailSender auto-configuration does not enable hostname verification #50747

Artemis auto-configuration uses a predictable default location for the embedded broker's data #50745

Embedded LDAP SSL should not be enabled when its bundle is empty #50700

InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 #50668

NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50645

SSL should not be enabled when a SSL bundle is overridden to an empty string #50635

Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50633

Configuration property metadata includes incorrect class references #50632

Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50618

RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50612

NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50610

SpringJtaPlatform should have been deprecated since 4.1.0-M3 #50592

Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50510

ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50417

Created StackTracePrinter instances have no access to the Environment #50414

MappingsEndpoint reports the context's own ID as parentId when a parent exists #50412

Buildpack module does not validate long-to-int casts #50410

Gradle gRPC support fails if protobuf-java dependency is used instead of protobuf-java-util #50405

GraphQL WebSocket support does not configure allowed origins #50394

Spring Boot Loader Does Not Support RSA and EC Signed Jars #50298

Meter registries are not removed from the global registry when the context is closed #50287

DataSourceBuilder cannot derive a DataSource from a lazy connection proxy #50271

Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50266

Bean definitions can be added with an initializer before setAllowBeanDefinitionOverriding is called #50264

EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50261

Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50258

ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50234

NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50228

Missing dependency management for spring-boot-web-server-test #50224

Spring Batch support for MongoDB modules are not included in dependency management #50223

Apply HTML escaping to timestamp attribute in Whitelabel error page #50216

GrpcServerHealthScheduler is not started in servlet environments #50209

Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50204

📔 Documentation

Fix reference to Gradle documentation for module replacement #50647

Document SSL reloading with Let's Encrypt #50630

Remove the use of Optional from Data Neo4j repository examples #50622

Fix typos in documentation #50620

... (truncated)

Commits

ac2cfe0 Release v4.1.0
1a5815c Upgrade to Spring Batch 6.0.4
a8364ff Merge branch '4.0.x'
6a6dedc Upgrade to Spring Integration 7.1.0
db7b2b9 Merge branch '4.0.x'
198af99 Merge branch '4.0.x'
adcfbf7 Merge branch '4.0.x'
e1f6b96 Upgrade to Spring GraphQL 2.0.4
ab5d8f2 Merge branch '4.0.x'
c3bbac6 Merge branch '4.0.x'
Additional commits viewable in compare view

Updates org.jetbrains.kotlinx.kover from 0.9.1 to 0.9.9

Release notes

Sourced from org.jetbrains.kotlinx.kover's releases.

0.9.9

Kover Gradle Plugin

Bugfixes

[#818](https://github.com/Kotlin/kotlinx-kover/issues/818) Fixed Gradle 9.6.0 deprecation warning

[#810](https://github.com/Kotlin/kotlinx-kover/issues/810) Fix 0% coverage for classes in com.android.* packages

0.9.8

Kover Gradle Plugin

Bugfixes

[#799](https://github.com/Kotlin/kotlinx-kover/issues/799) [#772](https://github.com/Kotlin/kotlinx-kover/issues/772) Fixed Android multiplatform library support in case of the violation of the project isolation

Internal features

Updated publish plugin and declare configuration cache compatibility

[#782](https://github.com/Kotlin/kotlinx-kover/issues/782) Filled Implementation fields Vendor/Title/Version in MANIFEST.MF

0.9.7

Kover Gradle Plugin

Bugfixes

[#747](https://github.com/Kotlin/kotlinx-kover/issues/747) Fixed a recurring issue in support of Android KMP libraries

0.9.6

Kover Gradle Plugin

Bugfixes

[#792](https://github.com/Kotlin/kotlinx-kover/issues/792) Fixed support of Android 9 with hilt

0.9.5

Kover Gradle Plugin

Bugfixes

[#784](https://github.com/Kotlin/kotlinx-kover/issues/784) Fixed support of build variants in Android Gradle Plugin 9.0.0

[#785](https://github.com/Kotlin/kotlinx-kover/issues/785) Fixed support of test task dependencies in Android Gradle Plugin 9.0.0

0.9.4

Kover Gradle Plugin

Bugfixes

[#776](https://github.com/Kotlin/kotlinx-kover/issues/776) Added support for Android Gradle Plugin 9.0.0

0.9.3

Kover Gradle Plugin

Bugfixes

[#759](https://github.com/Kotlin/kotlinx-kover/issues/759) Fixed locating of host tests for the multiplatform Android library

[#766](https://github.com/Kotlin/kotlinx-kover/issues/766) Fixed support of KSP plugin

Build features

Upgraded Gradle version to 9.1.0

0.9.2

Kover Gradle Plugin

Features

[#748](https://github.com/Kotlin/kotlinx-kover/issues/748) Disable caching for KoverAgentJarTask

Bugfixes

[#747](https://github.com/Kotlin/kotlinx-kover/issues/747) Added support for KMP Android library plugin

Changelog

Sourced from org.jetbrains.kotlinx.kover's changelog.

0.9.9 / 2026-07-17

Kover Gradle Plugin

Bugfixes

[#818](https://github.com/Kotlin/kotlinx-kover/issues/818) Fixed Gradle 9.6.0 deprecation warning

[#810](https://github.com/Kotlin/kotlinx-kover/issues/810) Fix 0% coverage for classes in com.android.* packages

0.9.8 / 2026-03-25

Kover Gradle Plugin

Internal features

Updated publish plugin and declare configuration cache compatibility

[#782](https://github.com/Kotlin/kotlinx-kover/issues/782) Filled Implementation fields Vendor/Title/Version in MANIFEST.MF

Bugfixes

[#799](https://github.com/Kotlin/kotlinx-kover/issues/799) [#772](https://github.com/Kotlin/kotlinx-kover/issues/772) Fixed Android multiplatform library support in case of the violation of the project isolation

0.9.7 / 2026-02-10

Kover Gradle Plugin

Bugfixes

[#747](https://github.com/Kotlin/kotlinx-kover/issues/747) Fixed a recurring issue in support of Android KMP libraries

0.9.6 / 2026-02-04

Kover Gradle Plugin

Bugfixes

[#792](https://github.com/Kotlin/kotlinx-kover/issues/792) Fixed support of Android 9 with hilt

0.9.5 / 2026-01-30

Kover Gradle Plugin

Bugfixes

[#784](https://github.com/Kotlin/kotlinx-kover/issues/784) Fixed support of build variants in Android Gradle Plugin 9.0.0

[#785](https://github.com/Kotlin/kotlinx-kover/issues/785) Fixed support of test task dependencies in Android Gradle Plugin 9.0.0

0.9.4 / 2025-12-09

Kover Gradle Plugin

Bugfixes

[#776](https://github.com/Kotlin/kotlinx-kover/issues/776) Added support for Android Gradle Plugin 9.0.0

0.9.3 / 2025-10-16

Kover Gradle Plugin

Bugfixes

[#759](https://github.com/Kotlin/kotlinx-kover/issues/759) Fixed locating of host tests for the multiplatform Android library

[#766](https://github.com/Kotlin/kotlinx-kover/issues/766) Fixed support of KSP plugin

Build features

Upgraded Gradle version to 9.1.0

... (truncated)

Commits

95de3ac Release 0.9.9
135968e Fixed Gradle 9.6.0 deprecation warning
0b7319e Applied artifacts validator plugin
6f712cc Fix 0% coverage for classes in com.android.* packages (#810)
c8be110 Use local repo for publishing
e329fea Release 0.9.8
d006ccd Filled Implementation fields Vendor/Title/Version in MANIFEST.MF
9c300e1 Fixed Android multiplatform library support in case of the violation of the p...
e302173 Update publish plugin and declare configuration cache compatibility
b95e2bf Fix aggregated plugin docs
Additional commits viewable in compare view

socket-security · 2026-08-10T10:43:10Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	maven/org.jetbrains.kotlinx/kover-gradle-plugin@0.9.1 ⏵ 0.9.9	^-8
	maven/org.springframework.boot/spring-boot-gradle-plugin@4.0.7 ⏵ 4.1.0	^-3
	maven/org.jetbrains.kotlin/kotlin-reflect@2.3.21 ⏵ 2.4.10
	maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.21 ⏵ 2.4.10
	maven/org.jetbrains.kotlin/kotlin-gradle-plugin@2.3.21 ⏵ 2.4.10
	maven/org.jetbrains.kotlin/kotlin-test-junit5@2.3.21 ⏵ 2.4.10

View full report

socket-security · 2026-08-10T10:43:12Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: maven `org.apache.httpcomponents.core5:httpcore5` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: `?` → `maven/org.springframework.boot/spring-boot-gradle-plugin@4.1.0` → `maven/org.apache.httpcomponents.core5/httpcore5@5.4` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore maven/org.apache.httpcomponents.core5/httpcore5@5.4`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: maven `org.jetbrains.kotlin:kotlin-gradle-plugin` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: gradle/libs.versions.toml → `maven/org.jetbrains.kotlin/kotlin-gradle-plugin@2.4.10` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore maven/org.jetbrains.kotlin/kotlin-gradle-plugin@2.4.10`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

…ith 4 updates Bumps the backend-dependencies group with 4 updates in the / directory: [org.jetbrains.kotlin.jvm](https://github.com/JetBrains/kotlin), [org.jetbrains.kotlin.plugin.spring](https://github.com/JetBrains/kotlin), [org.springframework.boot](https://github.com/spring-projects/spring-boot) and [org.jetbrains.kotlinx.kover](https://github.com/Kotlin/kotlinx-kover). Updates `org.jetbrains.kotlin.jvm` from 2.3.21 to 2.4.10 - [Release notes](https://github.com/JetBrains/kotlin/releases) - [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md) - [Commits](JetBrains/kotlin@v2.3.21...v2.4.10) Updates `org.jetbrains.kotlin.plugin.spring` from 2.3.21 to 2.4.10 - [Release notes](https://github.com/JetBrains/kotlin/releases) - [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md) - [Commits](JetBrains/kotlin@v2.3.21...v2.4.10) Updates `org.jetbrains.kotlin.plugin.spring` from 2.3.21 to 2.4.10 - [Release notes](https://github.com/JetBrains/kotlin/releases) - [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md) - [Commits](JetBrains/kotlin@v2.3.21...v2.4.10) Updates `org.springframework.boot` from 4.0.7 to 4.1.0 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v4.0.7...v4.1.0) Updates `org.jetbrains.kotlinx.kover` from 0.9.1 to 0.9.9 - [Release notes](https://github.com/Kotlin/kotlinx-kover/releases) - [Changelog](https://github.com/Kotlin/kotlinx-kover/blob/main/CHANGELOG.md) - [Commits](Kotlin/kotlinx-kover@v0.9.1...v0.9.9) --- updated-dependencies: - dependency-name: org.jetbrains.kotlin.jvm dependency-version: 2.4.10 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: org.jetbrains.kotlin.plugin.spring dependency-version: 2.4.10 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: org.jetbrains.kotlin.plugin.spring dependency-version: 2.4.10 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: org.jetbrains.kotlinx.kover dependency-version: 0.9.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: org.springframework.boot dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

cloudflare-workers-and-pages · 2026-08-10T13:11:29Z

Deploying app-profile-tailors with Cloudflare Pages

Latest commit:	`22d3526`
Status:	✅ Deploy successful!
Preview URL:	https://3e3f2542.app-profile-tailors.pages.dev
Branch Preview URL:	https://dependabot-gradle-backend-de-lko8.app-profile-tailors.pages.dev

View logs

cloudflare-workers-and-pages · 2026-08-10T13:45:30Z

Deploying profiletailors with Cloudflare Pages

Latest commit:	`22d3526`
Status:	✅ Deploy successful!
Preview URL:	https://01b37b2e.profiletailors-com.pages.dev
Branch Preview URL:	https://dependabot-gradle-backend-de-x5e7.profiletailors-com.pages.dev

View logs

dependabot Bot added area:backend Changes in backend code (server/smp/** or shared/**) type:dependency Dependency updates (Renovate or manual) labels Aug 10, 2026

github-actions Bot enabled auto-merge (squash) August 10, 2026 11:41

github-actions Bot removed the area:backend Changes in backend code (server/smp/** or shared/**) label Aug 10, 2026

dependabot Bot force-pushed the dependabot/gradle/backend-dependencies-655cec4842 branch from 4267bd7 to 22d3526 Compare August 10, 2026 13:11

Navigation Menu

Uh oh!

chore(deps): bump the backend-dependencies group across 1 directory with 4 updates - #764

chore(deps): bump the backend-dependencies group across 1 directory with 4 updates#764
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/backend-dependencies-655cec4842

dependabot Bot commented on behalf of github Aug 10, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Aug 10, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Aug 10, 2026 •

edited

Loading

Uh oh!

cloudflare-workers-and-pages Bot commented Aug 10, 2026 •

edited

Loading

Uh oh!

cloudflare-workers-and-pages Bot commented Aug 10, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Kotlin 2.4.10

Changelog

Backend. Wasm

Compiler

Compose Compiler

Klibs

Tools. CLI

Tools. Gradle. BCV

Tools. Gradle. JS

Tools. Gradle. Multiplatform

Tools. Scripts

Kotlin 2.4.10-RC2

Changelog

Backend. Wasm

2.4.10

Backend. Wasm

Compiler

Compose Compiler

Klibs

Tools. CLI

Tools. Gradle. BCV

Tools. Gradle. JS

Tools. Gradle. Multiplatform

Tools. Scripts

2.4.0

Analysis API

Kotlin 2.4.10

Changelog

Backend. Wasm

Compiler

Compose Compiler

Klibs

Tools. CLI

Tools. Gradle. BCV

Tools. Gradle. JS

Tools. Gradle. Multiplatform

Tools. Scripts

Kotlin 2.4.10-RC2

Changelog

Backend. Wasm

2.4.10

Backend. Wasm

Compiler

Compose Compiler

Klibs

Tools. CLI

Tools. Gradle. BCV

Tools. Gradle. JS

Tools. Gradle. Multiplatform

Tools. Scripts

2.4.0

Analysis API

Kotlin 2.4.10

Changelog

Backend. Wasm

Compiler

Compose Compiler

Klibs

Tools. CLI

Tools. Gradle. BCV

Tools. Gradle. JS

Tools. Gradle. Multiplatform

Tools. Scripts

Kotlin 2.4.10-RC2

Changelog

Backend. Wasm

2.4.10

Backend. Wasm

Compiler

Compose Compiler

Klibs

Tools. CLI

Tools. Gradle. BCV

Tools. Gradle. JS

Tools. Gradle. Multiplatform

Tools. Scripts

dependabot Bot commented on behalf of github Aug 10, 2026 •

edited

Loading

socket-security Bot commented Aug 10, 2026 •

edited

Loading

socket-security Bot commented Aug 10, 2026 •

edited

Loading

cloudflare-workers-and-pages Bot commented Aug 10, 2026 •

edited

Loading