PR for v1.3.7

[ThomasJejkal]

Summary by CodeRabbit

• Chores
  • Updated core libraries and frameworks (including Spring Boot, SpringDoc/OpenAPI, Jackson, Nimbus JOSE JWT, Commons libraries and JAXB) to recent patch/minor releases for security and stability.
  • Bumped Gradle wrapper and build tooling versions.
  • Updated CI workflow action versions used in build, analysis, and publish pipelines.
  • No functional changes or public API modifications.

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

📝 Walkthrough

Walkthrough

Bumped Gradle plugin and library versions (Spring Boot, SpringDoc, Jackson, Nimbus, Apache Commons), updated Gradle wrapper distribution to 9.5.1, and upgraded GitHub Actions steps to actions/checkout@v6 and actions/setup-java@v5.2.0. No application code or public API signatures changed.

Changes

Build & dependency updates

Layer / File(s)	Summary
Gradle plugins and Spring ext versions build.gradle	Updated Gradle plugin versions (io.freefair.lombok, io.freefair.maven-publish-java, org.owasp.dependencycheck) and bumped springBootVersion 3.5.6→3.5.14 and springDocVersion 2.8.13→2.8.17.
Library dependency upgrades build.gradle	Upgraded Spring Cloud Gateway MVC to 4.3.4; aligned Springdoc artifacts to ${springDocVersion}; updated Jackson JAX-RS/afterburner/datatypes and jackson-core/jackson-databind; bumped Nimbus JOSE JWT, commons-lang3, commons-validator, commons-io, and com.sun.xml.bind JAXB runtime libs.
Gradle wrapper distribution gradle/wrapper/gradle-wrapper.properties	Updated distributionUrl to gradle-9.5.1-bin.zip.
CI workflows: checkout & setup-java updates .github/workflows/codeql-analysis.yml, .github/workflows/gradle.yml, .github/workflows/publishRelease.yml	Replaced actions/checkout@v5 → actions/checkout@v6 and actions/setup-java@v5.0.0 → actions/setup-java@v5.2.0; workflow logic unchanged.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Possibly related PRs

• kit-data-manager/service-base#327 — overlapping build.gradle dependency and plugin version updates.
• kit-data-manager/service-base#400 — similar Gradle wrapper and dependency bumps.
• kit-data-manager/service-base#454 — related CI workflow action version updates.

Poem

🐇 I hopped through builds and bumped a line,
Versions tended, dependencies fine.
Wrappers zipped and workflows tuned with care,
Tags aligned — a quiet rabbit’s care.
✨

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Title check	❓ Inconclusive	The title 'PR for v1.3.7' is vague and generic, using non-descriptive phrasing that does not convey meaningful information about the actual changes in the pull request.	Replace with a descriptive title that summarizes the main changes, such as 'Upgrade dependencies and GitHub Actions workflow versions for v1.3.7' or 'Update Gradle plugins, dependencies, and CI workflows'.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch development

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@build.gradle`:
- Around line 92-93: The Jackson artifacts are using mismatched versions
(jackson-core:2.21.3 vs jackson-databind:2.20.1); update the build to
consolidate all Jackson dependencies to a single version by introducing and
using a shared property (e.g., jacksonVersion) and change the implementation
declarations for "com.fasterxml.jackson.core:jackson-core" and
"com.fasterxml.jackson.core:jackson-databind" (and any other Jackson modules) to
reference that property so they all resolve to the same release line.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: e8f3b675-2097-46bd-8b3b-70ad177df18e

📥 Commits

Reviewing files that changed from the base of the PR and between a2b2722 and b0d5668.

📒 Files selected for processing (5)

• .github/workflows/codeql-analysis.yml
• .github/workflows/gradle.yml
• .github/workflows/publishRelease.yml
• build.gradle
• gradle/wrapper/gradle-wrapper.properties

🚧 Files skipped from review as they are similar to previous changes (3)

• .github/workflows/publishRelease.yml
• .github/workflows/codeql-analysis.yml
• .github/workflows/gradle.yml