Skip to content

build(deps): bump org.springframework.kafka:spring-kafka from 3.3.2 to 3.3.16 in /polling-publisher#3522

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/polling-publisher/org.springframework.kafka-spring-kafka-3.3.16
Open

build(deps): bump org.springframework.kafka:spring-kafka from 3.3.2 to 3.3.16 in /polling-publisher#3522
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/polling-publisher/org.springframework.kafka-spring-kafka-3.3.16

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 12, 2026

Copy link
Copy Markdown
Contributor

Bumps org.springframework.kafka:spring-kafka from 3.3.2 to 3.3.16.

Release notes

Sourced from org.springframework.kafka:spring-kafka's releases.

v3.3.16

⭐ New Features

  • make the method setBackOffFunction work for the batch processing as well #4472

🐞 Bug Fixes

  • Require exact package match for trusted header types #4498
  • Harden retry topic headers decoding in Spring Kafka #4494
  • Fix unbounded cache in DelegatingDeserializer #4492
  • Different behavior for value serializer mappings for different classloaders #4462
  • NPE when properties are not defined for StreamsBuilderFactoryBean #4453
  • Inconsistent handling of non-string values in Properties argument passed to DefaultConsumerFactory::createKafkaConsumer #4420

🔨 Dependency Upgrades

  • Bump org.springframework.retry:spring-retry from 2.0.12 to 2.0.13 #4484
  • Bump org.springframework:spring-framework-bom from 6.2.18 to 6.2.19 #4482
  • Bump io.projectreactor:reactor-bom from 2024.0.17 to 2024.0.18 #4479
  • Bump com.fasterxml.jackson:jackson-bom from 2.18.7 to 2.18.8 #4459
  • Bump gradle-wrapper from 8.14.4 to 8.14.5 #4441
  • Bump com.fasterxml.jackson:jackson-bom from 2.18.6 to 2.18.7 #4424

v3.3.15

🐞 Bug Fixes

  • Async Processing (and out of order commits) with FilteringMessageListenerAdapter #4415

🔨 Dependency Upgrades

  • Bump org.springframework:spring-framework-bom from 6.2.17 to 6.2.18 #4410
  • Bump io.projectreactor:reactor-bom from 2024.0.16 to 2024.0.17 #4405

v3.3.14

🐞 Bug Fixes

  • Listener with async acks pauses indefinitely #4343
  • Observations for filtered messages are leaked, filling memory #4335
  • assertTopic validation breaks meta-annotated @KafkaListener with programmatic topic resolution #4312

🔨 Dependency Upgrades

  • Bump org.springframework:spring-framework-bom from 6.2.16 to 6.2.17 #4351
  • Bump io.projectreactor:reactor-bom from 2024.0.15 to 2024.0.16 #4345
  • Bump com.fasterxml.jackson:jackson-bom from 2.18.5 to 2.18.6 #4318

v3.3.13

🐞 Bug Fixes

  • KafkaMessageListenerContainer.getAssignedPartitions can throw ConcurrentModificationException #4275

... (truncated)

Commits
  • 87c4b04 [CI/CD] Release version 3.3.16
  • 64c8c64 Fix DefaultKafkaHeaderMapperTests
  • bd3cca1 GH-4496: Require exact package match for trusted header types
  • fb8f16c GH-4493: Harden retry topic headers decoding
  • 5275405 GH-4489: Fix unbounded cache in DelegatingDeserializer
  • 5730d50 Bump org.springframework:spring-framework-bom from 6.2.18 to 6.2.19 (#4482)
  • 489f0e4 Bump org.springframework.retry:spring-retry from 2.0.12 to 2.0.13 (#4484)
  • 315cae3 Bump io.projectreactor:reactor-bom from 2024.0.17 to 2024.0.18 (#4479)
  • 8afd782 GH-4471: Manage junit-jupiter-params explicitly
  • 9a74846 GH-4455: Fix BackOffFunction for batch listeners
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [org.springframework.kafka:spring-kafka](https://github.com/spring-projects/spring-kafka) from 3.3.2 to 3.3.16.
- [Release notes](https://github.com/spring-projects/spring-kafka/releases)
- [Commits](spring-projects/spring-kafka@v3.3.2...v3.3.16)

---
updated-dependencies:
- dependency-name: org.springframework.kafka:spring-kafka
  dependency-version: 3.3.16
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jun 12, 2026
@github-actions

github-actions Bot commented Jun 12, 2026

Copy link
Copy Markdown

PR Summary

Upgraded the Spring Kafka client from 3.3.2 to 3.3.16 within the polling-publisher module. This aligns with the upstream release's improvements and fixes, including new features such as setBackOffFunction support for batch processing and several bug fixes (e.g., exact package match for trusted header types, improved header decoding, and DelegatingDeserializer cache fixes) as described in v3.3.16 release notes.

Changes

File Summary
polling-publisher/pom.xml Bumped org.springframework.kafka:spring-kafka from 3.3.2 to 3.3.16 in the polling-publisher/pom.xml.

autogenerated by presubmit.ai

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

Review Summary

Commits Considered (1)
  • 68ef097: build(deps): bump org.springframework.kafka:spring-kafka

Bumps org.springframework.kafka:spring-kafka from 3.3.2 to 3.3.16.


updated-dependencies:

  • dependency-name: org.springframework.kafka:spring-kafka
    dependency-version: 3.3.16
    dependency-type: direct:production
    ...

Signed-off-by: dependabot[bot] support@github.com

Files Processed (1)
  • polling-publisher/pom.xml (1 hunk)
Actionable Comments (0)
Skipped Comments (1)
  • polling-publisher/pom.xml [69-69]

    maintainability: "Bump confirms dependency version"

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants