chore(deps): automated dependency updates 2026-09-01

[izg-dependency-bot]

Automated Dependency Updates

This PR was created automatically by the Automated Dependency Updates workflow.

Version Changes (property-backed)

Property	Old Version	New Version
aws-sdk	2.54.6	2.54.9
protobuf-java	4.36.0	4.36.1

Transitive Dependencies Auto-fixed

None — all transitives are already property-backed.

These transitives had no existing property override. A new <properties> entry and
<dependencyManagement> entry were added automatically for each.

Transitives Requiring Manual Action

None.

These could not be patched automatically. Each requires a manual <properties> entry
and <dependencyManagement> entry in the BOM.

Dependency Tree Changes

143c143
< [INFO] +- com.google.protobuf:protobuf-java:jar:4.36.0:compile
---
> [INFO] +- com.google.protobuf:protobuf-java:jar:4.36.1:compile
145,154c145,154
< [INFO] +- software.amazon.awssdk:secretsmanager:jar:2.54.6:compile
< [INFO] |  +- software.amazon.awssdk:aws-json-protocol:jar:2.54.6:compile
< [INFO] |  |  \- software.amazon.awssdk:third-party-jackson-core:jar:2.54.6:compile
< [INFO] |  +- software.amazon.awssdk:protocol-core:jar:2.54.6:compile
< [INFO] |  +- software.amazon.awssdk:http-auth-aws:jar:2.54.6:compile
< [INFO] |  |  +- software.amazon.awssdk:checksums-spi:jar:2.54.6:compile
< [INFO] |  |  \- software.amazon.awssdk:checksums:jar:2.54.6:compile
< [INFO] |  +- software.amazon.awssdk:sdk-core:jar:2.54.6:compile
< [INFO] |  |  +- software.amazon.awssdk:profiles:jar:2.54.6:compile
< [INFO] |  |  +- software.amazon.awssdk:retries:jar:2.54.6:compile
---
> [INFO] +- software.amazon.awssdk:secretsmanager:jar:2.54.9:compile
> [INFO] |  +- software.amazon.awssdk:aws-json-protocol:jar:2.54.9:compile
> [INFO] |  |  \- software.amazon.awssdk:third-party-jackson-core:jar:2.54.9:compile
> [INFO] |  +- software.amazon.awssdk:protocol-core:jar:2.54.9:compile
> [INFO] |  +- software.amazon.awssdk:http-auth-aws:jar:2.54.9:compile
> [INFO] |  |  +- software.amazon.awssdk:checksums-spi:jar:2.54.9:compile
> [INFO] |  |  \- software.amazon.awssdk:checksums:jar:2.54.9:compile
> [INFO] |  +- software.amazon.awssdk:sdk-core:jar:2.54.9:compile
> [INFO] |  |  +- software.amazon.awssdk:profiles:jar:2.54.9:compile
> [INFO] |  |  +- software.amazon.awssdk:retries:jar:2.54.9:compile
156,157c156,157
< [INFO] |  +- software.amazon.awssdk:auth:jar:2.54.6:compile
< [INFO] |  |  +- software.amazon.awssdk:http-auth-aws-eventstream:jar:2.54.6:compile
---
> [INFO] |  +- software.amazon.awssdk:auth:jar:2.54.9:compile
> [INFO] |  |  +- software.amazon.awssdk:http-auth-aws-eventstream:jar:2.54.9:compile
159,173c159,173
< [INFO] |  +- software.amazon.awssdk:http-auth-spi:jar:2.54.6:compile
< [INFO] |  +- software.amazon.awssdk:http-auth:jar:2.54.6:compile
< [INFO] |  +- software.amazon.awssdk:identity-spi:jar:2.54.6:compile
< [INFO] |  +- software.amazon.awssdk:http-client-spi:jar:2.54.6:compile
< [INFO] |  +- software.amazon.awssdk:regions:jar:2.54.6:compile
< [INFO] |  +- software.amazon.awssdk:annotations:jar:2.54.6:compile
< [INFO] |  +- software.amazon.awssdk:utils:jar:2.54.6:compile
< [INFO] |  +- software.amazon.awssdk:aws-core:jar:2.54.6:compile
< [INFO] |  |  \- software.amazon.awssdk:utils-lite:jar:2.54.6:compile
< [INFO] |  +- software.amazon.awssdk:metrics-spi:jar:2.54.6:compile
< [INFO] |  +- software.amazon.awssdk:json-utils:jar:2.54.6:compile
< [INFO] |  +- software.amazon.awssdk:endpoints-spi:jar:2.54.6:compile
< [INFO] |  +- software.amazon.awssdk:retries-spi:jar:2.54.6:compile
< [INFO] |  +- software.amazon.awssdk:apache5-client:jar:2.54.6:runtime
< [INFO] |  \- software.amazon.awssdk:netty-nio-client:jar:2.54.6:runtime
---
> [INFO] |  +- software.amazon.awssdk:http-auth-spi:jar:2.54.9:compile
> [INFO] |  +- software.amazon.awssdk:http-auth:jar:2.54.9:compile
> [INFO] |  +- software.amazon.awssdk:identity-spi:jar:2.54.9:compile
> [INFO] |  +- software.amazon.awssdk:http-client-spi:jar:2.54.9:compile
> [INFO] |  +- software.amazon.awssdk:regions:jar:2.54.9:compile
> [INFO] |  +- software.amazon.awssdk:annotations:jar:2.54.9:compile
> [INFO] |  +- software.amazon.awssdk:utils:jar:2.54.9:compile
> [INFO] |  +- software.amazon.awssdk:aws-core:jar:2.54.9:compile
> [INFO] |  |  \- software.amazon.awssdk:utils-lite:jar:2.54.9:compile
> [INFO] |  +- software.amazon.awssdk:metrics-spi:jar:2.54.9:compile
> [INFO] |  +- software.amazon.awssdk:json-utils:jar:2.54.9:compile
> [INFO] |  +- software.amazon.awssdk:endpoints-spi:jar:2.54.9:compile
> [INFO] |  +- software.amazon.awssdk:retries-spi:jar:2.54.9:compile
> [INFO] |  +- software.amazon.awssdk:apache5-client:jar:2.54.9:runtime
> [INFO] |  \- software.amazon.awssdk:netty-nio-client:jar:2.54.9:runtime
270,271c270,271
< [INFO] Total time:  1.360 s
< [INFO] Finished at: 2026-09-01T11:51:42Z
---
> [INFO] Total time:  1.378 s
> [INFO] Finished at: 2026-09-01T11:53:18Z

Excluded Libraries (not updated automatically)

• org.bouncycastle:bc-fips (manually managed — not updated automatically)
• org.bouncycastle:bcpkix-fips (manually managed — not updated automatically)
• org.bouncycastle:bctls-fips (manually managed — not updated automatically)

These libraries require manual review before upgrading. Check for major version bumps or certification requirements.

CVE Scan Results

Phase	Result
Pre-update	Pre-update scan: 1 vulnerabilities found. See the dependency-check-report-pre-update artifact.
Post-update	Post-update scan: 1 vulnerabilities found. See the dependency-check-report-post-update artifact.

See the dependency-check-report-pre-update and dependency-check-report-post-update artifacts for full details.

Notes

• Only patch and minor version bumps are applied automatically (allowMajorUpdates=false).
• All updated versions have been verified to resolve via mvn dependency:resolve on the validation project.
• Transitives that could not be auto-fixed are flagged above and require a manual BOM entry.