chore(deps): bump the production group with 8 updates

[dependabot]

This dependency update also replaces the flaky HTTP batch concurrency test with a server-side request barrier. It verifies that all requests are in flight before any response completes, without wall-clock performance thresholds. A temporary sequential-delivery mutation fails the test; the production implementation is unchanged. ./gradlew build ktlintCheck passed locally after the fix.

Bumps the production group with 8 updates:

Package	From	To
org.slf4j:slf4j-simple	2.0.19	2.0.20
org.slf4j:slf4j-api	2.0.19	2.0.20
gradle-wrapper	9.7.1	9.8.0
com.fasterxml.jackson.module:jackson-module-kotlin	2.22.2	2.22.3
com.fasterxml.jackson.datatype:jackson-datatype-jsr310	2.22.2	2.22.3
org.hibernate.orm:hibernate-core	7.4.10.Final	7.4.11.Final
ch.qos.logback:logback-classic	1.6.3	1.6.4
com.h2database:h2	2.5.250	2.5.252

Updates org.slf4j:slf4j-simple from 2.0.19 to 2.0.20

Updates org.slf4j:slf4j-api from 2.0.19 to 2.0.20

Updates gradle-wrapper from 9.7.1 to 9.8.0

Release notes

Sourced from gradle-wrapper's releases.

9.8.0

The Gradle team is excited to announce Gradle 9.8.0.

Here are the highlights of this release:

• Java 27 support
• Maven mirror settings reuse
• Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aman Gautam, Björn Kautler, Eng Zer Jun, Hashim Khan, Julian Krannich, KBS, Labh R Jethe, Mark Dodgson, Maxim, monkey, nataphon-ktsystems, Paul King, Qiu Tian, rg_sandesh, Roberto Perez Alcolea, Sean, Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.0 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.0 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.8.0 RC3

The Gradle team is excited to announce Gradle 9.8.0 RC3.

Here are the highlights of this release:

... (truncated)

Commits

• a927be5 Add the Develocity plugin back to the Android smoke tests (#39273)
• eaee500 Add the Develocity plugin back to the Android smoke tests
• 189b672 Route everything still hitting Maven Central through the mirror (#39257)
• 36b1814 Add back mavenCentral to doc snippets
• 2740c2d Update Gradle wrapper to version 9.8.0-rc-3 (#39264)
• 2099383 Update Gradle wrapper to version 9.8.0-rc-3
• c80202f Route everything still hitting Maven Central through the mirror
• 3f6a534 Fix when a best practice was introduced (#39253)
• 9efc9ed Fix when a best practice was introduced
• 459e143 Route integration test dependencies through the repository mirror (#39239)
• Additional commits viewable in compare view

Updates com.fasterxml.jackson.module:jackson-module-kotlin from 2.22.2 to 2.22.3

Commits

• 31f1e96 [maven-release-plugin] prepare release jackson-module-kotlin-2.22.3
• a0a52ec Prep for 2.22.3 release
• 1dd753f Merge branch '2.21' into 2.22
• 670befc Post-release dep version bump
• 9aa44a6 [maven-release-plugin] prepare for next development iteration
• f6b6e34 [maven-release-plugin] prepare release jackson-module-kotlin-2.21.7
• 9f61f63 Prep for 2.21.7 release
• 28fa8a3 Merge remote-tracking branch 'FasterXML/2.21' into 2.22
• a3d408a Merge pull request #1230 from k163377/wrongwrong/2.21-ci-kotlin-2.4.20
• 62201b5 Update CI Kotlin version 2.4.20-RC3 -> 2.4.20
• Additional commits viewable in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.22.2 to 2.22.3

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.22.2 to 2.22.3

Updates org.hibernate.orm:hibernate-core from 7.4.10.Final to 7.4.11.Final

Release notes

Sourced from org.hibernate.orm:hibernate-core's releases.

Release 7.4.11

Hibernate ORM 7.4.11.Final released

Today, we published a new release of Hibernate ORM 7.4: 7.4.11.Final.

You can find the full list of 7.4.11.Final changes here.

What's new

• See the website for requirements and compatibilities.
• See the What's New guide for details about new features and capabilities.
• See the Migration Guide for details about migration.

Conclusion

For additional details, see:

• the release page
• the Migration Guide
• the Introduction Guide
• the User Guide
• the API docs

See also the following resources related to supported APIs:

• the compatibility policy
• the incubating API report (@Incubating)
• the deprecated API report (@Deprecated + @Remove)
• the internal API report (internal packages, @Internal)

Visit the website for details on getting in touch with us.

Changelog

Sourced from org.hibernate.orm:hibernate-core's changelog.

Changes in 7.4.11.Final (September 27, 2026)

https://hibernate.atlassian.net/projects/HHH/versions/40453

** Bug * HHH-20894 StatelessSession upsert and upsertMultiple concurrency problem * HHH-20876 StatelessSession: Interceptor#onLoad isn't called * HHH-20826 Emit MERGE for on conflict do nothing on H2, Oracle, and SQL Server instead of silently dropping the conflict clause * HHH-17020 Can't use enum as string in join column when field is part of composite primary key

Commits

• a95dd44 [Jenkins release job] Preparing release 7.4.11.Final
• bb72fdf [Jenkins release job] changelog.txt updated by release build 7.4.11.Final
• 7134c72 Switch maven-plugin intTest logging from logback to log4j2
• 97efe59 Fix Maven plugin integration tests not falling back to Maven Central
• dd4001e Fix Informix nightly failures
• 58e974a HHH-17020 Test and fix issues with enum in id-class not copying type related ...
• bc7d0fb HHH-18910/HHH-17020 Test and fix issues with binding discriminator through pr...
• 3cdebc0 HHH-20826 Prefer merge for conflict do-nothing to reduce constraint violation...
• 4555ed0 HHH-20894 Ensure upsert/insert-or-update really is executed and retry batch p...
• 57c59cf HHH-20894 Make Sybase behave like a sane SQL database
• Additional commits viewable in compare view

Updates org.slf4j:slf4j-api from 2.0.19 to 2.0.20

Updates ch.qos.logback:logback-classic from 1.6.3 to 1.6.4

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.4

2026-09-24 Release of logback version 1.6.4

• Variable substitution is again applied to the scan attribute of the <configuration> element. The scanning refactoring in version 1.5.27 had dropped substitution, so values such as ${logback.scan.enabled:-true} were no longer resolved. As before version 1.5.27, an unrecognized non-empty value turns scanning on. The same substitution now applies to the scan attribute of <propertiesConfigurator>. This regression was reported in issues/1065 by vaibhavjain2.

• OutputStreamAppender and FileAppender now handle stateful encoders. The Encoder interface has a new default method called isStateful(), which returns false. An encoder that keeps state between calls to encode() can return true. For such encoders, the appender holds its write lock while encoding and while writing, so the output of concurrent appends cannot interleave. Stateless encoders still encode outside the lock, so their performance does not change. Existing encoders need no changes.

• Several race conditions in OutputStreamAppender and FileAppender were fixed. The appender is now marked started and the encoder header is written while the same lock is held, so a concurrent append can no longer write an event before the header. After acquiring the lock, the appender checks again whether it has been stopped, so no event is written after the footer. In prudent mode, FileAppender now encodes and writes each event while holding the lock.

• Fixed a data race on the logger count in LoggerContext. Loggers are created under the lock of their parent logger, so loggers with different parents could be created at the same time and increments of the shared counter could be lost. As a result, LoggerContext.size() could return a value lower than the actual number of loggers. The counter is now an AtomicInteger. This issue was reported in issues/1038 by hcantunc. The fix was contributed in PR #1055 by seonwoo_jung.

• TimeBasedRollingPolicy now supports half-day periods. Date patterns with the AM/PM marker, for example %d{yyyy-MM-dd-a}, used to be detected as daily and rolled over only at midnight. They now roll over at both 00:00 and 12:00. This issue was reported in issues/976 by shakthifuture. The fix was contributed in PR #1051 by seonwoo_jung. See TimeBasedRollingPolicy.

• If org.jline.jansi.AnsiConsole cannot be found on the class path, JansiConsoleAppender now emits warnings that explain how to add org.jline:jansi-core and then writes to the plain console stream. See codes.html#missingJlineJansi.

• The unused ch.qos.logback.classic.util.LogbackMDCAdapterSimple class was removed. LogbackMDCAdapter remains the default MDC adapter.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 07d291ca0d280bc5da934ec9ff5f1da634fd7937 associated with the tag v_1.6.4. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Full Changelog: qos-ch/logback@v_1.6.3...v_1.6.4

Commits

• 07d291c preapre release 1.6.4
• 9627daf revert to Collections.unmodifiableMap instead of
• aa42fb5 disabled RollingCalendarTest#testVaryingNumberOfHalfDailyPeriods to shave off...
• ddc7459 Support HALF_DAY periodicity for AM/PM date patterns
• 42d75d7 disable LoggerContextTest#concurrentGetLoggerKeepsSizeConsistent to shave exe...
• bffd55e add warnings about missing jline.jansi classes
• 8de0b9b Fix data race on LoggerContext.size (#1038)
• 76c73d1 add MinimalUnmodifiableMap and return it in LogbackMDCAdapter#getPropertyMap
• a2c416a Fix formatting of email instruction in README
• 2c89727 mailing lists have been deactivated
• Additional commits viewable in compare view

Updates com.h2database:h2 from 2.5.250 to 2.5.252

Release notes

Sourced from com.h2database:h2's releases.

Version 2.5.252

Commits

• f986838 in preparation for a release
• 06c34a7 Merge pull request #4418 from andreitokar/issues-4380-4376
• 1aef3e0 #4376: Reading INFORMATION_SCHEMA.COLUMNS fails with a NPE while any material...
• 4bb8aee #4380: creating a MATERIALIZED VIEW makes a persistent database permanently u...
• 95b6af0 Merge pull request #4417 from andreitokar/issue-4395
• 6ec30b6 #4395 disallow constraints between temporary and permanent tables
• 0f0f856 Merge pull request #4416 from andreitokar/issue-4405
• f718b76 #4405 SecureFileStore.readFully() may skip decryption
• e231ff7 #4405 SecureFileStore.readFully() may skip
• 4da0d1d Merge pull request #4415 from jjh75607/fix/log-sql-aarch64
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions