From 0136ed0bb8f8ee4207d38075c0efa5e1cfd25dbd Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 18 Sep 2026 02:26:06 +0000
Subject: [PATCH] fix(deps): update minor and patch dependencies

---
 Dockerfile                               | 4 ++--
 api/build.gradle.kts                     | 4 ++--
 gradle/libs.versions.toml                | 2 +-
 gradle/wrapper/gradle-wrapper.properties | 2 +-
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 70a7ee2..7f36ebe 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -17,7 +17,7 @@ ARG CRAC_JDK_SHA256_ARM64=d89f3835ea86c95090892cebc6e7169dd567f740b6bd6ffe8cb9ce
 # The Gradle build produces an architecture-independent jar, so it runs on the
 # builder's native platform. Without this the whole Kotlin build would run under
 # QEMU for the arm64 image, taking far longer for a byte-identical artifact.
-FROM --platform=$BUILDPLATFORM gradle:9.5.1-jdk21-alpine AS build
+FROM --platform=$BUILDPLATFORM gradle:9.7.0-jdk21-alpine AS build
 WORKDIR /app
 
 # Layer 1: Copy only build scripts for dependency caching
@@ -70,7 +70,7 @@ RUN gcc -O2 -Wall -Wextra -Werror -o /run-as-agent /run-as-agent.c -lcap
 # JVM checkpoint to /opt/crac/checkpoint. Used only by the crac-train CI
 # workflow, which never needs the Agent Session tooling, so it stays on the
 # upstream CRaC image rather than paying for the full runtime stage.
-FROM bellsoft/liberica-runtime-container:jdk-21-crac-slim-glibc AS train
+FROM bellsoft/liberica-runtime-container:jdk-21.0.12_11-crac-slim-glibc AS train
 WORKDIR /app
 COPY --from=build /app/api/build/libs/*.jar app.jar
 COPY --from=otel /otel-javaagent.jar otel-javaagent.jar
diff --git a/api/build.gradle.kts b/api/build.gradle.kts
index 601730d..f7e2884 100644
--- a/api/build.gradle.kts
+++ b/api/build.gradle.kts
@@ -54,7 +54,7 @@ dependencies {
     implementation("org.aspectj:aspectjweaver:1.9.25.1")
     implementation("org.springframework.boot:spring-boot-starter-data-redis")
     implementation("org.springframework.boot:spring-boot-starter-amqp")
-    implementation("org.springdoc:springdoc-openapi-starter-webmvc-ui:3.0.3")
+    implementation("org.springdoc:springdoc-openapi-starter-webmvc-ui:3.1.1")
     implementation("org.springframework.boot:spring-boot-starter-flyway")
     implementation("org.flywaydb:flyway-database-postgresql")
     implementation("org.springframework.boot:spring-boot-starter-jooq")
@@ -78,7 +78,7 @@ dependencies {
     // lifecycle. Server-side apply, no informer cache (one-shot CRUD
     // is enough), pulled in with the kubernetes-client-bom to keep
     // model + httpclient versions aligned.
-    implementation(platform("io.fabric8:kubernetes-client-bom:7.7.0"))
+    implementation(platform("io.fabric8:kubernetes-client-bom:7.9.0"))
     implementation("io.fabric8:kubernetes-client")
     testImplementation("io.fabric8:kubernetes-server-mock")
 }
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index a167e3f..13fbf52 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -1,7 +1,7 @@
 [versions]
 jorisjonkers-commons = "0.9.3"
 jorisjonkers-conventions = "0.7.0"
-kotlin = "2.3.21"
+kotlin = "2.4.20"
 
 [libraries]
 kotlin-commons-archunit-test = { module = "dev.jorisjonkers:kotlin-commons-archunit-test", version.ref = "jorisjonkers-commons" }
diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties
index df6a6ad..ad7845b 100644
--- a/gradle/wrapper/gradle-wrapper.properties
+++ b/gradle/wrapper/gradle-wrapper.properties
@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-9.5.1-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-9.7.1-bin.zip
 networkTimeout=10000
 retries=0
 retryBackOffMs=500