From 2dded25940d80ef8f645a3bfa2d6afe853085ed0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 24 Oct 2026 08:13:07 +0000
Subject: [PATCH] build(deps): bump the dependencies group in /apps/api with 4
 updates

Bumps the dependencies group in /apps/api with 4 updates: [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom), [tools.jackson.module:jackson-module-kotlin](https://github.com/FasterXML/jackson-module-kotlin), software.amazon.awssdk:bom and [gradle-wrapper](https://github.com/gradle/gradle).


Updates `com.fasterxml.jackson:jackson-bom` from 2.22.3 to 2.22.4
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.22.3...jackson-bom-2.22.4)

Updates `tools.jackson.module:jackson-module-kotlin` from 3.2.3 to 3.2.4
- [Commits](https://github.com/FasterXML/jackson-module-kotlin/compare/jackson-module-kotlin-3.2.3...jackson-module-kotlin-3.2.4)

Updates `software.amazon.awssdk:bom` from 2.55.16 to 2.57.1

Updates `gradle-wrapper` from 9.8.1 to 9.8.2
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](https://github.com/gradle/gradle/compare/v9.8.1...v9.8.2)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.22.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: tools.jackson.module:jackson-module-kotlin
  dependency-version: 3.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: software.amazon.awssdk:bom
  dependency-version: 2.57.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: gradle-wrapper
  dependency-version: 9.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 apps/api/build.gradle.kts                         | 6 +++---
 apps/api/gradle/wrapper/gradle-wrapper.properties | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/apps/api/build.gradle.kts b/apps/api/build.gradle.kts
index 33039a59..cfc962fd 100644
--- a/apps/api/build.gradle.kts
+++ b/apps/api/build.gradle.kts
@@ -47,7 +47,7 @@ dependencyManagement {
         mavenBom("org.testcontainers:testcontainers-bom:${property("testcontainersVersion")}")
         mavenBom("org.springframework.ai:spring-ai-bom:${property("springAiVersion")}")
         // Override Jackson 2.x to fix CVE in async parser DoS (transitive via AWS SDK)
-        mavenBom("com.fasterxml.jackson:jackson-bom:2.22.3")
+        mavenBom("com.fasterxml.jackson:jackson-bom:2.22.4")
     }
 }
 
@@ -61,7 +61,7 @@ dependencies {
     implementation("org.springframework.boot:spring-boot-starter-oauth2-resource-server")
     implementation("org.springframework.boot:spring-boot-starter-actuator")
     implementation("org.springdoc:springdoc-openapi-starter-webmvc-ui:${property("springdocOpenApiVersion")}")
-    implementation("tools.jackson.module:jackson-module-kotlin:3.2.3")
+    implementation("tools.jackson.module:jackson-module-kotlin:3.2.4")
     implementation("io.github.oshai:kotlin-logging-jvm:${property("kotlinLogging")}")
     implementation("org.springframework.boot:spring-boot-starter-flyway")
     implementation("org.flywaydb:flyway-database-postgresql")
@@ -71,7 +71,7 @@ dependencies {
     runtimeOnly("org.postgresql:postgresql")
 
     // Cloudflare R2 (S3-compatible) integration
-    implementation(platform("software.amazon.awssdk:bom:2.55.16"))
+    implementation(platform("software.amazon.awssdk:bom:2.57.1"))
     implementation("software.amazon.awssdk:s3")
 
     // OWASP HTML Sanitizer for XSS prevention
diff --git a/apps/api/gradle/wrapper/gradle-wrapper.properties b/apps/api/gradle/wrapper/gradle-wrapper.properties
index 1a31fd1b..2a66ec2c 100644
--- a/apps/api/gradle/wrapper/gradle-wrapper.properties
+++ b/apps/api/gradle/wrapper/gradle-wrapper.properties
@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-9.8.1-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-9.8.2-bin.zip
 networkTimeout=10000
 validateDistributionUrl=true
 zipStoreBase=GRADLE_USER_HOME