dependabot[bot] opened a new pull request, #3893: URL: https://github.com/apache/causeway/pull/3893
Bumps [io.swagger.core.v3:swagger-core](https://github.com/swagger-api/swagger-core) from 2.2.55 to 3.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/swagger-api/swagger-core/releases";>io.swagger.core.v3:swagger-core's releases</a>.</em></p> <blockquote> <h2>Swagger-core 3.0.0 released!</h2> <ul> <li>feat: ModelCopy.deepCopy, an exact deep copy of OpenAPI models (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5364";>#5364</a>)</li> <li>docs: MIGRATION.md notes from a downstream (springdoc-openapi) migration (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5363";>#5363</a>)</li> <li>fix: thread-safe ModelConverters.getInstance(boolean), refresh mappers derived from replaced shared mappers (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5362";>#5362</a>)</li> <li>fix: don't add an empty property for a required <code>@JsonUnwrapped</code> member (OpenAPI 3.1) (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5361";>#5361</a>)</li> <li>chore: update migration documentation for Jackson 3 changes (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5359";>#5359</a>)</li> <li>chore: update Jackson dependencies to version 3.2.3 in migration docu… (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5354";>#5354</a>)</li> <li>Upgrade dependency-review-action to v5 (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5349";>#5349</a>)</li> <li>Move the Jakarta APIs from EE 10 to EE 11 (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5348";>#5348</a>)</li> <li>chore: update dependencies, build plugins and CI for 3.0.0 (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5347";>#5347</a>)</li> <li>chore: Make Jackson 2 compatibility of Swagger mappers opt-in (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5344";>#5344</a>)</li> <li>docs: document retired Swagger artifact IDs in MIGRATION.md (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5343";>#5343</a>)</li> <li>chore: prepare workflows for 3.x line (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5341";>#5341</a>)</li> <li>refactor: move REST API from io.swagger.v3.jaxrs2 to io.swagger.v3.rest (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5336";>#5336</a>)</li> <li>feat: Improve Jackson 2 compatibility for Swagger mappers (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5334";>#5334</a>)</li> <li>fix: deduplicate subtypes before composing oneOf (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5332";>#5332</a>)</li> <li>fix: keep oneOf when WRAPPER_OBJECT wrapping is applied (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5331";>#5331</a>)</li> <li>fix: prevent examples duplication in Schema model (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5330";>#5330</a>)</li> <li>refactor: drop unused httpclient and ant dependencies (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5329";>#5329</a>)</li> <li>refactor: drop commons-io dependency (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5328";>#5328</a>)</li> <li>chore: update documentation for version 3.0 (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5327";>#5327</a>)</li> <li>feat: Set Swagger mapper defaults after the Jackson 3 migration (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5325";>#5325</a>)</li> <li>feat: API to add Jackson modules / customize immutable Jackson 3 mappers (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5324";>#5324</a>)</li> <li>refactor: drop commons-lang3 dependency (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5323";>#5323</a>)</li> <li>fix: skip resolveSubtypes for sealed classes with <code>@Schema(oneOf)</code> (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5322";>#5322</a>)</li> <li>fix: respect explicit <code>@JsonProperty</code> value in ModelResolver property name resolution (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5321";>#5321</a>)</li> <li>feat: optionally compose <code>@JsonSubTypes</code> parents into oneOf (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5320";>#5320</a>)</li> <li>chore: migrate swagger-core 3.x runtime from javax to jakarta, update … (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5319";>#5319</a>)</li> <li>chore: rename modules (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5317";>#5317</a>)</li> <li>chore: remove unused modules after migration to Jakarta (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5316";>#5316</a>)</li> <li>chore: remove Java 17 support module (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5315";>#5315</a>) (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5315";>#5315</a>)</li> <li>Update to jackson 3 (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5314";>#5314</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/swagger-api/swagger-core/blob/v3.0.0/CHANGELOG.md";>io.swagger.core.v3:swagger-core's changelog</a>.</em></p> <blockquote> <h2>[3.0.0] - 2026-10-28</h2> <p>First release of the 3.x line. The runtime moves from Jackson 2 to Jackson 3, the minimum Java version is 17, and the REST API supports <code>jakarta.*</code> only. See <a href="https://github.com/swagger-api/swagger-core/blob/v3.0.0/MIGRATION.md";>https://github.com/swagger-api/swagger-core/blob/v3.0.0/MIGRATION.md</a> for the upgrade guide.</p> <h3>Changed (breaking)</h3> <ul> <li>Java 17+ is required (previously Java 8+).</li> <li>Jackson 3.2.3. Core, databind and dataformat moved to the <code>tools.jackson</code> groupId. <code>jackson-annotations</code> stays on <code>com.fasterxml.jackson.core</code> (2.22). <code>Json.mapper()</code>, <code>Yaml.mapper()</code> and the other mapper accessors return <code>tools.jackson.databind.ObjectMapper</code>. <code>JacksonException</code> is unchecked and replaces <code>JsonProcessingException</code>. <code>ObjectMapperProcessor</code> method signatures and custom serializer/deserializer classes changed.</li> <li>Artifact IDs renamed. <code>*-jakarta</code>, <code>swagger-jaxrs2*</code> and <code>swagger-jaxrs2-servlet-initializer-v2*</code> are retired. New IDs: <code>swagger-annotations</code>, <code>swagger-models</code>, <code>swagger-core</code>, <code>swagger-integration</code>, <code>swagger-rest</code>, <code>swagger-rest-servlet-initializer</code>.</li> <li>REST API packages and types renamed: <code>io.swagger.v3.jaxrs2</code> to <code>io.swagger.v3.rest</code>, <code>Jaxrs*</code> to <code>Rest*</code>.</li> <li><code>jakarta.*</code> only. <code>javax.*</code> support removed. Jakarta APIs moved from EE 10 to EE 11.</li> <li>Mapper defaults follow Jackson 3 (for example <code>FAIL_ON_NULL_FOR_PRIMITIVES</code>, <code>FAIL_ON_TRAILING_TOKENS</code>, <code>ONE_BASED_MONTHS</code>). Jackson 2 compatibility is opt-in via <code>ObjectMapperFactory.setJackson2Compatibility(true)</code>.</li> </ul> <h3>Removed</h3> <ul> <li>Dependencies: <code>commons-lang3</code>, <code>commons-io</code>, <code>snakeyaml</code> (replaced by <code>snakeyaml-engine</code>), <code>httpclient</code>, <code>ant</code>.</li> <li>Modules: <code>swagger-java17-support</code> and unused modules left over from before the Jakarta migration.</li> </ul> <h3>Added</h3> <ul> <li>API to register Jackson modules and customize the immutable Jackson 3 mappers through <code>ObjectMapperFactory</code>.</li> <li>Opt-in <code>oneOf</code> composition for <code>@JsonSubTypes</code> parents. Enable it with <code>-Djson-subtypes-oneof</code> or <code>ModelResolver.jsonSubTypesOneOf = true</code>. When enabled, a parent class with <code>@JsonSubTypes</code> gets a <code>oneOf</code> that lists its resolved subtypes, and the subtypes keep their <code>allOf</code> reference to the parent. An explicit <code>@Schema(oneOf = ...)</code> on the parent takes priority. The default is off, so the generated schemas do not change unless you enable it. Use it for abstract classes and interfaces. A concrete parent class is not listed in its own <code>oneOf</code>, so an instance of the parent itself does not match the schema. Note: the result has a cycle (<code>allOf</code> from subtype to parent, <code>oneOf</code> from parent to subtype). Some tools, such as swagger-ui and openapi-generator, may not handle this shape well.</li> </ul> <h3>Fixed</h3> <ul> <li>Respect an explicit <code>@JsonProperty</code> value when <code>ModelResolver</code> resolves the property name.</li> <li>Skip <code>resolveSubtypes</code> for sealed classes with <code>@Schema(oneOf)</code>.</li> <li>Deduplicate subtypes before composing <code>oneOf</code>.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/swagger-api/swagger-core/commit/34447d52eb796b62d607516f390149e346ad01ea";><code>34447d5</code></a> prepare release 3.0.0 (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5366";>#5366</a>)</li> <li><a href="https://github.com/swagger-api/swagger-core/commit/a9e1fae3e27843447245008e8d74e9176f9650bc";><code>a9e1fae</code></a> feat: ModelCopy.deepCopy, an exact deep copy of OpenAPI models (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5364";>#5364</a>)</li> <li><a href="https://github.com/swagger-api/swagger-core/commit/9ee4aa37e67290009426354fb5f67d55d012600a";><code>9ee4aa3</code></a> fix: don't add an empty property for a required <a href="https://github.com/JsonUnwrapped";><code>@JsonUnwrapped</code></a> member (OpenAP...</li> <li><a href="https://github.com/swagger-api/swagger-core/commit/1a8789432ce0ecea706f174c30c0b2c105b6969a";><code>1a87894</code></a> fix: thread-safe ModelConverters.getInstance(boolean), refresh mappers derive...</li> <li><a href="https://github.com/swagger-api/swagger-core/commit/50863885bde768912690880affe1f7966acda0a3";><code>5086388</code></a> docs: MIGRATION.md notes from a downstream (springdoc-openapi) migration (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5363";>#5363</a>)</li> <li><a href="https://github.com/swagger-api/swagger-core/commit/21cde346d637f22250f9f4ceff9f94e636090470";><code>21cde34</code></a> docs: update migration documentation for Jackson 3 changes (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5359";>#5359</a>)</li> <li><a href="https://github.com/swagger-api/swagger-core/commit/51deb2113ad0d5a468be18c538fe595ec92a5825";><code>51deb21</code></a> chore: update Jackson dependencies to version 3.2.3 in migration documentatio...</li> <li><a href="https://github.com/swagger-api/swagger-core/commit/c0f7a52d990cc1d50d66bb40e3ceb78989f083e1";><code>c0f7a52</code></a> fix: keep oneOf when WRAPPER_OBJECT wrapping is applied (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5331";>#5331</a>)</li> <li><a href="https://github.com/swagger-api/swagger-core/commit/6e29b0245192f7b21f996b6b95bd86f1a9f4f818";><code>6e29b02</code></a> feat: optionally compose <a href="https://github.com/JsonSubTypes";><code>@JsonSubTypes</code></a> parents into oneOf (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5320";>#5320</a>)</li> <li><a href="https://github.com/swagger-api/swagger-core/commit/9d83dc2e3c6a1716df3aad61c0d9bca69cd656b2";><code>9d83dc2</code></a> fix: deduplicate subtypes before composing oneOf (<a href="https://redirect.github.com/swagger-api/swagger-core/issues/5332";>#5332</a>)</li> <li>Additional commits viewable in <a href="https://github.com/swagger-api/swagger-core/compare/v2.2.55...v3.0.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
