[dependabot]

Bumps the gradle-dependencies group with 11 updates in the /booklore-api directory:

Package	From	To
org.flywaydb:flyway-mysql	12.11.0	13.8.0
com.twelvemonkeys.imageio:imageio-jpeg	3.15.1	3.15.2
com.twelvemonkeys.imageio:imageio-tiff	3.15.1	3.15.2
com.twelvemonkeys.imageio:imageio-webp	3.15.1	3.15.2
com.twelvemonkeys.imageio:imageio-bmp	3.15.1	3.15.2
com.github.junrar:junrar	7.6.1	8.1.1
tools.jackson:jackson-bom	3.2.2	3.2.3
com.github.ben-manes.caffeine:caffeine	3.2.4	3.3.0
com.h2database:h2	2.5.250	2.5.252
org.hibernate.orm	7.4.8.Final	7.4.10.Final
gradle-wrapper	9.7.1	9.8.0

Updates org.flywaydb:flyway-mysql from 12.11.0 to 13.8.0

Updates com.twelvemonkeys.imageio:imageio-jpeg from 3.15.1 to 3.15.2

Updates com.twelvemonkeys.imageio:imageio-tiff from 3.15.1 to 3.15.2

Updates com.twelvemonkeys.imageio:imageio-webp from 3.15.1 to 3.15.2

Updates com.twelvemonkeys.imageio:imageio-bmp from 3.15.1 to 3.15.2

Updates com.github.junrar:junrar from 7.6.1 to 8.1.1

Release notes

Sourced from com.github.junrar:junrar's releases.

Release v8.1.1

Changelog

🐛 Fixes

io

• readLongBigEndian returned only the low 32 bits (efdbd79)

rar3

• read the Unix owners sub-block names within its bounds (27d7755)
• bound the remaining header reads and keep reading past a broken header (8301bcb), closes #12
• bound the extended-time reads left unguarded by v7.5.1 (da5ef82), closes #12 #86 #87

unscoped

• keep extracting when an entry name has no Path on this JVM (510b792)

🔄️ Changes

• satisfy spotless in the changed method (6557837)

🧪 Tests

• reproduce the unrepresentable name without a locale (06aefef)

🛠 Build

deps

• bump gradle from 9.6.1 to 9.7.1 (1de660e)
• bump com.fasterxml.jackson.datatype:jackson-datatype-jsr310 (d79e3a5)
• bump com.diffplug.spotless from 8.9.0 to 8.10.0 (8787a21)
• bump com.fasterxml.jackson.core:jackson-databind (facf4d5)
• bump io.github.ben-manes.versions.settings (a17162c)
• bump EndBug/add-and-commit from 10 to 11 (c866a6f)
• bump org.bouncycastle:bcprov-jdk18on from 1.85 to 1.85.2 (8017539)
• bump gradle/actions from 6.2.0 to 6.3.0 (1397fab)
• bump com.github.ben-manes.versions from 0.58.0 to 0.59.0 (a16c9f4)
• bump com.github.ben-manes.versions from 0.54.0 to 0.58.0 (dcb0afb)
• bump com.diffplug.spotless from 8.8.0 to 8.9.0 (5829d84)
• bump gradle/actions from 6 to 6.2.0 (0b3f663)

unscoped

• update svu install (09ad661)

Contributors

We'd like to thank the following people for their contributions: Andre Brait, Gauthier, Gauthier Roebroeck, Nexory, Sean R

Release v8.1.0

Changelog

🚀 Features

... (truncated)

Changelog

Sourced from com.github.junrar:junrar's changelog.

8.1.1 (2026-08-31)

🐛 Fixes

io

• readLongBigEndian returned only the low 32 bits (efdbd79)

rar3

• read the Unix owners sub-block names within its bounds (27d7755)
• bound the remaining header reads and keep reading past a broken header (8301bcb), closes #12
• bound the extended-time reads left unguarded by v7.5.1 (da5ef82), closes #12 #86 #87

unscoped

• keep extracting when an entry name has no Path on this JVM (510b792)

🔄️ Changes

• satisfy spotless in the changed method (6557837)

🧪 Tests

• reproduce the unrepresentable name without a locale (06aefef)

🛠 Build

deps

• bump gradle from 9.6.1 to 9.7.1 (1de660e)
• bump com.fasterxml.jackson.datatype:jackson-datatype-jsr310 (d79e3a5)
• bump com.diffplug.spotless from 8.9.0 to 8.10.0 (8787a21)
• bump com.fasterxml.jackson.core:jackson-databind (facf4d5)
• bump io.github.ben-manes.versions.settings (a17162c)
• bump EndBug/add-and-commit from 10 to 11 (c866a6f)
• bump org.bouncycastle:bcprov-jdk18on from 1.85 to 1.85.2 (8017539)
• bump gradle/actions from 6.2.0 to 6.3.0 (1397fab)
• bump com.github.ben-manes.versions from 0.58.0 to 0.59.0 (a16c9f4)
• bump com.github.ben-manes.versions from 0.54.0 to 0.58.0 (dcb0afb)
• bump com.diffplug.spotless from 8.8.0 to 8.9.0 (5829d84)
• bump gradle/actions from 6 to 6.2.0 (0b3f663)

unscoped

• update svu install (09ad661)

8.1.0 (2026-08-03)

🚀 Features

crypt

• decrypt legacy RAR 1.3/1.5/2.0 encrypted entries (5da2cb6)

rar14

• extract entries spanning multiple RAR 1.4 volumes (a4b9591)
• extract RAR 1.4 entries with Checksum14 verification (11f1d23)
• parse RAR 1.4 headers and list entries (7ac5a8c)

🐛 Fixes

... (truncated)

Commits

• 1de660e build(deps): bump gradle from 9.6.1 to 9.7.1
• d79e3a5 build(deps): bump com.fasterxml.jackson.datatype:jackson-datatype-jsr310
• 8787a21 build(deps): bump com.diffplug.spotless from 8.9.0 to 8.10.0
• facf4d5 build(deps): bump com.fasterxml.jackson.core:jackson-databind
• a17162c build(deps): bump io.github.ben-manes.versions.settings
• efdbd79 fix(io): readLongBigEndian returned only the low 32 bits
• 6557837 style: satisfy spotless in the changed method
• 06aefef test: reproduce the unrepresentable name without a locale
• 510b792 fix: keep extracting when an entry name has no Path on this JVM
• c866a6f build(deps): bump EndBug/add-and-commit from 10 to 11
• Additional commits viewable in compare view

Updates tools.jackson:jackson-bom from 3.2.2 to 3.2.3

Commits

• 169de87 [maven-release-plugin] prepare release jackson-bom-3.2.3
• c64410b Prep for 3.2.3 release
• 1f23ca6 Merge branch '3.1' into 3.2
• 432ca52 Post-release dep version bump
• e0d3ccf [maven-release-plugin] prepare for next development iteration
• 8abdaa6 [maven-release-plugin] prepare release jackson-bom-3.1.7
• 2abd85b Prep for 3.1.7 release
• c63b07a Post-release dep version bump
• b0a5033 [maven-release-plugin] prepare for next development iteration
• See full diff in compare view

Updates com.github.ben-manes.caffeine:caffeine from 3.2.4 to 3.3.0

Release notes

Sourced from com.github.ben-manes.caffeine:caffeine's releases.

3.3.0

• Improved read performance by avoiding false sharing in the fast-path check
• Improved adaptive climber for small caches and shifting workloads
• Fixed various minor issues found using AI audits
• Fixed over-aggressive refresh discard (#1970)

Commits

• af86011 fix jcache audit triage
• f063e56 Prevent overflow in snapshot durations
• 5b6fbd9 Saturate the audit stillness counter
• 48cb408 Read lazy cache views and policies once
• 4978d18 Normalize JCache processor loader failures
• c9038d8 Consume JCache iterator removals before listener failures
• 0b0afd2 polish
• c0edd00 restore coverage lost to recent fixes
• 5283c96 make CLOCK-Pro's cold hand a setting
• d15c205 make the bulk cache loaders serializable
• Additional commits viewable in compare view

Updates com.h2database:h2 from 2.5.250 to 2.5.252

Release notes

Sourced from com.h2database:h2's releases.

Version 2.5.252

Commits

• f986838 in preparation for a release
• 06c34a7 Merge pull request #4418 from andreitokar/issues-4380-4376
• 1aef3e0 #4376: Reading INFORMATION_SCHEMA.COLUMNS fails with a NPE while any material...
• 4bb8aee #4380: creating a MATERIALIZED VIEW makes a persistent database permanently u...
• 95b6af0 Merge pull request #4417 from andreitokar/issue-4395
• 6ec30b6 #4395 disallow constraints between temporary and permanent tables
• 0f0f856 Merge pull request #4416 from andreitokar/issue-4405
• f718b76 #4405 SecureFileStore.readFully() may skip decryption
• e231ff7 #4405 SecureFileStore.readFully() may skip
• 4da0d1d Merge pull request #4415 from jjh75607/fix/log-sql-aarch64
• Additional commits viewable in compare view

Updates org.hibernate.orm from 7.4.8.Final to 7.4.10.Final

Updates gradle-wrapper from 9.7.1 to 9.8.0

Release notes

Sourced from gradle-wrapper's releases.

9.8.0

The Gradle team is excited to announce Gradle 9.8.0.

Here are the highlights of this release:

• Java 27 support
• Maven mirror settings reuse
• Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aman Gautam, Björn Kautler, Eng Zer Jun, Hashim Khan, Julian Krannich, KBS, Labh R Jethe, Mark Dodgson, Maxim, monkey, nataphon-ktsystems, Paul King, Qiu Tian, rg_sandesh, Roberto Perez Alcolea, Sean, Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.0 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.0 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.8.0 RC3

The Gradle team is excited to announce Gradle 9.8.0 RC3.

Here are the highlights of this release:

... (truncated)

Commits

• a927be5 Add the Develocity plugin back to the Android smoke tests (#39273)
• eaee500 Add the Develocity plugin back to the Android smoke tests
• 189b672 Route everything still hitting Maven Central through the mirror (#39257)
• 36b1814 Add back mavenCentral to doc snippets
• 2740c2d Update Gradle wrapper to version 9.8.0-rc-3 (#39264)
• 2099383 Update Gradle wrapper to version 9.8.0-rc-3
• c80202f Route everything still hitting Maven Central through the mirror
• 3f6a534 Fix when a best practice was introduced (#39253)
• 9efc9ed Fix when a best practice was introduced
• 459e143 Route integration test dependencies through the repository mirror (#39239)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Frontend Test Results

452 tests  ±0   452 ✅ ±0   3s ⏱️ -1s
 23 suites ±0     0 💤 ±0 
  1 files   ±0     0 ❌ ±0 

Results for commit 8d1e0e1. ± Comparison against base commit 01b3407.

[github-actions]

Backend Test Results

  465 files  ±0    465 suites  ±0   2m 43s ⏱️ +3s
3 374 tests ±0  3 359 ✅ ±0  15 💤 ±0  0 ❌ ±0 
3 431 runs  ±0  3 416 ✅ ±0  15 💤 ±0  0 ❌ ±0 

Results for commit 8d1e0e1. ± Comparison against base commit 01b3407.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.