From d9c44a650be5064f31db443a10020f2268f819e1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 18 Mar 2026 13:46:53 +0000
Subject: [PATCH 1/2] Bump the minor-patch group across 1 directory with 6
 updates

Bumps the minor-patch group with 6 updates in the /ams-spring-boot-shopping directory:

| Package | From | To |
| --- | --- | --- |
| [com.sap.cloud.security:java-bom](https://github.com/SAP/cloud-security-xsuaa-integration) | `3.5.7` | `3.6.8` |
| [com.sap.cloud.sdk:sdk-bom](https://github.com/SAP/cloud-sdk-java) | `5.24.0` | `5.27.0` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.15.2` | `2.21.1` |
| com.opencsv:opencsv | `5.8` | `5.12.0` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.0` | `3.15.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.1.2` | `3.5.5` |



Updates `com.sap.cloud.security:java-bom` from 3.5.7 to 3.6.8
- [Release notes](https://github.com/SAP/cloud-security-xsuaa-integration/releases)
- [Changelog](https://github.com/SAP/cloud-security-services-integration-library/blob/main/CHANGELOG.md)
- [Commits](https://github.com/SAP/cloud-security-xsuaa-integration/compare/3.5.7...3.6.8)

Updates `com.sap.cloud.sdk:sdk-bom` from 5.24.0 to 5.27.0
- [Release notes](https://github.com/SAP/cloud-sdk-java/releases)
- [Changelog](https://github.com/SAP/cloud-sdk-java/blob/main/release_notes.md)
- [Commits](https://github.com/SAP/cloud-sdk-java/compare/rel/5.24.0...rel/5.27.0)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.15.2 to 2.21.1
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.opencsv:opencsv` from 5.8 to 5.12.0

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.0 to 3.15.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](https://github.com/apache/maven-compiler-plugin/compare/maven-compiler-plugin-3.14.0...maven-compiler-plugin-3.15.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.1.2 to 3.5.5
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.1.2...surefire-3.5.5)

---
updated-dependencies:
- dependency-name: com.sap.cloud.security:java-bom
  dependency-version: 3.6.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: com.sap.cloud.sdk:sdk-bom
  dependency-version: 5.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.21.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: com.opencsv:opencsv
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 ams-spring-boot-shopping/pom.xml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/ams-spring-boot-shopping/pom.xml b/ams-spring-boot-shopping/pom.xml
index 0e00b47..488002b 100644
--- a/ams-spring-boot-shopping/pom.xml
+++ b/ams-spring-boot-shopping/pom.xml
@@ -26,11 +26,11 @@
         <spring.boot.version>3.5.10</spring.boot.version>
         <sap.cloud.security.ams.version>4.0.7</sap.cloud.security.ams.version>
         <sap.cloud.security.ams.dcl-compiler.version>1.1.1</sap.cloud.security.ams.dcl-compiler.version>
-        <sap.cloud.security.version>3.5.7</sap.cloud.security.version>
-        <sap.cloud.sdk.version>5.24.0</sap.cloud.sdk.version>
+        <sap.cloud.security.version>3.6.8</sap.cloud.security.version>
+        <sap.cloud.sdk.version>5.27.0</sap.cloud.sdk.version>
         <sap.cloud.environment.servicebinding.version>0.21.0</sap.cloud.environment.servicebinding.version>
-        <jackson.version>2.15.2</jackson.version>
-        <opencsv.version>5.8</opencsv.version>
+        <jackson.version>2.21.1</jackson.version>
+        <opencsv.version>5.12.0</opencsv.version>
         <apache.httpclient.version>4.5.14</apache.httpclient.version>
         <junit.version>6.0.3</junit.version>
     </properties>
@@ -214,7 +214,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-compiler-plugin</artifactId>
-                <version>3.14.0</version>
+                <version>3.15.0</version>
                 <configuration>
                     <release>${jdk.version}</release>
                 </configuration>
@@ -228,7 +228,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-surefire-plugin</artifactId>
-                <version>3.1.2</version>
+                <version>3.5.5</version>
                 <configuration>
                     <classpathDependencyExcludes>
                         <classpathDependencyExclude>

From 0c63688cdc4693150ecd18e91ea04780e843794a Mon Sep 17 00:00:00 2001
From: Manuel Fink <manuel.fink@sap.com>
Date: Wed, 18 Mar 2026 14:56:57 +0100
Subject: [PATCH 2/2] do not manage jackson, junit, apache http client (managed
 by Spring Boot)

---
 ams-spring-boot-shopping/pom.xml | 42 --------------------------------
 1 file changed, 42 deletions(-)

diff --git a/ams-spring-boot-shopping/pom.xml b/ams-spring-boot-shopping/pom.xml
index 488002b..e6a7706 100644
--- a/ams-spring-boot-shopping/pom.xml
+++ b/ams-spring-boot-shopping/pom.xml
@@ -29,10 +29,7 @@
         <sap.cloud.security.version>3.6.8</sap.cloud.security.version>
         <sap.cloud.sdk.version>5.27.0</sap.cloud.sdk.version>
         <sap.cloud.environment.servicebinding.version>0.21.0</sap.cloud.environment.servicebinding.version>
-        <jackson.version>2.21.1</jackson.version>
         <opencsv.version>5.12.0</opencsv.version>
-        <apache.httpclient.version>4.5.14</apache.httpclient.version>
-        <junit.version>6.0.3</junit.version>
     </properties>
 
     <dependencyManagement>
@@ -74,33 +71,12 @@
                 <scope>import</scope>
             </dependency>
 
-            <!-- JSON -->
-            <dependency>
-                <groupId>com.fasterxml.jackson.core</groupId>
-                <artifactId>jackson-databind</artifactId>
-                <version>${jackson.version}</version>
-            </dependency>
-
             <!-- CSV -->
             <dependency>
                 <groupId>com.opencsv</groupId>
                 <artifactId>opencsv</artifactId>
                 <version>${opencsv.version}</version>
             </dependency>
-
-            <!-- HTTP -->
-            <dependency>
-                <groupId>org.apache.httpcomponents</groupId>
-                <artifactId>httpclient</artifactId>
-                <version>${apache.httpclient.version}</version>
-            </dependency>
-
-            <!-- Testing -->
-            <dependency>
-                <groupId>org.junit.jupiter</groupId>
-                <artifactId>junit-jupiter</artifactId>
-                <version>${junit.version}</version>
-            </dependency>
         </dependencies>
     </dependencyManagement>
 
@@ -153,24 +129,12 @@
             <artifactId>java-sap-service-operator</artifactId>
         </dependency>
 
-        <!-- JSON Processing -->
-        <dependency>
-            <groupId>com.fasterxml.jackson.core</groupId>
-            <artifactId>jackson-databind</artifactId>
-        </dependency>
-
         <!-- CSV Processing -->
         <dependency>
             <groupId>com.opencsv</groupId>
             <artifactId>opencsv</artifactId>
         </dependency>
 
-        <!-- Apache HTTP Client 4 required for Authentication Library -->
-        <dependency>
-            <groupId>org.apache.httpcomponents</groupId>
-            <artifactId>httpclient</artifactId>
-        </dependency>
-
         <!-- Test Dependencies -->
         <dependency>
             <groupId>org.springframework.boot</groupId>
@@ -195,12 +159,6 @@
             <artifactId>spring-boot-starter-ams-test</artifactId>
             <scope>test</scope>
         </dependency>
-
-        <dependency>
-            <groupId>org.junit.jupiter</groupId>
-            <artifactId>junit-jupiter</artifactId>
-            <scope>test</scope>
-        </dependency>
         <dependency>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-test-autoconfigure</artifactId>