From 6610a8879e11b9df9f62c76369d34abed316c017 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 13 Apr 2026 22:33:59 +0000
Subject: [PATCH] chore: [DevOps] bump the production-major group across 1
 directory with 2 updates

Bumps the production-major group with 2 updates in the / directory: [com.sap.cloud.security:java-bom](https://github.com/SAP/cloud-security-xsuaa-integration) and [org.checkerframework:checker-qual](https://github.com/typetools/checker-framework).


Updates `com.sap.cloud.security:java-bom` from 3.6.8 to 4.0.3
- [Release notes](https://github.com/SAP/cloud-security-xsuaa-integration/releases)
- [Changelog](https://github.com/SAP/cloud-security-services-integration-library/blob/main/CHANGELOG.md)
- [Commits](https://github.com/SAP/cloud-security-xsuaa-integration/compare/3.6.8...4.0.3)

Updates `org.checkerframework:checker-qual` from 3.54.0 to 4.0.0
- [Release notes](https://github.com/typetools/checker-framework/releases)
- [Changelog](https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md)
- [Commits](https://github.com/typetools/checker-framework/compare/checker-framework-3.54.0...checker-framework-4.0.0)

---
updated-dependencies:
- dependency-name: com.sap.cloud.security:java-bom
  dependency-version: 4.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-major
- dependency-name: org.checkerframework:checker-qual
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 dependency-bundles/bom/pom.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/dependency-bundles/bom/pom.xml b/dependency-bundles/bom/pom.xml
index a5664cc30..6c793e0c6 100644
--- a/dependency-bundles/bom/pom.xml
+++ b/dependency-bundles/bom/pom.xml
@@ -55,7 +55,7 @@
 		<!-- XSUAA -->
 		<!-- Keep this version consistent with the one from the SAP Java Buildpack (after their 2.0 release) -->
 		<!-- see https://github.wdf.sap.corp/xs2-java/xs-java-buildpack/blob/master/resources/pom.xml -->
-		<scp-cf.xsuaa-client.version>3.6.8</scp-cf.xsuaa-client.version>
+		<scp-cf.xsuaa-client.version>4.0.3</scp-cf.xsuaa-client.version>
 		<java-jwt.version>4.5.1</java-jwt.version>
 		<!-- Utility stuff -->
 		<slf4j.version>2.0.17</slf4j.version>
@@ -279,7 +279,7 @@
 			<dependency>
 				<groupId>org.checkerframework</groupId>
 				<artifactId>checker-qual</artifactId>
-				<version>3.54.0</version>
+				<version>4.0.0</version>
 			</dependency>
 			<!--  2.10 by Caffeine and 2.11 by Guava  -->
 			<dependency>