[dependabot]

Bumps the maven-dependencies group with 2 updates: org.hibernate:hibernate-core and org.codehaus.mojo:build-helper-maven-plugin.

Updates org.hibernate:hibernate-core from 7.4.14.Final to 7.4.15.Final

Release notes

Sourced from org.hibernate:hibernate-core's releases.

Release 7.4.15

Hibernate ORM 7.4.15.Final released

Today, we published a new release of Hibernate ORM 7.4: 7.4.15.Final.

You can find the full list of 7.4.15.Final changes here.

What's new

• See the website for requirements and compatibilities.
• See the What's New guide for details about new features and capabilities.
• See the Migration Guide for details about migration.

Conclusion

For additional details, see:

• the release page
• the Migration Guide
• the Introduction Guide
• the User Guide
• the API docs

See also the following resources related to supported APIs:

• the compatibility policy
• the incubating API report (@Incubating)
• the deprecated API report (@Deprecated + @Remove)
• the internal API report (internal packages, @Internal)

Visit the website for details on getting in touch with us.

Changelog

Sourced from org.hibernate:hibernate-core's changelog.

Changes in 7.4.15.Final (November 06, 2026)

https://hibernate.atlassian.net/projects/HHH/versions/40501

** Bug * HHH-21081 IndexOutOfBoundsException for an empty CursoredPage beyond page 1 * HHH-21071 TABLE_PER_CLASS union generates unaliased derived tables for @​Subselect subclasses (fails on MySQL: "Every derived table must have its own alias") * HHH-21066 Entity join to an audited entity reuses its SQL alias in the point-in-time subquery * HHH-21056 CTE referenced without an alias gets an invalid SQL alias when its name is quoted * HHH-21055 Array stored as VARBINARY gets its element type's default column length * HHH-21005 Inconsistency in generate_series for H2 * HHH-20973 Merging a managed entity with a collection set to orphanRemoval=true failures * HHH-20949 @​ConcreteProxy on JOINED hierarchy: filtering by a lazy @​ManyToOne renders an empty case end in SQL * HHH-20939 Restriction.greaterThan does not work with java.time.LocalDate * HHH-20926 Envers MapCollectionMapper compares map keys using owner key type instead of index type * HHH-20910 NullPointerException ordering collection updates when an uninitialized inverse collection is cleared * HHH-20871 Nested @​Any on treated subclass is not resolved after HHH-20632 * HHH-20810 Database snapshot of a detached entity invokes the custom EmbeddableInstantiator with a bogus value array (regression in 7.4.x, works in 7.3.x) * HHH-20670 Regression 6.6 → 7.x: merge() of a managed parent with a cleared orphanRemoval collection throws DetachedObjectException * HHH-19419 Issue with merge and orphan deletion in 7.0.0.CR1

Changes in 7.4.15.Final (November 01, 2026)

https://hibernate.atlassian.net/projects/HHH/versions/40501

** Bug * HHH-20910 NullPointerException ordering collection updates when an uninitialized inverse collection is cleared * HHH-20810 Database snapshot of a detached entity invokes the custom EmbeddableInstantiator with a bogus value array (regression in 7.4.x, works in 7.3.x)

Commits

• 4d66f59 [Jenkins release job] Preparing release 7.4.15.Final
• bf7ce97 [Jenkins release job] changelog.txt updated by release build 7.4.15.Final
• ca9a840 HHH-21081 test
• c10f9c3 HHH-21081 fix IndexOutOfBoundsException for an empty CursoredPage beyond page 1
• ad033d3 HHH-20984 Use the most restrictive @Size/@​Length max when deriving the column...
• 6342491 Fix reveng plugin tags
• c417996 HHH-20939 Remove unnecessary migration guide entry
• b6667b8 HHH-21055 Add some type cache clearing integrators for array tests
• 11754a5 HHH-20926 Add test skip for DBs that don't support BigDecimal ids
• fcb8f5a HHH-20949 Fix IOOBE due to empty CASE expression
• Additional commits viewable in compare view

Updates org.codehaus.mojo:build-helper-maven-plugin from 3.6.2 to 3.8.0

Release notes

Sourced from org.codehaus.mojo:build-helper-maven-plugin's releases.

3.8.0

Build Helper Maven Plugin 3.8.0 lets regex-property and regex-properties apply several regex replacements in order, and quiets the log when a non-match is allowed. The requirements are unchanged: Maven 3.9.0 or later, Java 8.

✨ Highlights

• Ordered regex replacements. The new replacements list of regex/replacement pairs works in regex-property and in each regexPropertySetting of regex-properties. Each pair applies to the result of the previous one, so a single property can go through several rewrites. It cannot be combined with regex/replacement, which work as before (#277, #77 by @​JonathanLennox; also covers #236 by @​donatelloOo).
• Quieter non-matches. With failIfNoMatch set to false, a non-match is expected, so it is now logged at debug level instead of info (#278, #152 by @​garretwilson).
• Documentation moved from APT to Markdown (#271).

🚀 New features and improvements

• Log a tolerated regex non-match at debug level (#278) @​slachiewicz
• Add ordered regex replacements to regex-property (#277) @​slachiewicz

📝 Documentation updates

• Convert the site documents from APT to Markdown (#271) @​slachiewicz

👻 Maintenance

• Configure the mojo unit tests through the plugin testing harness (#276) @​slachiewicz
• Test the regex goals' outcomes in unit tests (#275) @​slachiewicz
• Test the uptodate goals' mappers in unit tests (#274) @​slachiewicz
• Test the add goals' skip parameters in unit tests (#273) @​slachiewicz

🔧 Build

• Reuse the cached prefix file in the integration tests (#272) @​slachiewicz

Thanks to @​slachiewicz.

Full changelog

3.7.0

Build Helper Maven Plugin 3.7.0 adds system time zone support to timestamp-property, literal replacement support to regex-property and regex-properties, and updates the remove-project-artifact deprecation guidance. It requires Maven 3.9.0 or later and Java 8 or later.

✨ Highlights

• System time zone in timestamp-property: Setting <timeZone>system</timeZone> (case-insensitive) formats the timestamp using the JVM's default time zone instead of GMT, working with both current and build time sources (#250).
• Literal replacement mode in regex-property and regex-properties: Setting <replacementLiteral>true</replacementLiteral> treats backslashes (\) and dollar signs ($) in <replacement> as literal characters rather than regex group references or escapes — particularly useful when substituting Windows file paths such as ${project.build.directory} (#249).
• Updated remove-project-artifact deprecation guidance: The documentation for the deprecated remove-project-artifact goal now points users to Maven Resolver's split local repository feature (-Daether.enhancedLocalRepository.split) as the modern alternative (#268, #270).

🚨 Removed

• Require Maven 3.9.0 (#257) @​slachiewicz

🚀 New features and improvements

• Support the system time zone in timestamp-property (#250) @​wilx
• Add literal replacement support to regex property goals (#249) @​wilx

... (truncated)

Commits

• 278d7f8 [maven-release-plugin] prepare release 3.8.0
• d22f846 Log a tolerated regex non-match at debug level
• fe073ca Add ordered regex replacements to regex-property (#77)
• 7a62172 Configure the mojo unit tests through the plugin testing harness
• 2bb74a7 Test the regex goals' outcomes in unit tests
• 6bb6dca Test the uptodate goals' mappers in unit tests
• 08095a7 Test the add goals' skip parameters in unit tests
• 50bea8e Reuse the cached prefix file in the integration tests
• 2e4df45 Convert the site documents from APT to Markdown
• 45a6fe0 Rename the site documents ahead of converting them
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions