From 0c4d0b2df3ffc8d17a931cddcc66973990473598 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 6 Jul 2026 22:04:43 +0000
Subject: [PATCH] chore: [DevOps] bump the production-minor-patch group with 2
 updates

Bumps the production-minor-patch group with 2 updates: [com.sap.cloud.security:java-bom](https://github.com/SAP/cloud-security-xsuaa-integration) and [org.checkerframework:checker-qual](https://github.com/typetools/checker-framework).


Updates `com.sap.cloud.security:java-bom` from 4.0.7 to 4.0.8
- [Release notes](https://github.com/SAP/cloud-security-xsuaa-integration/releases)
- [Changelog](https://github.com/SAP/cloud-security-services-integration-library/blob/main/CHANGELOG.md)
- [Commits](https://github.com/SAP/cloud-security-xsuaa-integration/compare/4.0.7...4.0.8)

Updates `org.checkerframework:checker-qual` from 4.2.0 to 4.2.1
- [Release notes](https://github.com/typetools/checker-framework/releases)
- [Changelog](https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md)
- [Commits](https://github.com/typetools/checker-framework/compare/checker-framework-4.2.0...checker-framework-4.2.1)

---
updated-dependencies:
- dependency-name: com.sap.cloud.security:java-bom
  dependency-version: 4.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: org.checkerframework:checker-qual
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 dependency-bundles/bom/pom.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/dependency-bundles/bom/pom.xml b/dependency-bundles/bom/pom.xml
index 05c256516..c9192cdc1 100644
--- a/dependency-bundles/bom/pom.xml
+++ b/dependency-bundles/bom/pom.xml
@@ -55,7 +55,7 @@
 		<!-- XSUAA -->
 		<!-- Keep this version consistent with the one from the SAP Java Buildpack (after their 2.0 release) -->
 		<!-- see https://github.wdf.sap.corp/xs2-java/xs-java-buildpack/blob/master/resources/pom.xml -->
-		<scp-cf.xsuaa-client.version>4.0.7</scp-cf.xsuaa-client.version>
+		<scp-cf.xsuaa-client.version>4.0.8</scp-cf.xsuaa-client.version>
 		<java-jwt.version>4.5.2</java-jwt.version>
 		<!-- Utility stuff -->
 		<slf4j.version>2.0.18</slf4j.version>
@@ -279,7 +279,7 @@
 			<dependency>
 				<groupId>org.checkerframework</groupId>
 				<artifactId>checker-qual</artifactId>
-				<version>4.2.0</version>
+				<version>4.2.1</version>
 			</dependency>
 			<!--  2.10 by Caffeine and 2.11 by Guava  -->
 			<dependency>