Skip to content

chore(deps): Bump io.github.openfeign:feign-bom from 13.13 to 13.14 - #7145

Merged
nscuro merged 2 commits into
5.1.xfrom
dependabot/maven/5.1.x/io.github.openfeign-feign-bom-13.14
Sep 14, 2026
Merged

nscuro merged 2 commits into
5.1.xfrom
dependabot/maven/5.1.x/io.github.openfeign-feign-bom-13.14

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 27, 2026

Copy link
Copy Markdown
Contributor

Bumps io.github.openfeign:feign-bom from 13.13 to 13.14.

Release notes

Sourced from io.github.openfeign:feign-bom's releases.

OpenFeign 13.14

What's Changed


... (truncated)

Changelog

Sourced from io.github.openfeign:feign-bom's changelog.

Version 13.14

  • Add @Experimental MultiEncoder, PredicatedEncoder and EncoderPredicate, letting a single client route each request to the right encoder. Encoders declare what they can handle by implementing PredicatedEncoder; anything else is paired with a predicate via PredicatedEncoder.of(predicate, encoder) or MultiEncoder.builder(). Encoders are consulted in the order given and a request nothing accepts fails with an EncodeException naming what was tried, so a default is an encoder guarded by EncoderPredicate.any() listed last. FormEncoder and SpringFormEncoder gain createPredicatedFormEncoder(), a delegate-free flavour that can take part. The first-party JSON encoders (Gson, Jackson, Jackson 3, Jackson Jr, Jackson JAXB, Moshi, Fastjson2, JSON-java) and XML encoders (JAXB, JAXB Jakarta, SOAP, SOAP Jakarta) now declare themselves, and the metrics modules' MeteredEncoder forwards canEncode to the encoder it wraps. The Encoder interface is unchanged, so existing encoders keep working (#3485).
  • Add @Experimental MultiDecoder, PredicatedDecoder and DecoderPredicate, the decode-side counterpart, letting a single client route each response to the right decoder. Decoders declare what they can handle by implementing PredicatedDecoder; anything else is paired with a predicate via PredicatedDecoder.of(predicate, decoder) or MultiDecoder.builder(). Decoders are consulted in the order given and a response nothing accepts fails with a DecodeException naming what was tried, so a default is a decoder guarded by DecoderPredicate.any() listed last. The first-party JSON decoders (Gson, Jackson, Jackson 3, Jackson Jr, Jackson JAXB, Moshi, Fastjson2, JSON-java) and XML decoders (JAXB, JAXB Jakarta, SAX, SOAP, SOAP Jakarta) now declare themselves, and OptionalDecoder and the metrics modules' MeteredDecoder forward canDecode to the decoder they wrap. The Decoder interface is unchanged, so existing decoders keep working.
  • JAXBContextFactory.withProperty is now applied when creating Unmarshallers, not only Marshallers. Marshaller-only properties are skipped on unmarshal (#3056).
  • Add support for the HTTP QUERY method (RFC 10008) — safe, idempotent, and cacheable with a request body. HttpCacheInterceptor includes QUERY in its default cacheable set and incorporates a body hash into the cache key to reduce cross-body collisions.
  • Flatten feign-bom on install/deploy so importing the BOM does not pull feign-parent dependency management (for example Jackson) into consumer projects such as Spring Boot.

Version 13.12

  • UrlencodedFormContentProcessor now honors CollectionFormat from @RequestLine/RequestTemplate for array and collection values in application/x-www-form-urlencoded bodies.

Version 11.9

  • OkHttpClient now implements AsyncClient

Version 10.9

  • Configurable to disable streaming mode for Default client by verils (#1182)
  • Overriding query parameter name by boggard (#1184)
  • Internal feign metrics by velo:
  • Dropwizard metrics 5 (#1181)
  • Micrometer (#1188)

Version 10.8

... (truncated)

Commits
  • 372ebee prepare release 13.14
  • f9ab405 Merge pull request #3517 from AzazelSensei/fix/skip-synthetic-bridge-methods
  • a2676b8 Merge pull request #3519 from arimu1/fix/3056-jaxb-unmarshaller-properties
  • fcb4a97 Merge pull request #3451 from alhudz/content-length-duplicate
  • 02b8549 Merge pull request #3526 from OpenFeign/fix/3525-multi-root-fields
  • 51d1692 Decode every root field of a GraphQL operation
  • 182624e Merge pull request #3524 from OpenFeign/dependabot/maven/com.google.guava-gua...
  • e114354 build(deps): Bump com.google.guava:guava from 33.6.0-jre to 33.7.1-jre
  • a06b1a0 Merge pull request #3523 from OpenFeign/dependabot/maven/tools.jackson-jackso...
  • e90bdd5 Merge pull request #3522 from OpenFeign/dependabot/maven/org.json-json-20260814
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 27, 2026
@codacy-production

codacy-production Bot commented Aug 27, 2026 •

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity

Metric Results
Complexity 0

View in Codacy

🟢 Coverage ∅ diff coverage

Metric Results
Coverage variation Report missing for 1e8a4941
Diff coverage ✅ ∅ diff coverage (70.00%)

View coverage diff in Codacy

Coverage variation details
Coverable lines Covered lines Coverage
Common ancestor commit (1e8a494) Report Missing Report Missing Report Missing
Head commit (9a53513) 44339 38695 87.27%

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details
Coverable lines Covered lines Diff coverage
Pull request (#7145) 0 0 ∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

1 Codacy didn't receive coverage data for the commit, or there was an error processing the received data. Check your integration for errors and validate that your coverage setup is correct.

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

@owasp-dt-bot

owasp-dt-bot commented Aug 27, 2026 •

Copy link
Copy Markdown

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@nscuro nscuro added this to the 5.1.1 milestone Sep 14, 2026
dependabot Bot and others added 2 commits September 14, 2026 12:49
Bumps [io.github.openfeign:feign-bom](https://github.com/openfeign/feign) from 13.13 to 13.14.
- [Release notes](https://github.com/openfeign/feign/releases)
- [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
- [Commits](OpenFeign/feign@13.13...13.14)

---
updated-dependencies:
- dependency-name: io.github.openfeign:feign-bom
  dependency-version: '13.14'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: nscuro <nscuro@protonmail.com>
@nscuro
nscuro force-pushed the dependabot/maven/5.1.x/io.github.openfeign-feign-bom-13.14 branch from cb12e96 to 9a53513 Compare September 14, 2026 10:50
@nscuro
nscuro merged commit e7bde99 into 5.1.x Sep 14, 2026
21 checks passed
@nscuro
nscuro deleted the dependabot/maven/5.1.x/io.github.openfeign-feign-bom-13.14 branch September 14, 2026 11:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants