Skip to content

build(server)(deps): bump the spring group in /server/backend with 3 updates#357

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/server/backend/spring-e710f5dd35
Open

build(server)(deps): bump the spring group in /server/backend with 3 updates#357
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/server/backend/spring-e710f5dd35

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 16, 2026

Bumps the spring group in /server/backend with 3 updates: org.springframework.boot:spring-boot-dependencies, org.springframework.boot:spring-boot-maven-plugin and org.springframework.modulith:spring-modulith-bom.

Updates org.springframework.boot:spring-boot-dependencies from 3.5.7 to 4.0.3

Release notes

Sourced from org.springframework.boot:spring-boot-dependencies's releases.

v4.0.3

⭐ New Features

  • Add TWENTY_SIX to JavaVersion enum #49193

🐞 Bug Fixes

  • Jackson properties may not be applied correctly to RestClients #49223
  • ClassNotFoundException when using Actuator without spring-boot-health #49196
  • Using the OTel and Zipkin starters together creates invalid configuration #49183
  • Whitespace can be incorrectly removed when spring-boot-configuration-processor runs on multi-line javadoc #49060
  • Jackson2HttpMessageConvertersConfiguration uses ConditionOn Jackson3 XMLMapper class #49015
  • server.jetty.threads.max is ignored when using virtual threads #48989
  • Slice test includes fail to load when using spring-boot-starter-test-classic #48981
  • Docker credential helpers with file extensions cannot be executed on Windows #48979
  • Java version requirement check for native image is confusing if AOT didn't run #48963
  • TestPropertyValues.Pair.fromMapEntry(Entry<String, String>) does not comply with its nullability contract #48948

📔 Documentation

  • Couchbase and Kafka are incorrectly listed as supporting SSL with Docker Compose #49212
  • Document that use of non idiomatic format for '@Value' still apply for environment variables #49109
  • Document naming convention for custom test-scoped starters #49017
  • Delay removal of Jackson 2 support until 4.3 at the earliest #49010
  • LICENSE.txt and NOTICE.txt files have the wrong content in the latest releases #49003
  • ApplicationContextAssert documents a non-existent assertion in getFailure() #48977
  • Highlight the importance of the preStop hook when configuring Kubernetes probes #48946

🔨 Dependency Upgrades

  • Upgrade to AssertJ 3.27.7 #49095
  • Upgrade to Elasticsearch Client 9.2.5 #49184
  • Upgrade to Groovy 5.0.4 #49097
  • Upgrade to Hibernate 7.2.3.Final #49098
  • Upgrade to Hibernate 7.2.4.Final #49167
  • Upgrade to Jaybird 6.0.4 #49099
  • Upgrade to JBoss Logging 3.6.2.Final #49100
  • Upgrade to Jersey 4.0.2 #49101
  • Upgrade to Jetty 12.1.6 #49102
  • Upgrade to jOOQ 3.19.30 #49103
  • Upgrade to JUnit Jupiter 6.0.3 #49233
  • Upgrade to Logback 1.5.29 #49169
  • Upgrade to Logback 1.5.32 #49245
  • Upgrade to Micrometer 1.16.3 #49111
  • Upgrade to Micrometer Tracing 1.6.3 #49112
  • Upgrade to MongoDB 5.6.3 #49105
  • Upgrade to MySQL 9.6.0 #49106
  • Upgrade to Netty 4.2.10.Final #49107
  • Upgrade to Postgresql 42.7.10 #49202
  • Upgrade to Reactor Bom 2025.0.3 #49087

... (truncated)

Commits
  • 1ab1436 Release v4.0.3
  • 5cc488d Merge branch '3.5.x' into 4.0.x
  • 9138ae2 Next development version (v3.5.12-SNAPSHOT)
  • a7e63a7 Merge branch '3.5.x' into 4.0.x
  • 54ab3c5 Align "noteworthy" issues in release notes with Spring Framework
  • b3ae5b1 Merge branch '3.5.x' into 4.0.x
  • 996664f Temporarily switch Docker to overlay2
  • 1ce8743 Revert "Temporarily disable containerd snapshotter"
  • 5ba88c6 Temporarily disable containerd snapshotter
  • 1f1a88c Revert "Temporarily update system tests to use specific platform"
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-maven-plugin from 3.5.7 to 4.0.3

Release notes

Sourced from org.springframework.boot:spring-boot-maven-plugin's releases.

v4.0.3

⭐ New Features

  • Add TWENTY_SIX to JavaVersion enum #49193

🐞 Bug Fixes

  • Jackson properties may not be applied correctly to RestClients #49223
  • ClassNotFoundException when using Actuator without spring-boot-health #49196
  • Using the OTel and Zipkin starters together creates invalid configuration #49183
  • Whitespace can be incorrectly removed when spring-boot-configuration-processor runs on multi-line javadoc #49060
  • Jackson2HttpMessageConvertersConfiguration uses ConditionOn Jackson3 XMLMapper class #49015
  • server.jetty.threads.max is ignored when using virtual threads #48989
  • Slice test includes fail to load when using spring-boot-starter-test-classic #48981
  • Docker credential helpers with file extensions cannot be executed on Windows #48979
  • Java version requirement check for native image is confusing if AOT didn't run #48963
  • TestPropertyValues.Pair.fromMapEntry(Entry<String, String>) does not comply with its nullability contract #48948

📔 Documentation

  • Couchbase and Kafka are incorrectly listed as supporting SSL with Docker Compose #49212
  • Document that use of non idiomatic format for '@Value' still apply for environment variables #49109
  • Document naming convention for custom test-scoped starters #49017
  • Delay removal of Jackson 2 support until 4.3 at the earliest #49010
  • LICENSE.txt and NOTICE.txt files have the wrong content in the latest releases #49003
  • ApplicationContextAssert documents a non-existent assertion in getFailure() #48977
  • Highlight the importance of the preStop hook when configuring Kubernetes probes #48946

🔨 Dependency Upgrades

  • Upgrade to AssertJ 3.27.7 #49095
  • Upgrade to Elasticsearch Client 9.2.5 #49184
  • Upgrade to Groovy 5.0.4 #49097
  • Upgrade to Hibernate 7.2.3.Final #49098
  • Upgrade to Hibernate 7.2.4.Final #49167
  • Upgrade to Jaybird 6.0.4 #49099
  • Upgrade to JBoss Logging 3.6.2.Final #49100
  • Upgrade to Jersey 4.0.2 #49101
  • Upgrade to Jetty 12.1.6 #49102
  • Upgrade to jOOQ 3.19.30 #49103
  • Upgrade to JUnit Jupiter 6.0.3 #49233
  • Upgrade to Logback 1.5.29 #49169
  • Upgrade to Logback 1.5.32 #49245
  • Upgrade to Micrometer 1.16.3 #49111
  • Upgrade to Micrometer Tracing 1.6.3 #49112
  • Upgrade to MongoDB 5.6.3 #49105
  • Upgrade to MySQL 9.6.0 #49106
  • Upgrade to Netty 4.2.10.Final #49107
  • Upgrade to Postgresql 42.7.10 #49202
  • Upgrade to Reactor Bom 2025.0.3 #49087

... (truncated)

Commits
  • 1ab1436 Release v4.0.3
  • 5cc488d Merge branch '3.5.x' into 4.0.x
  • 9138ae2 Next development version (v3.5.12-SNAPSHOT)
  • a7e63a7 Merge branch '3.5.x' into 4.0.x
  • 54ab3c5 Align "noteworthy" issues in release notes with Spring Framework
  • b3ae5b1 Merge branch '3.5.x' into 4.0.x
  • 996664f Temporarily switch Docker to overlay2
  • 1ce8743 Revert "Temporarily disable containerd snapshotter"
  • 5ba88c6 Temporarily disable containerd snapshotter
  • 1f1a88c Revert "Temporarily update system tests to use specific platform"
  • Additional commits viewable in compare view

Updates org.springframework.modulith:spring-modulith-bom from 1.4.0 to 2.0.3

Release notes

Sourced from org.springframework.modulith:spring-modulith-bom's releases.

2.0.3

💡 Improvements

  • Hibernate schema validation fails with JPA event publication registry #1570
  • SpringModulithProcessor fails on Windows with KAPT - StringIndexOutOfBoundsException due to hardcoded forward slashes #1546

🪲 Bugs

  • Contributions made ApplicationModuleSourceFactory not fully considered in ApplicationModules #1585
  • Architecturally-evident type discovery tries to look up repository metadata for implementation classes #1547

🔨 Dependency Upgrades

  • Upgrade to Spring Boot 4.0.3 #1589
  • Upgrade to MongoDB 5.6.3 #1581
  • Upgrade to Spring Framework 7.0.5 #1580
  • Upgrade to Micrometer Tracing 1.6.3 #1579

2.0.2

💡 Improvements

  • Fix a typo in the runtime docs #1520

🪲 Bugs

  • JpaEventPublicationRepository.markCompleted(event, identifier, completionDate) doesn't update status to COMPLETED #1523
  • incompleteEventPublications.resubmitIncompletePublicationsOlderThan(…) throws NPE when last_resubmission_date is null #1519

🔨 Dependency Upgrades

  • Upgrade to Spring Boot 4.0.2 #1533
  • Upgrade to Spring Framework 7.0.3 #1529
  • Upgrade to Micrometer Tracing 1.6.2 #1528

2.0.1

💡 Improvements

  • Allow resetting the shift in TimeMachine #1491

🪲 Bugs

  • @ApplicationModuleTest does not bootstrap beans from test configuration #1495
  • CGLib proxy created for JdbcEventPublicationRepositoryV2causing issues in native image #1493
  • ClassNotFoundException for package-info from JavaPackage during runtime bootstrap #1487

🔨 Dependency Upgrades

  • Upgrade to Spring Boot 4.0.1 #1510
  • Upgrade to jMolecules 2025.0.2 #1509
  • Upgrade to MongoDB 5.6.2 #1508

... (truncated)

Commits

Updates org.springframework.boot:spring-boot-maven-plugin from 3.5.7 to 4.0.3

Release notes

Sourced from org.springframework.boot:spring-boot-maven-plugin's releases.

v4.0.3

⭐ New Features

  • Add TWENTY_SIX to JavaVersion enum #49193

🐞 Bug Fixes

  • Jackson properties may not be applied correctly to RestClients #49223
  • ClassNotFoundException when using Actuator without spring-boot-health #49196
  • Using the OTel and Zipkin starters together creates invalid configuration #49183
  • Whitespace can be incorrectly removed when spring-boot-configuration-processor runs on multi-line javadoc #49060
  • Jackson2HttpMessageConvertersConfiguration uses ConditionOn Jackson3 XMLMapper class #49015
  • server.jetty.threads.max is ignored when using virtual threads #48989
  • Slice test includes fail to load when using spring-boot-starter-test-classic #48981
  • Docker credential helpers with file extensions cannot be executed on Windows #48979
  • Java version requirement check for native image is confusing if AOT didn't run #48963
  • TestPropertyValues.Pair.fromMapEntry(Entry<String, String>) does not comply with its nullability contract #48948

📔 Documentation

  • Couchbase and Kafka are incorrectly listed as supporting SSL with Docker Compose #49212
  • Document that use of non idiomatic format for '@Value' still apply for environment variables #49109
  • Document naming convention for custom test-scoped starters #49017
  • Delay removal of Jackson 2 support until 4.3 at the earliest #49010
  • LICENSE.txt and NOTICE.txt files have the wrong content in the latest releases #49003
  • ApplicationContextAssert documents a non-existent assertion in getFailure() #48977
  • Highlight the importance of the preStop hook when configuring Kubernetes probes #48946

🔨 Dependency Upgrades

  • Upgrade to AssertJ 3.27.7 #49095
  • Upgrade to Elasticsearch Client 9.2.5 #49184
  • Upgrade to Groovy 5.0.4 #49097
  • Upgrade to Hibernate 7.2.3.Final #49098
  • Upgrade to Hibernate 7.2.4.Final #49167
  • Upgrade to Jaybird 6.0.4 #49099
  • Upgrade to JBoss Logging 3.6.2.Final #49100
  • Upgrade to Jersey 4.0.2 #49101
  • Upgrade to Jetty 12.1.6 #49102
  • Upgrade to jOOQ 3.19.30 #49103
  • Upgrade to JUnit Jupiter 6.0.3 #49233
  • Upgrade to Logback 1.5.29 #49169
  • Upgrade to Logback 1.5.32 #49245
  • Upgrade to Micrometer 1.16.3 #49111
  • Upgrade to Micrometer Tracing 1.6.3 #49112
  • Upgrade to MongoDB 5.6.3 #49105
  • Upgrade to MySQL 9.6.0 #49106
  • Upgrade to Netty 4.2.10.Final #49107
  • Upgrade to Postgresql 42.7.10 #49202
  • Upgrade to Reactor Bom 2025.0.3 #49087

... (truncated)

Commits
  • 1ab1436 Release v4.0.3
  • 5cc488d Merge branch '3.5.x' into 4.0.x
  • 9138ae2 Next development version (v3.5.12-SNAPSHOT)
  • a7e63a7 Merge branch '3.5.x' into 4.0.x
  • 54ab3c5 Align "noteworthy" issues in release notes with Spring Framework
  • b3ae5b1 Merge branch '3.5.x' into 4.0.x
  • 996664f Temporarily switch Docker to overlay2
  • 1ce8743 Revert "Temporarily disable containerd snapshotter"
  • 5ba88c6 Temporarily disable containerd snapshotter
  • 1f1a88c Revert "Temporarily update system tests to use specific platform"
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file Server Issue related to the Server application labels Mar 16, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 16, 2026

Labels

The following labels could not be found: java. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 16, 2026
@github-actions
Copy link
Copy Markdown

This is a major dependency update, so auto-merge is disabled.
Please review and merge manually if everything looks good.

@dependabot dependabot bot force-pushed the dependabot/maven/server/backend/spring-e710f5dd35 branch from d38d19e to 5961c5f Compare March 23, 2026 00:55
@github-actions
Copy link
Copy Markdown

This is a major dependency update, so auto-merge is disabled.
Please review and merge manually if everything looks good.

@dependabot dependabot bot force-pushed the dependabot/maven/server/backend/spring-e710f5dd35 branch from 5961c5f to 8ddbdbf Compare March 23, 2026 01:06
@github-actions
Copy link
Copy Markdown

This is a major dependency update, so auto-merge is disabled.
Please review and merge manually if everything looks good.

@dependabot dependabot bot force-pushed the dependabot/maven/server/backend/spring-e710f5dd35 branch from 8ddbdbf to 01d556c Compare March 23, 2026 01:20
@github-actions
Copy link
Copy Markdown

This is a major dependency update, so auto-merge is disabled.
Please review and merge manually if everything looks good.

@dependabot dependabot bot force-pushed the dependabot/maven/server/backend/spring-e710f5dd35 branch from 01d556c to 112ac26 Compare March 30, 2026 00:56
@github-actions
Copy link
Copy Markdown

This is a major dependency update, so auto-merge is disabled.
Please review and merge manually if everything looks good.

@dependabot dependabot bot force-pushed the dependabot/maven/server/backend/spring-e710f5dd35 branch from 112ac26 to c23ff65 Compare April 6, 2026 00:56
@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 6, 2026

This is a major dependency update, so auto-merge is disabled.
Please review and merge manually if everything looks good.

Bumps the spring group in /server/backend with 3 updates: [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot), [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) and [org.springframework.modulith:spring-modulith-bom](https://github.com/spring-projects/spring-modulith).


Updates `org.springframework.boot:spring-boot-dependencies` from 3.5.7 to 4.0.3
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.7...v4.0.3)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.5.7 to 4.0.3
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.7...v4.0.3)

Updates `org.springframework.modulith:spring-modulith-bom` from 1.4.0 to 2.0.3
- [Release notes](https://github.com/spring-projects/spring-modulith/releases)
- [Commits](spring-projects/spring-modulith@1.4.0...2.0.3)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.5.7 to 4.0.3
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.7...v4.0.3)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 4.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 4.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: spring
- dependency-name: org.springframework.modulith:spring-modulith-bom
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 4.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: spring
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/maven/server/backend/spring-e710f5dd35 branch from c23ff65 to c492aa7 Compare April 13, 2026 00:56
@github-actions
Copy link
Copy Markdown

This is a major dependency update, so auto-merge is disabled.
Please review and merge manually if everything looks good.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file Server Issue related to the Server application

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants