chore(deps): bump springBoot from 3.5.10 to 4.0.7 by dependabot[bot] · Pull Request #22 · target/tech-case-studies

dependabot · 2026-06-20T18:32:37Z

Bumps springBoot from 3.5.10 to 4.0.7.
Updates org.springframework.boot:spring-boot-configuration-processor from 3.5.10 to 4.0.7

Release notes

Sourced from org.springframework.boot:spring-boot-configuration-processor's releases.

v4.0.7

🐞 Bug Fixes

MailSender auto-configuration does not enable hostname verification #50746

Artemis auto-configuration uses a predictable default location for the embedded broker's data #50744

NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50640

SSL should not be enabled when a SSL bundle is overridden to an empty string #50634

Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50617

RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50611

NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50609

Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50602

Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50509

ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50416

Created StackTracePrinter instances have no access to the Environment #50413

MappingsEndpoint reports the context's own ID as parentId when a parent exists #50411

Buildpack module does not validate long-to-int casts #50409

GraphQL WebSocket support does not configure allowed origins #50393

Configuration property metadata includes incorrect class references #50375

Spring Boot Loader Does Not Support RSA and EC Signed Jars #50297

Meter registries are not removed from the global registry when the context is closed #50286

Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50265

EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50260

Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50257

ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50233

NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50227

Apply HTML escaping to timestamp attribute in Whitelabel error page #50215

Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50201

📔 Documentation

Fix reference to Gradle documentation for module replacement #50646

Document SSL reloading with Let's Encrypt #50629

Remove the use of Optional from Data Neo4j repository examples #50621

Fix typos in documentation #50619

Clarify dependency requirement for Bean Validation support #50613

Document Java 25 requirement for AOT cache #50484

Add links for Java CAS Client Spring Boot Starter #50281

Document known testcontainers lifecycle issues #50219

Document adding multiple connectors for Jetty #50217

Polish InvalidConfigurationPropertyValueException constructor javadoc #50213

Fix typo in Spring Security OAuth2 client registration documentation #50198

🔨 Dependency Upgrades

Upgrade to Caffeine 3.2.4 #50322

Upgrade to Cassandra Driver 4.19.3 #50681

Upgrade to Glassfish JAXB 4.0.9 #50682

Upgrade to Groovy 5.0.6 #50324

Upgrade to Hibernate 7.2.19.Final #50733

Upgrade to Jackson 2 Bom 2.21.4 #50684

... (truncated)

Commits

6f7341c Release v4.0.7
9755ff2 Upgrade to Spring Batch 6.0.4
d549d07 Upgrade to Spring Integration 7.0.5
4d9e463 Merge branch '3.5.x' into 4.0.x
b068647 Upgrade to Spring Integration 6.5.9
bb247bb Merge branch '3.5.x' into 4.0.x
339ce3d Merge branch '3.5.x' into 4.0.x
327bef3 Enable hostname verification by default in Mail auto-config
4218bd7 Fix predictable temp directory in Artemis embedded configuration
3da6e9a Upgrade to Spring GraphQL 2.0.4
Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-actuator from 3.5.10 to 4.0.7

Release notes

Sourced from org.springframework.boot:spring-boot-starter-actuator's releases.

v4.0.7

🐞 Bug Fixes

MailSender auto-configuration does not enable hostname verification #50746

Artemis auto-configuration uses a predictable default location for the embedded broker's data #50744

NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50640

SSL should not be enabled when a SSL bundle is overridden to an empty string #50634

Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50617

RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50611

NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50609

Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50602

Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50509

ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50416

Created StackTracePrinter instances have no access to the Environment #50413

MappingsEndpoint reports the context's own ID as parentId when a parent exists #50411

Buildpack module does not validate long-to-int casts #50409

GraphQL WebSocket support does not configure allowed origins #50393

Configuration property metadata includes incorrect class references #50375

Spring Boot Loader Does Not Support RSA and EC Signed Jars #50297

Meter registries are not removed from the global registry when the context is closed #50286

Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50265

EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50260

Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50257

ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50233

NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50227

Apply HTML escaping to timestamp attribute in Whitelabel error page #50215

Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50201

📔 Documentation

Fix reference to Gradle documentation for module replacement #50646

Document SSL reloading with Let's Encrypt #50629

Remove the use of Optional from Data Neo4j repository examples #50621

Fix typos in documentation #50619

Clarify dependency requirement for Bean Validation support #50613

Document Java 25 requirement for AOT cache #50484

Add links for Java CAS Client Spring Boot Starter #50281

Document known testcontainers lifecycle issues #50219

Document adding multiple connectors for Jetty #50217

Polish InvalidConfigurationPropertyValueException constructor javadoc #50213

Fix typo in Spring Security OAuth2 client registration documentation #50198

🔨 Dependency Upgrades

Upgrade to Caffeine 3.2.4 #50322

Upgrade to Cassandra Driver 4.19.3 #50681

Upgrade to Glassfish JAXB 4.0.9 #50682

Upgrade to Groovy 5.0.6 #50324

Upgrade to Hibernate 7.2.19.Final #50733

Upgrade to Jackson 2 Bom 2.21.4 #50684

... (truncated)

Commits

6f7341c Release v4.0.7
9755ff2 Upgrade to Spring Batch 6.0.4
d549d07 Upgrade to Spring Integration 7.0.5
4d9e463 Merge branch '3.5.x' into 4.0.x
b068647 Upgrade to Spring Integration 6.5.9
bb247bb Merge branch '3.5.x' into 4.0.x
339ce3d Merge branch '3.5.x' into 4.0.x
327bef3 Enable hostname verification by default in Mail auto-config
4218bd7 Fix predictable temp directory in Artemis embedded configuration
3da6e9a Upgrade to Spring GraphQL 2.0.4
Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-web from 3.5.10 to 4.0.7

Release notes

Sourced from org.springframework.boot:spring-boot-starter-web's releases.

v4.0.7

🐞 Bug Fixes

MailSender auto-configuration does not enable hostname verification #50746

Artemis auto-configuration uses a predictable default location for the embedded broker's data #50744

NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50640

SSL should not be enabled when a SSL bundle is overridden to an empty string #50634

Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50617

RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50611

NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50609

Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50602

Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50509

ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50416

Created StackTracePrinter instances have no access to the Environment #50413

MappingsEndpoint reports the context's own ID as parentId when a parent exists #50411

Buildpack module does not validate long-to-int casts #50409

GraphQL WebSocket support does not configure allowed origins #50393

Configuration property metadata includes incorrect class references #50375

Spring Boot Loader Does Not Support RSA and EC Signed Jars #50297

Meter registries are not removed from the global registry when the context is closed #50286

Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50265

EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50260

Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50257

ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50233

NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50227

Apply HTML escaping to timestamp attribute in Whitelabel error page #50215

Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50201

📔 Documentation

Fix reference to Gradle documentation for module replacement #50646

Document SSL reloading with Let's Encrypt #50629

Remove the use of Optional from Data Neo4j repository examples #50621

Fix typos in documentation #50619

Clarify dependency requirement for Bean Validation support #50613

Document Java 25 requirement for AOT cache #50484

Add links for Java CAS Client Spring Boot Starter #50281

Document known testcontainers lifecycle issues #50219

Document adding multiple connectors for Jetty #50217

Polish InvalidConfigurationPropertyValueException constructor javadoc #50213

Fix typo in Spring Security OAuth2 client registration documentation #50198

🔨 Dependency Upgrades

Upgrade to Caffeine 3.2.4 #50322

Upgrade to Cassandra Driver 4.19.3 #50681

Upgrade to Glassfish JAXB 4.0.9 #50682

Upgrade to Groovy 5.0.6 #50324

Upgrade to Hibernate 7.2.19.Final #50733

Upgrade to Jackson 2 Bom 2.21.4 #50684

... (truncated)

Commits

6f7341c Release v4.0.7
9755ff2 Upgrade to Spring Batch 6.0.4
d549d07 Upgrade to Spring Integration 7.0.5
4d9e463 Merge branch '3.5.x' into 4.0.x
b068647 Upgrade to Spring Integration 6.5.9
bb247bb Merge branch '3.5.x' into 4.0.x
339ce3d Merge branch '3.5.x' into 4.0.x
327bef3 Enable hostname verification by default in Mail auto-config
4218bd7 Fix predictable temp directory in Artemis embedded configuration
3da6e9a Upgrade to Spring GraphQL 2.0.4
Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-log4j2 from 3.5.10 to 4.0.7

Release notes

Sourced from org.springframework.boot:spring-boot-starter-log4j2's releases.

v4.0.7

🐞 Bug Fixes

MailSender auto-configuration does not enable hostname verification #50746

Artemis auto-configuration uses a predictable default location for the embedded broker's data #50744

NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50640

SSL should not be enabled when a SSL bundle is overridden to an empty string #50634

Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50617

RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50611

NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50609

Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50602

Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50509

ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50416

Created StackTracePrinter instances have no access to the Environment #50413

MappingsEndpoint reports the context's own ID as parentId when a parent exists #50411

Buildpack module does not validate long-to-int casts #50409

GraphQL WebSocket support does not configure allowed origins #50393

Configuration property metadata includes incorrect class references #50375

Spring Boot Loader Does Not Support RSA and EC Signed Jars #50297

Meter registries are not removed from the global registry when the context is closed #50286

Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50265

EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50260

Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50257

ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50233

NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50227

Apply HTML escaping to timestamp attribute in Whitelabel error page #50215

Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50201

📔 Documentation

Fix reference to Gradle documentation for module replacement #50646

Document SSL reloading with Let's Encrypt #50629

Remove the use of Optional from Data Neo4j repository examples #50621

Fix typos in documentation #50619

Clarify dependency requirement for Bean Validation support #50613

Document Java 25 requirement for AOT cache #50484

Add links for Java CAS Client Spring Boot Starter #50281

Document known testcontainers lifecycle issues #50219

Document adding multiple connectors for Jetty #50217

Polish InvalidConfigurationPropertyValueException constructor javadoc #50213

Fix typo in Spring Security OAuth2 client registration documentation #50198

🔨 Dependency Upgrades

Upgrade to Caffeine 3.2.4 #50322

Upgrade to Cassandra Driver 4.19.3 #50681

Upgrade to Glassfish JAXB 4.0.9 #50682

Upgrade to Groovy 5.0.6 #50324

Upgrade to Hibernate 7.2.19.Final #50733

Upgrade to Jackson 2 Bom 2.21.4 #50684

... (truncated)

Commits

6f7341c Release v4.0.7
9755ff2 Upgrade to Spring Batch 6.0.4
d549d07 Upgrade to Spring Integration 7.0.5
4d9e463 Merge branch '3.5.x' into 4.0.x
b068647 Upgrade to Spring Integration 6.5.9
bb247bb Merge branch '3.5.x' into 4.0.x
339ce3d Merge branch '3.5.x' into 4.0.x
327bef3 Enable hostname verification by default in Mail auto-config
4218bd7 Fix predictable temp directory in Artemis embedded configuration
3da6e9a Upgrade to Spring GraphQL 2.0.4
Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-test from 3.5.10 to 4.0.7

Release notes

Sourced from org.springframework.boot:spring-boot-starter-test's releases.

v4.0.7

🐞 Bug Fixes

MailSender auto-configuration does not enable hostname verification #50746

Artemis auto-configuration uses a predictable default location for the embedded broker's data #50744

NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50640

SSL should not be enabled when a SSL bundle is overridden to an empty string #50634

Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50617

RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50611

NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50609

Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50602

Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50509

ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50416

Created StackTracePrinter instances have no access to the Environment #50413

MappingsEndpoint reports the context's own ID as parentId when a parent exists #50411

Buildpack module does not validate long-to-int casts #50409

GraphQL WebSocket support does not configure allowed origins #50393

Configuration property metadata includes incorrect class references #50375

Spring Boot Loader Does Not Support RSA and EC Signed Jars #50297

Meter registries are not removed from the global registry when the context is closed #50286

Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50265

EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50260

Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50257

ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50233

NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50227

Apply HTML escaping to timestamp attribute in Whitelabel error page #50215

Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50201

📔 Documentation

Fix reference to Gradle documentation for module replacement #50646

Document SSL reloading with Let's Encrypt #50629

Remove the use of Optional from Data Neo4j repository examples #50621

Fix typos in documentation #50619

Clarify dependency requirement for Bean Validation support #50613

Document Java 25 requirement for AOT cache #50484

Add links for Java CAS Client Spring Boot Starter #50281

Document known testcontainers lifecycle issues #50219

Document adding multiple connectors for Jetty #50217

Polish InvalidConfigurationPropertyValueException constructor javadoc #50213

Fix typo in Spring Security OAuth2 client registration documentation #50198

🔨 Dependency Upgrades

Upgrade to Caffeine 3.2.4 #50322

Upgrade to Cassandra Driver 4.19.3 #50681

Upgrade to Glassfish JAXB 4.0.9 #50682

Upgrade to Groovy 5.0.6 #50324

Upgrade to Hibernate 7.2.19.Final #50733

Upgrade to Jackson 2 Bom 2.21.4 #50684

... (truncated)

Commits

6f7341c Release v4.0.7
9755ff2 Upgrade to Spring Batch 6.0.4
d549d07 Upgrade to Spring Integration 7.0.5
4d9e463 Merge branch '3.5.x' into 4.0.x
b068647 Upgrade to Spring Integration 6.5.9
bb247bb Merge branch '3.5.x' into 4.0.x
339ce3d Merge branch '3.5.x' into 4.0.x
327bef3 Enable hostname verification by default in Mail auto-config
4218bd7 Fix predictable temp directory in Artemis embedded configuration
3da6e9a Upgrade to Spring GraphQL 2.0.4
Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-webflux from 3.5.10 to 4.0.7

Release notes

Sourced from org.springframework.boot:spring-boot-starter-webflux's releases.

v4.0.7

🐞 Bug Fixes

MailSender auto-configuration does not enable hostname verification #50746

Artemis auto-configuration uses a predictable default location for the embedded broker's data #50744

NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50640

SSL should not be enabled when a SSL bundle is overridden to an empty string #50634

Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50617

RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50611

NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50609

Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50602

Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50509

ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50416

Created StackTracePrinter instances have no access to the Environment #50413

MappingsEndpoint reports the context's own ID as parentId when a parent exists #50411

Buildpack module does not validate long-to-int casts #50409

GraphQL WebSocket support does not configure allowed origins #50393

Configuration property metadata includes incorrect class references #50375

Spring Boot Loader Does Not Support RSA and EC Signed Jars #50297

Meter registries are not removed from the global registry when the context is closed #50286

Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50265

EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50260

Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50257

ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50233

NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50227

Apply HTML escaping to timestamp attribute in Whitelabel error page #50215

Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50201

📔 Documentation

Fix reference to Gradle documentation for module replacement #50646

Document SSL reloading with Let's Encrypt #50629

Remove the use of Optional from Data Neo4j repository examples #50621

Fix typos in documentation #50619

Clarify dependency requirement for Bean Validation support #50613

Document Java 25 requirement for AOT cache #50484

Add links for Java CAS Client Spring Boot Starter #50281

Document known testcontainers lifecycle issues #50219

Document adding multiple connectors for Jetty #50217

Polish InvalidConfigurationPropertyValueException constructor javadoc #50213

Fix typo in Spring Security OAuth2 client registration documentation #50198

🔨 Dependency Upgrades

Upgrade to Caffeine 3.2.4 #50322

Upgrade to Cassandra Driver 4.19.3 #50681

Upgrade to Glassfish JAXB 4.0.9 #50682

Upgrade to Groovy 5.0.6 #50324

Upgrade to Hibernate 7.2.19.Final #50733

Upgrade to Jackson 2 Bom 2.21.4 #50684

... (truncated)

Commits

6f7341c Release v4.0.7
9755ff2 Upgrade to Spring Batch 6.0.4
d549d07 Upgrade to Spring Integration 7.0.5
4d9e463 Merge branch '3.5.x' into 4.0.x
b068647 Upgrade to Spring Integration 6.5.9
bb247bb Merge branch '3.5.x' into 4.0.x
339ce3d Merge branch '3.5.x' into 4.0.x
327bef3 Enable hostname verification by default in Mail auto-config
4218bd7 Fix predictable temp directory in Artemis embedded configuration
3da6e9a Upgrade to Spring GraphQL 2.0.4
Additional commits viewable in compare view

Updates org.springframework.boot from 3.5.10 to 4.0.7

Release notes

Sourced from org.springframework.boot's releases.

v4.0.7

🐞 Bug Fixes

MailSender auto-configuration does not enable hostname verification #50746

Artemis auto-configuration uses a predictable default location for the embedded broker's data #50744

NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50640

SSL should not be enabled when a SSL bundle is overridden to an empty string #50634

Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50617

RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50611

NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50609

Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50602

Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50509

ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50416

Created StackTracePrinter instances have no access to the Environment #50413

MappingsEndpoint reports the context's own ID as parentId when a parent exists #50411

Buildpack module does not validate long-to-int casts #50409

GraphQL WebSocket support does not configure allowed origins #50393

Configuration property metadata includes incorrect class references #50375

Spring Boot Loader Does Not Support RSA and EC Signed Jars #50297

Meter registries are not removed from the global registry when the context is closed #50286

Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50265

EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50260

Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50257

ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50233

NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50227

Apply HTML escaping to timestamp attribute in Whitelabel error page #50215

Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50201

📔 Documentation

Fix reference to Gradle documentation for module replacement #50646

Document SSL reloading with Let's Encrypt #50629

Remove the use of Optional from Data Neo4j repository examples #50621

Fix typos in documentation #50619

Clarify dependency requirement for Bean Validation support #50613

Document Java 25 requirement for AOT cache #50484

Add links for Java CAS Client Spring Boot Starter #50281

Document known testcontainers lifecycle issues #50219

Document adding multiple connectors for Jetty #50217

Polish InvalidConfigurationPropertyValueException constructor javadoc #50213

Fix typo in Spring Security OAuth2 client registration documentation #50198

🔨 Dependency Upgrades

Upgrade to Caffeine 3.2.4 #50322

Upgrade to Cassandra Driver 4.19.3 #50681

Upgrade to Glassfish JAXB 4.0.9 #50682

Upgrade to Groovy 5.0.6 #50324

Upgrade to Hibernate 7.2.19.Final #50733

Upgrade to Jackson 2 Bom 2.21.4 #50684

... (truncated)

Commits

6f7341c Release v4.0.7
9755ff2 Upgrade to Spring Batch 6.0.4
d549d07 Upgrade to Spring Integration 7.0.5
4d9e463 Merge branch '3.5.x' into 4.0.x
b068647 Upgrade to Spring Integration 6.5.9
bb247bb Merge b...
Description has been truncated

Bumps `springBoot` from 3.5.10 to 4.0.7. Updates `org.springframework.boot:spring-boot-configuration-processor` from 3.5.10 to 4.0.7 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.10...v4.0.7) Updates `org.springframework.boot:spring-boot-starter-actuator` from 3.5.10 to 4.0.7 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.10...v4.0.7) Updates `org.springframework.boot:spring-boot-starter-web` from 3.5.10 to 4.0.7 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.10...v4.0.7) Updates `org.springframework.boot:spring-boot-starter-log4j2` from 3.5.10 to 4.0.7 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.10...v4.0.7) Updates `org.springframework.boot:spring-boot-starter-test` from 3.5.10 to 4.0.7 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.10...v4.0.7) Updates `org.springframework.boot:spring-boot-starter-webflux` from 3.5.10 to 4.0.7 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.10...v4.0.7) Updates `org.springframework.boot` from 3.5.10 to 4.0.7 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.10...v4.0.7) --- updated-dependencies: - dependency-name: org.springframework.boot dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.springframework.boot:spring-boot-configuration-processor dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.springframework.boot:spring-boot-starter-actuator dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.springframework.boot:spring-boot-starter-log4j2 dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.springframework.boot:spring-boot-starter-test dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.springframework.boot:spring-boot-starter-web dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.springframework.boot:spring-boot-starter-webflux dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-27T18:32:50Z

Superseded by #25.

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jun 20, 2026

dependabot Bot requested review from AjaySridhara, akdev93, arudge and jimmy-guzman as code owners June 20, 2026 18:32

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jun 20, 2026

dependabot Bot mentioned this pull request Jun 20, 2026

chore(deps): bump springBoot from 3.5.10 to 4.0.6 #12

Closed

dependabot Bot changed the title ~~chore(deps): bump springBoot from 3.5.10 to 4.1.0~~ chore(deps): bump springBoot from 3.5.10 to 4.0.7 Jun 25, 2026

dependabot Bot force-pushed the dependabot/gradle/springBoot-4.1.0 branch from 4f3b090 to 6f4cd31 Compare June 25, 2026 16:21

dependabot Bot closed this Jun 27, 2026

dependabot Bot deleted the dependabot/gradle/springBoot-4.1.0 branch June 27, 2026 18:32

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump springBoot from 3.5.10 to 4.0.7#22

chore(deps): bump springBoot from 3.5.10 to 4.0.7#22
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/springBoot-4.1.0

dependabot Bot commented on behalf of github Jun 20, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.0.7

🐞 Bug Fixes

📔 Documentation

🔨 Dependency Upgrades

v4.0.7

🐞 Bug Fixes

📔 Documentation

🔨 Dependency Upgrades

v4.0.7

🐞 Bug Fixes

📔 Documentation

🔨 Dependency Upgrades

v4.0.7

🐞 Bug Fixes

📔 Documentation

🔨 Dependency Upgrades

v4.0.7

🐞 Bug Fixes

📔 Documentation

🔨 Dependency Upgrades

v4.0.7

🐞 Bug Fixes

📔 Documentation

🔨 Dependency Upgrades

v4.0.7

🐞 Bug Fixes

📔 Documentation

🔨 Dependency Upgrades

Uh oh!

dependabot Bot commented on behalf of github Jun 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 20, 2026 •

edited

Loading