Skip to content

chore(deps): bump springBoot from 3.5.10 to 4.0.7#25

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/springBoot-4.0.7
Open

chore(deps): bump springBoot from 3.5.10 to 4.0.7#25
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/springBoot-4.0.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 27, 2026

Copy link
Copy Markdown
Contributor

Bumps springBoot from 3.5.10 to 4.0.7.
Updates org.springframework.boot:spring-boot-configuration-processor from 3.5.10 to 4.0.7

Release notes

Sourced from org.springframework.boot:spring-boot-configuration-processor's releases.

v4.0.7

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50746
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50744
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50640
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50634
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50617
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50611
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50609
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50602
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50509
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50416
  • Created StackTracePrinter instances have no access to the Environment #50413
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50411
  • Buildpack module does not validate long-to-int casts #50409
  • GraphQL WebSocket support does not configure allowed origins #50393
  • Configuration property metadata includes incorrect class references #50375
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50297
  • Meter registries are not removed from the global registry when the context is closed #50286
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50265
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50260
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50257
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50233
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50227
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50215
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50201

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50646
  • Document SSL reloading with Let's Encrypt #50629
  • Remove the use of Optional from Data Neo4j repository examples #50621
  • Fix typos in documentation #50619
  • Clarify dependency requirement for Bean Validation support #50613
  • Document Java 25 requirement for AOT cache #50484
  • Add links for Java CAS Client Spring Boot Starter #50281
  • Document known testcontainers lifecycle issues #50219
  • Document adding multiple connectors for Jetty #50217
  • Polish InvalidConfigurationPropertyValueException constructor javadoc #50213
  • Fix typo in Spring Security OAuth2 client registration documentation #50198

🔨 Dependency Upgrades

... (truncated)

Commits
  • 6f7341c Release v4.0.7
  • 9755ff2 Upgrade to Spring Batch 6.0.4
  • d549d07 Upgrade to Spring Integration 7.0.5
  • 4d9e463 Merge branch '3.5.x' into 4.0.x
  • b068647 Upgrade to Spring Integration 6.5.9
  • bb247bb Merge branch '3.5.x' into 4.0.x
  • 339ce3d Merge branch '3.5.x' into 4.0.x
  • 327bef3 Enable hostname verification by default in Mail auto-config
  • 4218bd7 Fix predictable temp directory in Artemis embedded configuration
  • 3da6e9a Upgrade to Spring GraphQL 2.0.4
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-actuator from 3.5.10 to 4.0.7

Release notes

Sourced from org.springframework.boot:spring-boot-starter-actuator's releases.

v4.0.7

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50746
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50744
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50640
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50634
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50617
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50611
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50609
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50602
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50509
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50416
  • Created StackTracePrinter instances have no access to the Environment #50413
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50411
  • Buildpack module does not validate long-to-int casts #50409
  • GraphQL WebSocket support does not configure allowed origins #50393
  • Configuration property metadata includes incorrect class references #50375
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50297
  • Meter registries are not removed from the global registry when the context is closed #50286
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50265
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50260
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50257
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50233
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50227
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50215
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50201

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50646
  • Document SSL reloading with Let's Encrypt #50629
  • Remove the use of Optional from Data Neo4j repository examples #50621
  • Fix typos in documentation #50619
  • Clarify dependency requirement for Bean Validation support #50613
  • Document Java 25 requirement for AOT cache #50484
  • Add links for Java CAS Client Spring Boot Starter #50281
  • Document known testcontainers lifecycle issues #50219
  • Document adding multiple connectors for Jetty #50217
  • Polish InvalidConfigurationPropertyValueException constructor javadoc #50213
  • Fix typo in Spring Security OAuth2 client registration documentation #50198

🔨 Dependency Upgrades

... (truncated)

Commits
  • 6f7341c Release v4.0.7
  • 9755ff2 Upgrade to Spring Batch 6.0.4
  • d549d07 Upgrade to Spring Integration 7.0.5
  • 4d9e463 Merge branch '3.5.x' into 4.0.x
  • b068647 Upgrade to Spring Integration 6.5.9
  • bb247bb Merge branch '3.5.x' into 4.0.x
  • 339ce3d Merge branch '3.5.x' into 4.0.x
  • 327bef3 Enable hostname verification by default in Mail auto-config
  • 4218bd7 Fix predictable temp directory in Artemis embedded configuration
  • 3da6e9a Upgrade to Spring GraphQL 2.0.4
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-web from 3.5.10 to 4.0.7

Release notes

Sourced from org.springframework.boot:spring-boot-starter-web's releases.

v4.0.7

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50746
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50744
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50640
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50634
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50617
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50611
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50609
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50602
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50509
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50416
  • Created StackTracePrinter instances have no access to the Environment #50413
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50411
  • Buildpack module does not validate long-to-int casts #50409
  • GraphQL WebSocket support does not configure allowed origins #50393
  • Configuration property metadata includes incorrect class references #50375
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50297
  • Meter registries are not removed from the global registry when the context is closed #50286
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50265
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50260
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50257
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50233
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50227
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50215
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50201

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50646
  • Document SSL reloading with Let's Encrypt #50629
  • Remove the use of Optional from Data Neo4j repository examples #50621
  • Fix typos in documentation #50619
  • Clarify dependency requirement for Bean Validation support #50613
  • Document Java 25 requirement for AOT cache #50484
  • Add links for Java CAS Client Spring Boot Starter #50281
  • Document known testcontainers lifecycle issues #50219
  • Document adding multiple connectors for Jetty #50217
  • Polish InvalidConfigurationPropertyValueException constructor javadoc #50213
  • Fix typo in Spring Security OAuth2 client registration documentation #50198

🔨 Dependency Upgrades

... (truncated)

Commits
  • 6f7341c Release v4.0.7
  • 9755ff2 Upgrade to Spring Batch 6.0.4
  • d549d07 Upgrade to Spring Integration 7.0.5
  • 4d9e463 Merge branch '3.5.x' into 4.0.x
  • b068647 Upgrade to Spring Integration 6.5.9
  • bb247bb Merge branch '3.5.x' into 4.0.x
  • 339ce3d Merge branch '3.5.x' into 4.0.x
  • 327bef3 Enable hostname verification by default in Mail auto-config
  • 4218bd7 Fix predictable temp directory in Artemis embedded configuration
  • 3da6e9a Upgrade to Spring GraphQL 2.0.4
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-log4j2 from 3.5.10 to 4.0.7

Release notes

Sourced from org.springframework.boot:spring-boot-starter-log4j2's releases.

v4.0.7

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50746
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50744
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50640
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50634
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50617
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50611
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50609
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50602
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50509
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50416
  • Created StackTracePrinter instances have no access to the Environment #50413
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50411
  • Buildpack module does not validate long-to-int casts #50409
  • GraphQL WebSocket support does not configure allowed origins #50393
  • Configuration property metadata includes incorrect class references #50375
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50297
  • Meter registries are not removed from the global registry when the context is closed #50286
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50265
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50260
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50257
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50233
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50227
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50215
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50201

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50646
  • Document SSL reloading with Let's Encrypt #50629
  • Remove the use of Optional from Data Neo4j repository examples #50621
  • Fix typos in documentation #50619
  • Clarify dependency requirement for Bean Validation support #50613
  • Document Java 25 requirement for AOT cache #50484
  • Add links for Java CAS Client Spring Boot Starter #50281
  • Document known testcontainers lifecycle issues #50219
  • Document adding multiple connectors for Jetty #50217
  • Polish InvalidConfigurationPropertyValueException constructor javadoc #50213
  • Fix typo in Spring Security OAuth2 client registration documentation #50198

🔨 Dependency Upgrades

... (truncated)

Commits
  • 6f7341c Release v4.0.7
  • 9755ff2 Upgrade to Spring Batch 6.0.4
  • d549d07 Upgrade to Spring Integration 7.0.5
  • 4d9e463 Merge branch '3.5.x' into 4.0.x
  • b068647 Upgrade to Spring Integration 6.5.9
  • bb247bb Merge branch '3.5.x' into 4.0.x
  • 339ce3d Merge branch '3.5.x' into 4.0.x
  • 327bef3 Enable hostname verification by default in Mail auto-config
  • 4218bd7 Fix predictable temp directory in Artemis embedded configuration
  • 3da6e9a Upgrade to Spring GraphQL 2.0.4
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-test from 3.5.10 to 4.0.7

Release notes

Sourced from org.springframework.boot:spring-boot-starter-test's releases.

v4.0.7

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50746
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50744
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50640
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50634
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50617
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50611
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50609
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50602
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50509
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50416
  • Created StackTracePrinter instances have no access to the Environment #50413
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50411
  • Buildpack module does not validate long-to-int casts #50409
  • GraphQL WebSocket support does not configure allowed origins #50393
  • Configuration property metadata includes incorrect class references #50375
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50297
  • Meter registries are not removed from the global registry when the context is closed #50286
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50265
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50260
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50257
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50233
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50227
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50215
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50201

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50646
  • Document SSL reloading with Let's Encrypt #50629
  • Remove the use of Optional from Data Neo4j repository examples #50621
  • Fix typos in documentation #50619
  • Clarify dependency requirement for Bean Validation support #50613
  • Document Java 25 requirement for AOT cache #50484
  • Add links for Java CAS Client Spring Boot Starter #50281
  • Document known testcontainers lifecycle issues #50219
  • Document adding multiple connectors for Jetty #50217
  • Polish InvalidConfigurationPropertyValueException constructor javadoc #50213
  • Fix typo in Spring Security OAuth2 client registration documentation #50198

🔨 Dependency Upgrades

... (truncated)

Commits
  • 6f7341c Release v4.0.7
  • 9755ff2 Upgrade to Spring Batch 6.0.4
  • d549d07 Upgrade to Spring Integration 7.0.5
  • 4d9e463 Merge branch '3.5.x' into 4.0.x
  • b068647 Upgrade to Spring Integration 6.5.9
  • bb247bb Merge branch '3.5.x' into 4.0.x
  • 339ce3d Merge branch '3.5.x' into 4.0.x
  • 327bef3 Enable hostname verification by default in Mail auto-config
  • 4218bd7 Fix predictable temp directory in Artemis embedded configuration
  • 3da6e9a Upgrade to Spring GraphQL 2.0.4
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-webflux from 3.5.10 to 4.0.7

Release notes

Sourced from org.springframework.boot:spring-boot-starter-webflux's releases.

v4.0.7

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50746
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50744
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50640
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50634
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50617
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50611
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50609
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50602
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50509
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50416
  • Created StackTracePrinter instances have no access to the Environment #50413
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50411
  • Buildpack module does not validate long-to-int casts #50409
  • GraphQL WebSocket support does not configure allowed origins #50393
  • Configuration property metadata includes incorrect class references #50375
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50297
  • Meter registries are not removed from the global registry when the context is closed #50286
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50265
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50260
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50257
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50233
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50227
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50215
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50201

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50646
  • Document SSL reloading with Let's Encrypt #50629
  • Remove the use of Optional from Data Neo4j repository examples #50621
  • Fix typos in documentation #50619
  • Clarify dependency requirement for Bean Validation support #50613
  • Document Java 25 requirement for AOT cache #50484
  • Add links for Java CAS Client Spring Boot Starter #50281
  • Document known testcontainers lifecycle issues #50219
  • Document adding multiple connectors for Jetty #50217
  • Polish InvalidConfigurationPropertyValueException constructor javadoc #50213
  • Fix typo in Spring Security OAuth2 client registration documentation #50198

🔨 Dependency Upgrades

... (truncated)

Commits
  • 6f7341c Release v4.0.7
  • 9755ff2 Upgrade to Spring Batch 6.0.4
  • d549d07 Upgrade to Spring Integration 7.0.5
  • 4d9e463 Merge branch '3.5.x' into 4.0.x
  • b068647 Upgrade to Spring Integration 6.5.9
  • bb247bb Merge branch '3.5.x' into 4.0.x
  • 339ce3d Merge branch '3.5.x' into 4.0.x
  • 327bef3 Enable hostname verification by default in Mail auto-config
  • 4218bd7 Fix predictable temp directory in Artemis embedded configuration
  • 3da6e9a Upgrade to Spring GraphQL 2.0.4
  • Additional commits viewable in compare view

Updates org.springframework.boot from 3.5.10 to 4.0.7

Release notes

Sourced from org.springframework.boot's releases.

v4.0.7

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50746
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50744
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50640
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50634
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50617
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50611
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50609
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50602
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50509
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50416
  • Created StackTracePrinter instances have no access to the Environment #50413
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50411
  • Buildpack module does not validate long-to-int casts #50409
  • GraphQL WebSocket support does not configure allowed origins #50393
  • Configuration property metadata includes incorrect class references #50375
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50297
  • Meter registries are not removed from the global registry when the context is closed #50286
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50265
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50260
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50257
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50233
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50227
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50215
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50201

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50646
  • Document SSL reloading with Let's Encrypt #50629
  • Remove the use of Optional from Data Neo4j repository examples #50621
  • Fix typos in documentation #50619
  • Clarify dependency requirement for Bean Validation support #50613
  • Document Java 25 requirement for AOT cache #50484
  • Add links for Java CAS Client Spring Boot Starter #50281
  • Document known testcontainers lifecycle issues #50219
  • Document adding multiple connectors for Jetty #50217
  • Polish InvalidConfigurationPropertyValueException constructor javadoc #50213
  • Fix typo in Spring Security OAuth2 client registration documentation #50198

🔨 Dependency Upgrades

... (truncated)

Commits
  • 6f7341c Release v4.0.7
  • 9755ff2 Upgrade to Spring Batch 6.0.4
  • d549d07 Upgrade to Spring Integration 7.0.5
  • 4d9e463 Merge branch '3.5.x' into 4.0.x
  • b068647 Upgrade to Spring Integration 6.5.9
  • bb247bb Merge ...

    Description has been truncated

@dependabot
chore(deps): bump springBoot from 3.5.10 to 4.0.7
15d5c51 
Bumps `springBoot` from 3.5.10 to 4.0.7.

Updates `org.springframework.boot:spring-boot-configuration-processor` from 3.5.10 to 4.0.7
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v4.0.7)

Updates `org.springframework.boot:spring-boot-starter-actuator` from 3.5.10 to 4.0.7
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v4.0.7)

Updates `org.springframework.boot:spring-boot-starter-web` from 3.5.10 to 4.0.7
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v4.0.7)

Updates `org.springframework.boot:spring-boot-starter-log4j2` from 3.5.10 to 4.0.7
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v4.0.7)

Updates `org.springframework.boot:spring-boot-starter-test` from 3.5.10 to 4.0.7
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v4.0.7)

Updates `org.springframework.boot:spring-boot-starter-webflux` from 3.5.10 to 4.0.7
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v4.0.7)

Updates `org.springframework.boot` from 3.5.10 to 4.0.7
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v4.0.7)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-configuration-processor
  dependency-version: 4.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.springframework.boot:spring-boot-starter-actuator
  dependency-version: 4.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.springframework.boot:spring-boot-starter-web
  dependency-version: 4.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.springframework.boot:spring-boot-starter-log4j2
  dependency-version: 4.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.springframework.boot:spring-boot-starter-test
  dependency-version: 4.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.springframework.boot:spring-boot-starter-webflux
  dependency-version: 4.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.springframework.boot
  dependency-version: 4.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jun 27, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jun 27, 2026
@dependabot dependabot Bot mentioned this pull request Jun 27, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@akdev93 akdev93 Awaiting requested review from akdev93 akdev93 is a code owner
@arudge arudge Awaiting requested review from arudge arudge is a code owner
@jimmy-guzman jimmy-guzman Awaiting requested review from jimmy-guzman jimmy-guzman is a code owner
@AjaySridhara AjaySridhara Awaiting requested review from AjaySridhara AjaySridhara is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants