chore: update deps on client and server

.github/workflows/ci.yml

@@ -33,9 +33,9 @@ jobs:
         working-directory: ./server
         run: ./mvnw --no-transfer-progress clean compile -DskipTests
 
-      - name: Run tests
+      - name: Run unit tests (skip integration on purpose)
         working-directory: ./server
-        run: ./mvnw --no-transfer-progress clean verify -P tests --file pom.xml
+        run: ./mvnw --no-transfer-progress verify -P tests -Dskip.unit.tests=true -Djacoco.skip=true -Dcheckstyle.skip=true
 
   build-frontend:
     name: Build Frontend

AGENTS.md

@@ -18,7 +18,7 @@
 
 ## Developer workflows (use these first)
 - Frontend quality gate: `bash tools/check-frontend.sh` (runs `npm ci`, `lint:fix`, `build`, `test:no-watch`).
-- Backend quality gate: `bash tools/check-backend.sh` (runs checkstyle, compile, then `clean verify -P tests`).
+- Backend quality gate: `bash tools/check-backend.sh` (runs checkstyle, compile, then `clean verify -P tests`). Integration tests (`*IntTest`) use Testcontainers with a `jdbc:tc:postgresql:15.8-bookworm` URL and real Flyway migrations, so Docker must be running; there is no H2 or test-only schema. Equivalent Taskfile tasks: `task test-api`, `task test-api-unit` (no Docker), `task test-api-it`.
 - Backend dependency freshness check: `bash tools/check-be-deps.sh` (verifies that `failsafe`, `surefire`, `jacoco`, `checkstyle`, and Spring Boot plugin versions in `pom.xml` match the latest releases on Maven Central; must be run from the repo root or `server/`).
 - Important Maven default: tests/checkstyle/jacoco are skipped unless profile `-P tests` is enabled (`server/pom.xml`).
 - Dev stack via Docker Compose/Taskfile (`Taskfile.yml`, `docker-compose.dev.yml`): app `5000`, API `8585`, Java debug port `5005`, Postgres `5432`.

CHANGELOG.md

@@ -7,6 +7,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## 2026-09-16
+
+### Changed
+- Client deps bumped to latest version in minor and patch targets.
+- Server Spring Boot version bumped from 4.0.7 to 4.1.1
+
+---
+
 ## 2026-08-31
 
 ### Fixed

README.md

@@ -146,6 +146,14 @@ task docker-build-web
 ./tools/check-backend.sh
 ```
 
+Integration tests (`*IntTest`) run against a real PostgreSQL instance via Testcontainers, so a running Docker daemon is required. Unit tests alone do not need Docker:
+
+```bash
+task test-api-unit   # unit tests only, no Docker
+task test-api-it     # integration tests only, Docker required
+task test-api        # full backend gate (same as tools/check-backend.sh)
+```
+
 ## 🤝 Contributing
 
 We welcome contributions from the community! This project follows the **Fork & Merge** workflow.

Taskfile.yml

@@ -5,56 +5,111 @@ version: '3'
 tasks:
   docker-build-web:
     desc: Build the tasknote-web prod-ready docker image, tagging it as candidate
-    cmd: docker build --no-cache --build-arg VITE_BUILD="v999-$(date '+%Y-%m-%d-%H%M%S')" --build-arg SOURCE_PR="v999-123456789-$(date '+%Y-%m-%d-%H%M%S')" -t rmcampos/tasknote-app:latest ./client
+    cmd: docker build --no-cache --build-arg VITE_BUILD="v999-$(date '+%Y-%m-%d-%H%M%S')" --build-arg SOURCE_PR="v999-123456789-$(date '+%Y-%m-%d-%H%M%S')" -t ghcr.io/thermcampos/tasknote/client:latest ./client
 
   docker-build-api:
     desc: Build the tasknote-api prod-ready docker image, tagging it as candidate
-    cmd: cd server && ./mvnw -Pnative -DskipTests spring-boot:build-image -Dspring-boot.build-image.imageName=rmcampos/tasknote-api:latest -Dspring-boot.build-image.builder=paketobuildpacks/builder-jammy-tiny:0.0.505
+    cmd: cd server && ./mvnw -Pnative -DskipTests spring-boot:build-image -Dspring-boot.build-image.imageName=ghcr.io/thermcampos/tasknote/server:latest -Dspring-boot.build-image.builder=paketobuildpacks/builder-jammy-tiny:0.0.505
 
-  prod-up-web:
-    desc: Speed up the tasknote-web prod-like image, building it if required
-    cmd: docker compose -f docker-compose.prod.yml up -d tasknote-web
+  db-up:
+    desc: Starts Postgres database container
+    cmd: docker compose -f compose.dev.yaml up -d tasknote-db
 
-  prod-up-api:
-    desc: Speed up the tasknote-api prod-like image, building it if required
-    cmd: docker compose -f docker-compose.prod.yml up -d tasknote-api
+  db-down:
+    desc: Stops and remove Postgres database container
+    cmd: docker compose -f compose.dev.yaml down tasknote-db -v --remove-orphans
 
-  prod-up-db:
-    desc: Start the database container
-    cmd: docker compose -f docker-compose.prod.yml up -d tasknote-db
+  schemaspy-up:
+    desc: Starts database, API, SchemaSpy containers and a Python http server
+    cmd: docker compose -f compose.schemaspy.yaml up -d
 
-  prod-up:
-    desc: Speed up the prod-like images for both tasknote-api and tasknote-web, building them if required
-    cmd: docker compose -f docker-compose.prod.yml up -d
+  schemaspy-down:
+    desc: Stops and remove database, API, SchemaSpy and the Python http server
+    cmd: docker compose -f compose.schemaspy.yaml down -v --remove-orphans
 
-  prod-stop:
-    desc: Stop prod containers
-    cmd: docker compose -f docker-compose.prod.yml stop
+  dev-up:
+    desc: Starts database, API and web app locally
+    cmd: doppler run --project tasknote --config dev -- docker compose -f compose.dev.yaml up -d
 
-  prod-tier-down:
-    desc: Stop and remove prod containers
-    cmd: docker compose -f docker-compose.prod.yml down --remove-orphans
+  dev-down:
+    desc: Stops and remove database, API and web app containers
+    cmd: export NGROK_AUTHTOKEN=1 && docker compose -f compose.dev.yaml down -v --remove-orphans
 
-  dev-run-web:
-    desc: Get the tasknote-web up and running locally inside docker ready for development
-    cmd: docker compose -f docker-compose.dev.yml up -d tasknote-web
+  prod-like-up:
+    desc: Starts Postgres, GraalVM API and Docker web app using prod images
+    cmd: docker compose -f compose.prod-like.yaml up -d
 
-  dev-run-api:
-    desc: Get the tasknote-api up and running locally inside docker ready for development
-    cmd: docker compose -f docker-compose.dev.yml up -d tasknote-api
+  prod-like-down:
+    desc: Stops and remove Postgres, GraalVM API and Docker web app using prod images
+    cmd: docker compose -f compose.prod-like.yaml down -v --remove-orphans
 
-  dev-run-db:
-    desc: Get the tasknote-db up and running locally inside docker ready for development
-    cmd: docker compose -f docker-compose.dev.yml up -d tasknote-db
+  # prod-up-web:
+  #   desc: Speed up the tasknote-web prod-like image, building it if required
+  #   cmd: docker compose -f docker-compose.prod.yml up -d tasknote-web
 
-  dev-run:
-    desc: Get both tasknote-web and tasknote-api up and running locally inside docker ready for development
-    cmd: docker compose -f docker-compose.dev.yml up -d
+  # prod-up-api:
+  #   desc: Speed up the tasknote-api prod-like image, building it if required
+  #   cmd: doppler run --project tasknote --config dev -- docker compose -f docker-compose.prod.yml up -d tasknote-api
 
-  dev-stop:
-    desc: Stop dev containers
-    cmd: docker compose -f docker-compose.dev.yml stop
+  # prod-up-db:
+  #   desc: Start the database container
+  #   cmd: doppler run --project tasknote --config dev -- docker compose -f docker-compose.prod.yml up -d tasknote-db
 
-  dev-tier-down:
-    desc: Stop and remove dev containers
-    cmd: docker compose -f docker-compose.dev.yml down --remove-orphans
+  # prod-up:
+  #   desc: Speed up the prod-like images for both tasknote-api and tasknote-web, building them if required
+  #   cmd: docker compose -f docker-compose.prod.yml up -d
+
+  # prod-stop:
+  #   desc: Stop prod containers
+  #   cmd: docker compose -f docker-compose.prod.yml stop
+
+  # prod-tier-down:
+  #   desc: Stop and remove prod containers
+  #   cmd: docker compose -f docker-compose.prod.yml down --remove-orphans
+
+  # dev-run-web:
+  #   desc: Get the tasknote-web up and running locally inside docker ready for development
+  #   cmd: docker compose -f docker-compose.dev.yml up -d tasknote-web
+
+  # dev-run-api:
+  #   desc: Get the tasknote-api up and running locally inside docker ready for development
+  #   cmd: docker compose -f docker-compose.dev.yml up -d tasknote-api
+
+  # dev-run-db:
+  #   desc: Get the tasknote-db up and running locally inside docker ready for development
+  #   cmd: doppler run --project tasknote --config dev -- docker compose -f docker-compose.dev.yml up -d tasknote-db
+
+  # dev-run:
+  #   desc: Get both tasknote-web and tasknote-api up and running locally inside docker ready for development
+  #   cmd: docker compose -f docker-compose.dev.yml up -d
+
+  # dev-stop:
+  #   desc: Stop dev containers
+  #   cmd: docker compose -f docker-compose.dev.yml stop
+
+  # dev-tier-down:
+  #   desc: Stop and remove dev containers
+  #   cmd: docker compose -f docker-compose.dev.yml down --remove-orphans
+
+  test-api:
+    desc: Run all backend checks (checkstyle, build, unit and integration tests). Integration tests run on Testcontainers PostgreSQL, so Docker is required
+    cmd: bash tools/check-backend.sh
+
+  test-api-unit:
+    desc: Run backend unit tests only (no Docker required)
+    cmd: cd server && ./mvnw --no-transfer-progress test -P tests -Dskip.integration.tests=true
+
+  test-api-it:
+    desc: Run backend integration tests only (Testcontainers PostgreSQL, Docker required)
+    cmd: cd server && ./mvnw --no-transfer-progress verify -P tests -Dskip.unit.tests=true -Djacoco.skip=true -Dcheckstyle.skip=true
+
+  run-native-tracing:
+    desc: Buidl and run with native agent to trace reflections
+    deps: [db-up]
+    cmds:
+      - |
+        cd server && \
+        ./mvnw clean package -DskipTests && \
+        doppler run --project tasknote --config dev -- java \
+          -agentlib:native-image-agent=config-output-dir=src/main/resources/META-INF/native-image \
+          -jar target/tasknote-api.jar