Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 7, 2025

Bumps org.springframework.boot:spring-boot-dependencies from 4.0.0-M2 to 4.0.0-RC2.

Release notes

Sourced from org.springframework.boot:spring-boot-dependencies's releases.

v4.0.0-RC2

⭐ New Features

  • Restore support for Jersey now that it supports JAX-RS 4 (Jakarta EE 11) #47967
  • Refactor OpenTelemetryLoggingAutoConfiguration from OpenTelemetrySdkAutoConfiguration #47963
  • Switch property backing OnEnabledTracingExportCondition to management.tracing.export.{name}.enabled #47959
  • Rename management.zipkin.tracing to management.tracing.export.zipkin #47958
  • Switch property backing OnEnabledLoggingExportCondition to management.logging.export.{name}.enabled #47957
  • Rename management.opentelemetry.logging.export properties #47954
  • Split spring-boot-micrometer-tracing into Brave and OpenTelemetry specific module #47953
  • Use Elasticsearch 9.2's elasticsearch-rest5-client in spring-boot-elasticsearch #47945
  • Provide auto-configuration for Jackson's XML data format #47942
  • Rename OnlyOnceLoggingDenyMeterFilter #47925
  • Allow url to be specified when working with @AutoConfigureWebMvc configured HtmlUnit beans #47857

🐞 Bug Fixes

  • Incorrect metadata for HttpServiceClientProperties ("spring.http.serviceclient") #47943
  • Setting 'max-uri-tags' does not prevent unlimited meter growth on any AutoConfiguredCompositeMeterRegistry #47924
  • Docker response 407 is not handled correctly resulting in no error message #47901
  • Runtime hints for web resources no longer include nested folders #47894
  • Auto-configuration for WebTestClient should be in an autoconfigure package #47892
  • Jackson 2 support does not work in some sliced tests #47869
  • spring-boot-starter-zipkin is missing spring-boot-micrometer-tracing dependency #47866
  • Application TaskExecutor is no longer used when a custom AsyncConfigurer bean is defined #47897
  • Custom Jackson serializers are no longer included in WebMvcTest and WebFluxTest #47864
  • spring-boot-webtestclient is missing from GraphQL test starter #47849
  • spring-boot-security brings test dependencies #47813
  • @JsonTest and @AutoConfigureJson fail when using spring-boot-jackson2 #47811
  • Message converter customizer ordering impedes overriding #47798
  • Deprecated testcontainers implementations are no longer detected #47796
  • reactor-test is missing from reactive test starters #47795
  • spring-kafka-test is missing from spring-boot-starter-kafka-test #47793
  • spring-batch-test is missing from spring-boot-starter-batch-test #47792
  • spring-rabbit-test is missing from spring-boot-starter-amqp-test #47791
  • App fails to start when using Actuator with Jackson 2 and without spring-web #47788
  • Depending on spring-boot-starter-actuator without a tracing bridge results in empty and unwanted correlation IDs in the logs #47785
  • spring-boot-maven-plugin process-aot goal does not find package-private main method #47783
  • Templating auto-configurations still have enabled properties that are not relevant following modularization #32250

📔 Documentation

  • Config property management.logging.export.enabled is missing from documentation #47961
  • Add a section about upgrading to Spring Boot 4.x #47916
  • BootstrapContext#getOrElseThrow has incorrect reference to IllegalStateException #47906
  • Clarify when BootstrapContext get methods may return null rather than throwing an exception or calling the fallback supplier #47899
  • Document that web clients are opt-in with @SpringBootTest #47891
  • Document AssertJ support in RestTestClient #47881
  • Document that Actuator endpoint may have at most one extension of each type #47874
  • Limit Kotlin API documentation to Kotlin-specific APIs #47860

... (truncated)

Commits
  • c7ec1fa Release v4.0.0-RC2
  • 03e3a66 Upgrade to Spring Security 7.0.0-RC3
  • 2b5a46d Merge branch '3.5.x'
  • 11d449f Merge branch '3.4.x' into 3.5.x
  • ec02336 Upgrade to gradle-node-plugin 7.1.0
  • 7db5f16 Upgrade to Spring Batch 6.0.0-RC2
  • d85a801 Fix duplicate dependency in spring-boot-r2dbc
  • ef46636 Tolerate Podman's response to docker context ls
  • 160e34e Upgrade Java version in sdkmanrc to 25.0.1-librca
  • 4505bab Merge branch '3.5.x'
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) from 4.0.0-M2 to 4.0.0-RC2.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.0-M2...v4.0.0-RC2)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 4.0.0-RC2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Nov 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant