Bump the major-updates group across 1 directory with 6 updates by dependabot[bot] · Pull Request #68 · entur/oidc-auth-resource-server

dependabot · 2025-11-24T08:46:45Z

Bumps the major-updates group with 6 updates in the / directory:

Package	From	To
org.eclipse.jgit:org.eclipse.jgit	`5.13.0.202109080827-r`	`7.4.0.202509020913-r`
org.springframework.boot:spring-boot-starter-oauth2-resource-server	`3.5.7`	`4.0.0`
org.springframework.boot:spring-boot-starter-test	`3.5.7`	`4.0.0`
org.springframework.boot:spring-boot-starter-web	`3.5.7`	`4.0.0`
org.springframework.boot:spring-boot-starter-actuator	`3.5.7`	`4.0.0`
org.springframework.boot:spring-boot-starter-webflux	`3.5.7`	`4.0.0`

Updates org.eclipse.jgit:org.eclipse.jgit from 5.13.0.202109080827-r to 7.4.0.202509020913-r

Commits

78b1ccb JGit v7.4.0.202509020913-r
a783908 Merge branch 'master' into stable-7.4
b1afc19 Merge "RevWalk: use SystemReader instead of System.getProperty()"
ba209b9 MultiPackIndexWriter: report also object count and ordered packs
22bbd3d MultiPackIndex: add getObjectCount() method
09ad00d MultiPackIndex: add findPosition method
e28c064 Merge "MultipackIndex.PackOffset: add public static constructor"
a9bb14a MultipackIndex.PackOffset: add public static constructor
9d48b26 RevWalk: use SystemReader instead of System.getProperty()
acd1eff PendingGenerator: drop only buffers loaded in the generator
Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-oauth2-resource-server from 3.5.7 to 4.0.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-oauth2-resource-server's releases.

v4.0.0

Full release notes for Spring Boot 4.0 are available on the wiki. There is also a migration guide to help you upgrade from Spring Boot 3.5.

⭐ New Features

Change tomcat and jetty runtime modules to starters #48175

Rename spring-boot-kotlin-serialization to align with the name of the Kotlinx module that it pulls in #48076

🐞 Bug Fixes

Error properties are a general web concern and should not be located beneath server.* #48201

With both Jackson 2 and 3 on the classpath, @JsonTest fails due to duplicate jacksonTesterFactoryBean #48198

Gradle war task does not exclude starter POMs from lib-provided #48197

spring.test.webclient.mockrestserviceserver.enabled is not aligned with its module's name #48193

SslMeterBinder doesn't register metrics for dynamically added bundles if no bundles exist at bind time #48182

Properties bound in the child management context ignore the parent's environment prefix #48177

ssl.chain.expiry metrics doesn't update for dynamically registered SSL bundles #48171

Starter for spring-boot-micrometer-metrics is missing #48161

Elasticsearch client's sniffer functionality should not be enabled by default #48155

spring-boot-starter-elasticsearch should depend on elasticsearch-java #48141

Auto-configuration exclusions are checked using a different class loader to the one that loads auto-configuration classes #48132

New arm64 macbooks fail to bootBuildImage due to incorrect platform image #48128

Properties for configuring an isolated JsonMapper or ObjectMapper are incorrectly named #48116

Buildpack fails with recent Docker installs due to hardcoded version in URL #48103

Image building may fail when specifying a platform if an image has already been built with a different platform #48099

Default values of Kotlinx Serialization JSON configuration properties are not documented #48097

Custom XML converters should override defaults in HttpMessageConverters #48096

Kotlin serialization is used too aggressively when other JSON libraries are available #48070

PortInUseException incorrectly thrown on failure to bind port due to Netty IP misconfiguration #48059

Auto-configured JCacheMetrics cannot be customized #48057

WebSecurityCustomizer beans are excluded by WebMvcTest #48055

Deprecated EnvironmentPostProcessor does not resolve arguments #48047

RetryPolicySettings should refer to maxRetries, not maxAttempts #48023

Devtools Restarter does not work with a parameterless main method #47996

Dependency management for Kafka should not manage Scala 2.12 libraries #47991

spring-boot-mail should depend on jakarta.mail:jakarta.mail-api and org.eclipse.angus:angus-mail instead of org.eclipse.angus:jakarta.mail #47983

spring-boot-starter-data-mongodb-reactive has dependency on reactor-test #47982

Support for ReactiveElasticsearchClient is in the wrong module #47848

📔 Documentation

Removed property spring.test.webclient.register-rest-template is still documented #48199

Mention support for detecting AWS ECS in "Deploying to the Cloud" #48170

Revise AWS section of "Deploying to the Cloud" in reference manual #48163

Fix typo in PortInUseException Javadoc #48134

Correct section about required setters in "Type-safe Configuration Properties" #48131

Use since attribute in configuration properties deprecation consistently #48122

Document EndpointJsonMapper and management.endpoints.jackson.isolated-json-mapper #48115

Document support for configuring servlet context init parameters using properties #48112

Some configuration properties are not documented in the appendix #48095

... (truncated)

Commits

1c0e08b Release v4.0.0
3487928 Merge branch '3.5.x'
29b8e96 Switch make-default in preparation for Spring Boot 4.0.0
88da0dd Merge branch '3.5.x'
56feeaa Next development version (v3.5.9-SNAPSHOT)
3becdc7 Move server.error properties to spring.web.error
2b30632 Merge branch '3.5.x'
4f03b44 Merge branch '3.4.x' into 3.5.x
3d15c13 Next development version (v3.4.13-SNAPSHOT)
dc140df Upgrade to Spring Framework 7.0.1
Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-test from 3.5.7 to 4.0.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-test's releases.

v4.0.0

Full release notes for Spring Boot 4.0 are available on the wiki. There is also a migration guide to help you upgrade from Spring Boot 3.5.

⭐ New Features

Change tomcat and jetty runtime modules to starters #48175

Rename spring-boot-kotlin-serialization to align with the name of the Kotlinx module that it pulls in #48076

🐞 Bug Fixes

Error properties are a general web concern and should not be located beneath server.* #48201

With both Jackson 2 and 3 on the classpath, @JsonTest fails due to duplicate jacksonTesterFactoryBean #48198

Gradle war task does not exclude starter POMs from lib-provided #48197

spring.test.webclient.mockrestserviceserver.enabled is not aligned with its module's name #48193

SslMeterBinder doesn't register metrics for dynamically added bundles if no bundles exist at bind time #48182

Properties bound in the child management context ignore the parent's environment prefix #48177

ssl.chain.expiry metrics doesn't update for dynamically registered SSL bundles #48171

Starter for spring-boot-micrometer-metrics is missing #48161

Elasticsearch client's sniffer functionality should not be enabled by default #48155

spring-boot-starter-elasticsearch should depend on elasticsearch-java #48141

Auto-configuration exclusions are checked using a different class loader to the one that loads auto-configuration classes #48132

New arm64 macbooks fail to bootBuildImage due to incorrect platform image #48128

Properties for configuring an isolated JsonMapper or ObjectMapper are incorrectly named #48116

Buildpack fails with recent Docker installs due to hardcoded version in URL #48103

Image building may fail when specifying a platform if an image has already been built with a different platform #48099

Default values of Kotlinx Serialization JSON configuration properties are not documented #48097

Custom XML converters should override defaults in HttpMessageConverters #48096

Kotlin serialization is used too aggressively when other JSON libraries are available #48070

PortInUseException incorrectly thrown on failure to bind port due to Netty IP misconfiguration #48059

Auto-configured JCacheMetrics cannot be customized #48057

WebSecurityCustomizer beans are excluded by WebMvcTest #48055

Deprecated EnvironmentPostProcessor does not resolve arguments #48047

RetryPolicySettings should refer to maxRetries, not maxAttempts #48023

Devtools Restarter does not work with a parameterless main method #47996

Dependency management for Kafka should not manage Scala 2.12 libraries #47991

spring-boot-mail should depend on jakarta.mail:jakarta.mail-api and org.eclipse.angus:angus-mail instead of org.eclipse.angus:jakarta.mail #47983

spring-boot-starter-data-mongodb-reactive has dependency on reactor-test #47982

Support for ReactiveElasticsearchClient is in the wrong module #47848

📔 Documentation

Removed property spring.test.webclient.register-rest-template is still documented #48199

Mention support for detecting AWS ECS in "Deploying to the Cloud" #48170

Revise AWS section of "Deploying to the Cloud" in reference manual #48163

Fix typo in PortInUseException Javadoc #48134

Correct section about required setters in "Type-safe Configuration Properties" #48131

Use since attribute in configuration properties deprecation consistently #48122

Document EndpointJsonMapper and management.endpoints.jackson.isolated-json-mapper #48115

Document support for configuring servlet context init parameters using properties #48112

Some configuration properties are not documented in the appendix #48095

... (truncated)

Commits

1c0e08b Release v4.0.0
3487928 Merge branch '3.5.x'
29b8e96 Switch make-default in preparation for Spring Boot 4.0.0
88da0dd Merge branch '3.5.x'
56feeaa Next development version (v3.5.9-SNAPSHOT)
3becdc7 Move server.error properties to spring.web.error
2b30632 Merge branch '3.5.x'
4f03b44 Merge branch '3.4.x' into 3.5.x
3d15c13 Next development version (v3.4.13-SNAPSHOT)
dc140df Upgrade to Spring Framework 7.0.1
Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-web from 3.5.7 to 4.0.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-web's releases.

v4.0.0

Full release notes for Spring Boot 4.0 are available on the wiki. There is also a migration guide to help you upgrade from Spring Boot 3.5.

⭐ New Features

Change tomcat and jetty runtime modules to starters #48175

Rename spring-boot-kotlin-serialization to align with the name of the Kotlinx module that it pulls in #48076

🐞 Bug Fixes

Error properties are a general web concern and should not be located beneath server.* #48201

With both Jackson 2 and 3 on the classpath, @JsonTest fails due to duplicate jacksonTesterFactoryBean #48198

Gradle war task does not exclude starter POMs from lib-provided #48197

spring.test.webclient.mockrestserviceserver.enabled is not aligned with its module's name #48193

SslMeterBinder doesn't register metrics for dynamically added bundles if no bundles exist at bind time #48182

Properties bound in the child management context ignore the parent's environment prefix #48177

ssl.chain.expiry metrics doesn't update for dynamically registered SSL bundles #48171

Starter for spring-boot-micrometer-metrics is missing #48161

Elasticsearch client's sniffer functionality should not be enabled by default #48155

spring-boot-starter-elasticsearch should depend on elasticsearch-java #48141

Auto-configuration exclusions are checked using a different class loader to the one that loads auto-configuration classes #48132

New arm64 macbooks fail to bootBuildImage due to incorrect platform image #48128

Properties for configuring an isolated JsonMapper or ObjectMapper are incorrectly named #48116

Buildpack fails with recent Docker installs due to hardcoded version in URL #48103

Image building may fail when specifying a platform if an image has already been built with a different platform #48099

Default values of Kotlinx Serialization JSON configuration properties are not documented #48097

Custom XML converters should override defaults in HttpMessageConverters #48096

Kotlin serialization is used too aggressively when other JSON libraries are available #48070

PortInUseException incorrectly thrown on failure to bind port due to Netty IP misconfiguration #48059

Auto-configured JCacheMetrics cannot be customized #48057

WebSecurityCustomizer beans are excluded by WebMvcTest #48055

Deprecated EnvironmentPostProcessor does not resolve arguments #48047

RetryPolicySettings should refer to maxRetries, not maxAttempts #48023

Devtools Restarter does not work with a parameterless main method #47996

Dependency management for Kafka should not manage Scala 2.12 libraries #47991

spring-boot-mail should depend on jakarta.mail:jakarta.mail-api and org.eclipse.angus:angus-mail instead of org.eclipse.angus:jakarta.mail #47983

spring-boot-starter-data-mongodb-reactive has dependency on reactor-test #47982

Support for ReactiveElasticsearchClient is in the wrong module #47848

📔 Documentation

Removed property spring.test.webclient.register-rest-template is still documented #48199

Mention support for detecting AWS ECS in "Deploying to the Cloud" #48170

Revise AWS section of "Deploying to the Cloud" in reference manual #48163

Fix typo in PortInUseException Javadoc #48134

Correct section about required setters in "Type-safe Configuration Properties" #48131

Use since attribute in configuration properties deprecation consistently #48122

Document EndpointJsonMapper and management.endpoints.jackson.isolated-json-mapper #48115

Document support for configuring servlet context init parameters using properties #48112

Some configuration properties are not documented in the appendix #48095

... (truncated)

Commits

1c0e08b Release v4.0.0
3487928 Merge branch '3.5.x'
29b8e96 Switch make-default in preparation for Spring Boot 4.0.0
88da0dd Merge branch '3.5.x'
56feeaa Next development version (v3.5.9-SNAPSHOT)
3becdc7 Move server.error properties to spring.web.error
2b30632 Merge branch '3.5.x'
4f03b44 Merge branch '3.4.x' into 3.5.x
3d15c13 Next development version (v3.4.13-SNAPSHOT)
dc140df Upgrade to Spring Framework 7.0.1
Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-actuator from 3.5.7 to 4.0.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-actuator's releases.

v4.0.0

Full release notes for Spring Boot 4.0 are available on the wiki. There is also a migration guide to help you upgrade from Spring Boot 3.5.

⭐ New Features

Change tomcat and jetty runtime modules to starters #48175

Rename spring-boot-kotlin-serialization to align with the name of the Kotlinx module that it pulls in #48076

🐞 Bug Fixes

Error properties are a general web concern and should not be located beneath server.* #48201

With both Jackson 2 and 3 on the classpath, @JsonTest fails due to duplicate jacksonTesterFactoryBean #48198

Gradle war task does not exclude starter POMs from lib-provided #48197

spring.test.webclient.mockrestserviceserver.enabled is not aligned with its module's name #48193

SslMeterBinder doesn't register metrics for dynamically added bundles if no bundles exist at bind time #48182

Properties bound in the child management context ignore the parent's environment prefix #48177

ssl.chain.expiry metrics doesn't update for dynamically registered SSL bundles #48171

Starter for spring-boot-micrometer-metrics is missing #48161

Elasticsearch client's sniffer functionality should not be enabled by default #48155

spring-boot-starter-elasticsearch should depend on elasticsearch-java #48141

Auto-configuration exclusions are checked using a different class loader to the one that loads auto-configuration classes #48132

New arm64 macbooks fail to bootBuildImage due to incorrect platform image #48128

Properties for configuring an isolated JsonMapper or ObjectMapper are incorrectly named #48116

Buildpack fails with recent Docker installs due to hardcoded version in URL #48103

Image building may fail when specifying a platform if an image has already been built with a different platform #48099

Default values of Kotlinx Serialization JSON configuration properties are not documented #48097

Custom XML converters should override defaults in HttpMessageConverters #48096

Kotlin serialization is used too aggressively when other JSON libraries are available #48070

PortInUseException incorrectly thrown on failure to bind port due to Netty IP misconfiguration #48059

Auto-configured JCacheMetrics cannot be customized #48057

WebSecurityCustomizer beans are excluded by WebMvcTest #48055

Deprecated EnvironmentPostProcessor does not resolve arguments #48047

RetryPolicySettings should refer to maxRetries, not maxAttempts #48023

Devtools Restarter does not work with a parameterless main method #47996

Dependency management for Kafka should not manage Scala 2.12 libraries #47991

spring-boot-mail should depend on jakarta.mail:jakarta.mail-api and org.eclipse.angus:angus-mail instead of org.eclipse.angus:jakarta.mail #47983

spring-boot-starter-data-mongodb-reactive has dependency on reactor-test #47982

Support for ReactiveElasticsearchClient is in the wrong module #47848

📔 Documentation

Removed property spring.test.webclient.register-rest-template is still documented #48199

Mention support for detecting AWS ECS in "Deploying to the Cloud" #48170

Revise AWS section of "Deploying to the Cloud" in reference manual #48163

Fix typo in PortInUseException Javadoc #48134

Correct section about required setters in "Type-safe Configuration Properties" #48131

Use since attribute in configuration properties deprecation consistently #48122

Document EndpointJsonMapper and management.endpoints.jackson.isolated-json-mapper #48115

Document support for configuring servlet context init parameters using properties #48112

Some configuration properties are not documented in the appendix #48095

... (truncated)

Commits

1c0e08b Release v4.0.0
3487928 Merge branch '3.5.x'
29b8e96 Switch make-default in preparation for Spring Boot 4.0.0
88da0dd Merge branch '3.5.x'
56feeaa Next development version (v3.5.9-SNAPSHOT)
3becdc7 Move server.error properties to spring.web.error
2b30632 Merge branch '3.5.x'
4f03b44 Merge branch '3.4.x' into 3.5.x
3d15c13 Next development version (v3.4.13-SNAPSHOT)
dc140df Upgrade to Spring Framework 7.0.1
Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-webflux from 3.5.7 to 4.0.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-webflux's releases.

v4.0.0

Full release notes for Spring Boot 4.0 are available on the wiki. There is also a migration guide to help you upgrade from Spring Boot 3.5.

⭐ New Features

Change tomcat and jetty runtime modules to starters #48175

Rename spring-boot-kotlin-serialization to align with the name of the Kotlinx module that it pulls in #48076

🐞 Bug Fixes

Error properties are a general web concern and should not be located beneath server.* #48201

With both Jackson 2 and 3 on the classpath, @JsonTest fails due to duplicate jacksonTesterFactoryBean #48198

Gradle war task does not exclude starter POMs from lib-provided #48197

spring.test.webclient.mockrestserviceserver.enabled is not aligned with its module's name #48193

SslMeterBinder doesn't register metrics for dynamically added bundles if no bundles exist at bind time #48182

Properties bound in the child management context ignore the parent's environment prefix #48177

ssl.chain.expiry metrics doesn't update for dynamically registered SSL bundles #48171

Starter for spring-boot-micrometer-metrics is missing #48161

Elasticsearch client's sniffer functionality should not be enabled by default #48155

spring-boot-starter-elasticsearch should depend on elasticsearch-java #48141

Auto-configuration exclusions are checked using a different class loader to the one that loads auto-configuration classes #48132

New arm64 macbooks fail to bootBuildImage due to incorrect platform image #48128

Properties for configuring an isolated JsonMapper or ObjectMapper are incorrectly named #48116

Buildpack fails with recent Docker installs due to hardcoded version in URL #48103

Image building may fail when specifying a platform if an image has already been built with a different platform #48099

Default values of Kotlinx Serialization JSON configuration properties are not documented #48097

Custom XML converters should override defaults in HttpMessageConverters #48096

Kotlin serialization is used too aggressively when other JSON libraries are available #48070

PortInUseException incorrectly thrown on failure to bind port due to Netty IP misconfiguration #48059

Auto-configured JCacheMetrics cannot be customized #48057

WebSecurityCustomizer beans are excluded by WebMvcTest #48055

Deprecated EnvironmentPostProcessor does not resolve arguments #48047

RetryPolicySettings should refer to maxRetries, not maxAttempts #48023

Devtools Restarter does not work with a parameterless main method #47996

Dependency management for Kafka should not manage Scala 2.12 libraries #47991

spring-boot-mail should depend on jakarta.mail:jakarta.mail-api and org.eclipse.angus:angus-mail instead of org.eclipse.angus:jakarta.mail #47983

spring-boot-starter-data-mongodb-reactive has dependency on reactor-test #47982

Support for ReactiveElasticsearchClient is in the wrong module #47848

📔 Documentation

Removed property spring.test.webclient.register-rest-template is still documented #48199

Mention support for detecting AWS ECS in "Deploying to the Cloud" #48170

Revise AWS section of "Deploying to the Cloud" in reference manual #48163

Fix typo in PortInUseException Javadoc #48134

Correct section about required setters in "Type-safe Configuration Properties" #48131

Use since attribute in configuration properties deprecation consistently #48122

Document EndpointJsonMapper and management.endpoints.jackson.isolated-json-mapper #48115

Document support for configuring servlet context init parameters using properties #48112

Some configuration properties are not documented in the appendix #48095

... (truncated)

Commits

1c0e08b Release v4.0.0
3487928 Merge branch '3.5.x'
29b8e96 Switch make-default in preparation for Spring Boot 4.0.0
88da0dd Merge branch '3.5.x'
56feeaa Next development version (v3.5.9-SNAPSHOT)
3becdc7 Move server.error properties to spring.web.error
2b30632 Merge branch '3.5.x'
4f03b44 Merge branch '3.4.x' into 3.5.x
3d15c13 Next development version (v3.4.13-SNAPSHOT)
dc140df Upgrade to Spring Framework 7.0.1
Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-test from 3.5.7 to 4.0.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-test's releases.

v4.0.0

Full release notes for Spring Boot 4.0 are available on the wiki. There is also a migration guide to help you upgrade from Spring Boot 3.5.

⭐ New Features

Change tomcat and jetty runtime modules to starters #48175

Rename spring-boot-kotlin-serialization to align with the name of the Kotlinx module that it pulls in #48076

🐞 Bug Fixes

Error properties are a general web concern and should not be located beneath server.* #48201

With both Jackson 2 and 3 on the classpath, @JsonTest fails due to duplicate jacksonTesterFactoryBean #48198

Gradle war task does not exclude starter POMs from lib-provided #48197

spring.test.webclient.mockrestserviceserver.enabled is not aligned with its module's name #48193

SslMeterBinder doesn't register metrics for dynamically added bundles if no bundles exist at bind time #48182

Properties bound in the child management context ignore the parent's environment prefix #48177

ssl.chain.expiry metrics doesn't update for dynamically registered SSL bundles #48171

Starter for spring-boot-micrometer-metrics is missing #48161

Elasticsearch client's sniffer functionality should not be enabled by default #48155

spring-boot-starter-elasticsearch should depend on elasticsearch-java #48141

Auto-configuration exclusions are checked using a different class loader to the one that loads auto-configuration classes #48132

New arm64 macbooks fail to bootBuildImage due to incorrect platform image #48128

Properties for configuring an isolated JsonMapper or ObjectMapper are incorrectly named #48116

Buildpack fails with recent Docker installs due to hardcoded version in URL #48103

Image building may fail when specifying a platform if an image has already been built with a different platform #48099

Default values of Kotlinx Serialization JSON configuration properties are not documented #48097

Custom XML converters should override defaults in HttpMessageConverters #48096

Kotlin serialization is used too aggressively when other JSON libraries are available #48070

PortInUseException incorrectly thrown on failure to bind port due to Netty IP misconfiguration #48059

Auto-configured JCacheMetrics cannot be customized #48057

WebSecurityCustomizer beans are excluded by WebMvcTest #48055

Deprecated EnvironmentPostProcessor does not resolve arguments #48047

RetryPolicySettings should refer to maxRetries, not maxAttempts #48023

Devtools Restarter does not work with a parameterless main method #47996

Dependency management for Kafka should not manage Scala 2.12 libraries #47991

spring-boot-mail should depend on jakarta.mail:jakarta.mail-api and org.eclipse.angus:angus-mail instead of org.eclipse.angus:jakarta.mail #47983

spring-boot-starter-data-mongodb-reactive has dependency on reactor-test #47982

Support for ReactiveElasticsearchClient is in the wrong module #47848

📔 Documentation

Removed property spring.test.webclient.register-rest-template is still documented #48199

Mention support for detecting AWS ECS in "Deploying to the Cloud" #48170

Revise AWS section of "Deploying to the Cloud" in reference manual #48163

Fix typo in PortInUseException Javadoc #48134

Correct section about required setters in "Type-safe Configuration Properties" #48131

Use since attribute in configuration properties deprecation consistently #48122

Document EndpointJsonMapper and management.endpoints.jackson.isolated-json-mapper #48115

Document support for configuring servlet context init parameters using properties #48112

Some configuration properties are not documented in the appendix #48095

... (truncated)

Commits

1c0e08b Release v4.0.0
3487928 Merge branch '3.5.x'
29b8e96 Switch make-default in preparation for Spring Boot 4.0.0
88da0dd Merge branch '3.5.x'
56feeaa Next development version (v3.5.9-SNAPSHOT)
3becdc7 Move server.error properties to spring.web.error
2b30632 Merge branch '3.5.x'
4f03b44 Merge branch '3.4.x' into 3.5.x
3d15c13 Next development version (v3.4.13-SNAPSHOT)
dc140df Upgrade to Spring Framework 7.0.1
Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-web from 3.5.7 to 4.0.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-web's releases.

v4.0.0

Full release notes for Spring Boot 4.0 are available on the wiki. There is also a migration guide to help you upgrade from Spring Boot 3.5.

⭐ New Features

Change tomcat and jetty runtime modules to starters #48175

Rename spring-boot-kotlin-serialization to align with the name of the Kotlinx module that it pulls in #48076

🐞 Bug Fixes

Error properties are a general web concern and should not be located beneath server.* #48201

With both Jackson 2 and 3 on the classpath, @JsonTest fails due to duplicate jacksonTesterFactoryBean #48198

Gradle war task does not exclude starter POMs from lib-provided #48197

spring.test.webclient.mockrestserviceserver.enabled is not aligned with its module's name #48193

SslMeterBinder doesn't register metrics for dynamically added bundles if no bundles exist at bind time #48182

Properties bound in the child management context ignore the parent's environment prefix #48177

ssl.chain.expiry metrics doesn't update for dynamically registered SSL bundles #48171

Starter for spring-boot-micrometer-metrics is missing #48161

Elasticsearch client's sniffer functionality should not be enabled by default #48155

spring-boot-starter-elasticsearch should depend on elasticsearch-java #48141

Auto-configuration exclusions are checked using a different class loader to the one that loads auto-configuration classes #48132

New arm64 macbooks fail to bootBuildImage due to incorrect platform image #48128

Properties for configuring an isolated JsonMapper or ObjectMapper are incorrectly named #48116

Buildpack fails with recent Docker installs due to hardcoded version in URL #48103

Image building may fail when specifying a platform if an image has already been built with a different platform

Bumps the major-updates group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [org.eclipse.jgit:org.eclipse.jgit](https://github.com/eclipse-jgit/jgit) | `5.13.0.202109080827-r` | `7.4.0.202509020913-r` | | [org.springframework.boot:spring-boot-starter-oauth2-resource-server](https://github.com/spring-projects/spring-boot) | `3.5.7` | `4.0.0` | | [org.springframework.boot:spring-boot-starter-test](https://github.com/spring-projects/spring-boot) | `3.5.7` | `4.0.0` | | [org.springframework.boot:spring-boot-starter-web](https://github.com/spring-projects/spring-boot) | `3.5.7` | `4.0.0` | | [org.springframework.boot:spring-boot-starter-actuator](https://github.com/spring-projects/spring-boot) | `3.5.7` | `4.0.0` | | [org.springframework.boot:spring-boot-starter-webflux](https://github.com/spring-projects/spring-boot) | `3.5.7` | `4.0.0` | Updates `org.eclipse.jgit:org.eclipse.jgit` from 5.13.0.202109080827-r to 7.4.0.202509020913-r - [Commits](eclipse-jgit/jgit@v5.13.0.202109080827-r...v7.4.0.202509020913-r) Updates `org.springframework.boot:spring-boot-starter-oauth2-resource-server` from 3.5.7 to 4.0.0 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.7...v4.0.0) Updates `org.springframework.boot:spring-boot-starter-test` from 3.5.7 to 4.0.0 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.7...v4.0.0) Updates `org.springframework.boot:spring-boot-starter-web` from 3.5.7 to 4.0.0 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.7...v4.0.0) Updates `org.springframework.boot:spring-boot-starter-actuator` from 3.5.7 to 4.0.0 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.7...v4.0.0) Updates `org.springframework.boot:spring-boot-starter-webflux` from 3.5.7 to 4.0.0 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.7...v4.0.0) Updates `org.springframework.boot:spring-boot-starter-test` from 3.5.7 to 4.0.0 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.7...v4.0.0) Updates `org.springframework.boot:spring-boot-starter-web` from 3.5.7 to 4.0.0 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.7...v4.0.0) Updates `org.springframework.boot:spring-boot-starter-actuator` from 3.5.7 to 4.0.0 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.7...v4.0.0) Updates `org.springframework.boot:spring-boot-starter-webflux` from 3.5.7 to 4.0.0 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.7...v4.0.0) --- updated-dependencies: - dependency-name: org.eclipse.jgit:org.eclipse.jgit dependency-version: 7.4.0.202509020913-r dependency-type: direct:production update-type: version-update:semver-major dependency-group: major-updates - dependency-name: org.springframework.boot:spring-boot-starter-oauth2-resource-server dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: major-updates - dependency-name: org.springframework.boot:spring-boot-starter-test dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: major-updates - dependency-name: org.springframework.boot:spring-boot-starter-web dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: major-updates - dependency-name: org.springframework.boot:spring-boot-starter-actuator dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: major-updates - dependency-name: org.springframework.boot:spring-boot-starter-webflux dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: major-updates - dependency-name: org.springframework.boot:spring-boot-starter-test dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: major-updates - dependency-name: org.springframework.boot:spring-boot-starter-web dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: major-updates - dependency-name: org.springframework.boot:spring-boot-starter-actuator dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: major-updates - dependency-name: org.springframework.boot:spring-boot-starter-webflux dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: major-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-01-26T08:27:14Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Dependabot PR java Pull requests that update java code labels Nov 24, 2025

dependabot bot requested a review from a team as a code owner November 24, 2025 08:46

dependabot bot force-pushed the dependabot/gradle/major-updates-3f5b3daaf3 branch from c356116 to 9280b25 Compare December 1, 2025 09:58

dependabot bot force-pushed the dependabot/gradle/major-updates-3f5b3daaf3 branch from 9280b25 to 5424fe7 Compare December 22, 2025 08:18

dependabot bot closed this Jan 26, 2026

dependabot bot deleted the dependabot/gradle/major-updates-3f5b3daaf3 branch January 26, 2026 08:27

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the major-updates group across 1 directory with 6 updates#68

Bump the major-updates group across 1 directory with 6 updates#68
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/gradle/major-updates-3f5b3daaf3

dependabot bot commented on behalf of github Nov 24, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Jan 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Nov 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.0.0

⭐ New Features

🐞 Bug Fixes

📔 Documentation

v4.0.0

⭐ New Features

🐞 Bug Fixes

📔 Documentation

v4.0.0

⭐ New Features

🐞 Bug Fixes

📔 Documentation

v4.0.0

⭐ New Features

🐞 Bug Fixes

📔 Documentation

v4.0.0

⭐ New Features

🐞 Bug Fixes

📔 Documentation

v4.0.0

⭐ New Features

🐞 Bug Fixes

📔 Documentation

v4.0.0

⭐ New Features

🐞 Bug Fixes

Uh oh!

dependabot bot commented on behalf of github Jan 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Nov 24, 2025 •

edited

Loading