From 609d2253cc74f0d10b1d9fef5c923387bc4e8f86 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 28 Jun 2025 13:26:55 +0000
Subject: [PATCH 1/3] Initial plan


From 810ad10289603c63f8105795c1f95f6779650914 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 28 Jun 2025 13:49:49 +0000
Subject: [PATCH 2/3] Upgrade Spring Boot to 3.4.7 and Spring Cloud to 2024.0.1

Co-authored-by: martypitt <348852+martypitt@users.noreply.github.com>
---
 pom.xml | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index 96836f819..0c3562854 100644
--- a/pom.xml
+++ b/pom.xml
@@ -12,7 +12,7 @@
    <parent>
       <groupId>org.springframework.boot</groupId>
       <artifactId>spring-boot-starter-parent</artifactId>
-      <version>3.3.11</version>
+      <version>3.4.7</version>
    </parent>
 
    <url>https://orbitalhq.com</url>
@@ -49,7 +49,7 @@
       <kotlin.serialization.version>1.5.1</kotlin.serialization.version>
       <kotlin.dataframe.version>0.14.0</kotlin.dataframe.version>
 
-      <spring.cloud.version>2023.0.1</spring.cloud.version>
+      <spring.cloud.version>2024.0.1</spring.cloud.version>
       <arrow.version>1.1.5</arrow.version>
       <logstash.logback.version>7.4</logstash.logback.version>
 
@@ -561,6 +561,13 @@ Transitive dependency in wire-compiler and calcite-core
             <version>1.78</version>
          </dependency>
 
+         <!-- Add mockwebserver version management - removed from Spring Boot 3.4 BOM -->
+         <dependency>
+            <groupId>com.squareup.okhttp3</groupId>
+            <artifactId>mockwebserver</artifactId>
+            <version>4.12.0</version>
+         </dependency>
+
       </dependencies>
    </dependencyManagement>
 

From 9513144c009161c182dedaa5ee71ed99ded4c010 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 30 Jun 2025 04:48:48 +0000
Subject: [PATCH 3/3] Remove unnecessary version overrides after Spring Boot
 3.4.7 upgrade

Co-authored-by: martypitt <348852+martypitt@users.noreply.github.com>
---
 pom.xml | 22 +++-------------------
 1 file changed, 3 insertions(+), 19 deletions(-)

diff --git a/pom.xml b/pom.xml
index 0c3562854..9c433cc75 100644
--- a/pom.xml
+++ b/pom.xml
@@ -42,11 +42,11 @@
       <maven.compiler.source>${java.version}</maven.compiler.source>
       <maven.compiler.target>${java.version}</maven.compiler.target>
 
-      <kotlin.version>1.9.24</kotlin.version>
+      <kotlin.version>1.9.25</kotlin.version>
       <!-- Coroutines 1.7.0-Beta is compatible with 1.8.10 as per https://github.com/Kotlin/kotlinx.coroutines -->
       <kotlin.coroutines.version>1.9.0</kotlin.coroutines.version>
 
-      <kotlin.serialization.version>1.5.1</kotlin.serialization.version>
+      <kotlin.serialization.version>1.6.3</kotlin.serialization.version>
       <kotlin.dataframe.version>0.14.0</kotlin.dataframe.version>
 
       <spring.cloud.version>2024.0.1</spring.cloud.version>
@@ -54,11 +54,9 @@
       <logstash.logback.version>7.4</logstash.logback.version>
 
       <http4k.version>4.48.0.0</http4k.version>
-      <hazelcast.version>5.4.0</hazelcast.version>
       <testcontainers.version>1.19.3</testcontainers.version>
 
       <guava.version>32.1.3-jre</guava.version>
-      <reactor-bom.version>2023.0.0</reactor-bom.version>
 
       <logbook.version>3.12.0</logbook.version>
 
@@ -69,13 +67,11 @@
       <!--      <spring-security-test.version>5.7.5</spring-security-test.version>-->
       <kotest.version>5.6.2</kotest.version>
 
-      <json-path.version>2.9.0</json-path.version>
-
       <aws.s3.sdk.version>1.12.778</aws.s3.sdk.version>
       <aws.dynamo.sdk.version>1.12.701</aws.dynamo.sdk.version>
 
       <!-- CVE-2025-24970 can probably remove after spring boot > 3.4.2 -->
-      <netty.version>4.1.118.Final</netty.version>
+      <!-- Spring Boot 3.4.7 already provides netty 4.1.122.Final which is newer -->
 
       <!-- Set protobuf-java to 3.25.5 because of vulnerabilities:
 CVE-2024-7254
@@ -376,18 +372,6 @@ Transitive dependency in wire-compiler and calcite-core
             <type>pom</type>
             <scope>import</scope>
          </dependency>
-         <dependency>
-            <groupId>com.hazelcast</groupId>
-            <artifactId>hazelcast</artifactId>
-            <version>${hazelcast.version}</version>
-         </dependency>
-         <dependency>
-            <groupId>io.projectreactor</groupId>
-            <artifactId>reactor-bom</artifactId>
-            <version>${reactor-bom.version}</version>
-            <type>pom</type>
-            <scope>import</scope>
-         </dependency>
          <dependency>
             <groupId>org.http4k</groupId>
             <artifactId>http4k-bom</artifactId>