Internally we have been using this bot for some years successfully but given the number of CVE's present in the current version of springboot we have ended up forking the library and bumping dependencies there.
We have successfully upgraded it to v2.7.6 with Java 11 and would be happy to contribute this back if that is of interest!