Skip to content

feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.16)#6

Open
erhardt-consulting-bot wants to merge 1 commit into
mainfrom
renovate/spring-boot
Open

feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.16)#6
erhardt-consulting-bot wants to merge 1 commit into
mainfrom
renovate/spring-boot

Conversation

@erhardt-consulting-bot

@erhardt-consulting-bot erhardt-consulting-bot commented Jun 6, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
org.springframework.boot:spring-boot-starter-parent (source) 3.4.6 → 3.5.16 age confidence

Release Notes

spring-projects/spring-boot (org.springframework.boot:spring-boot-starter-parent)

v3.5.16

Compare Source

🔨 Dependency Upgrades

v3.5.15

Compare Source

🐞 Bug Fixes

  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #​50743
  • MailSender auto-configuration does not enable hostname verification #​50742
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #​50624
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #​50501
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #​50451
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #​50429
  • GraphQL WebSocket support does not configure allowed origins #​50391
  • Buildpack module does not validate long-to-int casts #​50382
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #​50373
  • Created StackTracePrinter instances have no access to the Environment #​50303
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #​50301
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #​50292
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #​50273
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #​50254
  • Meter registries are not removed from the global registry when the context is closed #​50235
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #​50225
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #​50205
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #​50118
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #​50095

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #​50641
  • Remove the use of Optional from Data Neo4j repository examples #​50600
  • Fix typos in documentation #​50593
  • Document Java 25 requirement for AOT cache #​50482
  • Clarify dependency requirement for Bean Validation support #​50290
  • Document SSL reloading with Let's Encrypt #​50222
  • Polish InvalidConfigurationPropertyValueException constructor javadoc #​50212
  • Document known testcontainers lifecycle issues #​50210
  • Document configuring multiple connectors with Jetty #​50206
  • Fix typo in Spring Security OAuth2 client registration documentation #​50193

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Abdlatif-nabgha, @​DragonFSKY, @​Kapil-chn7, @​SJvaca30, @​SebTardif, @​ares333, @​codingkiddo, @​dlwldnjs1009, @​henriquejsza, @​igormukhin, @​johnnypwong, @​kwondh5217, @​leestana01, @​mheath, @​ngocnhan-tran1996, @​nosan, @​quaff, @​scordio, @​vinhhieu21, @​won-seoop, and @​zxuhan

v3.5.14

Compare Source

🐞 Bug Fixes

  • ApplicationPidFileWriter does not handle symlinks correctly #​50173
  • RandomValuePropertySource is not suitable for secrets #​50172
  • Cassandra auto-configuration misconfigures CqlSessionBuilder #​50171
  • ApplicationTemp does not handle symlinks correctly #​50170
  • Remote DevTools performs comparison incorrectly #​50169
  • spring.rabbitmq.ssl.verify-hostname is applied inconsistently #​50168
  • EnversRevisionRepositoriesRegistrar should reuse @EnableEnversRepositories rather than configuring the JPA counterpart #​50035
  • Annotations like @Ssl don't work on @Bean methods when using @ServiceConnection #​50033
  • Whole number values are ignored when configuring min and max expected values and SLO boundaries for a distribution summary meter #​50021
  • WebFlux Cloud Foundry links endpoint includes query string from received request in resolved links #​50008
  • 500 response from env endpoint when supplied pattern is invalid #​49942
  • HTTP method is lost when configuring excludes in EndpointRequest #​49885
  • Docker Compose support doesn't work with apache/artemis image #​49865
  • Honor HttpMethod for reactive additional endpoint paths #​49864
  • Docker Compose support doesn't work with apache/activemq image #​49863
  • Imports on a containing test class are ignored when a nested class has imports #​49860

📔 Documentation

  • Link to the observability section of the Lettuce documentation is broken #​50092
  • Javadoc for StaticResourceLocation.FAVICON doesn't describe icons location #​50083
  • MySamlRelyingPartyConfiguration is missing a Kotlin sample #​50023
  • Incorrect default value for management.httpexchanges.recording.include in configuration metadata #​50010
  • Link to the Kubernetes documentation when discussing startup probes #​50007
  • Update docs to encourage Java fundamentals for beginners that prefer to learn that way #​49895
  • Clarify that configuration property default values are not available through the Environment #​49835

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​MohammedGhallab, @​dlwldnjs1009, @​edwardsre, @​kodama-kcc, @​kwondh5217, @​quaff, @​refeccd, and @​scordio

v3.5.13

Compare Source

⚠️ Attention Required

  • Jackson has been upgraded to 2.21.2 in response to the Jackson team ending support for Jackson 2.19.x and 2.20.x. #​49365

🐞 Bug Fixes

  • WebSocket messaging's task executors are only auto-configured and stompWebSocketHandlerMapping is only forced to be eager when using Jackson #​49750
  • Metadata annotation processor ignores method-level @NestedConfigurationProperty when using constructor binding #​49734
  • Override of property in external 'application.properties' or 'application.yaml' is ignored #​49724
  • Some sliced tests that import TransactionAutoConfiguration do not import TransactionManagerCustomizationAutoConfiguration #​49716
  • NativeImageResourceProvider does not find Flyway migration scripts in subdirectories #​49661
  • @GraphQlTest does not include @ControllerAdvice #​49660

📔 Documentation

  • Fix incorrect indefinite articles in Javadoc #​49723
  • Add some more Kotlin examples and trivial style fixes #​49710

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, @​deejay1, @​dlwldnjs1009, and @​ljrmorgan

v3.5.12

Compare Source

🐞 Bug Fixes

  • EndpointRequest request matcher for health groups is too complex #​49648
  • "/cloudfoundryapplication" web path is not limited to Actuator #​49645
  • RSocket exposes duplicate endpoint for websocket setups #​49592
  • Fix EndpointRequest.toLinks() when base-path is '/' #​49591
  • SpringBootContextLoader mentions class that no longer exists in message for classes or locations assertion #​49518
  • "spring.main.cloud-platform=none" does not disable cloud features #​49478
  • Using @AutoConfigureWebTestClient prevents separate configuration of spring.test.webtestclient.timeout from taking effect #​49340
  • Ordering of 'spring.config.import' is inconsistent when defined in environment or system properties #​49324
  • RouterFunctions descriptions in Actuator do not support nesting #​49289
  • Maven plugin does not set '-parameters' option when processing AOT code #​49268
  • SSL support with Docker Compose does not work as documented #​49210
  • Docker fails when a 'tcp://' address ends with a slash (for example 'tcp://docker:2375/') #​49055

📔 Documentation

  • List all supported colors when describing color-coded log output #​49561
  • Clarify that running is the only supported input state when triggering a Quartz job through the Actuator endpoint #​49506
  • Tutorial in the reference guide has outdated instructions #​49411
  • Javadoc of JettyHttpClientBuilder refers to the wrong type #​49364
  • Example spring-devtools.properties file is shown in the wrong format #​49357
  • Mention using org.springframework.boot.aot Gradle plugin directly for AOT processing with the JVM #​49307
  • Update CLI's INSTALL.txt to reflect Groovy no longer being bundled #​49297
  • JDK requirement for the CLI still refers to Java 8 #​49290
  • Java and Kotlin samples of an environment post processor are inconsistent #​49282
  • Document additional repositories required for shibboleth.net #​49260
  • Clarify inferred relationships between OAuth 2 registrations and providers #​49240

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​bbbbooo, @​chandanv89, @​itsmevichu, @​jayychoi, @​l2yujw, @​ngocnhan-tran1996, @​qnnn, @​quaff, and @​sbrannen

v3.5.11

Compare Source

🐞 Bug Fixes

  • Whitespace can be incorrectly removed when spring-boot-configuration-processor runs on multi-line javadoc #​49039
  • server.jetty.threads.max is ignored when using virtual threads #​48982
  • Docker credential helpers with file extensions cannot be executed on Windows #​48965

📔 Documentation

  • Couchbase and Kafka are incorrectly listed as supporting SSL with Docker Compose #​49211
  • Document that use of non idiomatic format for '@Value' still apply for environment variables #​49054
  • Document naming convention for custom test-scoped starters #​49014
  • LICENSE.txt and NOTICE.txt files have the wrong content in the latest releases #​48996
  • ApplicationContextAssert documents a non-existent assertion in getFailure() #​48973
  • Highlight the importance of the preStop hook when configuring Kubernetes probes #​48936

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​dsyer, @​linkian209, @​nosan, @​quaff, @​scordio, and @​srt

v3.5.10

Compare Source

🐞 Bug Fixes

  • Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #​48836
  • When a bean condition references a type that is not present, it appears as ? in the condition evaluation report #​48835
  • Actuator /info endpoint fails in Java 25 Native Image (VirtualThreadSchedulerMXBean support) #​48810
  • DataSourceBuilder cannot create oracle.ucp.jdbc.PoolDataSourceImpl in a native image #​48702
  • Application JAR created by extract command is not reproductible #​48664
  • AOT processing of tests should not be disabled when 'skipTests' is set #​48661
  • Fix zero-length byte buffer in InspectedContent #​48649

📔 Documentation

  • Update documentation for Buildpack's AOT Cache support #​48768
  • Document support for configuring arguments passed to Docker Compose #​48657
  • Clarify javadoc to make it clear that HazelcastConfigCustomizer beans are only applied if Hazelcast is configured via a config file #​48634
  • Fix grammar and typos in the reference guide #​48596

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​GaoSSR, @​izeye, and @​ngocnhan-tran1996

v3.5.9

Compare Source

🐞 Bug Fixes

  • RabbitHealthIndicator reports an error when version is missing from the connection's server properties #​48486
  • Profiles retained during AOT processing are not configured in a native image #​48475
  • NullPointerException in UndertowWebServer.destroy() when using @DirtiesContext and Citrus Spring Boot Simulator #​48450
  • Redis health check reports an error when redis_version is missing from the INFO response #​48326
  • Parent's MeterRegistry beans are closed when child context closes #​48324
  • SpringBootTest.UseMainMethod.WHEN_AVAILABLE and ALWAYS are incompatible with package-private or parameter-less main method #​48271

📔 Documentation

  • Documentation has an outdated reference to the Jackson Kotlin Module #​48533
  • Caching documentation should clarify how to use a no-op implementation to run a test suite #​48531
  • Document that the default rolling policy for Log4j2 requires logging.file.path to be set #​48526
  • License header in build samples is displayed in the reference documentation #​48477
  • Configuring Two DataSources How-To code sample is inconsistent #​48448
  • Improve javadoc for when to use class names rather than class references #​48395
  • Document that org.aspectj.weaver.Advice must be on the classpath to enable support for Micrometer's annotations #​48359
  • Polish TestRestTemplate examples in the reference guide #​48335
  • Fix links to javadoc in the reference documentation #​48299
  • Clarify that @EnableBatchProcessing turns off all batch auto-configuration, including schema initialization #​48265
  • Kotlin auto-configuration examples are not annotated with @AutoConfiguration #​48227
  • Infinispan Cache Documentation is outdated #​48217
  • Revise "Use Liquibase for test-only migrations" section in reference manual #​48169

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​banseok1216, @​berry120, @​dmitrysulman, @​geopark021, @​noojung, @​scottfrederick, @​vpavic, and @​youngledo

v3.5.8

Compare Source

⚠️ Noteworthy changes

🐞 Bug Fixes

  • Gradle war task does not exclude starter POMs from lib-provided #​48196
  • Testcontainers integration fails on Docker 29.0.0 #​48192
  • SslMeterBinder doesn't register metrics for dynamically added bundles if no bundles exist at bind time #​48180
  • Properties bound in the child management context ignore the parent's environment prefix #​48176
  • ssl.chain.expiry metrics doesn't update for dynamically registered SSL bundles #​48153
  • Auto-configuration exclusions are checked using a different class loader to the one that loads auto-configuration classes #​48129
  • New arm64 macbooks fail to bootBuildImage due to incorrect platform image #​48127
  • NullPointerException when using @ConditionalOnSingleCandidate with multiple manually registered singletons #​48123
  • Buildpack fails with recent Docker installs due to hardcoded version in URL #​48102
  • Image building may fail when specifying a platform if an image has already been built with a different platform #​48098
  • Undertow's ServletContext is destroy too early, making it unusable in @PreDestroy methods #​48061
  • PortInUseException incorrectly thrown on failure to bind port due to Netty IP misconfiguration #​48058
  • Auto-configured JCacheMetrics cannot be customized #​48056
  • WebSecurityCustomizer beans are excluded by WebMvcTest #​48054
  • Devtools Restarter does not work with a parameterless main method #​47987
  • Setting 'max-uri-tags' does not prevent unlimited meter growth on any AutoConfiguredCompositeMeterRegistry #​47923
  • Docker response 407 is not handled correctly resulting in no error message #​47900
  • spring-boot-maven-plugin process-aot goal does not find package-private main method #​47780

📔 Documentation

  • Revise AWS section of "Deploying to the Cloud" in reference manual #​48156
  • Fix typo in PortInUseException Javadoc #​48133
  • Correct section about required setters in "Type-safe Configuration Properties" #​48130
  • Document EndpointObjectMapper and management.endpoints.jackson.isolated-object-mapper #​48114
  • Document support for configuring servlet context init parameters using properties #​48111
  • Clarify how warnings about soon-to-expire SSL certificates are reported #​48062
  • Document how to use ContextPropagatingTaskDecorator for propagating trace context over thread boundaries #​48052
  • Use since attribute in configuration properties deprecation consistently #​47980
  • BootstrapContext#getOrElseThrow has incorrect reference to IllegalStateException #​47905
  • Clarify when BootstrapContext get methods may return null rather than throwing an exception or calling the fallback supplier #​47898
  • Document that Actuator endpoint may have at most one extension of each type #​47873
  • Limit Kotlin API documentation to

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/Zurich)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@erhardt-consulting-bot erhardt-consulting-bot changed the title feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.0) feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.1) Jun 19, 2025
@erhardt-consulting-bot erhardt-consulting-bot changed the title feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.1) feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.2) Jun 19, 2025
@erhardt-consulting-bot erhardt-consulting-bot changed the title feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.2) feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.3) Jun 20, 2025
@erhardt-consulting-bot erhardt-consulting-bot changed the title feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.3) feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.4) Aug 11, 2025
@erhardt-consulting-bot erhardt-consulting-bot changed the title feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.4) feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.5) Aug 21, 2025
@erhardt-consulting-bot erhardt-consulting-bot changed the title feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.5) feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.6) Sep 18, 2025
@erhardt-consulting-bot erhardt-consulting-bot changed the title feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.6) feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.7) Oct 23, 2025
@erhardt-consulting-bot
erhardt-consulting-bot force-pushed the renovate/spring-boot branch 2 times, most recently from 8ed5115 to 0cc5cb1 Compare November 21, 2025 17:01
@erhardt-consulting-bot erhardt-consulting-bot changed the title feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.7) feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.8) Nov 21, 2025
@erhardt-consulting-bot erhardt-consulting-bot changed the title feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.8) feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.9) Dec 18, 2025
@erhardt-consulting-bot erhardt-consulting-bot changed the title feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.9) feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.10) Jan 22, 2026
@erhardt-consulting-bot erhardt-consulting-bot changed the title feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.10) feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.11) Feb 19, 2026
@erhardt-consulting-bot erhardt-consulting-bot changed the title feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.11) feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.12) Mar 19, 2026
@erhardt-consulting-bot erhardt-consulting-bot changed the title feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.12) feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.14) May 12, 2026
@erhardt-consulting-bot erhardt-consulting-bot changed the title feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.14) feat(deps): update spring boot (3.4.6 → 3.5.14) Jun 3, 2026
@erhardt-consulting-bot
feat(deps): update spring boot (3.4.6 → 3.5.16)
11c59d5 
| datasource | package                                             | from  | to     |
| ---------- | --------------------------------------------------- | ----- | ------ |
| maven      | org.springframework.boot:spring-boot-starter-parent | 3.4.6 | 3.5.16 |
@erhardt-consulting-bot erhardt-consulting-bot changed the title feat(deps): update spring boot (3.4.6 → 3.5.14) feat(deps): update spring boot (3.4.6 → 3.5.16) Jul 10, 2026
@erhardt-consulting-bot erhardt-consulting-bot changed the title feat(deps): update spring boot (3.4.6 → 3.5.16) feat(deps): update dependency org.springframework.boot:spring-boot-starter-parent (3.4.6 → 3.5.16) Jul 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@chrootlogin chrootlogin

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@erhardt-consulting-bot @chrootlogin