deps: bump org.springframework.boot from 3.5.14 to 4.0.6 - #71
deps: bump org.springframework.boot from 3.5.14 to 4.0.6#71dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [org.springframework.boot](https://github.com/spring-projects/spring-boot) from 3.5.14 to 4.0.6. - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.14...v4.0.6) --- updated-dependencies: - dependency-name: org.springframework.boot dependency-version: 4.0.6 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 951b9fd. Configure here.
| [versions] | ||
| # Build plugins | ||
| spring-boot = "3.5.14" | ||
| spring-boot = "4.0.6" |
There was a problem hiding this comment.
Major version BOM bump breaks transitive dependency compatibility
High Severity
Bumping spring-boot from 3.5.14 to 4.0.6 is a major version upgrade that changes BOM-managed transitive dependency versions from Spring Framework 6.x to 7.x and Spring Batch 5.x to 6.x. The project's spring-batch-redis-core:4.6.2 dependency was built against the older Spring Framework 6.x / Spring Batch 5.x. Since the dependencyManagement block imports SpringBootPlugin.BOM_COORDINATES, the BOM will override these transitive versions, likely causing binary incompatibilities (e.g., NoSuchMethodError, ClassNotFoundException) at compile or runtime. Spring Batch 6.0 has documented breaking changes from 5.x.
Reviewed by Cursor Bugbot for commit 951b9fd. Configure here.
|
Superseded by #74. |
Bumps org.springframework.boot from 3.5.14 to 4.0.6.
Release notes
Sourced from org.springframework.boot's releases.
... (truncated)
Commits
8821ad2Release v4.0.69e4048aMerge branch '3.5.x' into 4.0.x20bb11cNext development version (v3.5.15-SNAPSHOT)98daa8eMerge branch '3.5.x' into 4.0.x874f629Fix default security with actuator but without healthe41b3bfEnable hostname verification for SSL connections to Elasticsearchef8527bMerge branch '3.5.x' into 4.0.x4a7bd33Merge branch '3.5.x' into 4.0.x3a9d836Merge branch '3.5.x' into 4.0.x8e013b6Merge branch '3.5.x' into 4.0.xDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Note
High Risk
Major Spring Boot upgrade affects the entire dependency stack and may introduce breaking API or configuration changes across the build.
Overview
Bumps the Spring Boot Gradle plugin version in
gradle/libs.versions.tomlfrom 3.5.14 to 4.0.6, which drives the BOM and managed dependency set for any modules that applyorg.springframework.boot.This is a major framework upgrade (3.x → 4.x), not a patch release—builds and runtime behavior may need validation against Spring Boot 4 migration notes and full test/CI runs.
Reviewed by Cursor Bugbot for commit 951b9fd. Bugbot is set up for automated code reviews on this repo. Configure here.