Skip to content

feature: upgrade to Java 25 and Spring Boot 3.5.16#269

Open
devin-ai-integration[bot] wants to merge 1 commit into
DevOpsfrom
devin/1783431441-java25-upgrade
Open

feature: upgrade to Java 25 and Spring Boot 3.5.16#269
devin-ai-integration[bot] wants to merge 1 commit into
DevOpsfrom
devin/1783431441-java25-upgrade

Conversation

@devin-ai-integration

@devin-ai-integration devin-ai-integration Bot commented Jul 7, 2026

Copy link
Copy Markdown

Summary

Moves the build/runtime from the mixed Java 8/17 setup to Java 25 on a Spring Boot version that certifies it. Verified end-to-end with ./mvnw clean install on Temurin 25 (compiles at release 25, contextLoads test green against MySQL).

pom.xml

  • spring-boot-starter-parent 3.3.33.5.16 (latest 3.5.x; Spring Boot 3.5 certifies Java 25).
  • <java.version> 1725.
  • Removed the maven-compiler-plugin block that pinned source/target = 1.8 (invalid for Spring Boot 3; the parent now manages the compiler plugin and honors <java.version>).
  • Replaced deprecated mysql:mysql-connector-java@8.0.33 with parent-managed com.mysql:mysql-connector-j (driver already com.mysql.cj.jdbc.Driver).

Dockerfile

  • builder maven:3.8.3-openjdk-17maven:3.9-eclipse-temurin-25.
  • deployer openjdk:17-alpineeclipse-temurin:25-jre-alpine (the openjdk images are deprecated / have no Java 25 tags). Both tags verified present on Docker Hub.
  • MAINTAINERLABEL maintainer=....

SecurityConfig.java — the only 3.3→3.5 code breakage: AntPathRequestMatcher is deprecated-for-removal in Spring Security 6.5.

-.logoutRequestMatcher(new AntPathRequestMatcher("/logout"))
+.logoutUrl("/logout")

Equivalent here (CSRF is disabled, so both match any HTTP method on /logout).

No Java-version references needed changing in the Helm charts, k8s manifests, GitOps, or Jenkinsfile — CI just builds the Docker image, which now pulls the JDK 25 base images.

Link to Devin session: https://app.devin.ai/sessions/23dad71b0d5e4a49afe209f5d93a9234
Requested by: @Colhodm


Devin Review

Status Commit
⚪ Not started

Run Devin Review

Open in Devin Review (Staging)

- Bump spring-boot-starter-parent 3.3.3 -> 3.5.16 (certifies Java 25)
- Set java.version 17 -> 25; remove invalid maven-compiler-plugin (source/target 1.8)
- Replace deprecated mysql:mysql-connector-java with com.mysql:mysql-connector-j (parent-managed version)
- Dockerfile: builder maven:3.9-eclipse-temurin-25, deployer eclipse-temurin:25-jre-alpine, MAINTAINER -> LABEL
- Replace deprecated AntPathRequestMatcher with logoutUrl in SecurityConfig

Co-Authored-By: Arjun Mishra <arjunsaxmishra@gmail.com>
@Colhodm Colhodm self-assigned this Jul 7, 2026
@devin-ai-integration

Copy link
Copy Markdown
Author

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

  • Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
  • Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

  • Disable automatic comment, CI, and merge conflict monitoring

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant