update spring

Author: EddeCCC

dependencyCheckSuppression.xml

@@ -7,15 +7,9 @@
     <cve>CVE-2019-3826</cve>
     </suppress>
     <suppress>
-      <notes><![CDATA[
-        No Spring Boot update available for spring-security-core-6.5.2.jar (September 2025)
-      ]]></notes>
-    <cve>CVE-2018-1258</cve>
-    </suppress>
-    <suppress>
-      <notes><![CDATA[
-        No Spring Boot update available for tomcat-embed-core-10.1.43.jar (September 2025)
-      ]]></notes>
-    <cve>CVE-2025-48989</cve>
+        <notes><![CDATA[
+            We do not use Spring Framework 5.0.5.RELEASE, but version 6+
+        ]]></notes>
+        <cve>CVE-2018-1258</cve>
     </suppress>
 </suppressions>

gradle.properties

@@ -3,7 +3,7 @@ boomerangVersion=1.737.0
 # the OpenTelemetry-Boomerang-Plugin version to ship with the EUM server
 boomerangOpenTelemetryPluginVersion=2.0.0-2
 
-springBootVersion=3.5.4
+springBootVersion=3.5.5
 snakeYamlVersion=2.4
 
 # keep the OpenTelemetry versions consistent, take a look at Spring