Skip to content

chore(deps): update java (major)#375

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-java
Open

chore(deps): update java (major)#375
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-java

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Sep 30, 2025

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
org.springdoc:springdoc-openapi-starter-webmvc-ui (source) 2.8.113.0.3 age confidence
org.springframework.boot:spring-boot-starter-mail (source) 3.5.54.0.6 age confidence
org.springframework.boot:spring-boot-starter-test (source) 3.5.54.0.6 age confidence
org.junit.jupiter:junit-jupiter-engine (source) 5.13.46.1.0 age confidence
org.junit.jupiter:junit-jupiter-api (source) 5.13.46.1.0 age confidence
org.springframework.boot:spring-boot-starter-security (source) 3.5.54.0.6 age confidence
org.springframework.boot:spring-boot-starter-web (source) 3.5.54.0.6 age confidence
org.springframework.boot:spring-boot-starter-parent (source) 3.5.54.0.6 age confidence

Release Notes

springdoc/springdoc-openapi (org.springdoc:springdoc-openapi-starter-webmvc-ui)

v3.0.3: springdoc-openapi v3.0.3 released!

Added
  • #​3246 – Add Springdoc OpenAPI MCP (Model Context Protocol) support
  • #​3256 – Auto-set nullable: true for Kotlin nullable types in schema properties
  • #​3239 – Add support for the @Range constraint validation annotation
  • #​3244 – Handle default values for LocalDate
Changed
  • Upgrade Spring Boot to version 4.0.5
  • Upgrade swagger-core to version 2.2.47
  • Upgrade swagger-ui to version 5.32.2
  • #​3260@ConditionalOnClass(HateoasProperties.class) in SpringDocHateoasConfiguration
  • Forwards all MCP non-transport headers to downstream methods
  • Dynamically resolve the base path from window.location.pathname for MCP UI
Fixed
  • #​3258 – Setting API Version Required when using WebFlux breaks the Swagger UI
  • #​3259 – Annotated Generic properties getting applied to sibling properties
  • #​3255Direction enum: fixed visibility scope of group order so that setGroupsOrder method can be used
  • #​3247 – Preserve YAML group URLs in Swagger UI
  • #​3245 – Upgrade swagger-core from version 2.2.43 to 2.2.45
  • #​3235PropertyResolverUtils retains a JsonNode when reading an ExtensionProperty annotation
  • #​3226 – Propagate JsonView context when resolving Page<T> schema

New Contributors

Full Changelog: springdoc/springdoc-openapi@v3.0.2...v3.0.3

v3.0.2: springdoc-openapi v3.0.2 released!

Added
  • #​3229 – Add support for Spring Framework API Versioning with Functional Endpoints
  • #​3208 – Add springdoc.swagger-ui.document-title property
Changed
  • Upgrade Spring Boot to version 4.0.3
  • Upgrade swagger-core to version 2.2.43
  • Upgrade swagger-ui to version 5.32.0
  • Upgrade Scalar to version 0.5.55
Fixed
  • #​3232 – Gracefully handle springdoc endpoint paths during API version resolution
  • #​3230 – Scalar source URLs resolve to null/<groupName> on second request when using GroupedOpenApi
  • #​3228 – springdoc-openapi-starter 3.x doesn't depend on org.springframework.boot:spring-boot-starter
  • #​3220 – Reachability metadata not compatible with GraalVM 25
  • #​3195 – Application won't compile when OpenApi and spring-boot-data-rest is present
  • #​3193OpenApi field in SpringDocConfigProperties does not comply with camel case naming conventions
  • #​3215 – Type annotation not considered when Kotlin is not present
  • #​3199 – Prevent duplicate _links in allOf child schemas
  • #​3198 – Property resolution for parameter default values
  • #​3206 – Upgrade swagger-core from version 2.2.41 to 2.2.42

Full Changelog: springdoc/springdoc-openapi@v3.0.1...v3.0.2

v3.0.1: springdoc-openapi v3.0.1 released!

Added
  • #​3122 – Add log notifications when SpringDocs / Scalar are enabled by default
  • #​3123 – Add support for serving static resources
  • #​3151 – Add @Order to ApplicationReadyEvent listener
  • #​3158 – Add support for API groups in Scalar
  • #​3187 – Add Scalar WebMVC and WebFlux support
  • #​3185 – Disable creation of blank GitHub issues (GitHub settings & workflow)
  • #​3186 – Decouple Web Server APIs following Spring Boot modularization
  • #​3131 – Improve warning messages when documentation is explicitly enabled
  • #​3183 – Remove unused operations consumer from route builder methods
  • #​3141 – Change handling so useReturnTypeSchema is evaluated at HTTP status code level instead of method level
Changed
  • Upgrade Spring Boot to version 4.0.1
  • Upgrade swagger-core to version 2.2.41
  • Upgrade swagger-ui to version 5.31.0
  • Upgrade Scalar to version 0.4.3
Fixed
  • #​3133 – Fix regression where content type from Swagger @RequestBody did not take precedence
  • #​3146 – Fix WebJar resource handler mappings for Swagger UI resources
  • #​3168 – Support @Schema annotations on Kotlin value classes
  • #​3178 – Fix regression when generating documentation for Kotlin LinkedHashSet
  • #​3170 – Fix warnings when setting title and description in application.yml
  • #​3173 – Fix /v3/api-docs returning Base64-encoded response with Spring Framework 7.0.2
  • #​3155 – Fix native image support regression with SpringDoc 3.0 and Spring Boot 4.0

What's Changed

New Contributors

Full Changelog: springdoc/springdoc-openapi@v3.0.0...v3.0.1

v3.0.0: springdoc-openapi v3.0.0 released!

Added
  • #​2975 - Spring Framework 7 - Initial API versioning support
  • #​3123 - Support static resources for webflux
Changed
  • Upgrade to Spring Boot 4.0.0!
  • Upgrade to Scalar 0.4.3
Fixed
  • #​3131 - Warning messages when docs are explicitly enabled
  • #​3121 - NPE in KotlinDeprecatedPropertyCustomizer - resolvedSchema is null

Full Changelog: springdoc/springdoc-openapi@v3.0.0-RC1...v3.0.0

v2.8.17

Added
  • Add support for the @Range constraint validation annotation
  • Auto-set nullable: true for Kotlin nullable types in schema properties
Changed
  • Upgrade Spring Boot to version 3.5.13
  • Upgrade swagger-core to version 2.2.47
  • Upgrade swagger-ui to version 5.32.2
Fixed
  • #​3259 – Fix an issue with annotated types with generics on parameters
  • #​3255 – Handle $ref nullable wrapping and OAS 3.1 support
  • #​3245 – Upgrade swagger-core from 2.2.43 to 2.2.45 (fixes schema resolution issues)
  • #​3241 – Generic error responses from multiple @ControllerAdvice are still nondeterministic across OS
  • #​3236 – Preserve YAML group URLs in Swagger UI
  • Fix PropertyResolverUtils to retain a JsonNode when reading an ExtensionProperty annotation
  • Fix handling of default values for LocalDate

v2.8.16

Added
  • Add support for springdoc.swagger-ui.document-title property to customize the browser tab title
Changed
  • Upgrade Spring Boot to version 3.5.11
  • Upgrade swagger-core to version 2.2.43
  • Upgrade swagger-ui to version 5.32.0
  • Upgrade Scalar to version 0.5.55
Fixed
  • #​3230 – Scalar source URLs resolve to null/<groupName> on second request when using GroupedOpenApi
  • #​3226 – Propagate @JsonView context when resolving Page<T> schema in PageOpenAPIConverter
  • #​3205 – springdoc-ui does not work with native compile GraalVM 25
  • #​3219 – Upgrade swagger-core from 2.2.42 to 2.2.43 (fixes schema resolution issues)
  • #​3193 – OpenApi field in SpringDocConfigProperties does not comply with camelCase naming conventions
  • #​3161 – Prevent duplicate _links in allOf child schemas extending RepresentationModel
  • Fix type annotation not considered when Kotlin is not present
  • Fix property resolution for parameter default values

v2.8.15

Added
  • #​3122 – Add log notifications when SpringDocs / Scalar are enabled by default
  • #​3123 – Add support for serving static resources
  • #​3151 – Add @Order to ApplicationReadyEvent listener
  • #​3158 – Add support for API groups in Scalar
  • #​3187 – Add Scalar WebMVC and WebFlux support
  • #​3185 – Disable creation of blank GitHub issues (GitHub settings & workflow)
  • #​3186 – Decouple Web Server APIs following Spring Boot modularization
  • #​3131 - Improve warning messages when documentation is explicitly enabled
  • #​3183 - Remove unused operations consumer from route builder methods
  • #​3141 - Change handling so useReturnTypeSchema is evaluated at HTTP status code level instead of method level
Changed
  • Upgrade Spring Boot to version 3.5.9
  • Upgrade swagger-core to version 2.2.41
  • Upgrade swagger-ui to version 5.31.0
  • Upgrade Scalar to version 0.4.3
Fixed
  • #​3133 – Fix regression where content type from Swagger @RequestBody did not take precedence
  • #​3146 – Fix WebJar resource handler mappings for Swagger UI resources
  • #​3168 – Support @Schema annotations on Kotlin value classes
  • #​3178 – Fix regression when generating documentation for Kotlin LinkedHashSet
  • #​3170 – Fix warnings when setting title and description in application.yml
  • #​3187 – Add scalar scalar-webmvc and scalar-webflux support

v2.8.14

Added
  • #​3090 - Add logs to notify when SpringDocs/Scalar is enabled because SpringDocs/Scalar is enabled by default
Changed
  • Upgrade swagger-ui to v5.30.1
  • Upgrade swagger-core to v2.2.38
  • Upgrade spring-boot to v3.5.7
  • Upgrade commons-lang3 to v3.18.0
  • Upgrade scalar to v0.3.12
Fixed
  • #​3107 - Fix:compatible with lower version of getOpenApi().
  • #​3121 - NPE in KotlinDeprecatedPropertyCustomizer - resolvedSchema is null

v2.8.13

Added
Changed
  • Upgrade swagger-ui to v5.28.1
Fixed
  • #​3076 - With oneOf the response schema contains an extra type: string

v2.8.12

Changed
  • Upgrade swagger-ui to v5.28.0
Fixed
  • #​3073 - Duplicate key class Parameter when documenting two GET methods with same path and PathVariable.
  • #​3071 - @​io.swagger.v3.oas.annotations.parameters.RequestBody does not work well with @​RequestPart
  • #​3066 - Parameter is now required after upgrading to springdoc-openapi 2.8.10
spring-projects/spring-boot (org.springframework.boot:spring-boot-starter-mail)

v4.0.6

Compare Source

🐞 Bug Fixes

  • Default security is misconfigured when spring-boot-actuator-autoconfigure is present and spring-boot-health is not #​50188
  • Elasticsearch Rest5Client auto-configuration misconfigures underlying HTTP client #​50187
  • ApplicationPidFileWriter does not handle symlinks correctly #​50185
  • RandomValuePropertySource is not suitable for secrets #​50183
  • Cassandra auto-configuration misconfigures CqlSessionBuilder #​50180
  • ApplicationTemp does not handle symlinks correctly #​50178
  • Remote DevTools performs comparison incorrectly #​50176
  • spring.rabbitmq.ssl.verify-hostname is applied inconsistently #​50174
  • Whole number values are ignored when configuring min and max expected values and SLO boundaries for a distribution summary meter #​50077
  • Classic starters are missing several modules #​50071
  • Module spring-boot-resttestclient is missing from spring-boot-starter-test-classic #​50069
  • Annotations like @Ssl don't work on @Bean methods when using @ServiceConnection #​50064
  • EnversRevisionRepositoriesRegistrar should reuse @EnableEnversRepositories rather than configuring the JPA counterpart #​50039
  • WebFlux Cloud Foundry links endpoint includes query string from received request in resolved links #​50017
  • Imports on a containing test class are ignored when a nested class has imports #​50012
  • With spring.jackson.use-jackson2-defaults set to true, FAIL_ON_UNKNOWN_PROPERTIES is enabled #​49951
  • 500 response from env endpoint when supplied pattern is invalid #​49946
  • Reactive MongoDB starter has a transitive dependency on the synchronous MongoDB driver #​49945
  • HTTP method is lost when configuring excludes in EndpointRequest #​49943
  • Honor HttpMethod for reactive additional endpoint paths #​49880
  • Docker Compose support doesn't work with apache/artemis image #​49869
  • Docker Compose support doesn't work with apache/activemq image #​49866
  • Spring Security's PathPatternRequestMatcher.Builder is not auto-configured when using WebMvcTest and spring-boot-security-test #​49854
  • API versioning path strategy should be applied path last as it is not meant to yield #​49800

📔 Documentation

  • Update docs to encourage Java fundamentals for beginners that prefer to learn that way #​50146
  • HTTP Service Interface Clients still document that API versioning can be configured via properties #​50126
  • Link to the observability section of the Lettuce documentation is broken #​50097
  • Javadoc for StaticResourceLocation.FAVICON doesn't describe icons location #​50085
  • MySamlRelyingPartyConfiguration is missing a Kotlin sample #​50024
  • Incorrect default value for management.httpexchanges.recording.include in configuration metadata #​50019
  • Link to the Kubernetes documentation when discussing startup probes #​50015
  • Typo in JdbcSessionAutoConfiguration Javadoc #​49873
  • Clarify that configuration property default values are not available through the Environment #​49851
  • Document the need for Liquibase and Flyway starters #​49839
  • Kafka documentation refers to deprecated JSON serializer and deserializer classes #​49826

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​GollapudiSrikanth, @​MohammedGhallab, @​bachhs, @​dlwldnjs1009, @​edwardsre, @​kodama-kcc, @​kwondh5217, @​ppapaj, @​quaff, @​refeccd, @​scordio, and @​xxxxxxjun

v4.0.5

Compare Source

🐞 Bug Fixes

  • Test starter for Spring Integration does not include Spring Integration test module #​49784
  • Some sliced tests that import TransactionAutoConfiguration do not import TransactionManagerCustomizationAutoConfiguration #​49782
  • WebSocket messaging's task executors are only auto-configured and stompWebSocketHandlerMapping is only forced to be eager when using Jackson #​49753
  • WebSocket app fails to start when Jackson is on the classpath but there's no JsonMapper bean #​49749
  • Metadata annotation processor ignores method-level @NestedConfigurationProperty when using constructor binding #​49738
  • Override of property in external 'application.properties' or 'application.yaml' is ignored #​49731
  • NativeImageResourceProvider does not find Flyway migration scripts in subdirectories #​49706
  • Add @ConditionalOnWebApplication to NettyReactiveWebServerAutoConfiguration #​49695
  • @GraphQlTest does not include @ControllerAdvice #​49672

📔 Documentation

  • Fix incorrect indefinite articles in Javadoc #​49727
  • Add some more Kotlin examples and trivial style fixes #​49714
  • Overhaul Spring Session documentation following modularization #​49704

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, @​deejay1, @​dlwldnjs1009, @​kwondh5217, @​ljrmorgan, and @​quaff

v4.0.4

Compare Source

⚠️ Attention Required

  • OpenTelemetry's ZipkinSpanExporter has been deprecated and its support will be removed in Spring Boot 4.2. #​49453
  • Jackson 2 has been upgraded to 2.21.1 in response to the Jackson team ending support for Jackson 2.20.x. #​49389
  • Jackson has been upgraded to 3.1.0 in response to the Jackson team ending support for Jackson 3.0.x. #​49383
  • The default value for server.tomcat.max-part-count has been increased from 10 to 50. This aligns it with Tomcat's own default and the default in Spring Boot 3.x. #​49311

🐞 Bug Fixes

  • EndpointRequest request matcher for health groups is too complex #​49649
  • "/cloudfoundryapplication" web path is not limited to Actuator #​49646
  • Fix EndpointRequest.toLinks() when base-path is '/' #​49617
  • Docker fails when a 'tcp://' address ends with a slash (for example 'tcp://docker:2375/') #​49596
  • RSocket exposes duplicate endpoint for websocket setups #​49593
  • Failure analysis for a missing mail sender is misleading #​49582
  • SpringBootContextLoader mentions class that no longer exists in message for classes or locations assertion #​49535
  • Ordering of 'spring.config.import' is inconsistent when defined in environment or system properties #​49482
  • "spring.main.cloud-platform=none" does not disable cloud features #​49479
  • SSL support with Docker Compose does not work as documented #​49385
  • Auto-configuration overrides authorization server configuration applied by Customizer beans #​49367
  • Using @AutoConfigureWebTestClient prevents separate configuration of spring.test.webtestclient.timeout from taking effect #​49344
  • NoSuchMethodException when forcing the use of Log4J2LoggingSystem using org.springframework.boot.logging.LoggingSystem system property #​49343
  • RouterFunctions descriptions in Actuator do not support nesting #​49302
  • Maven plugin does not set '-parameters' option when processing AOT code #​49295
  • HTTP Service Interface Client doesn't work in a native image due to missing property binding #​49274
  • ErrorPageRegistrarBeanPostProcessor is not auto-configured in war deployments and the ErrorPageCustomizer is not applied #​49176
  • Missing starter for spring-boot-restdocs #​48289

📔 Documentation

  • Document support for Java 26 #​49604
  • List all supported colors when describing color-coded log output #​49562
  • Improve EndpointRequest matcher documentation #​49520
  • Clarify that running is the only supported input state when triggering a Quartz job through the Actuator endpoint #​49514
  • Document security considerations for forwarded headers in cloud deployments #​49507
  • Tutorial in the reference guide has outdated instructions #​49429
  • Document additional repositories required for shibboleth.net #​49392
  • Javadoc of JettyHttpClientBuilder refers to the wrong type #​49387
  • Example spring-devtools.properties file is shown in the wrong format #​49362
  • Clarify inferred relationships between OAuth 2 registrations and providers #​49327
  • Mention using org.springframework.boot.aot Gradle plugin directly for AOT processing with the JVM #​49321
  • Remove superfluous semi-colon from read timeout configuration example for HTTP service interface clients #​49306
  • Update CLI's INSTALL.txt to reflect Groovy no longer being bundled #​49298
  • JDK requirement for the CLI still refers to Java 8 #​49293
  • Java and Kotlin samples of an environment post processor are inconsistent #​49287

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​FBibonne, @​answndud, @​bbbbooo, @​chandanv89, @​giyeon95, @​itsmevichu, @​jayychoi, @​l2yujw, @​ngocnhan-tran1996, @​qnnn, @​quaff, and @​sbrannen

v4.0.3

Compare Source

⭐ New Features

  • Add TWENTY_SIX to JavaVersion enum #​49193

🐞 Bug Fixes

  • Jackson properties may not be applied correctly to RestClients #​49223
  • ClassNotFoundException when using Actuator without spring-boot-health #​49196
  • Using the OTel and Zipkin starters together creates invalid configuration #​49183
  • Whitespace can be incorrectly removed when spring-boot-configuration-processor runs on multi-line javadoc #​49060
  • Jackson2HttpMessageConvertersConfiguration uses ConditionOn Jackson3 XMLMapper class #​49015
  • server.jetty.threads.max is ignored when using virtual threads #​48989
  • Slice test includes fail to load when using spring-boot-starter-test-classic #​48981
  • Docker credential helpers with file extensions cannot be executed on Windows #​48979
  • Java version requirement check for native image is confusing if AOT didn't run #​48963
  • TestPropertyValues.Pair.fromMapEntry(Entry<String, String>) does not comply with its nullability contract #​48948

📔 Documentation

  • Couchbase and Kafka are incorrectly listed as supporting SSL with Docker Compose #​49212
  • Document that use of non idiomatic format for '@Value' still apply for environment variables #​49109
  • Document naming convention for custom test-scoped starters #​49017
  • Delay removal of Jackson 2 support until 4.3 at the earliest #​49010
  • LICENSE.txt and NOTICE.txt files have the wrong content in the latest releases #​49003
  • ApplicationContextAssert documents a non-existent assertion in getFailure() #​48977
  • Highlight the importance of the preStop hook when configuring Kubernetes probes #​48946

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​GaetanoCerciello, @​dsyer, @​linkian209, @​nosan, @​quaff, @​scordio, and @​srt

v4.0.2

Compare Source

⚠️ Noteworthy Changes
  • The dependency on org.eclipse.jetty.ee11:jetty-ee11-servlets has been removed from spring-boot-jetty as it was unnecessary and unused. If your application code depends on a class from jetty-ee11-servlets, declare a dependency on it in your build configuration. #​48677
🐞 Bug Fixes
  • No TransactionAutoConfiguration with spring-boot-starter-kafka for Spring Boot 4 #​48880
  • Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #​48840
  • When a bean condition references a type that is not present, it appears as ? in the condition evaluation report #​48838
  • SessionAutoConfiguration creates a DefaultCookieSerializer with a default SameSite of null instead of Lax #​48830
  • Setting graphql schema location to "classpath*:graphql/**/" causes failure due to incorrectly packaged test resource #​48829
  • Message interpolation by MVC and WebFlux's Validators does not work correctly in a native image [#​48828](https://redi

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Europe/Madrid)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Sep 30, 2025

Cloudflare Pages deployment

Latest commit 4f82dd0
Status 🔄 Deploying...
Preview URL Not available
Type 🔀 Preview

@renovate renovate Bot force-pushed the renovate/major-java branch from 2fee53e to 670e566 Compare October 31, 2025 21:13
@renovate renovate Bot force-pushed the renovate/major-java branch from 670e566 to 1945d60 Compare November 20, 2025 18:44
@renovate renovate Bot changed the title chore(deps): update java to v6 (major) chore(deps): update java (major) Nov 20, 2025
@renovate renovate Bot force-pushed the renovate/major-java branch from 1945d60 to 839fb6f Compare November 21, 2025 04:36
@renovate renovate Bot force-pushed the renovate/major-java branch from 839fb6f to f0d13be Compare December 18, 2025 23:07
@renovate renovate Bot force-pushed the renovate/major-java branch 2 times, most recently from d61eb4f to 47a00a7 Compare January 6, 2026 18:13
@renovate renovate Bot force-pushed the renovate/major-java branch from 47a00a7 to bc7bea5 Compare January 22, 2026 17:40
@renovate renovate Bot force-pushed the renovate/major-java branch 2 times, most recently from 312a83a to 2922ae6 Compare February 19, 2026 14:52
@renovate renovate Bot force-pushed the renovate/major-java branch from 2922ae6 to 6e8cb9c Compare February 28, 2026 22:02
@renovate renovate Bot force-pushed the renovate/major-java branch 2 times, most recently from 6e1ceea to 6ade05c Compare March 19, 2026 16:40
@renovate renovate Bot force-pushed the renovate/major-java branch from 6ade05c to 600cc3e Compare March 26, 2026 14:00
@renovate renovate Bot force-pushed the renovate/major-java branch from 600cc3e to b46e2be Compare April 12, 2026 01:49
@renovate renovate Bot force-pushed the renovate/major-java branch from b46e2be to b1ddc38 Compare April 23, 2026 18:37
@renovate renovate Bot force-pushed the renovate/major-java branch from b1ddc38 to 199fea3 Compare May 5, 2026 08:54
@renovate renovate Bot force-pushed the renovate/major-java branch from 199fea3 to 4f82dd0 Compare May 19, 2026 19:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants