chore: update spring 3.5 version to avoid security issue

Author: MaxSiominDev

CHANGELOG.md

@@ -2,6 +2,11 @@
 
 ## [Unreleased]
 
+### Dependencies
+
+- Import `spring-boot-dependencies` BOM in `tarantool-spring-data` parent POM.
+- Bump spring-boot version from 3.5.13 to 3.5.16 in tarantool-spring-data-35
+
 ## [1.7.0] - 2026-06-29
 
 ### Spring-data

tarantool-spring-data/pom.xml

@@ -60,6 +60,13 @@
         <type>pom</type>
         <scope>import</scope>
       </dependency>
+      <dependency>
+        <groupId>org.springframework.boot</groupId>
+        <artifactId>spring-boot-dependencies</artifactId>
+        <version>${spring.boot.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
     </dependencies>
   </dependencyManagement>
 
@@ -70,11 +77,10 @@
       <artifactId>tarantool-client</artifactId>
     </dependency>
 
-    <!--spring data key value module-->
+    <!--spring data key value module (version managed by spring-boot-dependencies BOM)-->
     <dependency>
       <groupId>org.springframework.data</groupId>
       <artifactId>spring-data-keyvalue</artifactId>
-      <version>${spring.boot.version}</version>
     </dependency>
 
     <!-- application.properties processor -->

tarantool-spring-data/tarantool-spring-data-35/pom.xml

@@ -18,7 +18,7 @@
   <properties>
     <maven.compiler.source>17</maven.compiler.source>
     <maven.compiler.target>17</maven.compiler.target>
-    <spring.boot.version>3.5.13</spring.boot.version>
+    <spring.boot.version>3.5.16</spring.boot.version>
     <shared.dir>${project.parent.parent.basedir}/tarantool-shared-resources/</shared.dir>
     <license.header.file>${project.parent.parent.basedir}/LICENSE_HEADER.txt</license.header.file>
   </properties>