Skip to content

chore(deps): bump springBoot from 4.0.1 to 4.0.2#417

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/gradle/springBoot-4.0.2
Open

chore(deps): bump springBoot from 4.0.1 to 4.0.2#417
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/gradle/springBoot-4.0.2

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 10, 2026

Bumps springBoot from 4.0.1 to 4.0.2.
Updates org.springframework.boot:spring-boot-starter-actuator from 4.0.1 to 4.0.2

Release notes

Sourced from org.springframework.boot:spring-boot-starter-actuator's releases.

v4.0.2

⚠️ Noteworthy Changes

  • The dependency on org.eclipse.jetty.ee11:jetty-ee11-servlets has been removed from spring-boot-jetty as it was unnecessary and unused. If your application code depends on a class from jetty-ee11-servlets, declare a dependency on it in your build configuration. #48677

🐞 Bug Fixes

  • No TransactionAutoConfiguration with spring-boot-starter-kafka for Spring Boot 4 #48880
  • Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #48840
  • When a bean condition references a type that is not present, it appears as ? in the condition evaluation report #48838
  • SessionAutoConfiguration creates a DefaultCookieSerializer with a default SameSite of null instead of Lax #48830
  • Setting graphql schema location to "classpath*:graphql/**/" causes failure due to incorrectly packaged test resource #48829
  • Message interpolation by MVC and WebFlux's Validators does not work correctly in a native image #48828
  • CloudFoundry integration fails in Servlet-based web app without a dependency on spring-boot-starter-restclient #48826
  • RestTestClientAutoConfiguration and TestRestTemplateAutoConfiguration should be package-private #48820
  • SSL metrics are no longer auto-configured #48819
  • Actuator /info endpoint fails in Java 25 Native Image (VirtualThreadSchedulerMXBean support) #48812
  • DataSourceBuilder cannot create oracle.ucp.jdbc.PoolDataSourceImpl in a native image #48703
  • The spring-boot-cloudfoundry module should only have an optional dependency on spring-boot-security #48685
  • Application JAR created by extract command is not reproductible #48678
  • AOT processing of tests should not be disabled when 'skipTests' is set #48662
  • @SpringBootTest(webEnvironment = WebEnvironment.RANDOM_PORT) is no longer applied to the management server #48653
  • Fix zero-length byte buffer in InspectedContent #48650
  • Can no longer override JacksonJsonHttpMessageConverter with ServerHttpMessageConvertersCustomizer #48635
  • HttpServiceClientProperties incorrectly uses the @ConfigurationProperties annotation on a LinkedHashMap class #48616
  • spring-boot-micrometer-tracing-opentelemetry fails if spring-boot-opentelemetry isn't there #48585
  • App fails to start with starter-webmvc and starter-zipkin #48581
  • Micrometer test modules should have an api dependency on micrometer-observation-test #48386

📔 Documentation

  • Fix typo in REST client documentation #48907
  • Remove duplicate word #48874
  • Document support for configuring arguments passed to Docker Compose #48806
  • The documentation related to EnvironmentPostProcessor links to deprecated interface #48803
  • Update documentation for Buildpack's AOT Cache support #48769
  • Correct docs to use new location for error handling configuration properties #48767
  • Document spring-boot-starter-cloudfoundry on Cloud Foundry Support Page #48675
  • Clarify javadoc to make it clear that HazelcastConfigCustomizer beans are only applied if Hazelcast is configured via a config file #48659
  • Example using excludeDevtools property should document that optional dependencies should be enabled #48641
  • Fix grammar and typos in the reference guide #48601
  • Update Tracing section for Spring Boot 4's modularity #48576

🔨 Dependency Upgrades

  • Upgrade to Classmate 1.7.3 #48783
  • Upgrade to Elasticsearch Client 9.2.3 #48721
  • Upgrade to Hibernate 7.2.1.Final #48857
  • Upgrade to HttpClient5 5.5.2 #48784
  • Upgrade to Jackson 2 Bom 2.20.2 #48910

... (truncated)

Commits
  • fae3545 Release v4.0.2
  • 9fde744 Merge branch '3.5.x' into 4.0.x
  • 650236d Remove breaking and unnecessary Undertow TLS with RSA test
  • 547bc77 Upgrade to Spring Batch 6.0.2
  • 4387cbb Upgrade to Jackson Bom 3.0.4
  • abec26e Polish
  • f677fba Upgrade to Spring Integration 7.0.2
  • 849c2ee Upgrade to Spring GraphQL 2.0.2
  • facd456 Upgrade to Nullability Plugin 0.0.10
  • e99c08f Merge branch '3.5.x' into 4.0.x
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-aspectj from 4.0.1 to 4.0.2

Release notes

Sourced from org.springframework.boot:spring-boot-starter-aspectj's releases.

v4.0.2

⚠️ Noteworthy Changes

  • The dependency on org.eclipse.jetty.ee11:jetty-ee11-servlets has been removed from spring-boot-jetty as it was unnecessary and unused. If your application code depends on a class from jetty-ee11-servlets, declare a dependency on it in your build configuration. #48677

🐞 Bug Fixes

  • No TransactionAutoConfiguration with spring-boot-starter-kafka for Spring Boot 4 #48880
  • Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #48840
  • When a bean condition references a type that is not present, it appears as ? in the condition evaluation report #48838
  • SessionAutoConfiguration creates a DefaultCookieSerializer with a default SameSite of null instead of Lax #48830
  • Setting graphql schema location to "classpath*:graphql/**/" causes failure due to incorrectly packaged test resource #48829
  • Message interpolation by MVC and WebFlux's Validators does not work correctly in a native image #48828
  • CloudFoundry integration fails in Servlet-based web app without a dependency on spring-boot-starter-restclient #48826
  • RestTestClientAutoConfiguration and TestRestTemplateAutoConfiguration should be package-private #48820
  • SSL metrics are no longer auto-configured #48819
  • Actuator /info endpoint fails in Java 25 Native Image (VirtualThreadSchedulerMXBean support) #48812
  • DataSourceBuilder cannot create oracle.ucp.jdbc.PoolDataSourceImpl in a native image #48703
  • The spring-boot-cloudfoundry module should only have an optional dependency on spring-boot-security #48685
  • Application JAR created by extract command is not reproductible #48678
  • AOT processing of tests should not be disabled when 'skipTests' is set #48662
  • @SpringBootTest(webEnvironment = WebEnvironment.RANDOM_PORT) is no longer applied to the management server #48653
  • Fix zero-length byte buffer in InspectedContent #48650
  • Can no longer override JacksonJsonHttpMessageConverter with ServerHttpMessageConvertersCustomizer #48635
  • HttpServiceClientProperties incorrectly uses the @ConfigurationProperties annotation on a LinkedHashMap class #48616
  • spring-boot-micrometer-tracing-opentelemetry fails if spring-boot-opentelemetry isn't there #48585
  • App fails to start with starter-webmvc and starter-zipkin #48581
  • Micrometer test modules should have an api dependency on micrometer-observation-test #48386

📔 Documentation

  • Fix typo in REST client documentation #48907
  • Remove duplicate word #48874
  • Document support for configuring arguments passed to Docker Compose #48806
  • The documentation related to EnvironmentPostProcessor links to deprecated interface #48803
  • Update documentation for Buildpack's AOT Cache support #48769
  • Correct docs to use new location for error handling configuration properties #48767
  • Document spring-boot-starter-cloudfoundry on Cloud Foundry Support Page #48675
  • Clarify javadoc to make it clear that HazelcastConfigCustomizer beans are only applied if Hazelcast is configured via a config file #48659
  • Example using excludeDevtools property should document that optional dependencies should be enabled #48641
  • Fix grammar and typos in the reference guide #48601
  • Update Tracing section for Spring Boot 4's modularity #48576

🔨 Dependency Upgrades

  • Upgrade to Classmate 1.7.3 #48783
  • Upgrade to Elasticsearch Client 9.2.3 #48721
  • Upgrade to Hibernate 7.2.1.Final #48857
  • Upgrade to HttpClient5 5.5.2 #48784
  • Upgrade to Jackson 2 Bom 2.20.2 #48910

... (truncated)

Commits
  • fae3545 Release v4.0.2
  • 9fde744 Merge branch '3.5.x' into 4.0.x
  • 650236d Remove breaking and unnecessary Undertow TLS with RSA test
  • 547bc77 Upgrade to Spring Batch 6.0.2
  • 4387cbb Upgrade to Jackson Bom 3.0.4
  • abec26e Polish
  • f677fba Upgrade to Spring Integration 7.0.2
  • 849c2ee Upgrade to Spring GraphQL 2.0.2
  • facd456 Upgrade to Nullability Plugin 0.0.10
  • e99c08f Merge branch '3.5.x' into 4.0.x
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-data-jpa from 4.0.1 to 4.0.2

Release notes

Sourced from org.springframework.boot:spring-boot-starter-data-jpa's releases.

v4.0.2

⚠️ Noteworthy Changes

  • The dependency on org.eclipse.jetty.ee11:jetty-ee11-servlets has been removed from spring-boot-jetty as it was unnecessary and unused. If your application code depends on a class from jetty-ee11-servlets, declare a dependency on it in your build configuration. #48677

🐞 Bug Fixes

  • No TransactionAutoConfiguration with spring-boot-starter-kafka for Spring Boot 4 #48880
  • Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #48840
  • When a bean condition references a type that is not present, it appears as ? in the condition evaluation report #48838
  • SessionAutoConfiguration creates a DefaultCookieSerializer with a default SameSite of null instead of Lax #48830
  • Setting graphql schema location to "classpath*:graphql/**/" causes failure due to incorrectly packaged test resource #48829
  • Message interpolation by MVC and WebFlux's Validators does not work correctly in a native image #48828
  • CloudFoundry integration fails in Servlet-based web app without a dependency on spring-boot-starter-restclient #48826
  • RestTestClientAutoConfiguration and TestRestTemplateAutoConfiguration should be package-private #48820
  • SSL metrics are no longer auto-configured #48819
  • Actuator /info endpoint fails in Java 25 Native Image (VirtualThreadSchedulerMXBean support) #48812
  • DataSourceBuilder cannot create oracle.ucp.jdbc.PoolDataSourceImpl in a native image #48703
  • The spring-boot-cloudfoundry module should only have an optional dependency on spring-boot-security #48685
  • Application JAR created by extract command is not reproductible #48678
  • AOT processing of tests should not be disabled when 'skipTests' is set #48662
  • @SpringBootTest(webEnvironment = WebEnvironment.RANDOM_PORT) is no longer applied to the management server #48653
  • Fix zero-length byte buffer in InspectedContent #48650
  • Can no longer override JacksonJsonHttpMessageConverter with ServerHttpMessageConvertersCustomizer #48635
  • HttpServiceClientProperties incorrectly uses the @ConfigurationProperties annotation on a LinkedHashMap class #48616
  • spring-boot-micrometer-tracing-opentelemetry fails if spring-boot-opentelemetry isn't there #48585
  • App fails to start with starter-webmvc and starter-zipkin #48581
  • Micrometer test modules should have an api dependency on micrometer-observation-test #48386

📔 Documentation

  • Fix typo in REST client documentation #48907
  • Remove duplicate word #48874
  • Document support for configuring arguments passed to Docker Compose #48806
  • The documentation related to EnvironmentPostProcessor links to deprecated interface #48803
  • Update documentation for Buildpack's AOT Cache support #48769
  • Correct docs to use new location for error handling configuration properties #48767
  • Document spring-boot-starter-cloudfoundry on Cloud Foundry Support Page #48675
  • Clarify javadoc to make it clear that HazelcastConfigCustomizer beans are only applied if Hazelcast is configured via a config file #48659
  • Example using excludeDevtools property should document that optional dependencies should be enabled #48641
  • Fix grammar and typos in the reference guide #48601
  • Update Tracing section for Spring Boot 4's modularity #48576

🔨 Dependency Upgrades

  • Upgrade to Classmate 1.7.3 #48783
  • Upgrade to Elasticsearch Client 9.2.3 #48721
  • Upgrade to Hibernate 7.2.1.Final #48857
  • Upgrade to HttpClient5 5.5.2 #48784
  • Upgrade to Jackson 2 Bom 2.20.2 #48910

... (truncated)

Commits
  • fae3545 Release v4.0.2
  • 9fde744 Merge branch '3.5.x' into 4.0.x
  • 650236d Remove breaking and unnecessary Undertow TLS with RSA test
  • 547bc77 Upgrade to Spring Batch 6.0.2
  • 4387cbb Upgrade to Jackson Bom 3.0.4
  • abec26e Polish
  • f677fba Upgrade to Spring Integration 7.0.2
  • 849c2ee Upgrade to Spring GraphQL 2.0.2
  • facd456 Upgrade to Nullability Plugin 0.0.10
  • e99c08f Merge branch '3.5.x' into 4.0.x
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-flyway from 4.0.1 to 4.0.2

Release notes

Sourced from org.springframework.boot:spring-boot-starter-flyway's releases.

v4.0.2

⚠️ Noteworthy Changes

  • The dependency on org.eclipse.jetty.ee11:jetty-ee11-servlets has been removed from spring-boot-jetty as it was unnecessary and unused. If your application code depends on a class from jetty-ee11-servlets, declare a dependency on it in your build configuration. #48677

🐞 Bug Fixes

  • No TransactionAutoConfiguration with spring-boot-starter-kafka for Spring Boot 4 #48880
  • Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #48840
  • When a bean condition references a type that is not present, it appears as ? in the condition evaluation report #48838
  • SessionAutoConfiguration creates a DefaultCookieSerializer with a default SameSite of null instead of Lax #48830
  • Setting graphql schema location to "classpath*:graphql/**/" causes failure due to incorrectly packaged test resource #48829
  • Message interpolation by MVC and WebFlux's Validators does not work correctly in a native image #48828
  • CloudFoundry integration fails in Servlet-based web app without a dependency on spring-boot-starter-restclient #48826
  • RestTestClientAutoConfiguration and TestRestTemplateAutoConfiguration should be package-private #48820
  • SSL metrics are no longer auto-configured #48819
  • Actuator /info endpoint fails in Java 25 Native Image (VirtualThreadSchedulerMXBean support) #48812
  • DataSourceBuilder cannot create oracle.ucp.jdbc.PoolDataSourceImpl in a native image #48703
  • The spring-boot-cloudfoundry module should only have an optional dependency on spring-boot-security #48685
  • Application JAR created by extract command is not reproductible #48678
  • AOT processing of tests should not be disabled when 'skipTests' is set #48662
  • @SpringBootTest(webEnvironment = WebEnvironment.RANDOM_PORT) is no longer applied to the management server #48653
  • Fix zero-length byte buffer in InspectedContent #48650
  • Can no longer override JacksonJsonHttpMessageConverter with ServerHttpMessageConvertersCustomizer #48635
  • HttpServiceClientProperties incorrectly uses the @ConfigurationProperties annotation on a LinkedHashMap class #48616
  • spring-boot-micrometer-tracing-opentelemetry fails if spring-boot-opentelemetry isn't there #48585
  • App fails to start with starter-webmvc and starter-zipkin #48581
  • Micrometer test modules should have an api dependency on micrometer-observation-test #48386

📔 Documentation

  • Fix typo in REST client documentation #48907
  • Remove duplicate word #48874
  • Document support for configuring arguments passed to Docker Compose #48806
  • The documentation related to EnvironmentPostProcessor links to deprecated interface #48803
  • Update documentation for Buildpack's AOT Cache support #48769
  • Correct docs to use new location for error handling configuration properties #48767
  • Document spring-boot-starter-cloudfoundry on Cloud Foundry Support Page #48675
  • Clarify javadoc to make it clear that HazelcastConfigCustomizer beans are only applied if Hazelcast is configured via a config file #48659
  • Example using excludeDevtools property should document that optional dependencies should be enabled #48641
  • Fix grammar and typos in the reference guide #48601
  • Update Tracing section for Spring Boot 4's modularity #48576

🔨 Dependency Upgrades

  • Upgrade to Classmate 1.7.3 #48783
  • Upgrade to Elasticsearch Client 9.2.3 #48721
  • Upgrade to Hibernate 7.2.1.Final #48857
  • Upgrade to HttpClient5 5.5.2 #48784
  • Upgrade to Jackson 2 Bom 2.20.2 #48910

... (truncated)

Commits
  • fae3545 Release v4.0.2
  • 9fde744 Merge branch '3.5.x' into 4.0.x
  • 650236d Remove breaking and unnecessary Undertow TLS with RSA test
  • 547bc77 Upgrade to Spring Batch 6.0.2
  • 4387cbb Upgrade to Jackson Bom 3.0.4
  • abec26e Polish
  • f677fba Upgrade to Spring Integration 7.0.2
  • 849c2ee Upgrade to Spring GraphQL 2.0.2
  • facd456 Upgrade to Nullability Plugin 0.0.10
  • e99c08f Merge branch '3.5.x' into 4.0.x
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-jackson from 4.0.1 to 4.0.2

Release notes

Sourced from org.springframework.boot:spring-boot-starter-jackson's releases.

v4.0.2

⚠️ Noteworthy Changes

  • The dependency on org.eclipse.jetty.ee11:jetty-ee11-servlets has been removed from spring-boot-jetty as it was unnecessary and unused. If your application code depends on a class from jetty-ee11-servlets, declare a dependency on it in your build configuration. #48677

🐞 Bug Fixes

  • No TransactionAutoConfiguration with spring-boot-starter-kafka for Spring Boot 4 #48880
  • Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #48840
  • When a bean condition references a type that is not present, it appears as ? in the condition evaluation report #48838
  • SessionAutoConfiguration creates a DefaultCookieSerializer with a default SameSite of null instead of Lax #48830
  • Setting graphql schema location to "classpath*:graphql/**/" causes failure due to incorrectly packaged test resource #48829
  • Message interpolation by MVC and WebFlux's Validators does not work correctly in a native image #48828
  • CloudFoundry integration fails in Servlet-based web app without a dependency on spring-boot-starter-restclient #48826
  • RestTestClientAutoConfiguration and TestRestTemplateAutoConfiguration should be package-private #48820
  • SSL metrics are no longer auto-configured #48819
  • Actuator /info endpoint fails in Java 25 Native Image (VirtualThreadSchedulerMXBean support) #48812
  • DataSourceBuilder cannot create oracle.ucp.jdbc.PoolDataSourceImpl in a native image #48703
  • The spring-boot-cloudfoundry module should only have an optional dependency on spring-boot-security #48685
  • Application JAR created by extract command is not reproductible #48678
  • AOT processing of tests should not be disabled when 'skipTests' is set #48662
  • @SpringBootTest(webEnvironment = WebEnvironment.RANDOM_PORT) is no longer applied to the management server #48653
  • Fix zero-length byte buffer in InspectedContent #48650
  • Can no longer override JacksonJsonHttpMessageConverter with ServerHttpMessageConvertersCustomizer #48635
  • HttpServiceClientProperties incorrectly uses the @ConfigurationProperties annotation on a LinkedHashMap class #48616
  • spring-boot-micrometer-tracing-opentelemetry fails if spring-boot-opentelemetry isn't there #48585
  • App fails to start with starter-webmvc and starter-zipkin #48581
  • Micrometer test modules should have an api dependency on micrometer-observation-test #48386

📔 Documentation

  • Fix typo in REST client documentation #48907
  • Remove duplicate word #48874
  • Document support for configuring arguments passed to Docker Compose #48806
  • The documentation related to EnvironmentPostProcessor links to deprecated interface #48803
  • Update documentation for Buildpack's AOT Cache support #48769
  • Correct docs to use new location for error handling configuration properties #48767
  • Document spring-boot-starter-cloudfoundry on Cloud Foundry Support Page #48675
  • Clarify javadoc to make it clear that HazelcastConfigCustomizer beans are only applied if Hazelcast is configured via a config file #48659
  • Example using excludeDevtools property should document that optional dependencies should be enabled #48641
  • Fix grammar and typos in the reference guide #48601
  • Update Tracing section for Spring Boot 4's modularity #48576

🔨 Dependency Upgrades

  • Upgrade to Classmate 1.7.3 #48783
  • Upgrade to Elasticsearch Client 9.2.3 #48721
  • Upgrade to Hibernate 7.2.1.Final #48857
  • Upgrade to HttpClient5 5.5.2 #48784
  • Upgrade to Jackson 2 Bom 2.20.2 #48910

... (truncated)

Commits
  • fae3545 Release v4.0.2
  • 9fde744 Merge branch '3.5.x' into 4.0.x
  • 650236d Remove breaking and unnecessary Undertow TLS with RSA test
  • 547bc77 Upgrade to Spring Batch 6.0.2
  • 4387cbb Upgrade to Jackson Bom 3.0.4
  • abec26e Polish
  • f677fba Upgrade to Spring Integration 7.0.2
  • 849c2ee Upgrade to Spring GraphQL 2.0.2
  • facd456 Upgrade to Nullability Plugin 0.0.10
  • e99c08f Merge branch '3.5.x' into 4.0.x
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-restclient from 4.0.1 to 4.0.2

Release notes

Sourced from org.springframework.boot:spring-boot-starter-restclient's releases.

v4.0.2

⚠️ Noteworthy Changes

  • The dependency on org.eclipse.jetty.ee11:jetty-ee11-servlets has been removed from spring-boot-jetty as it was unnecessary and unused. If your application code depends on a class from jetty-ee11-servlets, declare a dependency on it in your build configuration. #48677

🐞 Bug Fixes

  • No TransactionAutoConfiguration with spring-boot-starter-kafka for Spring Boot 4 #48880
  • Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #48840
  • When a bean condition references a type that is not present, it appears as ? in the condition evaluation report #48838
  • SessionAutoConfiguration creates a DefaultCookieSerializer with a default SameSite of null instead of Lax #48830
  • Setting graphql schema location to "classpath*:graphql/**/" causes failure due to incorrectly packaged test resource #48829
  • Message interpolation by MVC and WebFlux's Validators does not work correctly in a native image #48828
  • CloudFoundry integration fails in Servlet-based web app without a dependency on spring-boot-starter-restclient #48826
  • RestTestClientAutoConfiguration and TestRestTemplateAutoConfiguration should be package-private #48820
  • SSL metrics are no longer auto-configured #48819
  • Actuator /info endpoint fails in Java 25 Native Image (VirtualThreadSchedulerMXBean support) #48812
  • DataSourceBuilder cannot create oracle.ucp.jdbc.PoolDataSourceImpl in a native image #48703
  • The spring-boot-cloudfoundry module should only have an optional dependency on spring-boot-security #48685
  • Application JAR created by extract command is not reproductible #48678
  • AOT processing of tests should not be disabled when 'skipTests' is set #48662
  • @SpringBootTest(webEnvironment = WebEnvironment.RANDOM_PORT) is no longer applied to the management server #48653
  • Fix zero-length byte buffer in InspectedContent #48650
  • Can no longer override JacksonJsonHttpMessageConverter with ServerHttpMessageConvertersCustomizer #48635
  • HttpServiceClientProperties incorrectly uses the @ConfigurationProperties annotation on a LinkedHashMap class #48616
  • spring-boot-micrometer-tracing-opentelemetry fails if spring-boot-opentelemetry isn't there #48585
  • App fails to start with starter-webmvc and starter-zipkin #48581
  • Micrometer test modules should have an api dependency on micrometer-observation-test #48386

📔 Documentation

  • Fix typo in REST client documentation #48907
  • Remove duplicate word #48874
  • Document support for configuring arguments passed to Docker Compose #48806
  • The documentation related to EnvironmentPostProcessor links to deprecated interface #48803
  • Update documentation for Buildpack's AOT Cache support #48769
  • Correct docs to use new location for error handling configuration properties #48767
  • Document spring-boot-starter-cloudfoundry on Cloud Foundry Support Page #48675
  • Clarify javadoc to make it clear that HazelcastConfigCustomizer beans are only applied if Hazelcast is configured via a config file #48659
  • Example using excludeDevtools property should document that optional dependencies should be enabled #48641
  • Fix grammar and typos in the reference guide #48601
  • Update Tracing section for Spring Boot 4's modularity #48576

🔨 Dependency Upgrades

  • Upgrade to Classmate 1.7.3 #48783
  • Upgrade to Elasticsearch Client 9.2.3 #48721
  • Upgrade to Hibernate 7.2.1.Final #48857
  • Upgrade to HttpClient5 5.5.2 #48784
  • Upgrade to Jackson 2 Bom 2.20.2 #48910

... (truncated)

Commits
  • fae3545 Release v4.0.2
  • 9fde744 Merge branch '3.5.x' into 4.0.x
  • 650236d Remove breaking and unnecessary Undertow TLS with RSA test
  • 547bc77 Upgrade to Spring Batch 6.0.2
  • 4387cbb Upgrade to Jackson Bom 3.0.4
  • abec26e Polish
  • f677fba Upgrade to Spring Integration 7.0.2
  • 849c2ee Upgrade to Spring GraphQL 2.0.2
  • facd456 Upgrade to Nullability Plugin 0.0.10
  • e99c08f Merge branch '3.5.x' into 4.0.x
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-thymeleaf from 4.0.1 to 4.0.2

Release notes

Sourced from org.springframework.boot:spring-boot-starter-thymeleaf's releases.

v4.0.2

⚠️ Noteworthy Changes

  • The dependency on org.eclipse.jetty.ee11:jetty-ee11-servlets has been removed from spring-boot-jetty as it was unnecessary and unused. If your application code depends on a class from jetty-ee11-servlets, declare a dependency on it in your build configuration. #48677

🐞 Bug Fixes

  • No TransactionAutoConfiguration with spring-boot-starter-kafka for Spring Boot 4 #48880
  • Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #48840
  • When a bean condition references a type that is not present, it appears as ? in the condition evaluation report #48838
  • SessionAutoConfiguration creates a DefaultCookieSerializer with a default SameSite of null instead of Lax #48830
  • Setting graphql schema location to "classpath*:graphql/**/" causes failure due to incorrectly packaged test resource #48829
  • Message interpolation by MVC and WebFlux's Validators does not work correctly in a native image #48828
  • CloudFoundry integration fails in Servlet-based web app without a dependency on spring-boot-starter-restclient #48826
  • RestTestClientAutoConfiguration and TestRestTemplateAutoConfiguration should be package-private #48820
  • SSL metrics are no longer auto-configured #48819
  • Actuator /info endpoint fails in Java 25 Native Image (VirtualThreadSchedulerMXBean support) #48812
  • DataSourceBuilder cannot create oracle.ucp.jdbc.PoolDataSourceImpl in a native image #48703
  • The spring-boot-cloudfoundry module should only have an optional dependency on spring-boot-security #48685
  • Application JAR created by extract command is not reproductible #48678
  • AOT processing of tests should not be disabled when 'skipTests' is set #48662
  • @SpringBootTest(webEnvironment = WebEnvironment.RANDOM_PORT) is no longer applied to the management server #48653
  • Fix zero-length byte buffer in InspectedContent #48650
  • Can no longer override JacksonJsonHttpMessageConverter with ServerHttpMessageConvertersCustomizer #48635
  • HttpServiceClientProperties incorrectly uses the @ConfigurationProperties annotation on a LinkedHashMap class #48616
  • spring-boot-micrometer-tracing-opentelemetry fails if spring-boot-opentelemetry isn't there #48585
  • App fails to start with starter-webmvc and starter-zipkin #48581
  • Micrometer test modules should have an api dependency on micrometer-observation-test #48386

📔 Documentation

  • Fix typo in REST client documentation #48907
  • Remove duplicate word #48874
  • Document support for configuring arguments passed to Docker Compose #48806
  • The documentation related to EnvironmentPostProcessor links to deprecated interface #48803
  • Update documentation for Buildpack's AOT Cache support #48769
  • Correct docs to use new location for error handling configuration properties #48767
  • Document spring-boot-starter-cloudfoundry on Cloud Foundry Support Page #48675
  • Clarify javadoc to make it clear that HazelcastConfigCustomizer beans are only applied if Hazelcast is configured via a config file #48659
  • Example using excludeDevtools property should document that optional dependencies should be enabled #48641
  • Fix grammar and typos in the reference guide #48601
  • Update Tracing section for Spring Boot 4's modularity #48576

🔨 Dependency Upgrades

  • Upgrade to Classmate 1.7.3 #48783
  • Upgrade to Elasticsearch Client 9.2.3 #48721
  • Upgrade to Hibernate 7.2.1.Final #48857
  • Upgrade to HttpClient5 5.5.2 #48784
  • Upgrade to Jackson 2 Bom 2.20.2 #48910

... (truncated)

Commits
  • fae3545 Release v4.0.2
  • 9fde744 Merge branch '3.5.x' into 4.0.x
  • 650236d Remove breaking and unnecessary Undertow TLS with RSA test
  • 547bc77 Upgrade to Spring Batch 6.0.2
  • 4387cbb Upgrade to Jackson Bom 3.0.4
  • abec26e Polish
  • f677fba Upgrade to Spring Integration 7.0.2
  • 849c2ee Upgrade to Spring GraphQL 2.0.2
  • facd456 Upgrade to Nullability Plugin 0.0.10
  • e99c08f Merge branch '3.5.x' ...

    Description has been truncated

@dependabot
chore(deps): bump springBoot from 4.0.1 to 4.0.2
570606b 
Bumps `springBoot` from 4.0.1 to 4.0.2.

Updates `org.springframework.boot:spring-boot-starter-actuator` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.1...v4.0.2)

Updates `org.springframework.boot:spring-boot-starter-aspectj` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.1...v4.0.2)

Updates `org.springframework.boot:spring-boot-starter-data-jpa` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.1...v4.0.2)

Updates `org.springframework.boot:spring-boot-starter-flyway` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.1...v4.0.2)

Updates `org.springframework.boot:spring-boot-starter-jackson` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.1...v4.0.2)

Updates `org.springframework.boot:spring-boot-starter-restclient` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.1...v4.0.2)

Updates `org.springframework.boot:spring-boot-starter-thymeleaf` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.1...v4.0.2)

Updates `org.springframework.boot:spring-boot-starter-validation` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.1...v4.0.2)

Updates `org.springframework.boot:spring-boot-starter-webmvc` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.1...v4.0.2)

Updates `org.springframework.boot:spring-boot-devtools` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.1...v4.0.2)

Updates `org.springframework.boot:spring-boot-docker-compose` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.1...v4.0.2)

Updates `org.springframework.boot:spring-boot-configuration-processor` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.1...v4.0.2)

Updates `org.springframework.boot:spring-boot-starter-test` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.1...v4.0.2)

Updates `org.springframework.boot:spring-boot-starter-webmvc-test` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.1...v4.0.2)

Updates `org.springframework.boot` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.1...v4.0.2)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-actuator
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot:spring-boot-starter-aspectj
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot:spring-boot-starter-data-jpa
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot:spring-boot-starter-flyway
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot:spring-boot-starter-jackson
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot:spring-boot-starter-restclient
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot:spring-boot-starter-thymeleaf
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot:spring-boot-starter-validation
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot:spring-boot-starter-webmvc
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot:spring-boot-devtools
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot:spring-boot-docker-compose
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot:spring-boot-configuration-processor
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot:spring-boot-starter-test
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot:spring-boot-starter-webmvc-test
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Feb 10, 2026
@github-actions
Copy link

github-actions bot commented Feb 10, 2026

Code Coverage

Total Project Coverage 93.51%

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants