Update dependency org.springframework.boot:spring-boot-starter-parent to v4.1.0 #48

Merged
renovate merged 1 commit from renovate/org.springframework.boot-spring-boot-starter-parent-4.x into develop 2026-06-11 00:06:03 +02:00
Collaborator

This PR contains the following updates:

Package Type Update Change
org.springframework.boot:spring-boot-starter-parent (source) parent minor 4.0.64.1.0

Release Notes

spring-projects/spring-boot (org.springframework.boot:spring-boot-starter-parent)

v4.1.0

Compare Source

Full release notes for Spring Boot 4.1 are available on the wiki.

New Features

  • Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #​50211
  • Reduce memory consumption when repeatedly calling WritableJson.toByteArray #​49428

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #​50747
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #​50745
  • Embedded LDAP SSL should not be enabled when its bundle is empty #​50700
  • InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 #​50668
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #​50645
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #​50635
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #​50633
  • Configuration property metadata includes incorrect class references #​50632
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #​50618
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #​50612
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #​50610
  • SpringJtaPlatform should have been deprecated since 4.1.0-M3 #​50592
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #​50510
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #​50417
  • Created StackTracePrinter instances have no access to the Environment #​50414
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #​50412
  • Buildpack module does not validate long-to-int casts #​50410
  • Gradle gRPC support fails if protobuf-java dependency is used instead of protobuf-java-util #​50405
  • GraphQL WebSocket support does not configure allowed origins #​50394
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #​50298
  • Meter registries are not removed from the global registry when the context is closed #​50287
  • DataSourceBuilder cannot derive a DataSource from a lazy connection proxy #​50271
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #​50266
  • Bean definitions can be added with an initializer before setAllowBeanDefinitionOverriding is called #​50264
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #​50261
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #​50258
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #​50234
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #​50228
  • Missing dependency management for spring-boot-web-server-test #​50224
  • Spring Batch support for MongoDB modules are not included in dependency management #​50223
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #​50216
  • GrpcServerHealthScheduler is not started in servlet environments #​50209
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #​50204

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #​50647
  • Document SSL reloading with Let's Encrypt #​50630
  • Remove the use of Optional from Data Neo4j repository examples #​50622
  • Fix typos in documentation #​50620
  • Clarify dependency requirement for Bean Validation support #​50614
  • Document Java 25 requirement for AOT cache #​50485
  • Add links for Java CAS Client Spring Boot Starter #​50285
  • Document known testcontainers lifecycle issues #​50220
  • Document adding multiple connectors for Jetty #​50218
  • Polish InvalidConfigurationPropertyValueException constructor javadoc #​50214
  • Fix typo in Spring Security OAuth2 client registration documentation #​50199

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Abdlatif-nabgha, @​DragonFSKY, @​Kapil-chn7, @​Kimgyuilli, @​SJvaca30, @​SebTardif, @​ares333, @​codingkiddo, @​dlwldnjs1009, @​eddumelendez, @​henriquejsza, @​igormukhin, @​johnnypwong, @​kwondh5217, @​leestana01, @​mheath, @​mmoayyed, @​msridhar, @​ngocnhan-tran1996, @​nosan, @​quaff, @​scordio, @​vinhhieu21, @​vpavic, @​won-seoop, and @​zxuhan

v4.0.7

Compare Source

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #​50746
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #​50744
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #​50640
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #​50634
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #​50617
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #​50611
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #​50609
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #​50602
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #​50509
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #​50416
  • Created StackTracePrinter instances have no access to the Environment #​50413
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #​50411
  • Buildpack module does not validate long-to-int casts #​50409
  • GraphQL WebSocket support does not configure allowed origins #​50393
  • Configuration property metadata includes incorrect class references #​50375
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #​50297
  • Meter registries are not removed from the global registry when the context is closed #​50286
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #​50265
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #​50260
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #​50257
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #​50233
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #​50227
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #​50215
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #​50201

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #​50646
  • Document SSL reloading with Let's Encrypt #​50629
  • Remove the use of Optional from Data Neo4j repository examples #​50621
  • Fix typos in documentation #​50619
  • Clarify dependency requirement for Bean Validation support #​50613
  • Document Java 25 requirement for AOT cache #​50484
  • Add links for Java CAS Client Spring Boot Starter #​50281
  • Document known testcontainers lifecycle issues #​50219
  • Document adding multiple connectors for Jetty #​50217
  • Polish InvalidConfigurationPropertyValueException constructor javadoc #​50213
  • Fix typo in Spring Security OAuth2 client registration documentation #​50198

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Abdlatif-nabgha, @​DragonFSKY, @​Kapil-chn7, @​Kimgyuilli, @​SJvaca30, @​SebTardif, @​ares333, @​codingkiddo, @​dlwldnjs1009, @​henriquejsza, @​igormukhin, @​johnnypwong, @​kwondh5217, @​leestana01, @​mheath, @​mmoayyed, @​msridhar, @​ngocnhan-tran1996, @​nosan, @​quaff, @​scordio, @​vinhhieu21, @​won-seoop, and @​zxuhan


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [org.springframework.boot:spring-boot-starter-parent](https://spring.io/projects/spring-boot) ([source](https://github.com/spring-projects/spring-boot)) | parent | minor | `4.0.6` → `4.1.0` | --- ### Release Notes <details> <summary>spring-projects/spring-boot (org.springframework.boot:spring-boot-starter-parent)</summary> ### [`v4.1.0`](https://github.com/spring-projects/spring-boot/releases/tag/v4.1.0) [Compare Source](https://github.com/spring-projects/spring-boot/compare/v4.0.7...v4.1.0) Full [release notes for Spring Boot 4.1](https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-4.1-Release-Notes) are available on the wiki. #### :star: New Features - Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause [#&#8203;50211](https://github.com/spring-projects/spring-boot/issues/50211) - Reduce memory consumption when repeatedly calling WritableJson.toByteArray [#&#8203;49428](https://github.com/spring-projects/spring-boot/issues/49428) #### :lady\_beetle: Bug Fixes - MailSender auto-configuration does not enable hostname verification [#&#8203;50747](https://github.com/spring-projects/spring-boot/issues/50747) - Artemis auto-configuration uses a predictable default location for the embedded broker's data [#&#8203;50745](https://github.com/spring-projects/spring-boot/issues/50745) - Embedded LDAP SSL should not be enabled when its bundle is empty [#&#8203;50700](https://github.com/spring-projects/spring-boot/pull/50700) - InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 [#&#8203;50668](https://github.com/spring-projects/spring-boot/issues/50668) - NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket [#&#8203;50645](https://github.com/spring-projects/spring-boot/issues/50645) - SSL should not be enabled when a SSL bundle is overridden to an empty string [#&#8203;50635](https://github.com/spring-projects/spring-boot/issues/50635) - Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver [#&#8203;50633](https://github.com/spring-projects/spring-boot/issues/50633) - Configuration property metadata includes incorrect class references [#&#8203;50632](https://github.com/spring-projects/spring-boot/issues/50632) - Docker Compose support does not restore thread interrupt flag when catching InterruptedException [#&#8203;50618](https://github.com/spring-projects/spring-boot/issues/50618) - RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string [#&#8203;50612](https://github.com/spring-projects/spring-boot/issues/50612) - NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles [#&#8203;50610](https://github.com/spring-projects/spring-boot/issues/50610) - SpringJtaPlatform should have been deprecated since 4.1.0-M3 [#&#8203;50592](https://github.com/spring-projects/spring-boot/issues/50592) - Layer written outside the output location of '//' exception is thrown when using extract layers in root directory [#&#8203;50510](https://github.com/spring-projects/spring-boot/issues/50510) - ConfigurationPropertiesReportEndpoint exposes AOP proxy internals [#&#8203;50417](https://github.com/spring-projects/spring-boot/issues/50417) - Created StackTracePrinter instances have no access to the Environment [#&#8203;50414](https://github.com/spring-projects/spring-boot/issues/50414) - MappingsEndpoint reports the context's own ID as parentId when a parent exists [#&#8203;50412](https://github.com/spring-projects/spring-boot/issues/50412) - Buildpack module does not validate long-to-int casts [#&#8203;50410](https://github.com/spring-projects/spring-boot/issues/50410) - Gradle gRPC support fails if protobuf-java dependency is used instead of protobuf-java-util [#&#8203;50405](https://github.com/spring-projects/spring-boot/pull/50405) - GraphQL WebSocket support does not configure allowed origins [#&#8203;50394](https://github.com/spring-projects/spring-boot/issues/50394) - Spring Boot Loader Does Not Support RSA and EC Signed Jars [#&#8203;50298](https://github.com/spring-projects/spring-boot/issues/50298) - Meter registries are not removed from the global registry when the context is closed [#&#8203;50287](https://github.com/spring-projects/spring-boot/issues/50287) - DataSourceBuilder cannot derive a DataSource from a lazy connection proxy [#&#8203;50271](https://github.com/spring-projects/spring-boot/pull/50271) - Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation [#&#8203;50266](https://github.com/spring-projects/spring-boot/issues/50266) - Bean definitions can be added with an initializer before setAllowBeanDefinitionOverriding is called [#&#8203;50264](https://github.com/spring-projects/spring-boot/issues/50264) - EndpointRequest links matcher unnecessarily matches HTTP methods other than GET [#&#8203;50261](https://github.com/spring-projects/spring-boot/issues/50261) - Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource [#&#8203;50258](https://github.com/spring-projects/spring-boot/issues/50258) - ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time [#&#8203;50234](https://github.com/spring-projects/spring-boot/issues/50234) - NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms [#&#8203;50228](https://github.com/spring-projects/spring-boot/issues/50228) - Missing dependency management for spring-boot-web-server-test [#&#8203;50224](https://github.com/spring-projects/spring-boot/issues/50224) - Spring Batch support for MongoDB modules are not included in dependency management [#&#8203;50223](https://github.com/spring-projects/spring-boot/pull/50223) - Apply HTML escaping to timestamp attribute in Whitelabel error page [#&#8203;50216](https://github.com/spring-projects/spring-boot/issues/50216) - GrpcServerHealthScheduler is not started in servlet environments [#&#8203;50209](https://github.com/spring-projects/spring-boot/issues/50209) - Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat [#&#8203;50204](https://github.com/spring-projects/spring-boot/issues/50204) #### :notebook\_with\_decorative\_cover: Documentation - Fix reference to Gradle documentation for module replacement [#&#8203;50647](https://github.com/spring-projects/spring-boot/issues/50647) - Document SSL reloading with Let's Encrypt [#&#8203;50630](https://github.com/spring-projects/spring-boot/issues/50630) - Remove the use of Optional from Data Neo4j repository examples [#&#8203;50622](https://github.com/spring-projects/spring-boot/issues/50622) - Fix typos in documentation [#&#8203;50620](https://github.com/spring-projects/spring-boot/issues/50620) - Clarify dependency requirement for Bean Validation support [#&#8203;50614](https://github.com/spring-projects/spring-boot/issues/50614) - Document Java 25 requirement for AOT cache [#&#8203;50485](https://github.com/spring-projects/spring-boot/issues/50485) - Add links for Java CAS Client Spring Boot Starter [#&#8203;50285](https://github.com/spring-projects/spring-boot/issues/50285) - Document known testcontainers lifecycle issues [#&#8203;50220](https://github.com/spring-projects/spring-boot/issues/50220) - Document adding multiple connectors for Jetty [#&#8203;50218](https://github.com/spring-projects/spring-boot/issues/50218) - Polish InvalidConfigurationPropertyValueException constructor javadoc [#&#8203;50214](https://github.com/spring-projects/spring-boot/issues/50214) - Fix typo in Spring Security OAuth2 client registration documentation [#&#8203;50199](https://github.com/spring-projects/spring-boot/issues/50199) #### :hammer: Dependency Upgrades - Upgrade to ActiveMQ 6.2.6 [#&#8203;50652](https://github.com/spring-projects/spring-boot/issues/50652) - Upgrade to Byte Buddy 1.18.10 [#&#8203;50693](https://github.com/spring-projects/spring-boot/issues/50693) - Upgrade to [Caffeine 3.2.4](https://github.com/ben-manes/caffeine/releases/tag/v3.2.4) [#&#8203;50338](https://github.com/spring-projects/spring-boot/issues/50338) - Upgrade to Cassandra Driver 4.19.3 [#&#8203;50654](https://github.com/spring-projects/spring-boot/issues/50654) - Upgrade to [Couchbase Client 3.11.3](https://docs.couchbase.com/java-sdk/current/project-docs/sdk-release-notes.html) [#&#8203;50576](https://github.com/spring-projects/spring-boot/issues/50576) - Upgrade to Elasticsearch Client 9.4.2 [#&#8203;50655](https://github.com/spring-projects/spring-boot/issues/50655) - Upgrade to Glassfish JAXB 4.0.9 [#&#8203;50656](https://github.com/spring-projects/spring-boot/issues/50656) - Upgrade to Groovy 5.0.6 [#&#8203;50340](https://github.com/spring-projects/spring-boot/issues/50340) - Upgrade to Hibernate 7.4.1.Final [#&#8203;50732](https://github.com/spring-projects/spring-boot/issues/50732) - Upgrade to [Infinispan 16.1.4](https://github.com/infinispan/infinispan/releases/tag/16.1.4) [#&#8203;50342](https://github.com/spring-projects/spring-boot/issues/50342) - Upgrade to Jackson 2 Bom 2.21.4 [#&#8203;50657](https://github.com/spring-projects/spring-boot/issues/50657) - Upgrade to Jackson Bom 3.1.4 [#&#8203;50658](https://github.com/spring-projects/spring-boot/issues/50658) - Upgrade to Jakarta Json Bind 3.0.2 [#&#8203;50659](https://github.com/spring-projects/spring-boot/issues/50659) - Upgrade to [Jakarta XML Bind 4.0.5](https://github.com/jakartaee/jaxb-api/releases/tag/4.0.5) [#&#8203;50345](https://github.com/spring-projects/spring-boot/issues/50345) - Upgrade to Jaxen 2.0.6 [#&#8203;50710](https://github.com/spring-projects/spring-boot/issues/50710) - Upgrade to [Jetty 12.1.10](https://github.com/jetty/jetty.project/releases/tag/jetty-12.1.10) [#&#8203;50661](https://github.com/spring-projects/spring-boot/issues/50661) - Upgrade to Jetty Reactive HTTPClient 4.1.5 [#&#8203;50711](https://github.com/spring-projects/spring-boot/issues/50711) - Upgrade to jOOQ 3.21.5 [#&#8203;50712](https://github.com/spring-projects/spring-boot/issues/50712) - Upgrade to [Kafka 4.2.1](https://downloads.apache.org/kafka/4.2.1/RELEASE_NOTES.html) [#&#8203;50662](https://github.com/spring-projects/spring-boot/issues/50662) - Upgrade to [Kotlin 2.3.21](https://github.com/JetBrains/kotlin/releases/tag/v2.3.21) [#&#8203;50347](https://github.com/spring-projects/spring-boot/issues/50347) - Upgrade to [Lettuce 7.5.2.RELEASE](https://github.com/redis/lettuce/releases/tag/7.5.2.RELEASE) [#&#8203;50581](https://github.com/spring-projects/spring-boot/issues/50581) - Upgrade to [Liquibase 5.0.3](https://github.com/liquibase/liquibase/releases/tag/v5.0.3) [#&#8203;50582](https://github.com/spring-projects/spring-boot/issues/50582) - Upgrade to Logback 1.5.34 [#&#8203;50663](https://github.com/spring-projects/spring-boot/issues/50663) - Upgrade to [Maven Enforcer Plugin 3.6.3](https://github.com/apache/maven-enforcer/releases/tag/enforcer-3.6.3) [#&#8203;50583](https://github.com/spring-projects/spring-boot/issues/50583) - Upgrade to [Maven Failsafe Plugin 3.5.6](https://github.com/apache/maven-surefire/releases/tag/surefire-3.5.6) [#&#8203;50664](https://github.com/spring-projects/spring-boot/issues/50664) - Upgrade to [Maven Surefire Plugin 3.5.6](https://github.com/apache/maven-surefire/releases/tag/surefire-3.5.6) [#&#8203;50665](https://github.com/spring-projects/spring-boot/issues/50665) - Upgrade to [Micrometer 1.17.0](https://github.com/micrometer-metrics/micrometer/releases/tag/v1.17.0) [#&#8203;50559](https://github.com/spring-projects/spring-boot/issues/50559) - Upgrade to [Micrometer Tracing 1.7.0](https://github.com/micrometer-metrics/tracing/releases/tag/v1.7.0) [#&#8203;50560](https://github.com/spring-projects/spring-boot/issues/50560) - Upgrade to MongoDB 5.8.0 [#&#8203;50608](https://github.com/spring-projects/spring-boot/issues/50608) - Upgrade to [Native Build Tools Plugin 1.1.1](https://github.com/graalvm/native-build-tools/releases/tag/1.1.1) [#&#8203;50585](https://github.com/spring-projects/spring-boot/issues/50585) - Upgrade to [Neo4j Java Driver 6.1.0](https://github.com/neo4j/neo4j-java-driver/releases/tag/6.1.0) [#&#8203;50586](https://github.com/spring-projects/spring-boot/issues/50586) - Upgrade to Netty 4.2.15.Final [#&#8203;50666](https://github.com/spring-projects/spring-boot/issues/50666) - Upgrade to [OpenTelemetry 1.62.0](https://github.com/open-telemetry/opentelemetry-java/releases/tag/v1.62.0) [#&#8203;50588](https://github.com/spring-projects/spring-boot/issues/50588) - Upgrade to Oracle Database 23.26.2.0.0 [#&#8203;50667](https://github.com/spring-projects/spring-boot/issues/50667) - Upgrade to [Postgresql 42.7.11](https://github.com/pgjdbc/pgjdbc/releases/tag/REL42.7.11) [#&#8203;50349](https://github.com/spring-projects/spring-boot/issues/50349) - Upgrade to [Protobuf Java 4.34.2](https://github.com/protocolbuffers/protobuf/releases/tag/v4.34.2) [#&#8203;50590](https://github.com/spring-projects/spring-boot/issues/50590) - Upgrade to [Protobuf Maven Plugin 5.1.4](https://github.com/ascopes/protobuf-maven-plugin/releases/tag/v5.1.4) [#&#8203;50589](https://github.com/spring-projects/spring-boot/issues/50589) - Upgrade to Pulsar 4.2.2 [#&#8203;50713](https://github.com/spring-projects/spring-boot/issues/50713) - Upgrade to [R2DBC MySQL 1.4.2](https://github.com/asyncer-io/r2dbc-mysql/releases/tag/r2dbc-mysql-1.4.2) [#&#8203;50351](https://github.com/spring-projects/spring-boot/issues/50351) - Upgrade to [Reactor Bom 2025.0.6](https://github.com/reactor/reactor/releases/tag/2025.0.6) [#&#8203;50561](https://github.com/spring-projects/spring-boot/issues/50561) - Upgrade to SAAJ Impl 3.0.6 [#&#8203;50714](https://github.com/spring-projects/spring-boot/issues/50714) - Upgrade to SLF4J 2.0.18 [#&#8203;50591](https://github.com/spring-projects/spring-boot/issues/50591) - Upgrade to [Spring AMQP 4.1.0](https://github.com/spring-projects/spring-amqp/releases/tag/v4.1.0) [#&#8203;50562](https://github.com/spring-projects/spring-boot/issues/50562) - Upgrade to [Spring Batch 6.0.4](https://github.com/spring-projects/spring-batch/releases/tag/v6.0.4) [#&#8203;50563](https://github.com/spring-projects/spring-boot/issues/50563) - Upgrade to [Spring Data Bom 2026.0.0](https://github.com/spring-projects/spring-data-bom/releases/tag/2026.0.0) [#&#8203;50564](https://github.com/spring-projects/spring-boot/issues/50564) - Upgrade to [Spring Framework 7.0.8](https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8) [#&#8203;50565](https://github.com/spring-projects/spring-boot/issues/50565) - Upgrade to [Spring GraphQL 2.0.4](https://github.com/spring-projects/spring-graphql/releases/tag/v2.0.4) [#&#8203;50741](https://github.com/spring-projects/spring-boot/issues/50741) - Upgrade to [Spring gRPC 1.1.0](https://github.com/spring-projects/spring-grpc/releases/tag/v1.1.0) [#&#8203;50566](https://github.com/spring-projects/spring-boot/issues/50566) - Upgrade to [Spring HATEOAS 3.1.1](https://github.com/spring-projects/spring-hateoas/releases/tag/3.1.1) [#&#8203;50567](https://github.com/spring-projects/spring-boot/issues/50567) - Upgrade to [Spring Integration 7.1.0](https://github.com/spring-projects/spring-integration/releases/tag/v7.1.0) [#&#8203;50568](https://github.com/spring-projects/spring-boot/issues/50568) - Upgrade to [Spring Kafka 4.1.0](https://github.com/spring-projects/spring-kafka/releases/tag/v4.1.0) [#&#8203;50569](https://github.com/spring-projects/spring-boot/issues/50569) - Upgrade to [Spring LDAP 4.1.0](https://github.com/spring-projects/spring-ldap/releases/tag/4.1.0) [#&#8203;50570](https://github.com/spring-projects/spring-boot/issues/50570) - Upgrade to [Spring Pulsar 2.0.6](https://github.com/spring-projects/spring-pulsar/releases/tag/v2.0.6) [#&#8203;50571](https://github.com/spring-projects/spring-boot/issues/50571) - Upgrade to [Spring RESTDocs 4.0.1](https://github.com/spring-projects/spring-restdocs/releases/tag/v4.0.1) [#&#8203;50572](https://github.com/spring-projects/spring-boot/issues/50572) - Upgrade to [Spring Security 7.1.0](https://github.com/spring-projects/spring-security/releases/tag/7.1.0) [#&#8203;50573](https://github.com/spring-projects/spring-boot/issues/50573) - Upgrade to [Spring Session 4.1.0](https://github.com/spring-projects/spring-session/releases/tag/4.1.0) [#&#8203;50574](https://github.com/spring-projects/spring-boot/issues/50574) - Upgrade to [Spring WS 5.0.2](https://github.com/spring-projects/spring-ws/releases/tag/v5.0.2) [#&#8203;50575](https://github.com/spring-projects/spring-boot/issues/50575) - Upgrade to SQLite JDBC 3.53.2.0 [#&#8203;50715](https://github.com/spring-projects/spring-boot/issues/50715) - Upgrade to [Tomcat 11.0.22](https://tomcat.apache.org/tomcat-11.0-doc/changelog.html) [#&#8203;50354](https://github.com/spring-projects/spring-boot/issues/50354) #### :heart: Contributors Thank you to all the contributors who worked on this release: [@&#8203;Abdlatif-nabgha](https://github.com/Abdlatif-nabgha), [@&#8203;DragonFSKY](https://github.com/DragonFSKY), [@&#8203;Kapil-chn7](https://github.com/Kapil-chn7), [@&#8203;Kimgyuilli](https://github.com/Kimgyuilli), [@&#8203;SJvaca30](https://github.com/SJvaca30), [@&#8203;SebTardif](https://github.com/SebTardif), [@&#8203;ares333](https://github.com/ares333), [@&#8203;codingkiddo](https://github.com/codingkiddo), [@&#8203;dlwldnjs1009](https://github.com/dlwldnjs1009), [@&#8203;eddumelendez](https://github.com/eddumelendez), [@&#8203;henriquejsza](https://github.com/henriquejsza), [@&#8203;igormukhin](https://github.com/igormukhin), [@&#8203;johnnypwong](https://github.com/johnnypwong), [@&#8203;kwondh5217](https://github.com/kwondh5217), [@&#8203;leestana01](https://github.com/leestana01), [@&#8203;mheath](https://github.com/mheath), [@&#8203;mmoayyed](https://github.com/mmoayyed), [@&#8203;msridhar](https://github.com/msridhar), [@&#8203;ngocnhan-tran1996](https://github.com/ngocnhan-tran1996), [@&#8203;nosan](https://github.com/nosan), [@&#8203;quaff](https://github.com/quaff), [@&#8203;scordio](https://github.com/scordio), [@&#8203;vinhhieu21](https://github.com/vinhhieu21), [@&#8203;vpavic](https://github.com/vpavic), [@&#8203;won-seoop](https://github.com/won-seoop), and [@&#8203;zxuhan](https://github.com/zxuhan) ### [`v4.0.7`](https://github.com/spring-projects/spring-boot/releases/tag/v4.0.7) [Compare Source](https://github.com/spring-projects/spring-boot/compare/v4.0.6...v4.0.7) #### :lady\_beetle: Bug Fixes - MailSender auto-configuration does not enable hostname verification [#&#8203;50746](https://github.com/spring-projects/spring-boot/issues/50746) - Artemis auto-configuration uses a predictable default location for the embedded broker's data [#&#8203;50744](https://github.com/spring-projects/spring-boot/issues/50744) - NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket [#&#8203;50640](https://github.com/spring-projects/spring-boot/pull/50640) - SSL should not be enabled when a SSL bundle is overridden to an empty string [#&#8203;50634](https://github.com/spring-projects/spring-boot/issues/50634) - Docker Compose support does not restore thread interrupt flag when catching InterruptedException [#&#8203;50617](https://github.com/spring-projects/spring-boot/issues/50617) - RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string [#&#8203;50611](https://github.com/spring-projects/spring-boot/issues/50611) - NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles [#&#8203;50609](https://github.com/spring-projects/spring-boot/issues/50609) - Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver [#&#8203;50602](https://github.com/spring-projects/spring-boot/pull/50602) - Layer written outside the output location of '//' exception is thrown when using extract layers in root directory [#&#8203;50509](https://github.com/spring-projects/spring-boot/issues/50509) - ConfigurationPropertiesReportEndpoint exposes AOP proxy internals [#&#8203;50416](https://github.com/spring-projects/spring-boot/issues/50416) - Created StackTracePrinter instances have no access to the Environment [#&#8203;50413](https://github.com/spring-projects/spring-boot/issues/50413) - MappingsEndpoint reports the context's own ID as parentId when a parent exists [#&#8203;50411](https://github.com/spring-projects/spring-boot/issues/50411) - Buildpack module does not validate long-to-int casts [#&#8203;50409](https://github.com/spring-projects/spring-boot/issues/50409) - GraphQL WebSocket support does not configure allowed origins [#&#8203;50393](https://github.com/spring-projects/spring-boot/issues/50393) - Configuration property metadata includes incorrect class references [#&#8203;50375](https://github.com/spring-projects/spring-boot/pull/50375) - Spring Boot Loader Does Not Support RSA and EC Signed Jars [#&#8203;50297](https://github.com/spring-projects/spring-boot/issues/50297) - Meter registries are not removed from the global registry when the context is closed [#&#8203;50286](https://github.com/spring-projects/spring-boot/issues/50286) - Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation [#&#8203;50265](https://github.com/spring-projects/spring-boot/pull/50265) - EndpointRequest links matcher unnecessarily matches HTTP methods other than GET [#&#8203;50260](https://github.com/spring-projects/spring-boot/issues/50260) - Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource [#&#8203;50257](https://github.com/spring-projects/spring-boot/issues/50257) - ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time [#&#8203;50233](https://github.com/spring-projects/spring-boot/issues/50233) - NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms [#&#8203;50227](https://github.com/spring-projects/spring-boot/issues/50227) - Apply HTML escaping to timestamp attribute in Whitelabel error page [#&#8203;50215](https://github.com/spring-projects/spring-boot/issues/50215) - Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat [#&#8203;50201](https://github.com/spring-projects/spring-boot/issues/50201) #### :notebook\_with\_decorative\_cover: Documentation - Fix reference to Gradle documentation for module replacement [#&#8203;50646](https://github.com/spring-projects/spring-boot/issues/50646) - Document SSL reloading with Let's Encrypt [#&#8203;50629](https://github.com/spring-projects/spring-boot/issues/50629) - Remove the use of Optional from Data Neo4j repository examples [#&#8203;50621](https://github.com/spring-projects/spring-boot/issues/50621) - Fix typos in documentation [#&#8203;50619](https://github.com/spring-projects/spring-boot/issues/50619) - Clarify dependency requirement for Bean Validation support [#&#8203;50613](https://github.com/spring-projects/spring-boot/issues/50613) - Document Java 25 requirement for AOT cache [#&#8203;50484](https://github.com/spring-projects/spring-boot/issues/50484) - Add links for Java CAS Client Spring Boot Starter [#&#8203;50281](https://github.com/spring-projects/spring-boot/pull/50281) - Document known testcontainers lifecycle issues [#&#8203;50219](https://github.com/spring-projects/spring-boot/issues/50219) - Document adding multiple connectors for Jetty [#&#8203;50217](https://github.com/spring-projects/spring-boot/issues/50217) - Polish InvalidConfigurationPropertyValueException constructor javadoc [#&#8203;50213](https://github.com/spring-projects/spring-boot/issues/50213) - Fix typo in Spring Security OAuth2 client registration documentation [#&#8203;50198](https://github.com/spring-projects/spring-boot/issues/50198) #### :hammer: Dependency Upgrades - Upgrade to [Caffeine 3.2.4](https://github.com/ben-manes/caffeine/releases/tag/v3.2.4) [#&#8203;50322](https://github.com/spring-projects/spring-boot/issues/50322) - Upgrade to Cassandra Driver 4.19.3 [#&#8203;50681](https://github.com/spring-projects/spring-boot/issues/50681) - Upgrade to Glassfish JAXB 4.0.9 [#&#8203;50682](https://github.com/spring-projects/spring-boot/issues/50682) - Upgrade to Groovy 5.0.6 [#&#8203;50324](https://github.com/spring-projects/spring-boot/issues/50324) - Upgrade to Hibernate 7.2.19.Final [#&#8203;50733](https://github.com/spring-projects/spring-boot/issues/50733) - Upgrade to Jackson 2 Bom 2.21.4 [#&#8203;50684](https://github.com/spring-projects/spring-boot/issues/50684) - Upgrade to Jackson Bom 3.1.4 [#&#8203;50685](https://github.com/spring-projects/spring-boot/issues/50685) - Upgrade to Jakarta Json Bind 3.0.2 [#&#8203;50686](https://github.com/spring-projects/spring-boot/issues/50686) - Upgrade to [Jakarta XML Bind 4.0.5](https://github.com/jakartaee/jaxb-api/releases/tag/4.0.5) [#&#8203;50328](https://github.com/spring-projects/spring-boot/issues/50328) - Upgrade to Jaxen 2.0.6 [#&#8203;50717](https://github.com/spring-projects/spring-boot/issues/50717) - Upgrade to [Jetty 12.1.10](https://github.com/jetty/jetty.project/releases/tag/jetty-12.1.10) [#&#8203;50688](https://github.com/spring-projects/spring-boot/issues/50688) - Upgrade to Jetty Reactive HTTPClient 4.1.5 [#&#8203;50718](https://github.com/spring-projects/spring-boot/issues/50718) - Upgrade to jOOQ 3.19.35 [#&#8203;50719](https://github.com/spring-projects/spring-boot/issues/50719) - Upgrade to [Liquibase 5.0.3](https://github.com/liquibase/liquibase/releases/tag/v5.0.3) [#&#8203;50554](https://github.com/spring-projects/spring-boot/issues/50554) - Upgrade to Logback 1.5.34 [#&#8203;50689](https://github.com/spring-projects/spring-boot/issues/50689) - Upgrade to [Maven Enforcer Plugin 3.6.3](https://github.com/apache/maven-enforcer/releases/tag/enforcer-3.6.3) [#&#8203;50555](https://github.com/spring-projects/spring-boot/issues/50555) - Upgrade to [Maven Failsafe Plugin 3.5.6](https://github.com/apache/maven-surefire/releases/tag/surefire-3.5.6) [#&#8203;50690](https://github.com/spring-projects/spring-boot/issues/50690) - Upgrade to [Maven Surefire Plugin 3.5.6](https://github.com/apache/maven-surefire/releases/tag/surefire-3.5.6) [#&#8203;50691](https://github.com/spring-projects/spring-boot/issues/50691) - Upgrade to [Micrometer 1.16.6](https://github.com/micrometer-metrics/micrometer/releases/tag/v1.16.6) [#&#8203;50535](https://github.com/spring-projects/spring-boot/issues/50535) - Upgrade to [Micrometer Tracing 1.6.6](https://github.com/micrometer-metrics/tracing/releases/tag/v1.6.6) [#&#8203;50536](https://github.com/spring-projects/spring-boot/issues/50536) - Upgrade to [Neo4j Java Driver 6.1.0](https://github.com/neo4j/neo4j-java-driver/releases/tag/6.1.0) [#&#8203;50556](https://github.com/spring-projects/spring-boot/issues/50556) - Upgrade to Netty 4.2.15.Final [#&#8203;50692](https://github.com/spring-projects/spring-boot/issues/50692) - Upgrade to [Postgresql 42.7.11](https://github.com/pgjdbc/pgjdbc/releases/tag/REL42.7.11) [#&#8203;50332](https://github.com/spring-projects/spring-boot/issues/50332) - Upgrade to [R2DBC MySQL 1.4.2](https://github.com/asyncer-io/r2dbc-mysql/releases/tag/r2dbc-mysql-1.4.2) [#&#8203;50333](https://github.com/spring-projects/spring-boot/issues/50333) - Upgrade to [Reactor Bom 2025.0.6](https://github.com/reactor/reactor/releases/tag/2025.0.6) [#&#8203;50537](https://github.com/spring-projects/spring-boot/issues/50537) - Upgrade to SAAJ Impl 3.0.6 [#&#8203;50720](https://github.com/spring-projects/spring-boot/issues/50720) - Upgrade to SLF4J 2.0.18 [#&#8203;50558](https://github.com/spring-projects/spring-boot/issues/50558) - Upgrade to [Spring AMQP 4.0.4](https://github.com/spring-projects/spring-amqp/releases/tag/v4.0.4) [#&#8203;50538](https://github.com/spring-projects/spring-boot/issues/50538) - Upgrade to [Spring Batch 6.0.4](https://github.com/spring-projects/spring-batch/releases/tag/v6.0.4) [#&#8203;50539](https://github.com/spring-projects/spring-boot/issues/50539) - Upgrade to [Spring Data Bom 2025.1.6](https://github.com/spring-projects/spring-data-bom/releases/tag/2025.1.6) [#&#8203;50540](https://github.com/spring-projects/spring-boot/issues/50540) - Upgrade to [Spring Framework 7.0.8](https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8) [#&#8203;50541](https://github.com/spring-projects/spring-boot/issues/50541) - Upgrade to [Spring GraphQL 2.0.4](https://github.com/spring-projects/spring-graphql/releases/tag/v2.0.4) [#&#8203;50740](https://github.com/spring-projects/spring-boot/issues/50740) - Upgrade to [Spring HATEOAS 3.0.4](https://github.com/spring-projects/spring-hateoas/releases/tag/3.0.4) [#&#8203;50542](https://github.com/spring-projects/spring-boot/issues/50542) - Upgrade to [Spring Integration 7.0.5](https://github.com/spring-projects/spring-integration/releases/tag/v7.0.5) [#&#8203;50543](https://github.com/spring-projects/spring-boot/issues/50543) - Upgrade to [Spring Kafka 4.0.6](https://github.com/spring-projects/spring-kafka/releases/tag/v4.0.6) [#&#8203;50544](https://github.com/spring-projects/spring-boot/issues/50544) - Upgrade to [Spring LDAP 4.0.4](https://github.com/spring-projects/spring-ldap/releases/tag/4.0.4) [#&#8203;50545](https://github.com/spring-projects/spring-boot/issues/50545) - Upgrade to [Spring Pulsar 2.0.6](https://github.com/spring-projects/spring-pulsar/releases/tag/v2.0.6) [#&#8203;50546](https://github.com/spring-projects/spring-boot/issues/50546) - Upgrade to [Spring RESTDocs 4.0.1](https://github.com/spring-projects/spring-restdocs/releases/tag/v4.0.1) [#&#8203;50547](https://github.com/spring-projects/spring-boot/issues/50547) - Upgrade to [Spring Security 7.0.6](https://github.com/spring-projects/spring-security/releases/tag/7.0.6) [#&#8203;50548](https://github.com/spring-projects/spring-boot/issues/50548) - Upgrade to [Spring Session 4.0.4](https://github.com/spring-projects/spring-session/releases/tag/4.0.4) [#&#8203;50549](https://github.com/spring-projects/spring-boot/issues/50549) - Upgrade to [Spring WS 5.0.2](https://github.com/spring-projects/spring-ws/releases/tag/v5.0.2) [#&#8203;50550](https://github.com/spring-projects/spring-boot/issues/50550) - Upgrade to [Tomcat 11.0.22](https://tomcat.apache.org/tomcat-11.0-doc/changelog.html) [#&#8203;50335](https://github.com/spring-projects/spring-boot/issues/50335) #### :heart: Contributors Thank you to all the contributors who worked on this release: [@&#8203;Abdlatif-nabgha](https://github.com/Abdlatif-nabgha), [@&#8203;DragonFSKY](https://github.com/DragonFSKY), [@&#8203;Kapil-chn7](https://github.com/Kapil-chn7), [@&#8203;Kimgyuilli](https://github.com/Kimgyuilli), [@&#8203;SJvaca30](https://github.com/SJvaca30), [@&#8203;SebTardif](https://github.com/SebTardif), [@&#8203;ares333](https://github.com/ares333), [@&#8203;codingkiddo](https://github.com/codingkiddo), [@&#8203;dlwldnjs1009](https://github.com/dlwldnjs1009), [@&#8203;henriquejsza](https://github.com/henriquejsza), [@&#8203;igormukhin](https://github.com/igormukhin), [@&#8203;johnnypwong](https://github.com/johnnypwong), [@&#8203;kwondh5217](https://github.com/kwondh5217), [@&#8203;leestana01](https://github.com/leestana01), [@&#8203;mheath](https://github.com/mheath), [@&#8203;mmoayyed](https://github.com/mmoayyed), [@&#8203;msridhar](https://github.com/msridhar), [@&#8203;ngocnhan-tran1996](https://github.com/ngocnhan-tran1996), [@&#8203;nosan](https://github.com/nosan), [@&#8203;quaff](https://github.com/quaff), [@&#8203;scordio](https://github.com/scordio), [@&#8203;vinhhieu21](https://github.com/vinhhieu21), [@&#8203;won-seoop](https://github.com/won-seoop), and [@&#8203;zxuhan](https://github.com/zxuhan) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDQuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEwNC4xIiwidGFyZ2V0QnJhbmNoIjoiZGV2ZWxvcCIsImxhYmVscyI6W119-->
Update dependency org.springframework.boot:spring-boot-starter-parent to v4.1.0
All checks were successful
Build and Publish / build (push) Successful in 4m1s
ae3f57684a
renovate scheduled this pull request to auto merge when all checks succeed 2026-06-11 00:01:57 +02:00
renovate merged commit dea3eaa1b5 into develop 2026-06-11 00:06:03 +02:00
renovate deleted branch renovate/org.springframework.boot-spring-boot-starter-parent-4.x 2026-06-11 00:06:03 +02:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
midas/harena!48
No description provided.