Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 24, 2025

Bumps spring-boot.version from 4.0.0-M3 to 4.0.0-RC1.
Updates org.springframework.boot:spring-boot-starter-web from 4.0.0-M3 to 4.0.0-RC1

Release notes

Sourced from org.springframework.boot:spring-boot-starter-web's releases.

v4.0.0-RC1

⭐ New Features

  • Revisit metrics and tracing test properties #47776
  • Downgrade to GraphQL Java 24.3 #47752
  • Configure devtools to set trace probability to 100% by default #47721
  • Remove "public" from referenced configurations from auto-configurations #47715
  • Remove support for Spring Pulsar Reactive #47707
  • Add Jackson 2 module to ease upgrade effort #47688
  • Remove ConcurrentReferenceCachingMetadataReaderFactory #47687
  • Remove integration for REST Docs' REST Assured support until REST Assured supports Groovy 5 #47685
  • Remove support for embedded jar launch scripts #47666
  • Remove support for Spring Session Data MongoDB #47662
  • Remove support for Spring Session Hazelcast #47661
  • Drop Spock until it supports Groovy 5 #47650
  • Provide auto-configuration for Jackson's CBOR data format #47641
  • Add support for @ObservationKeyValue #47637
  • Rename Jackson-specific Json… annotations and classes to Jackson… #47625
  • Use Neo4j Java Driver BOM #47623
  • Add TWENTY_FIVE to JavaVersion enum #47616
  • Rationalize endpoint packages #47606
  • Refactor spring-boot-cloudfoundry package structure #47605
  • Rename spring-boot-tx module to spring-boot-transaction #47603
  • Use JsonMapper instead of ObjectMapper where feasible #47503
  • Automatically detect Jackson 3 modules #47485
  • Add AWS ECS to cloud platforms #47482
  • Rename SharedObjectMapper to SharedJsonMapper #47471
  • Provide a configuration property to auto-configure Jackson 3 for best compatibility with Spring Boot 3's Jackson 2 defaults #47470
  • Raise GraalVM baseline to 25 #47433
  • Clarify that spring-boot-rsocket does not require spring-web #47409
  • Rationalize HTTP client configuration properties #47398
  • Disable LiveReload server by default #47387
  • Update Neo4j support to require Neo4j Java Driver 6.0.0 #47381
  • Remove SQL and Reactor starters as they are only used transitively #47378
  • Rationalize SSL bundle configuration in RedisConnectionDetails #47375
  • Add support for RestTestClient #47335
  • Rename Spring Session properties that depend on Spring Data #47333
  • Rename JsonMapper-specific properties to make it clear that they're JSON-specific #47328
  • Move spring.jackson.datetime.<feature-name> to spring.jackson.datatype.datetime #47327
  • Modularize spring-boot-test-autoconfigure #47322
  • Allow jars to be marked as a development-tool to exclude from uber-jar #47320
  • Switch Maven plugin to exclude optional dependencies by default #47318
  • Provide a configuration property for enabling and disabling Elasticsearch Client's sniffer #47301
  • Add @ControllerAdvice support to RSocket messaging auto-configuration #47287
  • Reintroduce previous EnvironmentPostProcessor in deprecated form #47272
  • Remove Bitnami support #47267
  • Improve how Spring AMQP's retry can be configured #47264
  • Refine JSpecify annotations #47263
  • Add support for configuring HttpClientTransport in JettyClientHttpConnectorBuilder #47251
  • Raise the minimum supported version of the CycloneDX Gradle Plugin to 3.0.0 #47250

... (truncated)

Commits
  • 62aae6e Release v4.0.0-RC1
  • b582f5d Temporarily drop build stage
  • 8e6bebe Set ignore-already-exists-error to true
  • a22b3d1 Revert "Temporarily set ignore-already-exists-error to true"
  • 1fc94ef Temporarily set ignore-already-exists-error to true
  • 0624dec Merge branch '3.5.x'
  • 88c7198 Merge branch '3.4.x' into 3.5.x
  • 8ebb971 Upgrade to spring-io/central-publish-action v0.3.0
  • 67d5adc Polish and fix test starter descriptions
  • c0c66e2 Update SNI test app to use spring-boot-starter-webmvc
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-dependencies from 4.0.0-M3 to 4.0.0-RC1

Release notes

Sourced from org.springframework.boot:spring-boot-dependencies's releases.

v4.0.0-RC1

⭐ New Features

  • Revisit metrics and tracing test properties #47776
  • Downgrade to GraphQL Java 24.3 #47752
  • Configure devtools to set trace probability to 100% by default #47721
  • Remove "public" from referenced configurations from auto-configurations #47715
  • Remove support for Spring Pulsar Reactive #47707
  • Add Jackson 2 module to ease upgrade effort #47688
  • Remove ConcurrentReferenceCachingMetadataReaderFactory #47687
  • Remove integration for REST Docs' REST Assured support until REST Assured supports Groovy 5 #47685
  • Remove support for embedded jar launch scripts #47666
  • Remove support for Spring Session Data MongoDB #47662
  • Remove support for Spring Session Hazelcast #47661
  • Drop Spock until it supports Groovy 5 #47650
  • Provide auto-configuration for Jackson's CBOR data format #47641
  • Add support for @ObservationKeyValue #47637
  • Rename Jackson-specific Json… annotations and classes to Jackson… #47625
  • Use Neo4j Java Driver BOM #47623
  • Add TWENTY_FIVE to JavaVersion enum #47616
  • Rationalize endpoint packages #47606
  • Refactor spring-boot-cloudfoundry package structure #47605
  • Rename spring-boot-tx module to spring-boot-transaction #47603
  • Use JsonMapper instead of ObjectMapper where feasible #47503
  • Automatically detect Jackson 3 modules #47485
  • Add AWS ECS to cloud platforms #47482
  • Rename SharedObjectMapper to SharedJsonMapper #47471
  • Provide a configuration property to auto-configure Jackson 3 for best compatibility with Spring Boot 3's Jackson 2 defaults #47470
  • Raise GraalVM baseline to 25 #47433
  • Clarify that spring-boot-rsocket does not require spring-web #47409
  • Rationalize HTTP client configuration properties #47398
  • Disable LiveReload server by default #47387
  • Update Neo4j support to require Neo4j Java Driver 6.0.0 #47381
  • Remove SQL and Reactor starters as they are only used transitively #47378
  • Rationalize SSL bundle configuration in RedisConnectionDetails #47375
  • Add support for RestTestClient #47335
  • Rename Spring Session properties that depend on Spring Data #47333
  • Rename JsonMapper-specific properties to make it clear that they're JSON-specific #47328
  • Move spring.jackson.datetime.<feature-name> to spring.jackson.datatype.datetime #47327
  • Modularize spring-boot-test-autoconfigure #47322
  • Allow jars to be marked as a development-tool to exclude from uber-jar #47320
  • Switch Maven plugin to exclude optional dependencies by default #47318
  • Provide a configuration property for enabling and disabling Elasticsearch Client's sniffer #47301
  • Add @ControllerAdvice support to RSocket messaging auto-configuration #47287
  • Reintroduce previous EnvironmentPostProcessor in deprecated form #47272
  • Remove Bitnami support #47267
  • Improve how Spring AMQP's retry can be configured #47264
  • Refine JSpecify annotations #47263
  • Add support for configuring HttpClientTransport in JettyClientHttpConnectorBuilder #47251
  • Raise the minimum supported version of the CycloneDX Gradle Plugin to 3.0.0 #47250

... (truncated)

Commits
  • 62aae6e Release v4.0.0-RC1
  • b582f5d Temporarily drop build stage
  • 8e6bebe Set ignore-already-exists-error to true
  • a22b3d1 Revert "Temporarily set ignore-already-exists-error to true"
  • 1fc94ef Temporarily set ignore-already-exists-error to true
  • 0624dec Merge branch '3.5.x'
  • 88c7198 Merge branch '3.4.x' into 3.5.x
  • 8ebb971 Upgrade to spring-io/central-publish-action v0.3.0
  • 67d5adc Polish and fix test starter descriptions
  • c0c66e2 Update SNI test app to use spring-boot-starter-webmvc
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `spring-boot.version` from 4.0.0-M3 to 4.0.0-RC1.

Updates `org.springframework.boot:spring-boot-starter-web` from 4.0.0-M3 to 4.0.0-RC1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.0-M3...v4.0.0-RC1)

Updates `org.springframework.boot:spring-boot-dependencies` from 4.0.0-M3 to 4.0.0-RC1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.0-M3...v4.0.0-RC1)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-web
  dependency-version: 4.0.0-RC1
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 4.0.0-RC1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant