Skip to content

BE: Chore: Bump Spring Boot to 3.5.3 #1143

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Jul 2, 2025
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 3 additions & 5 deletions api/build.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -53,15 +53,13 @@ dependencies {
exclude group: 'io.projectreactor.ipc', module: 'reactor-netty'
}

runtimeOnly libs.micrometer.registry.prometheus
runtimeOnly(libs.micrometer.registry.prometheus) {
exclude group: 'com.google.protobuf', module: 'protobuf-java' because("Micrometer uses protobuf-java 4.x, which is incompatible with protobuf-java 3.x used by various dependencies of this project. See https://github.com/prometheus/client_java/issues/1431")
}

// CVE Fixes
implementation libs.apache.commons.compress
implementation libs.okhttp3.logging.intercepter
implementation libs.json.smart
implementation libs.netty.common
implementation libs.netty.handler
implementation libs.spring.context

implementation libs.modelcontextprotocol.spring.webflux
implementation libs.victools.jsonschema.generator
Expand Down
12 changes: 4 additions & 8 deletions gradle/libs.versions.toml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
[versions]
spring-boot = '3.4.5'
spring-boot = '3.5.3'

aws-msk-auth = '2.3.0'
azure-identity = '1.15.4'
Expand All @@ -21,7 +21,9 @@ lombok = '1.18.34'
odd-oddrn-generator = '0.1.17'
odd-oddrn-client = '0.1.41'
cel = '0.3.0'
junit = '5.11.2'
# This version should be compatible with the version used by spring-boot-starter-test to avoid conflicts
# See https://github.com/spring-projects/spring-boot/blob/b6b570ebebb6ea233e00af5e554adcf40256f224/gradle.properties#L16C21-L16C27
junit = '5.12.2'
mockito = '5.16.0'
okhttp3 = '4.12.0'
testcontainers = '1.20.6'
Expand Down Expand Up @@ -126,12 +128,6 @@ aspectj = { module = 'org.aspectj:aspectjweaver', version.ref = 'aspectj' }
bonigarcia-webdrivermanager = { module = 'io.github.bonigarcia:webdrivermanager', version.ref = 'bonigarcia-webdrivermanager' }
netty-resolver-dns-native = { module = 'io.netty:netty-resolver-dns-native-macos' }

# CVE fixes
json-smart = { module = 'net.minidev:json-smart', version = '2.5.2' }
netty-common = { module = 'io.netty:netty-common', version.ref = 'netty' }
netty-handler = { module = 'io.netty:netty-handler', version.ref = 'netty' }
spring-context = { module = 'org.springframework:spring-context', version = '6.2.7' }

# test scope
bouncycastle-bcpkix = { module = 'org.bouncycastle:bcpkix-jdk18on', version = '1.80' }

Expand Down
Loading