Skip to content

chore(deps): Spring Boot 4.0.6#57

Merged
mpge merged 1 commit into
mainfrom
chore/spring-boot-4
May 2, 2026
Merged

chore(deps): Spring Boot 4.0.6#57
mpge merged 1 commit into
mainfrom
chore/spring-boot-4

Conversation

@mpge
Copy link
Copy Markdown
Member

@mpge mpge commented May 2, 2026

Summary

Bumps Spring Boot from 3.2.5 to 4.0.6 in both the library (build.gradle.kts) and the Docker host-app (docker/host-app/build.gradle.kts).

Bundles two dependabot PRs:

Requires Gradle 9, already shipped via #55.

Boot 4 migration changes

  • @EntityScan moved from o.s.boot.autoconfigure.domain to o.s.boot.persistence.autoconfigure.
  • @WebMvcTest / @AutoConfigureMockMvc moved from o.s.boot.test.autoconfigure.web.servlet to o.s.boot.webmvc.test.autoconfigure. These now live in a separate test starter, so spring-boot-starter-webmvc-test is added to testImplementation.
  • @MockBean (Spring Boot) was removed in 4.0; replaced with Spring Framework 7's @MockitoBean (o.s.test.context.bean.override.mockito.MockitoBean) across the four @WebMvcTest test classes.
  • Dropped unused dev.samstevens.totp:totp-spring-boot-starter:1.7.1. TwoFactorService implements TOTP from scratch using javax.crypto.Mac and never imported anything from the starter; the starter also hard-pinned spring-boot-autoconfigure:2.2.5.RELEASE as a transitive dep, which would have conflicted with Boot 4 dependency management.

Test plan

  • ./gradlew clean build (Temurin 17, Gradle 9.5.0) — green; 217 tests, 0 failures, 0 errors.
  • ./gradlew :docker:host-app:bootJar (smoke) — green.
  • CI green (Test workflow).

Bundles dependabot PRs #54 and #48. Requires Gradle 9 (#55, already merged).

Boot 4 migration:
- @EntityScan moved from o.s.boot.autoconfigure.domain to
  o.s.boot.persistence.autoconfigure
- @WebMvcTest / @AutoConfigureMockMvc moved from
  o.s.boot.test.autoconfigure.web.servlet to
  o.s.boot.webmvc.test.autoconfigure (now requires the new
  spring-boot-starter-webmvc-test test starter)
- @MockBean removed; replaced with Spring Framework 7's @MockitoBean
- Drop unused dev.samstevens.totp:totp-spring-boot-starter:1.7.1
  (TwoFactorService implements TOTP from scratch with javax.crypto;
  the starter pinned spring-boot-autoconfigure 2.2.5 which conflicts
  with Boot 4 dependency management)
@mpge mpge merged commit 337c63b into main May 2, 2026
2 checks passed
@mpge mpge deleted the chore/spring-boot-4 branch May 2, 2026 00:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant