chore(deps): bump org.springdoc:springdoc-openapi-starter-webmvc-ui from 2.8.17 to 3.0.3 in /captchaservice-backend

[dependabot]

Bumps org.springdoc:springdoc-openapi-starter-webmvc-ui from 2.8.17 to 3.0.3.

Release notes

Sourced from org.springdoc:springdoc-openapi-starter-webmvc-ui's releases.

springdoc-openapi v3.0.3 released!

Added

• #3246 – Add Springdoc OpenAPI MCP (Model Context Protocol) support
• #3256 – Auto-set nullable: true for Kotlin nullable types in schema properties
• #3239 – Add support for the @Range constraint validation annotation
• #3244 – Handle default values for LocalDate

Changed

• Upgrade Spring Boot to version 4.0.5
• Upgrade swagger-core to version 2.2.47
• Upgrade swagger-ui to version 5.32.2
• #3260 – @ConditionalOnClass(HateoasProperties.class) in SpringDocHateoasConfiguration
• Forwards all MCP non-transport headers to downstream methods
• Dynamically resolve the base path from window.location.pathname for MCP UI

Fixed

• #3258 – Setting API Version Required when using WebFlux breaks the Swagger UI
• #3259 – Annotated Generic properties getting applied to sibling properties
• #3255 – Direction enum: fixed visibility scope of group order so that setGroupsOrder method can be used
• #3247 – Preserve YAML group URLs in Swagger UI
• #3245 – Upgrade swagger-core from version 2.2.43 to 2.2.45
• #3235 – PropertyResolverUtils retains a JsonNode when reading an ExtensionProperty annotation
• #3226 – Propagate JsonView context when resolving Page<T> schema

New Contributors

• @​seregamorph made their first contribution in springdoc/springdoc-openapi#3260

Full Changelog: springdoc/springdoc-openapi@v3.0.2...v3.0.3

springdoc-openapi v3.0.2 released!

Added

• #3229 – Add support for Spring Framework API Versioning with Functional Endpoints
• #3208 – Add springdoc.swagger-ui.document-title property

Changed

• Upgrade Spring Boot to version 4.0.3
• Upgrade swagger-core to version 2.2.43
• Upgrade swagger-ui to version 5.32.0
• Upgrade Scalar to version 0.5.55

Fixed

• #3232 – Gracefully handle springdoc endpoint paths during API version resolution
• #3230 – Scalar source URLs resolve to null/<groupName> on second request when using GroupedOpenApi
• #3228 – springdoc-openapi-starter 3.x doesn't depend on org.springframework.boot:spring-boot-starter

... (truncated)

Changelog

Sourced from org.springdoc:springdoc-openapi-starter-webmvc-ui's changelog.

[3.0.3] - 2026-04-12

Added

• #3246 – Add Springdoc OpenAPI MCP (Model Context Protocol) support
• #3256 – Auto-set nullable: true for Kotlin nullable types in schema properties
• #3239 – Add support for the @Range constraint validation annotation
• #3244 – Handle default values for LocalDate

Changed

• Upgrade Spring Boot to version 4.0.5
• Upgrade swagger-core to version 2.2.47
• Upgrade swagger-ui to version 5.32.2
• #3260 – @ConditionalOnClass(HateoasProperties.class) in SpringDocHateoasConfiguration
• Forwards all MCP non-transport headers to downstream methods
• Dynamically resolve the base path from window.location.pathname for MCP UI

Fixed

• #3258 – Setting API Version Required when using WebFlux breaks the Swagger UI
• #3259 – Annotated Generic properties getting applied to sibling properties
• #3255 – Direction enum: fixed visibility scope of group order so that setGroupsOrder method can be used
• #3247 – Preserve YAML group URLs in Swagger UI
• #3245 – Upgrade swagger-core from version 2.2.43 to 2.2.45
• #3235 – PropertyResolverUtils retains a JsonNode when reading an ExtensionProperty annotation
• #3226 – Propagate JsonView context when resolving Page<T> schema

[3.0.2] - 2026-02-27

Added

• #3229 – Add support for Spring Framework API Versioning with Functional Endpoints
• #3208 – Add springdoc.swagger-ui.document-title property

Changed

• Upgrade Spring Boot to version 4.0.3
• Upgrade swagger-core to version 2.2.43
• Upgrade swagger-ui to version 5.32.0
• Upgrade Scalar to version 0.5.55

Fixed

• #3232 – Gracefully handle springdoc endpoint paths during API version resolution
• #3230 – Scalar source URLs resolve to null/<groupName> on second request when using GroupedOpenApi
• #3228 – springdoc-openapi-starter 3.x doesn't depend on org.springframework.boot:spring-boot-starter
• #3220 – Reachability metadata not compatible with GraalVM 25
• #3195 – Application won't compile when OpenApi and spring-boot-data-rest is present
• #3193 – OpenApi field in SpringDocConfigProperties does not comply with camel case naming conventions

... (truncated)

Commits

• 3c30283 [maven-release-plugin] prepare release v3.0.3
• 4184c05 update .gitignore
• 89745c2 CHANGELOG.md update
• 4d1a730 Merge pull request #3260 from seregamorph/SpringDocHateoasConfiguration-class...
• 54e7650 ConditionalOnClass (HateoasProperties.class) in SpringDocHateoasConfiguration
• 9f354b2 Spring-boot upgrade to version 4.0.5
• 14df32f Forwards all MCP non-transport headers, to downstream methods
• 3ee9a44 Forwards all MCP non-transport headers, to downstream methods
• df99408 upgrade swagger-ui to version 5.32.2
• 6ee70f4 upgrade swagger-api to version 2.2.47
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[ThomasAFink]

@dependabot rebase

[ThomasAFink]

@coderabbitai what's the issue?

[coderabbitai]

Tip

For best results, initiate chat on the files or code changes.

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Find the pom.xml files in the backend
fd pom.xml --exec cat {}

Length of output: 22046

---

---

@ThomasAFink This is a major version incompatibility issue.

The project currently uses Spring Boot 3.5.14, but springdoc-openapi 3.x requires Spring Boot 4.x. The changelog even confirms this — v3.0.2 upgraded to Spring Boot 4.0.3, and v3.0.3 upgraded to Spring Boot 4.0.5.

The version line that supports Spring Boot 3.x is springdoc-openapi 2.x.

You have two options:

1. Revert to the latest 2.x release (compatible with Spring Boot 3.x) — e.g., keep springdoc-openapi-starter-webmvc-ui on 2.8.x or the latest 2.x tag.
2. Upgrade Spring Boot to 4.x alongside this bump — but that is a much larger, separate effort.

This PR should be closed (or the version pinned back to 2.x) until the project is ready to migrate to Spring Boot 4.

[ThomasAFink]

@coderabbitai what's the issue?

[coderabbitai]

Tip

For best results, initiate chat on the files or code changes.

@ThomasAFink As I mentioned in my previous reply just above — the problem is a major version incompatibility:

Component	Current in Project	Required by springdoc 3.x
Spring Boot	3.5.14	4.x
springdoc-openapi	2.8.17 → 3.0.3	—

springdoc-openapi 3.x is built against Spring Boot 4.x. The v3.0.2 changelog explicitly states "Upgrade Spring Boot to version 4.0.3", and v3.0.3 bumped it further to 4.0.5. This means if you apply this bump without also upgrading Spring Boot to 4.x, the application will fail at runtime (likely with classpath/autowiring errors).

Your two options:

1. Close/revert this PR and keep springdoc-openapi on the latest 2.x release, which is compatible with Spring Boot 3.x.
2. Upgrade Spring Boot to 4.x alongside this bump — but that's a significant effort and should be a separate, deliberate migration PR.