chore(deps): bump org.springframework.boot:spring-boot-starter-parent from 3.5.16 to 4.1.0 in /captchaservice-backend

[dependabot]

Bumps org.springframework.boot:spring-boot-starter-parent from 3.5.16 to 4.1.0.

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.1.0

Full release notes for Spring Boot 4.1 are available on the wiki.

⭐ New Features

• Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #50211
• Reduce memory consumption when repeatedly calling WritableJson.toByteArray #49428

🐞 Bug Fixes

• MailSender auto-configuration does not enable hostname verification #50747
• Artemis auto-configuration uses a predictable default location for the embedded broker's data #50745
• Embedded LDAP SSL should not be enabled when its bundle is empty #50700
• InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 #50668
• NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50645
• SSL should not be enabled when a SSL bundle is overridden to an empty string #50635
• Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50633
• Configuration property metadata includes incorrect class references #50632
• Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50618
• RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50612
• NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50610
• SpringJtaPlatform should have been deprecated since 4.1.0-M3 #50592
• Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50510
• ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50417
• Created StackTracePrinter instances have no access to the Environment #50414
• MappingsEndpoint reports the context's own ID as parentId when a parent exists #50412
• Buildpack module does not validate long-to-int casts #50410
• Gradle gRPC support fails if protobuf-java dependency is used instead of protobuf-java-util #50405
• GraphQL WebSocket support does not configure allowed origins #50394
• Spring Boot Loader Does Not Support RSA and EC Signed Jars #50298
• Meter registries are not removed from the global registry when the context is closed #50287
• DataSourceBuilder cannot derive a DataSource from a lazy connection proxy #50271
• Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50266
• Bean definitions can be added with an initializer before setAllowBeanDefinitionOverriding is called #50264
• EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50261
• Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50258
• ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50234
• NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50228
• Missing dependency management for spring-boot-web-server-test #50224
• Spring Batch support for MongoDB modules are not included in dependency management #50223
• Apply HTML escaping to timestamp attribute in Whitelabel error page #50216
• GrpcServerHealthScheduler is not started in servlet environments #50209
• Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50204

📔 Documentation

• Fix reference to Gradle documentation for module replacement #50647
• Document SSL reloading with Let's Encrypt #50630
• Remove the use of Optional from Data Neo4j repository examples #50622
• Fix typos in documentation #50620

... (truncated)

Commits

• ac2cfe0 Release v4.1.0
• 1a5815c Upgrade to Spring Batch 6.0.4
• a8364ff Merge branch '4.0.x'
• 9755ff2 Upgrade to Spring Batch 6.0.4
• 6a6dedc Upgrade to Spring Integration 7.1.0
• db7b2b9 Merge branch '4.0.x'
• d549d07 Upgrade to Spring Integration 7.0.5
• 4d9e463 Merge branch '3.5.x' into 4.0.x
• 198af99 Merge branch '4.0.x'
• bb247bb Merge branch '3.5.x' into 4.0.x
• Additional commits viewable in compare view

[ThomasAFink]

@dependabot rebase

[ThomasAFink]

@coderabbitai what's the issue?

[coderabbitai]

Tip

For best results, initiate chat on the files or code changes.

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Check PR status and CI checks
gh pr view 255 --repo it-at-m/captchaservice --json title,state,statusCheckRollup,mergeable,mergeStateStatus,baseRefName,headRefName

echo "---CHECKS---"
gh pr checks 255 --repo it-at-m/captchaservice 2>&1 | head -80

echo "---COMMENTS---"
gh pr view 255 --repo it-at-m/captchaservice --json comments --jq '.comments[-5:][].body' 2>&1 | head -100

Length of output: 5485

---

🏁 Script executed:

#!/bin/bash
# Get the failing job logs
gh api /repos/it-at-m/captchaservice/actions/runs/27622587090/jobs --jq '.jobs[] | select(.name == "build (captchaservice-backend)") | .id' 2>&1

echo "---LOG---"
gh api /repos/it-at-m/captchaservice/actions/jobs/81675318467/logs 2>&1 | tail -100

Length of output: 10738

---

---

Found it. The build fails with:

[ERROR] 'dependencies.dependency.version' for org.testcontainers:junit-jupiter:jar is missing. @ line 214, column 21
[ERROR] 'dependencies.dependency.version' for org.testcontainers:postgresql:jar is missing. @ line 219, column 21

Root cause: Spring Boot 4.x removed Testcontainers from its managed BOM. In Spring Boot 3.x, org.testcontainers versions were provided automatically via spring-boot-dependencies. That's no longer the case in 4.x, so the versions in captchaservice-backend/pom.xml at lines 214 and 219 are now missing.

Fix: Add the Testcontainers BOM to the dependencyManagement section of your pom.xml:

<dependencyManagement>
    <dependencies>
        <dependency>
            <groupId>org.testcontainers</groupId>
            <artifactId>testcontainers-bom</artifactId>
            <version>1.20.6</version> <!-- or latest -->
            <type>pom</type>
            <scope>import</scope>
        </dependency>
    </dependencies>
</dependencyManagement>

Or alternatively, add explicit versions directly on the two dependencies at lines 214 and 219.

Note: Spring Boot 4.x is a significant major version bump (Spring Framework 7, Java 17+ baseline, Jakarta EE 11). You may encounter additional breaking changes beyond just Testcontainers. It's worth reviewing the Spring Boot 4.0 Migration Guide before merging.