Upgrade Spring Boot 4.0.7

[klopfdreh]

Fixes: #102

[jotamartos]

Hi! Thanks for working on this upgrade. Just a heads up regarding recent Netty CVEs (CVE-2026-42584, CVE-2026-42579, CVE-2026-42581): Spring Boot 4.0.6 manages Netty at version 4.2.12.Final, which is still vulnerable. The fixes were released in Netty 4.2.13.Final. Would it be possible to explicitly override the Netty version to 4.2.13.Final in this PR (or update to a newer Spring Boot version if available) so that these vulnerabilities are addressed?

[klopfdreh]

The new Spring Boot version will be available in the next few days - I am going to update the PR.

[klopfdreh]

Update to Spring Boot 4.0.7. Local build and tests succeeded.

[klopfdreh]

We already tested a custom build of Prometheus RSocket Proxy Server with Spring Boot 4.0.7 and Java 25 together with a client application with the changes of this PR and Java25.

Everything is working fine. 👍

[klopfdreh]

As long as this PR is not merged I want to provide a step by step workaround. For the client.

1. Create a io.micrometer.prometheus.rsocket.autoconfigure.PrometheusRSocketClientCustomAutoConfiguration java class in your project that needs the prometheus rsocket proxy client functionality. It needs to be in this package as some methods of the PrometheusRSocketClientProperties have default visibility

2. Copy the code from io.micrometer.prometheus.rsocket.autoconfigure.PrometheusMetricsExportAutoConfiguration into the newly created class and change the imports so that the classes use the new Spring Boot 4 packages. (e.g. org.springframework.boot.micrometer.metrics.autoconfigure.export.prometheus.PrometheusMetricsExportAutoConfiguration)

3. Create (if not exists) org.springframework.boot.autoconfigure.AutoConfiguration.imports file in resources/META-INF.spring and add the line io.micrometer.prometheus.rsocket.autoconfigure.PrometheusRSocketClientCustomAutoConfiguration

Note: If you have multiple projects you can add this to your parent project. Spring Boot will automatically start up this auto configuration in the child projects.

@jonatan-ivanov / @shakuzen - is there any chance the project is updated soon?

[klopfdreh]

If you build a custom prometheus rsocket proxy server it is still working with:

@SpringBootApplication(exclude = PrometheusRSocketClientAutoConfiguration.class)
@EnablePrometheusRSocketProxyServer

and the following dependencies:

        <dependency>
            <groupId>io.micrometer.prometheus</groupId>
            <artifactId>prometheus-rsocket-spring</artifactId>
        </dependency>
        <dependency>
            <groupId>io.micrometer</groupId>
            <artifactId>micrometer-registry-prometheus</artifactId>
        </dependency>
        <dependency>
            <groupId>io.rsocket</groupId>
            <artifactId>rsocket-micrometer</artifactId>
        </dependency>