Update spring boot to v4.0.6

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.springframework.boot:spring-boot-starter-parent (source)	4.0.4 → 4.0.6

---

Release Notes

spring-projects/spring-boot (org.springframework.boot:spring-boot-starter-parent)

v4.0.6

Compare Source

🐞 Bug Fixes

• Default security is misconfigured when spring-boot-actuator-autoconfigure is present and spring-boot-health is not #​50188
• Elasticsearch Rest5Client auto-configuration misconfigures underlying HTTP client #​50187
• ApplicationPidFileWriter does not handle symlinks correctly #​50185
• RandomValuePropertySource is not suitable for secrets #​50183
• Cassandra auto-configuration misconfigures CqlSessionBuilder #​50180
• ApplicationTemp does not handle symlinks correctly #​50178
• Remote DevTools performs comparison incorrectly #​50176
• spring.rabbitmq.ssl.verify-hostname is applied inconsistently #​50174
• Whole number values are ignored when configuring min and max expected values and SLO boundaries for a distribution summary meter #​50077
• Classic starters are missing several modules #​50071
• Module spring-boot-resttestclient is missing from spring-boot-starter-test-classic #​50069
• Annotations like @Ssl don't work on @Bean methods when using @ServiceConnection #​50064
• EnversRevisionRepositoriesRegistrar should reuse @EnableEnversRepositories rather than configuring the JPA counterpart #​50039
• WebFlux Cloud Foundry links endpoint includes query string from received request in resolved links #​50017
• Imports on a containing test class are ignored when a nested class has imports #​50012
• With spring.jackson.use-jackson2-defaults set to true, FAIL_ON_UNKNOWN_PROPERTIES is enabled #​49951
• 500 response from env endpoint when supplied pattern is invalid #​49946
• Reactive MongoDB starter has a transitive dependency on the synchronous MongoDB driver #​49945
• HTTP method is lost when configuring excludes in EndpointRequest #​49943
• Honor HttpMethod for reactive additional endpoint paths #​49880
• Docker Compose support doesn't work with apache/artemis image #​49869
• Docker Compose support doesn't work with apache/activemq image #​49866
• Spring Security's PathPatternRequestMatcher.Builder is not auto-configured when using WebMvcTest and spring-boot-security-test #​49854
• API versioning path strategy should be applied path last as it is not meant to yield #​49800

📔 Documentation

• Update docs to encourage Java fundamentals for beginners that prefer to learn that way #​50146
• HTTP Service Interface Clients still document that API versioning can be configured via properties #​50126
• Link to the observability section of the Lettuce documentation is broken #​50097
• Javadoc for StaticResourceLocation.FAVICON doesn't describe icons location #​50085
• MySamlRelyingPartyConfiguration is missing a Kotlin sample #​50024
• Incorrect default value for management.httpexchanges.recording.include in configuration metadata #​50019
• Link to the Kubernetes documentation when discussing startup probes #​50015
• Typo in JdbcSessionAutoConfiguration Javadoc #​49873
• Clarify that configuration property default values are not available through the Environment #​49851
• Document the need for Liquibase and Flyway starters #​49839
• Kafka documentation refers to deprecated JSON serializer and deserializer classes #​49826

🔨 Dependency Upgrades

• Upgrade to Elasticsearch Client 9.2.8 #​50027
• Upgrade to Groovy 5.0.5 #​49911
• Upgrade to Hibernate 7.2.12.Final #​50134
• Upgrade to Jackson Bom 3.1.2 #​50051
• Upgrade to Jaxen 2.0.1 #​50104
• Upgrade to Jaybird 6.0.5 #​49914
• Upgrade to Jetty 12.1.8 #​49915
• Upgrade to jOOQ 3.19.32 #​50105
• Upgrade to Log4j2 2.25.4 #​49916
• Upgrade to Lombok 1.18.46 #​50150
• Upgrade to MariaDB 3.5.8 #​49917
• Upgrade to Micrometer 1.16.5 #​49972
• Upgrade to Micrometer Tracing 1.6.5 #​49973
• Upgrade to MongoDB 5.6.5 #​50028
• Upgrade to MySQL 9.7.0 #​50159
• Upgrade to Neo4j Java Driver 6.0.5 #​50075
• Upgrade to Reactor Bom 2025.0.5 #​49974
• Upgrade to Spring AMQP 4.0.3 #​49975
• Upgrade to Spring Data Bom 2025.1.5 #​49976
• Upgrade to Spring Framework 7.0.7 #​49977
• Upgrade to Spring GraphQL 2.0.3 #​49978
• Upgrade to Spring Kafka 4.0.5 #​49979
• Upgrade to Spring LDAP 4.0.3 #​49980
• Upgrade to Spring Pulsar 2.0.5 #​49981
• Upgrade to Spring Security 7.0.5 #​49982
• Upgrade to Spring Session 4.0.3 #​49983
• Upgrade to Testcontainers 2.0.5 #​50135
• Upgrade to Thymeleaf 3.1.5.RELEASE #​50152
• Upgrade to Thymeleaf Extras SpringSecurity 3.1.5.RELEASE #​50153
• Upgrade to Tomcat 11.0.21 #​49918

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​GollapudiSrikanth, @​MohammedGhallab, @​bachhs, @​dlwldnjs1009, @​edwardsre, @​kodama-kcc, @​kwondh5217, @​ppapaj, @​quaff, @​refeccd, @​scordio, and @​xxxxxxjun

v4.0.5

Compare Source

🐞 Bug Fixes

• Test starter for Spring Integration does not include Spring Integration test module #​49784
• Some sliced tests that import TransactionAutoConfiguration do not import TransactionManagerCustomizationAutoConfiguration #​49782
• WebSocket messaging's task executors are only auto-configured and stompWebSocketHandlerMapping is only forced to be eager when using Jackson #​49753
• WebSocket app fails to start when Jackson is on the classpath but there's no JsonMapper bean #​49749
• Metadata annotation processor ignores method-level @NestedConfigurationProperty when using constructor binding #​49738
• Override of property in external 'application.properties' or 'application.yaml' is ignored #​49731
• NativeImageResourceProvider does not find Flyway migration scripts in subdirectories #​49706
• Add @ConditionalOnWebApplication to NettyReactiveWebServerAutoConfiguration #​49695
• @GraphQlTest does not include @ControllerAdvice #​49672

📔 Documentation

• Fix incorrect indefinite articles in Javadoc #​49727
• Add some more Kotlin examples and trivial style fixes #​49714
• Overhaul Spring Session documentation following modularization #​49704

🔨 Dependency Upgrades

• Upgrade to Brave 6.3.1 #​49763
• Upgrade to Jackson 2 Bom 2.21.2 #​49764
• Upgrade to jOOQ 3.19.31 #​49765
• Upgrade to Netty 4.2.12.Final #​49794
• Upgrade to Tomcat 11.0.20 #​49767
• Upgrade to Zipkin Reporter 3.5.3 #​49762

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, @​deejay1, @​dlwldnjs1009, @​kwondh5217, @​ljrmorgan, and @​quaff

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.