v4.0.1

⚠️ Noteworthy changes

• Hibernate has been upgraded to 7.2.0.Final in response to Hibernate 7.1 moving to limited support
• spring-boot-starter-kotlin-serialization has been renamed to to spring-boot-starter-kotlinx-serialization-json and spring-boot-starter-kotlin-serialization-test has been renamed to spring-boot-starter-kotlinx-serialization-json-test. This change aligns the starters' names with those of their respective modules
• Using TestRestTemplate now requires a dependency on spring-boot-restclient

🐞 Bug Fixes

• JsonMixinModuleEntriesBeanRegistrationAotProcessor does not handle deprecated code #48564
• JdbcSessionAutoConfiguration may not match when using the auto-configured DataSource #48552
• @ServiceConnection for LgtmStackContainer fails when logging endpoint is configured due to multiple OtlpLoggingConnectionDetails beans #48536
• WebApplicationType does not consider modules when deduced from classpath #48517
• Spring Session auto-configuration fails in a war deployment as ServerProperties is not available #48493
• Opentelemetry logging export requires actuator module #48488
• RabbitHealthIndicator reports an error when version is missing from the connection's server properties #48487
• Actuator Info class has inconsistent nullability annotations and cannot be built with null value #48480
• Profiles retained during AOT processing are not configured in a native image #48476
• Security matchers and WebServerNamespace resolution can fail with NoClassDefFoundError when used in a traditional WAR deployment #48388
• HealthEndpointGroupMembershipValidator does not consider reactive health indicators causing NoSuchHealthContributorException to be thrown #48387
• spring.jackson.default-property-inclusion is not applied to content inclusion #48343
• TestRestTemplate.getRootUri() returns empty string #48330
• Redis health check reports an error when redis_version is missing from the INFO response #48328
• Parent's MeterRegistry beans are closed when child context closes #48325
• HttpMessageConverters picks up converter beans for both client and server #48310
• Conditions to auto-configure a RestClient are outdated with the modularization #48308
• A custom JwtTypeValidator that replaces the default can no longer be configured #48301
• PropertiesRestClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #48296
• SpringBootTest.UseMainMethod.WHEN_AVAILABLE and ALWAYS are incompatible with package-private or parameter-less main method #48275
• Conditions to auto-configure RestClient-based HTTP service clients are outdated with the modularization #48274
• Starter for Kotlinx Serialization Json is misnamed #48262
• ApplicationServletEnvironment is no longer configured in war deployments #48254
• RestClient.Builder bean present in @SpringBootTest due to spring-boot-starter-webmvc-test, but missing at runtime without restclient starter #48253
• ProblemDetail is rendered to XML incorrectly #48222

📔 Documentation

• Harmonize Kotlin example for HTTP Service client support #48577
• Document HttpMessageConverters detection changes in 4.0.1 #48574
• Improve javadoc for when to use class names rather than class references #48569
• Documentation has an outdated reference to the Jackson Kotlin Module #48534
• Caching documentation should clarify how to use a no-op implementation to run a test suite #48532
• Document that the default rolling policy for Log4j2 requires logging.file.path to be set #48527
• Review documentation and migration guide about changes in @AutoConfigureCache #48522
• License header in build samples is displayed in the reference documentation #48478
• Configuring Two DataSources How-To code sample is inconsistent #48449
• Fix links to source files on GitHub #48398
• Documentation contains broken links to GitHub source files #48394
• Document that org.aspectj.weaver.Advice must be on the classpath to enable support for Micrometer's annotations #48360
• Correct the annotation in the Kotlin @ConfigurationPropertiesSource example #48357
• Polish TestRestTemplate examples in the reference guide #48336
• Documentation missing for LocalTestWebServer #48333
• Update "Creating Your Own Starter" following modularisation #48317
• Fix links to javadoc in the reference documentation #48300
• Update references for RestTemplateCustomizer and RestTemplateBuilder classes in documentation #48295
• Remove modules section of the README following modularisation #48291
• Wrong number in Graceful Shutdown chapter #48284
• Mention new spring-boot-h2console module when describing how to use H2 Console #48278
• Clarify that @EnableBatchProcessing turns off all batch auto-configuration, including schema initialization #48266
• Documented replacements for spring.jackson.generator and spring.jackson.parser are inverted #48255
• Document the need for a JdbcDialect bean when using Spring Data JDBC and AOT #48240
• Update reference documentation as Spring Batch's resourceless infrastructure means that it no longer always requires a DataSource #48233
• Kotlin auto-configuration examples are not annotated with @AutoConfiguration #48228
• Revise "Use Liquibase for test-only migrations" section in reference manual #48219
• Infinispan Cache Documentation is outdated #48218
• Removed max-attempts properties metadata don't have replacement #48206
• Polish documentation on testing web applications and the various testing clients that are available #47948

🔨 Dependency Upgrades

• Upgrade to AspectJ 1.9.25.1 #48561
• Upgrade to Elasticsearch Client 9.2.2 #48447
• Upgrade to Groovy 5.0.3 #48460
• Upgrade to Hibernate 7.2.0.Final #48518
• Upgrade to Jackson Bom 3.0.3 #48462
• Upgrade to Jetty 12.1.5 #48463
• Upgrade to jOOQ 3.19.29 #48464
• Upgrade to Json Path 2...

v3.5.9

🐞 Bug Fixes

• RabbitHealthIndicator reports an error when version is missing from the connection's server properties #48486
• Profiles retained during AOT processing are not configured in a native image #48475
• NullPointerException in UndertowWebServer.destroy() when using @DirtiesContext and Citrus Spring Boot Simulator #48450
• Redis health check reports an error when redis_version is missing from the INFO response #48326
• Parent's MeterRegistry beans are closed when child context closes #48324
• SpringBootTest.UseMainMethod.WHEN_AVAILABLE and ALWAYS are incompatible with package-private or parameter-less main method #48271

📔 Documentation

• Documentation has an outdated reference to the Jackson Kotlin Module #48533
• Caching documentation should clarify how to use a no-op implementation to run a test suite #48531
• Document that the default rolling policy for Log4j2 requires logging.file.path to be set #48526
• License header in build samples is displayed in the reference documentation #48477
• Configuring Two DataSources How-To code sample is inconsistent #48448
• Improve javadoc for when to use class names rather than class references #48395
• Document that org.aspectj.weaver.Advice must be on the classpath to enable support for Micrometer's annotations #48359
• Polish TestRestTemplate examples in the reference guide #48335
• Fix links to javadoc in the reference documentation #48299
• Clarify that @EnableBatchProcessing turns off all batch auto-configuration, including schema initialization #48265
• Kotlin auto-configuration examples are not annotated with @AutoConfiguration #48227
• Infinispan Cache Documentation is outdated #48217
• Revise "Use Liquibase for test-only migrations" section in reference manual #48169

🔨 Dependency Upgrades

• Prevent upgrade to Netty 4.1.129.Final #48508
• Upgrade to AspectJ 1.9.25.1 #48557
• Upgrade to Hibernate 6.6.39.Final #48540
• Upgrade to Jetty 12.0.31 #48455
• Upgrade to jOOQ 3.19.29 #48456
• Upgrade to Logback 1.5.22 #48507
• Upgrade to MariaDB 3.5.7 #48558
• Upgrade to Micrometer 1.15.7 #48423
• Upgrade to Micrometer Tracing 1.5.7 #48424
• Upgrade to Netty 4.1.130.Final #48541
• Upgrade to Pooled JMS 3.1.8 #48559
• Upgrade to Pulsar 4.0.8 #48457
• Upgrade to Quartz 2.5.2 #48458
• Upgrade to Reactor Bom 2024.0.13 #48425
• Upgrade to Spring Authorization Server 1.5.5 #48426
• Upgrade to Spring Data Bom 2025.0.7 #48427
• Upgrade to Spring Framework 6.2.15 #48428
• Upgrade to Spring GraphQL 1.4.4 #48429
• Upgrade to Spring Integration 6.5.5 #48560
• Upgrade to Spring LDAP 3.3.5 #48430
• Upgrade to Spring Pulsar 1.2.13 #48431
• Upgrade to Spring Session 3.5.4 #48432
• Upgrade to Testcontainers 1.21.4 #48542
• Upgrade to UnboundID LDAPSDK 7.0.4 #48459

❤️ Contributors

Thank you to all the contributors who worked on this release:

@banseok1216, @berry120, @dmitrysulman, @geopark021, @noojung, @scottfrederick, @vpavic, and @youngledo

v3.4.13

🐞 Bug Fixes

• RabbitHealthIndicator reports an error when version is missing from the connection's server properties #48484
• NullPointerException in UndertowWebServer.destroy() when using @DirtiesContext and Citrus Spring Boot Simulator #48446
• Profiles retained during AOT processing are not configured in a native image #48408
• Redis health check reports an error when redis_version is missing from the INFO response #48320
• Parent's MeterRegistry beans are closed when child context closes #48319

📔 Documentation

• Caching documentation should clarify how to use a no-op implementation to run a test suite #48529
• Documentation has an outdated reference to the Jackson Kotlin Module #48525
• Document that the default rolling policy for Log4j2 requires logging.file.path to be set #48524
• License header in build samples is displayed in the reference documentation #48474
• Configuring Two DataSources How-To code sample is inconsistent #48407
• Document that org.aspectj.weaver.Advice must be on the classpath to enable support for Micrometer's annotations #48358
• Polish TestRestTemplate examples in the reference guide #48334
• Fix links to javadoc in the reference documentation #48298
• Clarify that @EnableBatchProcessing turns off all batch auto-configuration, including schema initialization #48264
• Kotlin auto-configuration examples are not annotated with @AutoConfiguration #48220
• Infinispan Cache Documentation is outdated #48191

🔨 Dependency Upgrades

• Prevent upgrade to Netty 4.1.129.Final #48505
• Upgrade to AspectJ 1.9.25.1 #48554
• Upgrade to Hibernate 6.6.39.Final #48538
• Upgrade to Jetty 12.0.31 #48452
• Upgrade to jOOQ 3.19.29 #48453
• Upgrade to Logback 1.5.22 #48504
• Upgrade to Micrometer 1.14.14 #48412
• Upgrade to Micrometer Tracing 1.4.13 #48413
• Upgrade to Netty 4.1.130.Final #48539
• Upgrade to Pooled JMS 3.1.8 #48555
• Upgrade to Reactor Bom 2024.0.13 #48414
• Upgrade to Spring Authorization Server 1.4.8 #48415
• Upgrade to Spring Data Bom 2024.1.13 #48416
• Upgrade to Spring Framework 6.2.15 #48417
• Upgrade to Spring GraphQL 1.3.7 #48418
• Upgrade to Spring Integration 6.4.10 #48556
• Upgrade to Spring LDAP 3.2.16 #48419
• Upgrade to Spring Pulsar 1.2.13 #48420
• Upgrade to Spring Session 3.4.7 #48421
• Upgrade to Spring WS 4.0.17 #48422
• Upgrade to Tomcat 10.1.50 #48506

❤️ Contributors

Thank you to all the contributors who worked on this release:

@berry120, @dmitrysulman, @geopark021, @noojung, and @youngledo

v4.0.0

Full release notes for Spring Boot 4.0 are available on the wiki. There is also a migration guide to help you upgrade from Spring Boot 3.5.

⭐ New Features

• Change tomcat and jetty runtime modules to starters #48175
• Rename spring-boot-kotlin-serialization to align with the name of the Kotlinx module that it pulls in #48076

🐞 Bug Fixes

• Error properties are a general web concern and should not be located beneath server.* #48201
• With both Jackson 2 and 3 on the classpath, @JsonTest fails due to duplicate jacksonTesterFactoryBean #48198
• Gradle war task does not exclude starter POMs from lib-provided #48197
• spring.test.webclient.mockrestserviceserver.enabled is not aligned with its module's name #48193
• SslMeterBinder doesn't register metrics for dynamically added bundles if no bundles exist at bind time #48182
• Properties bound in the child management context ignore the parent's environment prefix #48177
• ssl.chain.expiry metrics doesn't update for dynamically registered SSL bundles #48171
• Starter for spring-boot-micrometer-metrics is missing #48161
• Elasticsearch client's sniffer functionality should not be enabled by default #48155
• spring-boot-starter-elasticsearch should depend on elasticsearch-java #48141
• Auto-configuration exclusions are checked using a different class loader to the one that loads auto-configuration classes #48132
• New arm64 macbooks fail to bootBuildImage due to incorrect platform image #48128
• Properties for configuring an isolated JsonMapper or ObjectMapper are incorrectly named #48116
• Buildpack fails with recent Docker installs due to hardcoded version in URL #48103
• Image building may fail when specifying a platform if an image has already been built with a different platform #48099
• Default values of Kotlinx Serialization JSON configuration properties are not documented #48097
• Custom XML converters should override defaults in HttpMessageConverters #48096
• Kotlin serialization is used too aggressively when other JSON libraries are available #48070
• PortInUseException incorrectly thrown on failure to bind port due to Netty IP misconfiguration #48059
• Auto-configured JCacheMetrics cannot be customized #48057
• WebSecurityCustomizer beans are excluded by WebMvcTest #48055
• Deprecated EnvironmentPostProcessor does not resolve arguments #48047
• RetryPolicySettings should refer to maxRetries, not maxAttempts #48023
• Devtools Restarter does not work with a parameterless main method #47996
• Dependency management for Kafka should not manage Scala 2.12 libraries #47991
• spring-boot-mail should depend on jakarta.mail:jakarta.mail-api and org.eclipse.angus:angus-mail instead of org.eclipse.angus:jakarta.mail #47983
• spring-boot-starter-data-mongodb-reactive has dependency on reactor-test #47982
• Support for ReactiveElasticsearchClient is in the wrong module #47848

📔 Documentation

• Removed property spring.test.webclient.register-rest-template is still documented #48199
• Mention support for detecting AWS ECS in "Deploying to the Cloud" #48170
• Revise AWS section of "Deploying to the Cloud" in reference manual #48163
• Fix typo in PortInUseException Javadoc #48134
• Correct section about required setters in "Type-safe Configuration Properties" #48131
• Use since attribute in configuration properties deprecation consistently #48122
• Document EndpointJsonMapper and management.endpoints.jackson.isolated-json-mapper #48115
• Document support for configuring servlet context init parameters using properties #48112
• Some configuration properties are not documented in the appendix #48095
• Clarify how warnings about soon-to-expire SSL certificates are reported #48063
• Document how to use ContextPropagatingTaskDecorator for propagating trace context over thread boundaries #48053
• Document the level of support for the OpenTelemetry APIs #47960
• Document that you need to build with Java 25 for buildpack build-image Graal support #45501

🔨 Dependency Upgrades

• Upgrade to Cassandra Driver 4.19.2 #48184
• Upgrade to DB2 JDBC 12.1.3.0 #48087
• Upgrade to Elasticsearch Client 9.2.1 #48137
• Upgrade to GraphQL Java 25.0 #48034
• Upgrade to Hibernate 7.1.8.Final #48150
• Upgrade to Jackson Bom 3.0.2 #48089
• Upgrade to Jetty 12.1.4 #48120
• Upgrade to Jetty Reactive HTTPClient 4.1.4 #48151
• Upgrade to jOOQ 3.19.28 #48090
• Upgrade to Kafka 4.1.1 #48185
• Upgrade to Logback 1.5.21 #48091
• Upgrade to Micrometer 1.16.0 #47820
• Upgrade to Micrometer Tracing 1.6.0 #47821
• Upgrade to MySQL 9.5.0 #48092
• Upgrade to Native Build Tools Plugin 0.11.3 #48051
• Upgrade to Neo4j Java Driver 6.0.2 #47997
• Upgrade to Prometheus Client 1.4.3 #48093
• Upgrade to Reactor Bom 2025.0.0 #47822
• Upgrade to Spring AMQP 4.0.0 #47823
• Upgrade to Spring Batch 6.0.0 #47834
• Upgrade to Spring Data Bom 2025.1.0 #47824
• Upgrade to Spring Framework 7.0.1 #48168
• Upgrade to Spring GraphQL 2.0.0 #47826
• Upgrade to Spring HATEOAS 3.0.0 #47827
• Upgrade to Spring Integration 7.0.0 #47828
• Upgrade to Spring Kafka 4.0.0 #47829
• Upgrade to Spring LDAP 4.0.0 #47999
• Upgrade to Spring Pulsar 2.0.0 #47830
• Upgrade to Spring RESTDocs 4.0.0 [#47831](https://github.com/spring-projects/spring...

v3.5.8

⚠️ Noteworthy changes

• This release contains a fix to get Testcontainers working with modern Docker versions. If this causes problems in your setup, you can downgrade the minimum Docker API, effectively reverting that change.

🐞 Bug Fixes

• Gradle war task does not exclude starter POMs from lib-provided #48196
• Testcontainers integration fails on Docker 29.0.0 #48192
• SslMeterBinder doesn't register metrics for dynamically added bundles if no bundles exist at bind time #48180
• Properties bound in the child management context ignore the parent's environment prefix #48176
• ssl.chain.expiry metrics doesn't update for dynamically registered SSL bundles #48153
• Auto-configuration exclusions are checked using a different class loader to the one that loads auto-configuration classes #48129
• New arm64 macbooks fail to bootBuildImage due to incorrect platform image #48127
• NullPointerException when using @ConditionalOnSingleCandidate with multiple manually registered singletons #48123
• Buildpack fails with recent Docker installs due to hardcoded version in URL #48102
• Image building may fail when specifying a platform if an image has already been built with a different platform #48098
• Undertow's ServletContext is destroy too early, making it unusable in @PreDestroy methods #48061
• PortInUseException incorrectly thrown on failure to bind port due to Netty IP misconfiguration #48058
• Auto-configured JCacheMetrics cannot be customized #48056
• WebSecurityCustomizer beans are excluded by WebMvcTest #48054
• Devtools Restarter does not work with a parameterless main method #47987
• Setting 'max-uri-tags' does not prevent unlimited meter growth on any AutoConfiguredCompositeMeterRegistry #47923
• Docker response 407 is not handled correctly resulting in no error message #47900
• spring-boot-maven-plugin process-aot goal does not find package-private main method #47780

📔 Documentation

• Revise AWS section of "Deploying to the Cloud" in reference manual #48156
• Fix typo in PortInUseException Javadoc #48133
• Correct section about required setters in "Type-safe Configuration Properties" #48130
• Document EndpointObjectMapper and management.endpoints.jackson.isolated-object-mapper #48114
• Document support for configuring servlet context init parameters using properties #48111
• Clarify how warnings about soon-to-expire SSL certificates are reported #48062
• Document how to use ContextPropagatingTaskDecorator for propagating trace context over thread boundaries #48052
• Use since attribute in configuration properties deprecation consistently #47980
• BootstrapContext#getOrElseThrow has incorrect reference to IllegalStateException #47905
• Clarify when BootstrapContext get methods may return null rather than throwing an exception or calling the fallback supplier #47898
• Document that Actuator endpoint may have at most one extension of each type #47873
• Limit Kotlin API documentation to Kotlin-specific APIs #47859
• Adapt AOTCache documentation to JEP 514 #47274

🔨 Dependency Upgrades

• Downgrade to Cassandra Driver 4.19.0 #47926
• Upgrade to AspectJ 1.9.25 #48005
• Upgrade to Caffeine 3.2.3 #48006
• Upgrade to Cassandra Driver 4.19.2 #48183
• Upgrade to DB2 JDBC 12.1.3.0 #48083
• Upgrade to Hibernate 6.6.36.Final #48148
• Upgrade to Jackson Bom 2.19.4 #48008
• Upgrade to Jetty 12.0.30 #48118
• Upgrade to Jetty Reactive HTTPClient 4.0.13 #48149
• Upgrade to jOOQ 3.19.28 #48084
• Upgrade to Logback 1.5.21 #48085
• Upgrade to Micrometer 1.15.6 #48009
• Upgrade to Micrometer Tracing 1.5.6 #48010
• Upgrade to MySQL 9.5.0 #48011
• Upgrade to Neo4j Java Driver 5.28.10 #48044
• Upgrade to Quartz 2.5.1 #48012
• Upgrade to R2DBC Postgresql 1.0.9.RELEASE #48013
• Upgrade to Reactor Bom 2024.0.12 #48014
• Upgrade to Spring Data Bom 2025.0.6 #48039
• Upgrade to Spring Framework 6.2.14 #48166
• Upgrade to Spring Integration 6.5.4 #48040
• Upgrade to Spring Kafka 3.3.11 #48041
• Upgrade to Spring Pulsar 1.2.12 #48042
• Upgrade to Spring Security 6.5.7 #48043
• Upgrade to Tomcat 10.1.49 #48086

❤️ Contributors

Thank you to all the contributors who worked on this release:

@K-jun98, @TerryTaoYY, @hojooo, @linw-bai, @mipo256, @namest504, @ngocnhan-tran1996, @nosan, @scottfrederick, @siva-sai-udaygiri, @tschut, and @vpavic

v3.4.12

⚠️ Noteworthy changes

• This release contains a fix to get Testcontainers working with modern Docker versions. If this causes problems in your setup, you can downgrade the minimum Docker API, effectively reverting that change.

🐞 Bug Fixes

• Gradle war task does not exclude starter POMs from lib-provided #48195
• Testcontainers integration fails on Docker 29.0.0 #48104
• NullPointerException when using @ConditionalOnSingleCandidate with multiple manually registered singletons #48117
• Buildpack fails with recent Docker installs due to hardcoded version in URL #48050
• PortInUseException incorrectly thrown on failure to bind port due to Netty IP misconfiguration #47618
• Image building may fail when specifying a platform if an image has already been built with a different platform #47292
• Setting 'max-uri-tags' does not prevent unlimited meter growth on any AutoConfiguredCompositeMeterRegistry #47285
• WebSecurityCustomizer beans are excluded by WebMvcTest #47255
• Docker response 407 is not handled correctly resulting in no error message #47180
• Undertow's ServletContext is destroy too early, making it unusable in @PreDestroy methods #47141
• New arm64 macbooks fail to bootBuildImage due to incorrect platform image #46665
• Auto-configured JCacheMetrics cannot be customized #46212
• Properties bound in the child management context ignore the parent's environment prefix #45858

📔 Documentation

• Fix typo in PortInUseException Javadoc #48124
• Document support for configuring servlet context init parameters using properties #47951
• BootstrapContext#getOrElseThrow has incorrect reference to IllegalStateException #47903
• Clarify when BootstrapContext get methods may return null rather than throwing an exception or calling the fallback supplier #47896
• Document how to use ContextPropagatingTaskDecorator for propagating trace context over thread boundaries #47893
• Limit Kotlin API documentation to Kotlin-specific APIs #47763
• Document that Actuator endpoint may have at most one extension of each type #47740
• Some spring.test.* properties are not documented #47236
• Document EndpointObjectMapper and management.endpoints.jackson.isolated-object-mapper #47039
• Clarify how warnings about soon-to-expire SSL certificates are reported #45564
• Correct section about required setters in "Type-safe Configuration Properties" #43138

🔨 Dependency Upgrades

• Upgrade to AspectJ 1.9.25 #48015
• Upgrade to Hibernate 6.6.36.Final #48146
• Upgrade to Jackson Bom 2.18.5 #48017
• Upgrade to Jetty 12.0.30 #48119
• Upgrade to Jetty Reactive HTTPClient 4.0.13 #48147
• Upgrade to jOOQ 3.19.28 #48078
• Upgrade to Logback 1.5.21 #48079
• Upgrade to Micrometer 1.14.13 #48018
• Upgrade to Micrometer Tracing 1.4.12 #48019
• Upgrade to MySQL 9.5.0 #48020
• Upgrade to Neo4j Java Driver 5.28.10 #48030
• Upgrade to R2DBC Postgresql 1.0.9.RELEASE #48021
• Upgrade to Reactor Bom 2024.0.12 #48022
• Upgrade to Spring Data Bom 2024.1.12 #48024
• Upgrade to Spring Framework 6.2.14 #48165
• Upgrade to Spring Integration 6.4.9 #48026
• Upgrade to Spring Kafka 3.3.11 #48027
• Upgrade to Spring Pulsar 1.2.12 #48028
• Upgrade to Spring Security 6.4.13 #48029
• Upgrade to Tomcat 10.1.49 #48080

❤️ Contributors

Thank you to all the contributors who worked on this release:

@K-jun98, @hojooo, @mipo256, @namest504, @ngocnhan-tran1996, @nosan, @siva-sai-udaygiri, and @tschut

v4.0.0-RC2

⭐ New Features

• Restore support for Jersey now that it supports JAX-RS 4 (Jakarta EE 11) #47967
• Refactor OpenTelemetryLoggingAutoConfiguration from OpenTelemetrySdkAutoConfiguration #47963
• Switch property backing OnEnabledTracingExportCondition to management.tracing.export.{name}.enabled #47959
• Rename management.zipkin.tracing to management.tracing.export.zipkin #47958
• Switch property backing OnEnabledLoggingExportCondition to management.logging.export.{name}.enabled #47957
• Rename management.opentelemetry.logging.export properties #47954
• Split spring-boot-micrometer-tracing into Brave and OpenTelemetry specific module #47953
• Use Elasticsearch 9.2's elasticsearch-rest5-client in spring-boot-elasticsearch #47945
• Provide auto-configuration for Jackson's XML data format #47942
• Rename OnlyOnceLoggingDenyMeterFilter #47925
• Allow url to be specified when working with @AutoConfigureWebMvc configured HtmlUnit beans #47857

🐞 Bug Fixes

• Incorrect metadata for HttpServiceClientProperties ("spring.http.serviceclient") #47943
• Setting 'max-uri-tags' does not prevent unlimited meter growth on any AutoConfiguredCompositeMeterRegistry #47924
• Docker response 407 is not handled correctly resulting in no error message #47901
• Runtime hints for web resources no longer include nested folders #47894
• Auto-configuration for WebTestClient should be in an autoconfigure package #47892
• Jackson 2 support does not work in some sliced tests #47869
• spring-boot-starter-zipkin is missing spring-boot-micrometer-tracing dependency #47866
• Application TaskExecutor is no longer used when a custom AsyncConfigurer bean is defined #47897
• Custom Jackson serializers are no longer included in WebMvcTest and WebFluxTest #47864
• spring-boot-webtestclient is missing from GraphQL test starter #47849
• spring-boot-security brings test dependencies #47813
• @JsonTest and @AutoConfigureJson fail when using spring-boot-jackson2 #47811
• Message converter customizer ordering impedes overriding #47798
• Deprecated testcontainers implementations are no longer detected #47796
• reactor-test is missing from reactive test starters #47795
• spring-kafka-test is missing from spring-boot-starter-kafka-test #47793
• spring-batch-test is missing from spring-boot-starter-batch-test #47792
• spring-rabbit-test is missing from spring-boot-starter-amqp-test #47791
• App fails to start when using Actuator with Jackson 2 and without spring-web #47788
• Depending on spring-boot-starter-actuator without a tracing bridge results in empty and unwanted correlation IDs in the logs #47785
• spring-boot-maven-plugin process-aot goal does not find package-private main method #47783
• Templating auto-configurations still have enabled properties that are not relevant following modularization #32250

📔 Documentation

• Config property management.logging.export.enabled is missing from documentation #47961
• Add a section about upgrading to Spring Boot 4.x #47916
• BootstrapContext#getOrElseThrow has incorrect reference to IllegalStateException #47906
• Clarify when BootstrapContext get methods may return null rather than throwing an exception or calling the fallback supplier #47899
• Document that web clients are opt-in with @SpringBootTest #47891
• Document AssertJ support in RestTestClient #47881
• Document that Actuator endpoint may have at most one extension of each type #47874
• Limit Kotlin API documentation to Kotlin-specific APIs #47860
• Correct link to JacksonTester in JacksonTesterTestAutoConfiguration javadoc #47784

🔨 Dependency Upgrades

• Downgrade to Cassandra Driver 4.19.0 #47938
• Upgrade to AspectJ 1.9.25 #47931
• Upgrade to Caffeine 3.2.3 #47884
• Upgrade to Elasticsearch Client 9.2.0 #47847
• Upgrade to GraphQL Java 25.0.beta-9 #47911
• Upgrade to Hibernate 7.1.6.Final #47932
• Upgrade to Jackson 2 Bom 2.20.1 #47886
• Upgrade to JUnit Jupiter 6.0.1 #47933
• Upgrade to Kotlin 2.2.21 #47887
• Upgrade to Prometheus Client 1.4.2 #47888
• Upgrade to Quartz 2.5.1 #47889
• Upgrade to R2DBC Postgresql 1.1.1.RELEASE #47890
• Upgrade to Rabbit AMQP Client 5.27.1 #47950
• Upgrade to Spring Batch 6.0.0-RC2 #47842
• Upgrade to Spring Data Bom 2025.1.0-RC2 #47843
• Upgrade to Spring Framework 7.0.0-RC3 #47850
• Upgrade to Spring GraphQL 2.0.0-RC2 #47879
• Upgrade to Spring HATEOAS 3.0.0-RC2 #47851
• Upgrade to Spring Integration 7.0.0-RC2 #47880
• Upgrade to Spring Security 7.0.0-RC3 #47844

❤️ Contributors

Thank you to all the contributors who worked on this release:

@Walti91, @filiphr, @mipo256, @namest504, @ngocnhan-tran1996, @siva-sai-udaygiri, and @tschut

v4.0.0-RC1

⭐ New Features

• Revisit metrics and tracing test properties #47776
• Downgrade to GraphQL Java 24.3 #47752
• Configure devtools to set trace probability to 100% by default #47721
• Remove "public" from referenced configurations from auto-configurations #47715
• Remove support for Spring Pulsar Reactive #47707
• Add Jackson 2 module to ease upgrade effort #47688
• Remove ConcurrentReferenceCachingMetadataReaderFactory #47687
• Remove integration for REST Docs' REST Assured support until REST Assured supports Groovy 5 #47685
• Remove support for embedded jar launch scripts #47666
• Remove support for Spring Session Data MongoDB #47662
• Remove support for Spring Session Hazelcast #47661
• Drop Spock until it supports Groovy 5 #47650
• Provide auto-configuration for Jackson's CBOR data format #47641
• Add support for @ObservationKeyValue #47637
• Rename Jackson-specific Json… annotations and classes to Jackson… #47625
• Use Neo4j Java Driver BOM #47623
• Add TWENTY_FIVE to JavaVersion enum #47616
• Rationalize endpoint packages #47606
• Refactor spring-boot-cloudfoundry package structure #47605
• Rename spring-boot-tx module to spring-boot-transaction #47603
• Use JsonMapper instead of ObjectMapper where feasible #47503
• Automatically detect Jackson 3 modules #47485
• Add AWS ECS to cloud platforms #47482
• Rename SharedObjectMapper to SharedJsonMapper #47471
• Provide a configuration property to auto-configure Jackson 3 for best compatibility with Spring Boot 3's Jackson 2 defaults #47470
• Raise GraalVM baseline to 25 #47433
• Clarify that spring-boot-rsocket does not require spring-web #47409
• Rationalize HTTP client configuration properties #47398
• Disable LiveReload server by default #47387
• Update Neo4j support to require Neo4j Java Driver 6.0.0 #47381
• Remove SQL and Reactor starters as they are only used transitively #47378
• Rationalize SSL bundle configuration in RedisConnectionDetails #47375
• Add support for RestTestClient #47335
• Rename Spring Session properties that depend on Spring Data #47333
• Rename JsonMapper-specific properties to make it clear that they're JSON-specific #47328
• Move spring.jackson.datetime.<feature-name> to spring.jackson.datatype.datetime #47327
• Modularize spring-boot-test-autoconfigure #47322
• Allow jars to be marked as a development-tool to exclude from uber-jar #47320
• Switch Maven plugin to exclude optional dependencies by default #47318
• Provide a configuration property for enabling and disabling Elasticsearch Client's sniffer #47301
• Add @ControllerAdvice support to RSocket messaging auto-configuration #47287
• Reintroduce previous EnvironmentPostProcessor in deprecated form #47272
• Remove Bitnami support #47267
• Improve how Spring AMQP's retry can be configured #47264
• Refine JSpecify annotations #47263
• Add support for configuring HttpClientTransport in JettyClientHttpConnectorBuilder #47251
• Raise the minimum supported version of the CycloneDX Gradle Plugin to 3.0.0 #47250
• Make all type exclude filters package-private #47227
• Rename …DataAutoConfiguration to Data…AutoConfiguration #47049
• Configure Lettuce with MicrometerTracing instead of MicrometerCommandLatencyRecorder when micrometer-tracing is available #46975
• Add support for static master-replica with Lettuce #46957
• Review and refine where possible war deployments following 4.0's modularisation #46944
• Remove unused SHA-1 hash from UNPACK markers #46520
• Adopt Framework's HttpMessageConverters #46411
• Add native image support for Log4J integration #46410
• Modularize spring-boot-test #46356
• Add support for in-memory Batch infrastructure #46307
• Package mappings and exchanges classes consistently #46217
• Introduce a shared abstraction for database initialization #46213
• Add FONTS location to StaticResourceLocation #46208
• Update Log4j's configuration using reconfigure rather than start #46035
• Drop spring-boot-loader-classic support #45714
• Allow DevTools property defaults to be contributed by modules #44792

🐞 Bug Fixes

• Signed jar verification fails when nested in an uber war running on an Oracle JVM #47772
• In an uber war, value of the Sbom-Location manifest attribute does not match the SBOM's actual location #47739
• Homebrew formula for the CLI should use libexec #47723
• When virtual threads are enabled, embedded Jetty does not use recommended virtual thread configuration #47718
• Dependency management for Hibernate is inconsistent #47698
• ClientHttpRequestFactoryRuntimeHints is missing timeout methods with Duration overloads #47679
• @AutoConfigureHttpGraphQlTester should not trigger the configuration of mockMvc #47660
• The 'spring.mongodb.representation.uuid' property cannot be bound #47654
• OnBeanCondition no longer correctly finds annotations on scoped target proxy beans #47636
• JavaVersion doesn't work reliably in native-image #47621
• Using CodecCustomizer requires explicit dependency on spring-boot-http-codec #47397
• Auto-configured JsonMapper backs off when any type of ObjectMapper is defined #47379
• LiquibaseEndpoint always uses defaultSchema instead of liquibaseSchema #47347
• Maven plugin does not provide an easy way to exclude opti...

v3.5.7

⭐ New Features

• Add TWENTY_FIVE to JavaVersion enum #47609

🐞 Bug Fixes

• Signed jar verification fails when nested in an uber war running on an Oracle JVM #47771
• In an uber war, value of the Sbom-Location manifest attribute does not match the SBOM's actual location #47737
• Homebrew formula for the CLI should use libexec #47722
• When virtual threads are enabled, embedded Jetty does not use recommended virtual thread configuration #47717
• ClientHttpRequestFactoryRuntimeHints is missing timeout methods with Duration overloads #47678
• OnBeanCondition no longer correctly finds annotations on scoped target proxy beans #47635
• JavaVersion doesn't work reliably in native-image #47620
• LiquibaseEndpoint always uses defaultSchema instead of liquibaseSchema #47346
• Launcher fails to find main method when it is parameterless #47311
• Package private Main class using Java 25 is not found by build plugins #47309
• Bitnami legacy images are not automatically detected #47275
• Maven plugin does not provide an easy way to exclude optional dependencies from uber jar #25403

📔 Documentation

• Some spring.test.* properties are not documented #47775
• Dependency management for Maven AntRun Plugin is missing changelog link #47744
• Developing Your First Spring Boot Application has outdated tools #47700
• Include deprecated configuration properties in the reference documentation #47669
• Aggregated Javadoc should link to the proper version of JakartaEE #47593
• Update javadoc of TestRestTemplate following change to redirect behavior #47474
• Use non-deprecated syntax to configure sourceCompatibility #47343
• Fix link to Framework's @Bean annotation #47330
• Update managed dependency version override examples in documentation #47306

🔨 Dependency Upgrades

• Upgrade to ActiveMQ 6.1.8 #47767
• Upgrade to Angus Mail 2.0.5 #47525
• Upgrade to AssertJ 3.27.6 #47526
• Upgrade to Byte Buddy 1.17.8 #47527
• Upgrade to Cassandra Driver 4.19.1 #47768
• Upgrade to Classmate 1.7.1 #47528
• Upgrade to Elasticsearch Client 8.18.8 #47671
• Upgrade to Glassfish JAXB 4.0.6 #47529
• Upgrade to GraphQL Java 24.3 #47755
• Upgrade to Groovy 4.0.29 #47713
• Upgrade to Hibernate 6.6.33.Final #47530
• Upgrade to HttpClient5 5.5.1 #47531
• Upgrade to HttpCore5 5.3.6 #47532
• Upgrade to Jakarta Mail 2.1.5 #47533
• Upgrade to Jakarta XML Bind 4.0.4 #47242
• Upgrade to Jetty 12.0.29 #47728
• Upgrade to Jetty Reactive HTTPClient 4.0.12 #47534
• Upgrade to jOOQ 3.19.27 #47536
• Upgrade to Logback 1.5.20 #47714
• Upgrade to Lombok 1.18.42 #47538
• Upgrade to Maven Compiler Plugin 3.14.1 #47539
• Upgrade to Micrometer 1.15.5 #47457
• Upgrade to Micrometer Tracing 1.5.5 #47458
• Upgrade to MongoDB 5.5.2 #47648
• Upgrade to MSSQL JDBC 12.10.2.jre11 #47612
• Upgrade to Netty 4.1.128.Final #47649
• Upgrade to Postgresql 42.7.8 #47540
• Upgrade to Pulsar 4.0.7 #47541
• Upgrade to R2DBC H2 1.0.1.RELEASE #47729
• Upgrade to R2DBC Postgresql 1.0.8.RELEASE #47542
• Upgrade to Reactor Bom 2024.0.11 #47459
• Upgrade to RxJava3 3.1.12 #47543
• Upgrade to Spring AMQP 3.2.8 #47614
• Upgrade to Spring Authorization Server 1.5.3 #47460
• Upgrade to Spring Batch 5.2.4 #47487
• Upgrade to Spring Data Bom 2025.0.5 #47461
• Upgrade to Spring Framework 6.2.12 #47462
• Upgrade to Spring GraphQL 1.4.3 #47754
• Upgrade to Spring Integration 6.5.3 #47615
• Upgrade to Spring LDAP 3.3.4 #47463
• Upgrade to Spring Pulsar 1.2.11 #47464
• Upgrade to Spring Security 6.5.6 #47465
• Upgrade to Spring Session 3.5.3 #47466
• Upgrade to Spring WS 4.1.2 #47467
• Upgrade to Tomcat 10.1.48 #47613
• Upgrade to Undertow 2.3.20.Final #47545
• Upgrade to WebJars Locator Lite 1.1.2 #47546

❤️ Contributors

Thank you to all the contributors who worked on this release:

@DKARAGODIN, @JinhyeokFang, @Lublanski, @Pankraz76, @fhiyo, @ngocnhan-tran1996, @nosan, @scottfrederick, and @xyraclius

v3.4.11

🐞 Bug Fixes

• In an uber war, value of the Sbom-Location manifest attribute does not match the SBOM's actual location #47735
• Homebrew formula for the CLI should use libexec #47696
• When virtual threads are enabled, embedded Jetty does not use recommended virtual thread configuration #47690
• ClientHttpRequestFactoryRuntimeHints is missing timeout methods with Duration overloads #47675
• OnBeanCondition no longer correctly finds annotations on scoped target proxy beans #47633
• JavaVersion doesn't work reliably in native-image #47619
• In an uber war, value of the Sbom-Location manifest attribute does not match the SBOM's actual location #47408
• LiquibaseEndpoint always uses defaultSchema instead of liquibaseSchema #47300
• Signed jar verification fails when nested in an uber war running on an Oracle JVM #47284
• Bitnami legacy images are not automatically detected #46983

📔 Documentation

• Dependency management for Maven AntRun Plugin is missing changelog link #47732
• Developing Your First Spring Boot Application has outdated tools #47699
• Include deprecated configuration properties in the reference documentation #47622
• Aggregated Javadoc should link to the proper version of JakartaEE #47592
• Use non-deprecated syntax to configure sourceCompatibility #47339
• Fix link to Framework's @Bean annotation #47329
• Update managed dependency version override examples in documentation #47304

🔨 Dependency Upgrades

• Upgrade to ActiveMQ 6.1.8 #47766
• Upgrade to Angus Mail 2.0.5 #47506
• Upgrade to Classmate 1.7.1 #47507
• Upgrade to Glassfish JAXB 4.0.6 #47508
• Upgrade to Groovy 4.0.29 #47711
• Upgrade to Hibernate 6.6.33.Final #47509
• Upgrade to HttpCore5 5.3.6 #47510
• Upgrade to Jakarta Mail 2.1.5 #47511
• Upgrade to Jakarta XML Bind 4.0.4 #47237
• Upgrade to Jaybird 5.0.10.java11 #47513
• Upgrade to Jetty 12.0.29 #47726
• Upgrade to Jetty Reactive HTTPClient 4.0.12 #47514
• Upgrade to jOOQ 3.19.27 #47516
• Upgrade to Logback 1.5.20 #47712
• Upgrade to Lombok 1.18.42 #47518
• Upgrade to Micrometer 1.14.12 #47446
• Upgrade to Micrometer Tracing 1.4.11 #47447
• Upgrade to MSSQL JDBC 12.8.2.jre11 #47607
• Upgrade to Netty 4.1.128.Final #47647
• Upgrade to Postgresql 42.7.8 #47519
• Upgrade to Pulsar 3.3.9 #47520
• Upgrade to R2DBC H2 1.0.1.RELEASE #47727
• Upgrade to R2DBC Postgresql 1.0.8.RELEASE #47521
• Upgrade to Reactor Bom 2024.0.11 #47448
• Upgrade to RxJava3 3.1.12 #47522
• Upgrade to Spring AMQP 3.2.8 #47610
• Upgrade to Spring Authorization Server 1.4.6 #47449
• Upgrade to Spring Batch 5.2.4 #47486
• Upgrade to Spring Data Bom 2024.1.11 #47450
• Upgrade to Spring Framework 6.2.12 #47451
• Upgrade to Spring Integration 6.4.8 #47611
• Upgrade to Spring LDAP 3.2.15 #47452
• Upgrade to Spring Pulsar 1.2.11 #47453
• Upgrade to Spring Security 6.4.12 #47454
• Upgrade to Spring Session 3.4.6 #47455
• Upgrade to Spring WS 4.0.16 #47456
• Upgrade to Tomcat 10.1.48 #47608
• Upgrade to Undertow 2.3.20.Final #47524

❤️ Contributors

Thank you to all the contributors who worked on this release:

@DKARAGODIN, @Lublanski, @fhiyo, @ngocnhan-tran1996, @nosan, @scottfrederick, and @xyraclius