Claude/security fixes#45

Draft

adityamparikh wants to merge 40 commits intoapache:mainfrom

adityamparikh:claude/security-fixes-u2hYP

Commits on Feb 4, 2026

feat: upgrade Spring Boot to v4.0.0 and Spring AI to v2.0.0-M1, refactor Solr client to use HttpJdkSolrClient
adityamparikh
committed
chore: jspecify is now built in to spring boot 4
adityamparikh
committed
fix: update JsonDocumentCreator to return value asString instead of asText
adityamparikh
committed
feat: Add security and docs (#17)
adityamparikh
committed
chore: spotless apply (#27)
adityamparikh
committed
feat: spring-boot 4.0.2, spring-ai 2.0.0-M2, mcp-server-security 0.0.6
adityamparikh
committed
fix: stateless now works
adityamparikh
committed
feat(observability): add OpenTelemetry for metrics, traces, and logs (HTTP mode)

adityamparikh
and
claude
committed
fix(observability): disable Spring Boot auto-config for lgtm service

adityamparikh
and
claude
committed
fix(observability): use Docker Compose auto-configuration for OTLP

adityamparikh
and
claude
committed
fix(observability): resolve OTLP configuration and add security bypass

adityamparikh
and
claude
committed
fix: exclude MongoDB from spring-ai-docker-compose dependency

adityamparikh
and
claude
committed
fix: resolve protobuf NoSuchMethodError with opentelemetry-proto

adityamparikh
and
claude
committed
feat(observability): add AspectJ for @Observed support and fix logging

adityamparikh
and
claude
committed
fix: migrate ObjectMapper imports from Jackson 2 to Jackson 3

adityamparikh
and
claude
committed
feat: upgrade Spring Boot to v4.0.0 and Spring AI to v2.0.0-M1, refactor Solr client to use HttpJdkSolrClient
adityamparikh
committed
chore: jspecify is now built in to spring boot 4
adityamparikh
committed
fix: update JsonDocumentCreator to return value asString instead of asText
adityamparikh
committed
feat: Add security and docs (#17)
adityamparikh
committed
chore: spotless apply (#27)
adityamparikh
committed
feat: spring-boot 4.0.2, spring-ai 2.0.0-M2, mcp-server-security 0.0.6
adityamparikh
committed
feat(observability): add OpenTelemetry for metrics, traces, and logs (HTTP mode)

adityamparikh
and
claude
committed
fix(observability): disable Spring Boot auto-config for lgtm service

adityamparikh
and
claude
committed
fix(observability): use Docker Compose auto-configuration for OTLP

adityamparikh
and
claude
committed
fix(observability): resolve OTLP configuration and add security bypass

adityamparikh
and
claude
committed
fix: exclude MongoDB from spring-ai-docker-compose dependency

adityamparikh
and
claude
committed
fix: resolve protobuf NoSuchMethodError with opentelemetry-proto

adityamparikh
and
claude
committed
feat(observability): add AspectJ for @Observed support and fix logging

adityamparikh
and
claude
committed
fix: migrate ObjectMapper imports from Jackson 2 to Jackson 3

adityamparikh
and
claude
committed
fix(observability): update OTLP endpoint configuration for LGTM container
adityamparikh
committed
Merge remote-tracking branch 'origin/sb4' into sb4
adityamparikh
committed

Commits on Feb 6, 2026

fix(security): harden CORS, fix JSON injection, add OAuth2 warning, set non-root Docker user
claude
committed

Commits on Mar 9, 2026

fix(quality): resolve SonarQube violations

adityamparikh
and
claude
committed

Commits on Mar 10, 2026