Skip to content

Update dependency org.springframework.boot to v4.1.0-RC1#582

Merged
mrbusche merged 1 commit intomainfrom
renovate/spring-boot
Apr 23, 2026
Merged

Update dependency org.springframework.boot to v4.1.0-RC1#582
mrbusche merged 1 commit intomainfrom
renovate/spring-boot

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Apr 23, 2026

This PR contains the following updates:

Package Change Age Confidence
org.springframework.boot (source) 4.1.0-M4 → 4.1.0-RC1 age confidence

Release Notes

spring-projects/spring-boot (org.springframework.boot)

v4.1.0-RC1

⭐ New Features

  • Add support for docker.elastic.co/elasticsearch/elasticsearch #​50119
  • Narrow the scope of icons pattern to /icons/icon-* #​50084
  • Add configuration options for KafkaTemplate's allowNonTransactional and closeTimeout #​49954
  • Align ReactorHttpClientBuilder defaults with Spring Framework and provide an opt-out #​49950
  • Add support for providing a custom SessionTimeout bean #​49883
  • Add support for Redis Annotation driven listeners #​49858
  • Support spring.webflux.default-html-escape property for application-wide HTML escaping configuration #​49791
  • Add fallback support for '/opt/homebrew/bin' on macOS #​49721
  • Support InetAddress filtering for HTTP Clients #​49687
  • Monitor certificates from truststore in SslMeterBinder #​49641
  • Enable ansi support by default on Windows 11+ #​49571
  • Add '@GrpcAdvice' exception handling support #​49053
  • Add support for OpenTelemetry SDK environment variables #​48799
  • Add ability to read custom layers.xml from classpath #​32466
  • Support LazyConnectionDataSourceProxy #​15480

🐞 Bug Fixes

  • Default security is misconfigured when spring-boot-actuator-autoconfigure is present and spring-boot-health is not #​50190
  • Elasticsearch Rest5Client auto-configuration misconfigures underlying HTTP client #​50189
  • ApplicationPidFileWriter does not handle symlinks correctly #​50186
  • RandomValuePropertySource is not suitable for secrets #​50184
  • Cassandra auto-configuration misconfigures CqlSessionBuilder #​50182
  • ApplicationTemp does not handle symlinks correctly #​50179
  • Remote DevTools performs comparison incorrectly #​50177
  • spring.rabbitmq.ssl.verify-hostname is applied inconsistently #​50175
  • GrpcDisableCsrfHttpConfigurer incorrectly uses inverse of 'spring.grpc.server.security.csrf.enabled' property #​50145
  • API versioning path strategy should be applied path last as it is not meant to yield #​50127
  • Whole number values are ignored when configuring min and max expected values and SLO boundaries for a distribution summary meter #​50078
  • Classic starters are missing several modules #​50072
  • Module spring-boot-resttestclient is missing from spring-boot-starter-test-classic #​50070
  • Annotations like @Ssl don't work on @Bean methods when using @ServiceConnection #​50065
  • EnversRevisionRepositoriesRegistrar should reuse @EnableEnversRepositories rather than configuring the JPA counterpart #​50040
  • WebFlux Cloud Foundry links endpoint includes query string from received request in resolved links #​50018
  • Imports on a containing test class are ignored when a nested class has imports #​50013
  • Spring Security's PathPatternRequestMatcher.Builder is not auto-configured when using WebMvcTest and spring-boot-security-test #​49988
  • Reactive MongoDB starter has a transitive dependency on the synchronous MongoDB driver #​49958
  • With spring.jackson.use-jackson2-defaults set to true, FAIL_ON_UNKNOWN_PROPERTIES is enabled #​49957
  • 500 response from env endpoint when supplied pattern is invalid #​49947
  • HTTP method is lost when configuring excludes in EndpointRequest #​49944
  • Honor HttpMethod for reactive additional endpoint paths #​49881
  • Docker Compose support doesn't work with apache/artemis image #​49870
  • Docker Compose support doesn't work with apache/activemq image #​49867
  • ReactiveOAuth2ResourceServerAutoConfiguration should trigger only on real Reactive Applications #​49807
  • Test starters 'spring-boot-starter-grpc-client-test' and 'spring-boot-starter-grpc-server-test' are missing #​49690
  • Properties in '@ConfigurationProperties' annotated type shouldn't be able to define the same '@Name' #​49565
  • Distribution's SLO, minimum expected value, and maximum expected value are not applied to long task timer meters #​49190
  • WebConversionService breaks embedded value resolving #​8923

📔 Documentation

  • Update docs to encourage Java fundamentals for beginners that prefer to learn that way #​50147
  • HTTP Service Interface Clients still document that API versioning can be configured via properties #​50128
  • Link to the observability section of the Lettuce documentation is broken #​50098
  • Javadoc for StaticResourceLocation.FAVICON doesn't describe icons location #​50086
  • MySamlRelyingPartyConfiguration is missing a Kotlin sample #​50025
  • Move OAuth2 and SAML 2.0 documentation to a security section #​50022
  • Incorrect default value for management.httpexchanges.recording.include in configuration metadata #​50020
  • Link to the Kubernetes documentation when discussing startup probes #​50016
  • Document missing gRPC's default unit in GrpcClientProperties #​49879
  • Document the need for Liquibase and Flyway starters #​49875
  • Typo in JdbcSessionAutoConfiguration Javadoc #​49874
  • Clarify that configuration property default values are not available through the Environment #​49852
  • Kafka documentation refers to deprecated JSON serializer and deserializer classes #​49834
  • Document gRPC Support #​49291

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​GollapudiSrikanth, @​MohammedGhallab, @​bachhs, @​bartsopers, @​bbbbooo, @​dlwldnjs1009, @​edwardsre, @​erichaagdev, @​froggy-hyun, @​husseinvr97, @​itsmevichu, @​kodama-kcc, @​kwondh5217, @​onobc, @​plumstone, @​ppapaj, @​quaff, @​refeccd, @​scordio, and @​xxxxxxjun

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented Apr 23, 2026

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@mrbusche mrbusche merged commit 15ac3bc into main Apr 23, 2026
5 checks passed
@mrbusche mrbusche deleted the renovate/spring-boot branch April 23, 2026 23:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mrbusche mrbusche mrbusche approved these changes

Assignees

@mrbusche mrbusche

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mrbusche