chore(deps): Update dependency io.github.resilience4j:resilience4j-spring-boot3 to v2.4.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
io.github.resilience4j:resilience4j-spring-boot3 (source)	2.3.0 → 2.4.0

---

Release Notes

resilience4j/resilience4j (io.github.resilience4j:resilience4j-spring-boot3)

v2.4.0

What's Changed

• Added support of initializing circuitBreaker in desired state from config by @​agarwalbharat in #​2268
• Issue #​2269: Added getCausingRateLimiterName by @​noomkram in #​2270
• Time limiter registry builder by @​darkius in #​2291
• Issue #​2285: Add HealthContributorAutoConfiguration to ConditionalOnClass by @​obecker in #​2286
• Issue #​2278: Added ThreadPoolBulkhead to some Decorators by @​matsev in #​2284
• Correct registry config in aspect by @​darkius in #​2282
• #​2285 - add configuration to move circuit breaker from half open to closed state by @​victorpasqualino in #​2290
• Bump actions/cache from 4.0.2 to 4.2.0 by @​dependabot[bot] in #​2252
• Remove dependency on kotlin-stdlib-jdk8 from resilience4j-core by @​gavlyukovskiy in #​2301
• Bring back 'slidingWindow' with default synchronization strategy by @​gavlyukovskiy in #​2302
• add withFallback() methods to DecorateFunction by @​matsev in #​2312
• Issue #​2295: Ensure ignoreExceptions take precedence over recordExceptions by @​kssumin in #​2304
• fix spring boot3 customizer application order by @​alexey-grigorovich-savvymoney in #​2321
• chore(1910): update grafana dashboard by @​JoranVanBelle in #​2318
• Provide key for components using SpEL for names by @​doumdoum in #​2329
• Feature #​2224 : Bump jdk from 17 to 21 for support virtual thread by @​ykhfree in #​2331
• Add missing eventConsumerBufferSize merge for Retry config by @​skowrxn in #​2344
• [GH-2334] fix: reject TIME_BASED + LOCK_FREE when slidingWindowSize < 2 by @​bandalgomsu in #​2358
• feat: add setter for bulkheadAspectOrder property by @​NiMv1 in #​2386
• Docs: Clarify Aspect Order defaults for Spring Boot 3 to prevent metric inflation by @​GarimaBokdia in #​2387
• Add support for Spring Boot 4 / Spring Cloud 5 by @​gavlyukovskiy in #​2384
• TimeLimiter, take success path when completing without error by @​TheFrogAndy in #​2374
• Add back OSGi meta data with bnd builder plugin by @​chrisrueger in #​2385
• Issue #​536: Added best practices documentation for instance management by @​fajrizulfikar in #​2389
• Allow to mock nanoTime in RateLimiter by @​strokyl in #​2356
• fix #​2397: compile SPEL regex'es only once by @​stokpop in #​2398
• Update publishing to use new Sonatype urls and add release workflow by @​gavlyukovskiy in #​2393
• Issue #​1450: Fixed Grafana dashboard metric query for call rate panel by @​fajrizulfikar in #​2391
• Issue #​1448: Fixed Duration property binding in Spring Boot 2 by @​fajrizulfikar in #​2390
• Fix #​2327: Correct @​see tag usage in CircuitBreakerConfig Javadoc by @​chanani in #​2400
• Issue #​2368: Fix Retry retryOnResult interrupt handling: throw CancellationException instead of NPE by @​platanus-kr in #​2392
• Fix typo in Spring aspect docs by @​gukin-han in #​2399
• [GH-2354] Remove kotlin-stdlib from resilience4j-core by @​josalmi in #​2359
• Added CheckedSupplierUtils and deprecated CheckedFunctionUtils by @​matsev in #​2313
• Use correct constant for initializing CircuitBreakerConfig.Builder.waitIntervalFunctionInOpenState by @​obecker in #​2402
• Added bulkhead name to BulkheadFullException by @​dominic-miglar in #​2349
• Remove unrelated flaky Clock test from CircuitBreakerEventTest by @​KimDoubleB in #​2409
• Added decorateFunction and executeFunction to TimeLimiter by @​zbnerd in #​2407
• Issue #​2189: Use snapshot reads for actuator event endpoints in Spring Boot 3/4 by @​seokjun7410 in #​2406
• Remove log spam from tests by @​gavlyukovskiy in #​2412
• Set JDK target back to 17 by @​gavlyukovskiy in #​2415
• Fix release workflow: unquoted multi-line GPG key breaks Gradle invocation by @​Copilot in #​2416
• Read env variables from gradle for gpg key by @​gavlyukovskiy in #​2417
• Enable SNAPSHOT artifact signing from master by @​gavlyukovskiy in #​2418
• Remove sign skip on snapshot version by @​gavlyukovskiy in #​2419

New Contributors

• @​agarwalbharat made their first contribution in #​2268
• @​noomkram made their first contribution in #​2270
• @​darkius made their first contribution in #​2291
• @​obecker made their first contribution in #​2286
• @​matsev made their first contribution in #​2284
• @​victorpasqualino made their first contribution in #​2290
• @​kssumin made their first contribution in #​2304
• @​alexey-grigorovich-savvymoney made their first contribution in #​2321
• @​JoranVanBelle made their first contribution in #​2318
• @​doumdoum made their first contribution in #​2329
• @​skowrxn made their first contribution in #​2344
• @​bandalgomsu made their first contribution in #​2358
• @​NiMv1 made their first contribution in #​2386
• @​GarimaBokdia made their first contribution in #​2387
• @​TheFrogAndy made their first contribution in #​2374
• @​chrisrueger made their first contribution in #​2385
• @​fajrizulfikar made their first contribution in #​2389
• @​strokyl made their first contribution in #​2356
• @​chanani made their first contribution in #​2400
• @​platanus-kr made their first contribution in #​2392
• @​gukin-han made their first contribution in #​2399
• @​josalmi made their first contribution in #​2359
• @​dominic-miglar made their first contribution in #​2349
• @​zbnerd made their first contribution in #​2407
• @​seokjun7410 made their first contribution in #​2406
• @​Copilot made their first contribution in #​2416

Full Changelog: resilience4j/resilience4j@v2.3.0...v2.4.0

---

Configuration

📅 Schedule: (in timezone Asia/Seoul)

• Branch creation
  • "before 10am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

Claude finished @renovate[bot]'s task in 1m 54s —— View job

---

🤖 Claude 의존성 영향도 분석

📦 변경점 요약

• resilience4j-spring-boot3 2.3.0 → 2.4.0 (minor)

• 핵심 변경 내용:

  • ignoreExceptions가 recordExceptions보다 우선 적용되도록 수정 (버그 픽스)
  • COUNT_BASED sliding window의 기본 동기화 전략 복구 (Bring back 'slidingWindow' with default synchronization strategy)
  • Spring Boot 3 customizer 적용 순서 버그 수정 (fix spring boot3 customizer application order)
  • CircuitBreaker를 지정된 초기 상태로 시작하는 기능 추가
  • Half-open → Closed 전환 설정 옵션 추가
  • TimeLimiter가 에러 없이 완료 시 성공 경로로 처리되도록 수정
  • Grafana 대시보드 메트릭 쿼리 수정

• 주요 transitive 의존성 변화 (lockfile 기준):

  • 모든 resilience4j 서브모듈 2.3.0 → 2.4.0 (annotations, bulkhead, circuitbreaker, core, micrometer, ratelimiter, retry, spring6, timelimiter 등)
  • io.micrometer:micrometer-core 런타임: 1.15.10 → 1.16.0
  • io.micrometer:micrometer-commons 런타임: 1.15.10 → 1.16.0
  • io.micrometer:micrometer-observation 런타임: 1.15.10 → 1.16.0

---

🎯 Q-Asker 영향도: 🟡 MEDIUM

사용처:

파일	사용 방식
modules/quiz-make/impl/.../AIServerAdapter.java	@CircuitBreaker(name = "aiServer", fallbackMethod = "fallback") — Gemini API 호출 시 서킷브레이커 AOP 적용
modules/quiz-make/impl/.../SseNotificationServiceImpl.java	CircuitBreakerRegistry, CircuitBreaker, CircuitBreaker.State 직접 사용 — SSE 연결 시 aiServer 서킷 상태 확인 후 OPEN이면 즉시 에러 반환
modules/global/.../GlobalExceptionHandler.java	CallNotPermittedException 처리 — 서킷 OPEN 상태에서 호출 차단 시 예외 핸들링

설정 (app/src/main/resources/config/resilience.yml):

resilience4j.circuitbreaker.instances.aiServer:
  sliding-window-type: COUNT_BASED
  sliding-window-size: 10
  failure-rate-threshold: 60
  record-exceptions:
    - com.icc.qasker.ai.exception.GeminiInfraException

예상 영향:

1. sliding window 동기화 전략 복구: 현재 COUNT_BASED sliding window를 사용 중인데, 이번 릴리즈에서 기본 동기화 전략이 복구됨 → 동시성 환경에서 실패율 카운팅이 더 정확해질 수 있음. 동작 변화이나 설정 변경 불필요.

2. ignoreExceptions 우선순위 수정: 현재 record-exceptions만 사용 중이고 ignoreExceptions는 미설정이므로 직접 영향 없음.

3. Spring Boot 3 customizer 적용 순서 수정: @CircuitBreaker AOP aspect 적용 순서가 수정됨 → 메트릭 중복 집계 방지. 현재 별도 aspect order 설정이 없으므로 기본값이 적용되며, 수정으로 오히려 정확도 향상 예상.

4. micrometer 런타임 버전 상승 (1.15.10 → 1.16.0): Micrometer 메트릭을 Prometheus로 수집 중이므로 런타임 버전 변화 모니터링 권장. 컴파일 타임은 1.15.6 유지.

---

✅ 권장 액션

• PR diff 및 릴리즈 노트 분석 완료
• CI green 확인
• (권장) 로컬 ./gradlew bootRun 후 AI 퀴즈 생성 플로우 (SSE 연결 → 서킷브레이커 동작) 확인
• Prometheus/Grafana에서 resilience4j.* 메트릭이 정상 수집되는지 배포 후 확인

---

📋 참고

• Renovate Merge Confidence: minor 업데이트, 사용처 3곳이나 모두 핵심 CircuitBreaker 단순 사용
• RateLimitFilter는 bucket4j 기반으로 resilience4j와 무관 (검색 결과에서 제외)
• 분석 모델: claude-sonnet-4-6