Skip to content

Bump org.springframework.boot:spring-boot-starter-parent from 4.1.0-M4 to 4.1.0-RC1#191

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/org.springframework.boot-spring-boot-starter-parent-4.1.0-RC1
Open

Bump org.springframework.boot:spring-boot-starter-parent from 4.1.0-M4 to 4.1.0-RC1#191
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/org.springframework.boot-spring-boot-starter-parent-4.1.0-RC1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 23, 2026

Bumps org.springframework.boot:spring-boot-starter-parent from 4.1.0-M4 to 4.1.0-RC1.

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.1.0-RC1

⭐ New Features

  • Add support for docker.elastic.co/elasticsearch/elasticsearch #50119
  • Narrow the scope of icons pattern to /icons/icon-* #50084
  • Add configuration options for KafkaTemplate's allowNonTransactional and closeTimeout #49954
  • Align ReactorHttpClientBuilder defaults with Spring Framework and provide an opt-out #49950
  • Add support for providing a custom SessionTimeout bean #49883
  • Add support for Redis Annotation driven listeners #49858
  • Support spring.webflux.default-html-escape property for application-wide HTML escaping configuration #49791
  • Add fallback support for '/opt/homebrew/bin' on macOS #49721
  • Support InetAddress filtering for HTTP Clients #49687
  • Monitor certificates from truststore in SslMeterBinder #49641
  • Enable ansi support by default on Windows 11+ #49571
  • Add '@GrpcAdvice' exception handling support #49053
  • Add support for OpenTelemetry SDK environment variables #48799
  • Add ability to read custom layers.xml from classpath #32466
  • Support LazyConnectionDataSourceProxy #15480

🐞 Bug Fixes

  • Default security is misconfigured when spring-boot-actuator-autoconfigure is present and spring-boot-health is not #50190
  • Elasticsearch Rest5Client auto-configuration misconfigures underlying HTTP client #50189
  • ApplicationPidFileWriter does not handle symlinks correctly #50186
  • RandomValuePropertySource is not suitable for secrets #50184
  • Cassandra auto-configuration misconfigures CqlSessionBuilder #50182
  • ApplicationTemp does not handle symlinks correctly #50179
  • Remote DevTools performs comparison incorrectly #50177
  • spring.rabbitmq.ssl.verify-hostname is applied inconsistently #50175
  • GrpcDisableCsrfHttpConfigurer incorrectly uses inverse of 'spring.grpc.server.security.csrf.enabled' property #50145
  • API versioning path strategy should be applied path last as it is not meant to yield #50127
  • Whole number values are ignored when configuring min and max expected values and SLO boundaries for a distribution summary meter #50078
  • Classic starters are missing several modules #50072
  • Module spring-boot-resttestclient is missing from spring-boot-starter-test-classic #50070
  • Annotations like @Ssl don't work on @Bean methods when using @ServiceConnection #50065
  • EnversRevisionRepositoriesRegistrar should reuse @EnableEnversRepositories rather than configuring the JPA counterpart #50040
  • WebFlux Cloud Foundry links endpoint includes query string from received request in resolved links #50018
  • Imports on a containing test class are ignored when a nested class has imports #50013
  • Spring Security's PathPatternRequestMatcher.Builder is not auto-configured when using WebMvcTest and spring-boot-security-test #49988
  • Reactive MongoDB starter has a transitive dependency on the synchronous MongoDB driver #49958
  • With spring.jackson.use-jackson2-defaults set to true, FAIL_ON_UNKNOWN_PROPERTIES is enabled #49957
  • 500 response from env endpoint when supplied pattern is invalid #49947
  • HTTP method is lost when configuring excludes in EndpointRequest #49944
  • Honor HttpMethod for reactive additional endpoint paths #49881
  • Docker Compose support doesn't work with apache/artemis image #49870
  • Docker Compose support doesn't work with apache/activemq image #49867
  • ReactiveOAuth2ResourceServerAutoConfiguration should trigger only on real Reactive Applications #49807
  • Test starters 'spring-boot-starter-grpc-client-test' and 'spring-boot-starter-grpc-server-test' are missing #49690
  • Properties in '@ConfigurationProperties' annotated type shouldn't be able to define the same '@Name' #49565
  • Distribution's SLO, minimum expected value, and maximum expected value are not applied to long task timer meters #49190

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) from 4.1.0-M4 to 4.1.0-RC1.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.0-M4...v4.1.0-RC1)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 4.1.0-RC1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Apr 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants