Bump org.springframework.boot:spring-boot-starter-parent from 4.0.0-M1 to 4.0.0-M2

[dependabot]

Bumps org.springframework.boot:spring-boot-starter-parent from 4.0.0-M1 to 4.0.0-M2.

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.0.0-M2

⭐ New Features

• Rename metrics, observation, and tracing modules to include micrometer in their names and packages #46925
• Drop support for Undertow as it is not Servlet 6.1 compatible #46917
• Harmonize Logback's console and file logging charset #46846
• Make spring-boot-starter-opentelemetry produce OTLP output from instrumentation #46842
• Add '@HttpServiceClient' scanning auto-configuration #46782
• Add dependency management for JSpecify #46776
• Drop Actuator endpoint parameter support for javax.annotations.NonNull #46773
• Remove StreamBuilderFactoryBeanCustomizer in favor of Spring Kafka's StreamsBuilderFactoryBeanConfigurer #46675
• Rely on org.springframework.core.Nullness to determine if an Actuator endpoint is optional #46593
• Provide configuration property to disable console logging #46592
• Add JSpecify nullability annotations #46587
• Add auto-configuration and properties support for Spring Framework's new API Versioning #46519
• Ensure RestClient uses Virtual Thread Executor when spring.threads.virtual.enabled=true and JdkClientHttpRequestFactoryBuilder #46404
• Create spring-boot-autoconfigure-classic module #46233
• Auto-configure Elasticsearch's new Rest5Client rather than the legacy RestClient #46061
• Raise the minimum supported version of Gradle to 8.14 #43574
• Support Gradle 9 #43573
• Make auto-configurations final and remove public members #32883

🐞 Bug Fixes

• HTTP Service Client properties are not applied #46915
• Hazelcast health indicator reports the wrong status when Hazelcast has shut down due to an out-of-memory error #46910
• Configuration Metadata for Actuator endpoints does not take Nullness into account #46854
• Performance critical tracing code has high overhead due to the use of the Stream API #46845
• Default authorization server filter chain configuration is excluded in M1 release when actuator starter is on the classpath #46841
• SpringLiquibaseCustomizer is exposed outside its defined visibility scope #46759
• Race condition in OutputCapture can result in stale data #46722
• Auto-configured WebClient no longer uses context's ReactorResourceFactory #46684
• WebTestClientAutoConfiguration fails when WebFlux is on the classpath and spring-boot-http-codec is not #46678
• Default value not detected for a field annoted with @Name #46667
• Missing metadata when using @Name with a constructor-bound property #46664
• Missing property for Spring Authorization Server's PAR endpoint #46648
• Auto-configured MockMvc ignores @FilterRegistration annotation #46647
• Property name is incorrect when reporting a mis-configured OAuth 2 Resource Server JWT public key location #46637
• Memory not freed on context restart in JpaMetamodel#CACHE with spring.main.lazy-initialization=true #46635
• Failure to discover default value for a primitive should not lead to document its default value #46562
• WebTestClient is now bound to previous test server port when test application context is paused #46557
• Spring Boot 4.0.0-M1 has a typo in spring-boot-dependencies.pom for spring-boot-starter-opentelemetry #46549
• spring-boot-metrics with micrometer-registry-otlp throws exception if spring-boot-opentelemetry is missing #46303

📔 Documentation

• Update Servlet container system requirements #46918
• Kotlin samples for configuration metadata are in the wrong package #46858
• Observability examples in the reference guide are missing the Kotlin version #46799
• Align method descriptions for SslOptions getCiphers and getEnabledProtocols with '@returns' #46770

... (truncated)

Commits

• 1e1d740 Release v4.0.0-M2
• 50e5421 Roll back to Log4j 2.24
• 1590e4d Fix broken assertions on Windows
• 7a5e77f Merge pull request #46372 from vy
• 9c1e0e6 Polish "Avoid using deprecated Log4J constructors"
• f7f049d Avoid using deprecated Log4J constructors
• 8cf0d17 Upgrade to Log4j2 2.25.1
• 376ad32 Merge branch '3.5.x'
• 994e525 Next development version (v3.5.6-SNAPSHOT)
• 114c0ec Merge branch '3.5.x'
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)