Merge pull request #39 from spt-development/feature/spring-boot-3.4.4-upgrade

Updated dependencies to align with Spring Boot 3.4.4

Author: SimonTaylor

.github/workflows/build.yml

@@ -20,11 +20,11 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-maven-
 
-      - name: Set up JDK 23
+      - name: Set up JDK 24
         uses: oracle-actions/setup-java@v1
         with:
           website: jdk.java.net
-          release: 23
+          release: 24
 
       - name: Run Maven
         run: ./mvnw clean install -U -Pall-quality-gates -B
@@ -40,11 +40,11 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
 
-      - name: Set up JDK 23
+      - name: Set up JDK 24
         uses: oracle-actions/setup-java@v1
         with:
           website: jdk.java.net
-          release: 23
+          release: 24
 
       - name: Determine version
         run: echo "POM_VERSION=$(./mvnw -q -Dexec.executable=echo -Dexec.args='${project.version}' --non-recursive exec:exec | sed -e 's/-SNAPSHOT//')" >> $GITHUB_ENV

.github/workflows/latest-versions.yml

@@ -9,11 +9,11 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - name: Set up JDK 23
+      - name: Set up JDK 24
         uses: oracle-actions/setup-java@v1
         with:
           website: jdk.java.net
-          release: 23
+          release: 24
 
       - name: Run Maven
         run: ./mvnw clean versions:update-properties scm:check-local-modification -U -B

.github/workflows/owasp.yml

@@ -25,11 +25,11 @@ jobs:
             ${{ runner.os }}-maven-${{ steps.get-date.outputs.datetime }}
             ${{ runner.os }}-maven-
 
-      - name: Set up JDK 23
+      - name: Set up JDK 24
         uses: oracle-actions/setup-java@v1
         with:
           website: jdk.java.net
-          release: 23
+          release: 24
 
       - name: Run Maven
         run: ./mvnw clean dependency-check:check -DnvdApiKey=${{ secrets.NVD_API_KEY }} -DnvdApiDelay=6000 -B

documentation/releases/release-3.0.27.md

@@ -0,0 +1,4 @@
+## Dependencies
+
+* Aligned dependencies with [Spring Boot 3.4.4](https://github.com/spring-projects/spring-boot/releases/tag/v3.4.4)
+* Overrides Spring Boot Lombok version to use 1.18.38 in order to support JDK 24.

pom.xml

@@ -39,33 +39,33 @@
         <spt-cid.version>2.0.15</spt-cid.version>
 
         <!-- Dependency versions, matched to Spring Boot -->
-        <aspectj.version>1.9.22.1</aspectj.version>
+        <aspectj.version>1.9.23</aspectj.version>
         <commons-lang.version>3.17.0</commons-lang.version>
         <gson.version>2.11.0</gson.version>
-        <httpcore5.version>5.3.2</httpcore5.version>
+        <httpcore5.version>5.3.3</httpcore5.version>
         <jakarta-jms.version>3.1.0</jakarta-jms.version>
         <jakarta-servlet.version>6.0.0</jakarta-servlet.version>
-        <lombok.version>1.18.36</lombok.version>
-        <slf4j.version>2.0.16</slf4j.version>
-        <spring.version>6.2.2</spring.version>
-        <spring-security.version>6.4.2</spring-security.version>
+        <lombok.version>1.18.38</lombok.version>
+        <slf4j.version>2.0.17</slf4j.version>
+        <spring.version>6.2.5</spring.version>
+        <spring-security.version>6.4.4</spring-security.version>
 
         <!-- Test dependency versions -->
-        <spt-development-test.version>3.1.15</spt-development-test.version>
+        <spt-development-test.version>3.1.16</spt-development-test.version>
 
         <!-- Test dependency versions, matched to Spring Boot -->
         <hamcrest.version>2.2</hamcrest.version>
         <junit-jupiter.version>5.11.4</junit-jupiter.version>
-        <logback.version>1.5.16</logback.version>
+        <logback.version>1.5.18</logback.version>
         <mockito.version>5.14.2</mockito.version>
 
         <!-- Plugin versions -->
         <build-helper-maven-plugin.version>3.6.0</build-helper-maven-plugin.version>
         <checkstyle-maven-plugin.version>3.6.0</checkstyle-maven-plugin.version>
-        <dependency-check-maven.version>12.0.1</dependency-check-maven.version>
-        <jacoco-maven-plugin.version>0.8.12</jacoco-maven-plugin.version>
+        <dependency-check-maven.version>12.1.1</dependency-check-maven.version>
+        <jacoco-maven-plugin.version>0.8.13</jacoco-maven-plugin.version>
         <license-maven-plugin.version>2.5.0</license-maven-plugin.version>
-        <maven-compiler-plugin.version>3.13.0</maven-compiler-plugin.version>
+        <maven-compiler-plugin.version>3.14.0</maven-compiler-plugin.version>
         <maven-dependency-plugin.version>3.8.1</maven-dependency-plugin.version>
         <maven-enforcer-plugin.version>3.5.0</maven-enforcer-plugin.version>
         <maven-gpg-plugin.version>3.2.7</maven-gpg-plugin.version>
@@ -75,18 +75,18 @@
         <maven-release-plugin.version>3.1.1</maven-release-plugin.version>
         <maven-scm-plugin.version>2.1.0</maven-scm-plugin.version>
         <maven-source-plugin.version>3.3.1</maven-source-plugin.version>
-        <maven-surefire-plugin.version>3.5.2</maven-surefire-plugin.version>
+        <maven-surefire-plugin.version>3.5.3</maven-surefire-plugin.version>
         <nexus-staging-plugin.version>1.7.0</nexus-staging-plugin.version>
-        <pitest-maven.version>1.17.4</pitest-maven.version>
-        <spotbugs.version>4.8.6.6</spotbugs.version>
+        <pitest-maven.version>1.19.0</pitest-maven.version>
+        <spotbugs.version>4.9.3.0</spotbugs.version>
         <versions-maven-plugin.version>2.18.0</versions-maven-plugin.version>
 
         <!-- Plugin dependencies -->
-        <checkstyle.version>10.21.1</checkstyle.version>
+        <checkstyle.version>10.23.0</checkstyle.version>
         <findbugs-slf4j-bug-pattern.version>1.5.0</findbugs-slf4j-bug-pattern.version>
         <findbugs-sec-bug-pattern.version>1.13.0</findbugs-sec-bug-pattern.version>
-        <pitest-junit5-plugin.version>1.2.1</pitest-junit5-plugin.version>
-        <pmd.version>7.9.0</pmd.version>
+        <pitest-junit5-plugin.version>1.2.2</pitest-junit5-plugin.version>
+        <pmd.version>7.12.0</pmd.version>
     </properties>
 
     <dependencyManagement>