Bump org.springframework.boot from 3.2.0 to 4.0.3#30
Bump org.springframework.boot from 3.2.0 to 4.0.3#30dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps [org.springframework.boot](https://github.com/spring-projects/spring-boot) from 3.2.0 to 4.0.3. - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.2.0...v4.0.3) --- updated-dependencies: - dependency-name: org.springframework.boot dependency-version: 4.0.3 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
| id 'java' | ||
| id 'idea' | ||
| id 'org.springframework.boot' version '3.2.0' | ||
| id 'org.springframework.boot' version '4.0.3' |
There was a problem hiding this comment.
🔴 Spring Boot plugin version (4.0.3) mismatched with spring-boot-starter-web dependency (3.2.0)
The PR upgrades the org.springframework.boot Gradle plugin to 4.0.3 on line 4 but leaves the spring-boot-starter-web dependency hardcoded at 3.2.0 on line 15. This version mismatch means the application will attempt to run Spring Boot 3.2.0 libraries under a 4.0.3 plugin toolchain, which will almost certainly cause runtime incompatibilities or build failures. Normally the Spring Boot plugin manages dependency versions via its BOM, but here the explicit 3.2.0 version on the dependency overrides that, pinning it to the old version. The dependency version should either be updated to 4.0.3 to match, or (better) the explicit version should be removed so the plugin's dependency management resolves it automatically.
Prompt for agents
In build.gradle, either:
1. Remove the explicit version from the spring-boot-starter-web dependency (line 15) so the Spring Boot plugin's dependency management picks the correct version automatically:
implementation 'org.springframework.boot:spring-boot-starter-web'
OR
2. Update the version on line 15 to match the plugin version on line 4 (4.0.3):
implementation 'org.springframework.boot:spring-boot-starter-web:4.0.3'
Option 1 is preferred as it avoids future version drift.
Was this helpful? React with 👍 or 👎 to provide feedback.
Bumps org.springframework.boot from 3.2.0 to 4.0.3.
Release notes
Sourced from org.springframework.boot's releases.
... (truncated)
Commits
1ab1436Release v4.0.35cc488dMerge branch '3.5.x' into 4.0.x9138ae2Next development version (v3.5.12-SNAPSHOT)a7e63a7Merge branch '3.5.x' into 4.0.x54ab3c5Align "noteworthy" issues in release notes with Spring Frameworkb3ae5b1Merge branch '3.5.x' into 4.0.x996664fTemporarily switch Docker to overlay21ce8743Revert "Temporarily disable containerd snapshotter"5ba88c6Temporarily disable containerd snapshotter1f1a88cRevert "Temporarily update system tests to use specific platform"Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)