Bump spring.version from 6.2.5 to 7.0.6#60
Conversation
Bumps `spring.version` from 6.2.5 to 7.0.6. Updates `org.springframework:spring-core` from 6.2.5 to 7.0.6 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v6.2.5...v7.0.6) Updates `org.springframework:spring-beans` from 6.2.5 to 7.0.6 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v6.2.5...v7.0.6) Updates `org.springframework:spring-context` from 6.2.5 to 7.0.6 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v6.2.5...v7.0.6) Updates `org.springframework:spring-aop` from 6.2.5 to 7.0.6 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v6.2.5...v7.0.6) Updates `org.springframework:spring-expression` from 6.2.5 to 7.0.6 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v6.2.5...v7.0.6) Updates `org.springframework:spring-tx` from 6.2.5 to 7.0.6 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v6.2.5...v7.0.6) Updates `org.springframework:spring-jdbc` from 6.2.5 to 7.0.6 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v6.2.5...v7.0.6) Updates `org.springframework:spring-web` from 6.2.5 to 7.0.6 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v6.2.5...v7.0.6) Updates `org.springframework:spring-messaging` from 6.2.5 to 7.0.6 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v6.2.5...v7.0.6) Updates `org.springframework:spring-websocket` from 6.2.5 to 7.0.6 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v6.2.5...v7.0.6) --- updated-dependencies: - dependency-name: org.springframework:spring-core dependency-version: 7.0.6 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.springframework:spring-beans dependency-version: 7.0.6 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.springframework:spring-context dependency-version: 7.0.6 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.springframework:spring-aop dependency-version: 7.0.6 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.springframework:spring-expression dependency-version: 7.0.6 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.springframework:spring-tx dependency-version: 7.0.6 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.springframework:spring-jdbc dependency-version: 7.0.6 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.springframework:spring-web dependency-version: 7.0.6 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.springframework:spring-messaging dependency-version: 7.0.6 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.springframework:spring-websocket dependency-version: 7.0.6 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Greptile SummaryThis PR bumps
Confidence Score: 1/5This PR is not safe to merge — it introduces a critical Spring version incompatibility that will likely break the build and runtime. Spring Framework 7.x requires Spring Boot 4.x and Spring Security 7.x. This PR upgrades only spring.version while leaving spring-boot.version at 3.4.4 and spring-security.version at 6.4.4, creating an unsupported and broken dependency combination. The pom.xml even explicitly warns that these versions must change together. pom.xml — the properties block at lines 115-119 must be treated as an atomic unit; all three Spring-related versions need to be consistent. Important Files Changed
Flowchart%%{init: {'theme': 'neutral'}}%%
flowchart TD
A[spring.version 7.0.6] -->|Requires| B[Spring Boot 4.x]
A -->|Requires| C[Spring Security 7.x]
D[spring-boot.version 3.4.4] -->|Expects| E[Spring Framework 6.x]
F[spring-security.version 6.4.4] -->|Expects| E
A -.->|CONFLICT| D
A -.->|CONFLICT| F
style A fill:#f66,stroke:#c00
style D fill:#fa0,stroke:#c80
style F fill:#fa0,stroke:#c80
style B fill:#6a6,stroke:#040
style C fill:#6a6,stroke:#040
style E fill:#6a6,stroke:#040
Reviews (1): Last reviewed commit: "Bump spring.version from 6.2.5 to 7.0.6" | Re-trigger Greptile |
![greptile-apps[bot]](https://avatars.githubusercontent.com/in/867647?s=60&v=4){kind=small}
| <spring.version>7.0.6</spring.version> | ||
| <spring-security.version>6.4.4</spring-security.version> | ||
| <junit-version>5.6.3</junit-version> | ||
| <jackson-version>2.18.2</jackson-version> |
There was a problem hiding this comment.
The spring.version property has been bumped to 7.0.6, but the companion properties were not updated. The comment directly above this block (line 113) explicitly warns: "the five below go together. Never change one without checking the others."
This creates two critical incompatibilities:
-
Spring Boot 3.4.4 requires Spring Framework 6.x. Spring Framework 7.x is the basis for Spring Boot 4.x. Using Spring Boot 3.4.4 with Spring Framework 7.0.6 means all of Spring Boot's auto-configuration, BOM dependency management, and internal wiring will conflict with the 7.x API surface (which requires Jakarta EE 11, drops several older APIs, etc.).
-
Spring Security 6.4.4 targets Spring Framework 6.x. Spring Security 7.x is the line that aligns with Spring Framework 7.x. Keeping 6.4.4 with Spring Framework 7.0.6 is an unsupported pairing.
The correct fix is to either:
- Revert
spring.versionback to6.2.5to restore the compatible set, or - Upgrade all three together once Spring Boot 4.x reaches GA: upgrade
spring-boot.versionto 4.x,spring-security.versionto 7.x, and keepspring.versionat 7.0.6.
| <spring.version>7.0.6</spring.version> | |
| <spring-security.version>6.4.4</spring-security.version> | |
| <junit-version>5.6.3</junit-version> | |
| <jackson-version>2.18.2</jackson-version> | |
| <spring-boot.version>3.4.4</spring-boot.version> | |
| <spring.version>6.2.5</spring.version> | |
| <spring-security.version>6.4.4</spring-security.version> |
Bumps
spring.versionfrom 6.2.5 to 7.0.6.Updates
org.springframework:spring-corefrom 6.2.5 to 7.0.6Release notes
Sourced from org.springframework:spring-core's releases.
... (truncated)
Commits
1526ceeRelease v7.0.6739d5baLeverage ResourceHandlerUtils in ScriptTemplateView19ab92eRestore ScriptTemplateViewTests04313f0Improve documentation for FullyQualifiedConfigurationBeanNameGeneratore634cedFix log message in ConfigurationClassBeanDefinitionReader1502c22Remove redundant method invocationcc5c7baFix enclosing class resolution with ClassFile API0269eb8Fix typo and improve Javadoc for ConfigurationBeanNameGenerator9cedcd6Polishing4e8acb9Polish contributionUpdates
org.springframework:spring-beansfrom 6.2.5 to 7.0.6Release notes
Sourced from org.springframework:spring-beans's releases.
... (truncated)
Commits
1526ceeRelease v7.0.6739d5baLeverage ResourceHandlerUtils in ScriptTemplateView19ab92eRestore ScriptTemplateViewTests04313f0Improve documentation for FullyQualifiedConfigurationBeanNameGeneratore634cedFix log message in ConfigurationClassBeanDefinitionReader1502c22Remove redundant method invocationcc5c7baFix enclosing class resolution with ClassFile API0269eb8Fix typo and improve Javadoc for ConfigurationBeanNameGenerator9cedcd6Polishing4e8acb9Polish contributionUpdates
org.springframework:spring-contextfrom 6.2.5 to 7.0.6Release notes
Sourced from org.springframework:spring-context's releases.
... (truncated)
Commits
1526ceeRelease v7.0.6739d5baLeverage ResourceHandlerUtils in ScriptTemplateView19ab92eRestore ScriptTemplateViewTests04313f0Improve documentation for FullyQualifiedConfigurationBeanNameGeneratore634cedFix log message in ConfigurationClassBeanDefinitionReader1502c22Remove redundant method invocationcc5c7baFix enclosing class resolution with ClassFile API0269eb8Fix typo and improve Javadoc for ConfigurationBeanNameGenerator9cedcd6Polishing4e8acb9Polish contributionUpdates
org.springframework:spring-aopfrom 6.2.5 to 7.0.6Release notes
Sourced from org.springframework:spring-aop's releases.
... (truncated)
Commits
1526ceeRelease v7.0.6739d5baLeverage ResourceHandlerUtils in ScriptTemplateView19ab92eRestore ScriptTemplateViewTests04313f0Improve documentation for FullyQualifiedConfigurationBeanNameGeneratore634cedFix log message in ConfigurationClassBeanDefinitionReader1502c22Remove redundant method invocationcc5c7baFix enclosing class resolution with ClassFile API0269eb8Fix typo and improve Javadoc for ConfigurationBeanNameGenerator9cedcd6Polishing4e8acb9Polish contributionUpdates
org.springframework:spring-expressionfrom 6.2.5 to 7.0.6Release notes
Sourced from org.springframework:spring-expression's releases.
... (truncated)
Commits
1526ceeRelease v7.0.6739d5baLeverage ResourceHandlerUtils in ScriptTemplateView19ab92eRestore ScriptTemplateViewTests04313f0Improve documentation for FullyQualifiedConfigurationBeanNameGeneratore634cedFix log message in ConfigurationClassBeanDefinitionReader1502c22Remove redundant method invocationcc5c7baFix enclosing class resolution with ClassFile API0269eb8Fix typo and improve Javadoc for ConfigurationBeanNameGenerator9cedcd6Polishing4e8acb9Polish contributionUpdates
org.springframework:spring-txfrom 6.2.5 to 7.0.6Release notes
Sourced from org.springframework:spring-tx's releases.
... (truncated)
Commits
1526ceeRelease v7.0.6739d5baLeverage ResourceHandlerUtils in ScriptTemplateView19ab92eRestore ScriptTemplateViewTests04313f0Improve documentation for FullyQualifiedConfigurationBeanNameGeneratore634cedFix log message in ConfigurationClassBeanDefinitionReader1502c22Remove redundant method invocationcc5c7baFix enclosing class resolution with ClassFile API0269eb8Fix typo and improve Javadoc for ConfigurationBeanNameGenerator9cedcd6Polishing4e8acb9Polish contributionUpdates
org.springframework:spring-jdbcfrom 6.2.5 to 7.0.6Release notes
Sourced from org.springframework:spring-jdbc's releases.
... (truncated)
Commits
1526ceeRelease v7.0.6739d5baLeverage ResourceHandlerUtils in ScriptTemplateView19ab92eRestore ScriptTemplateViewTests04313f0Improve documentation for FullyQualifiedConfigurationBeanNameGeneratore634cedFix log message in ConfigurationClassBeanDefinitionReader1502c22Remove redundant method invocationcc5c7baFix enclosing class resolution with ClassFile API0269eb8Fix typo and ...Description has been truncated