BlackTreeLifecycle intelligence
Evidence-linked product lifecycle intelligenceSUPPORT · SECURITY · RETIREMENT
← Lifecycle catalogue
RELEASE NOTESBROADCOMVERIFIED

PUBLISHER UPDATE · SPRING-BOOT-4.0.8

SPRING-BOOT-4.0.8 release notes and known issues

v4.0.8

Scope: Spring Boot. This update record adds version, fix and known-issue context. Its publication date is not a lifecycle boundary.

Summary

🐞 Bug Fixes Kafka consumer-specific security protocol is not taken into account #51365 Temporary file is not deleted when ExportedImageTar construction fails #51117 spring-boot-h2-console pulls servlet-api as transitive dependency #51094 Methods that return the result of Map#remove are not declared with a @Nullable return type #50972 PropertiesLauncher does not log nested archive paths #50968 JarFile is not closed when finding main class from archive #50949 CloudFoundry reactive auto-configuration should not require a WebClient.Builder bean to be defined #50928 Resources are not cleaned up when resolving an image that is not yet present in the builder #50919 Context refresh fails on reactive Cloud Foundry when using Actuator without spring-boot-health #50916 GraphQlWebMvcAutoConfiguration should apply customizers in order #50908 Micrometer registries pin the application context #50886 Context refresh fails when using Actuator on Jersey without spring-boot-health #50858 Context refresh fails on Cloud Foundry when using Actuator without spring-boot-health #50857 IllegalStateException when binding properties to a @Validated class that contains a map whose value type is a wildcard #50798 Setting 'server.servlet.session.cookie.partitioned' to false still emits the 'Partitioned' cookie attribute #50781 Application-managed JUL bridge handler should only be removed if installed #50779 Inconsistent handling of empty string values of spring.security.oauth2.resourceserver.jwt issuer-uri and jwk-set-uri #50755 PropertiesWebClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #50737 High number of connections due to Mongo health indicator #50734 Return type nullability of ApplicationContextAssert's getBean methods does not indicate that bean may be null #50701 NativeImageResourceProvider flattens Flyway migration paths in subdirectories #50433 Fix ordering of Kotlinx Serialization CodecCustomizer #50428 Metadata annotation processor ignores getter-level @NestedConfigurationProperty for records #50096 📔 Documentation spring.profiles.group should have a 'spring-profile-name' hint provider #51273 Remove reference to removed InfluxDB auto-configuration #51172 Use JacksonJsonSerde in Kafka Streams documentation #51152 Document alternatives to HttpMessageConverters #51124 Caching documentation refers to AutoConfigureCache by its pre-4.0 package #51111 Metadata for spring.test.mockmvc.htmlunit.url declares the wrong type #51110 Fix examples in Metadata Format documentation chapter #51097 Improve discoverability of the AOT Cache How-to guides #50996 Table of auto-configured HealthIndicators lists the wrong key for MongoHealthIndicator #50931 Update OpenTelemetryResourceAttributes documentation #50867 Fix @Value placeholder syntax in external config docs #50859 Refer to spring-boot-starter-webmvc, not deprecated spring-boot-starter-web #50842 Fix forwarded headers property in cloud deployment docs #50841 Fix duplicate word typos in documentation #50738 🔨 Dependency Upgrades Upgrade to CycloneDX Maven Plugin 2.9.3 #51178 Upgrade to DB2 JDBC 12.1.5.0 #50977 Upgrade to Elasticsearch Client 9.2.9 #51366 Upgrade to Groovy 5.0.8 #51179 Upgrade to Hibernate 7.2.24.Final #51180 Upgrade to Jackson 2 Bom 2.21.5 #50980 Upgrade to Jackson Bom 3.1.5 #50981 Upgrade to Jetty 12.1.12 #51298 Upgrade to jOOQ 3.19.37 #51299 Upgrade to JSpecify 1.0.1 #51181 Upgrade to Log4j2 2.25.5 #50984 Upgrade to Logback 1.5.38 #50985 Upgrade to MariaDB 3.5.10 #51182 Upgrade to Maven Help Plugin 3.5.2 #50987 Upgrade to Micrometer 1.16.7 #51235 Upgrade to Micrometer Tracing 1.6.7 #51236 Upgrade to Netty 4.2.17.Final #51300 Upgrade to Postgresql 42.7.13 #50989 Upgrade to R2DBC MariaDB 1.3.1 #50990 Upgrade to R2DBC MSSQL 1.0.5.RELEASE #50991 Upgrade to R2DBC MySQL 1.4.3 #51183 Upgrade to R2DBC Postgresql 1.1.2.RELEASE #50992 Upgrade to Reactor Bom 2025.0.7 #51237 Upgrade to Spring AMQP 4.0.5 #51238 Upgrade to Spring Batch

Improvements and security content

  • 🐞 Bug Fixes Kafka consumer-specific security protocol is not taken into account #51365 Temporary file is not deleted when ExportedImageTar construction fails #51117 spring-boot-h2-console pulls servlet-api as transitive dependency #51094 Methods that return the result of Map#remove are not declared with a @Nullable return type #50972 PropertiesLauncher does not log nested archive paths #50968 JarFile is not closed when finding main class from archive #50949 CloudFoundry reactive auto-configuration should not require a WebClient.Builder bean to be defined #50928 Resources are not cleaned up when resolving an image that is not yet present in the builder #50919 Context refresh fails on reactive Cloud Foundry when using Actuator without spring-boot-health #50916 GraphQlWebMvcAutoConfiguration should apply customizers in order #50908 Micrometer registries pin the application context #50886 Context refresh fails when using Actuator on Jersey without spring-boot-health #50858 Context refresh fails on Cloud Foundry when using Actuator without spring-boot-health #50857 IllegalStateException when binding properties to a @Validated class that contains a map whose value type is a wildcard #50798 Setting 'server.servlet.session.cookie.partitioned' to false still emits the 'Partitioned' cookie attribute #50781 Application-managed JUL bridge handler should only be removed if installed #50779 Inconsistent handling of empty string values of spring.security.oauth2.resourceserver.jwt issuer-uri and jwk-set-uri #50755 PropertiesWebClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #50737 High number of connections due to Mongo health indicator #50734 Return type nullability of ApplicationContextAssert's getBean methods does not indicate that bean may be null #50701 NativeImageResourceProvider flattens Flyway migration paths in subdirectories #50433 Fix ordering of Kotlinx Serialization CodecCustomizer #50428 Metadata annotation processor ignores getter-level @NestedConfigurationProperty for records #50096 📔 Documentation spring.profiles.group should have a 'spring-profile-name' hint provider #51273 Remove reference to removed InfluxDB auto-configuration #51172 Use JacksonJsonSerde in Kafka Streams documentation #51152 Document alternatives to HttpMessageConverters #51124 Caching documentation refers to AutoConfigureCache by its pre-4.0 package #51111 Metadata for spring.test.mockmvc.htmlunit.url declares the wrong type #51110 Fix examples in Metadata Format documentation chapter #51097 Improve discoverability of the AOT Cache How-to guides #50996 Table of auto-configured HealthIndicators lists the wrong key for MongoHealthIndicator #50931 Update OpenTelemetryResourceAttributes documentation #50867 Fix @Value placeholder syntax in external config docs #50859 Refer to spring-boot-starter-webmvc, not deprecated spring-boot-starter-web #50842 Fix forwarded headers property in cloud deployment docs #50841 Fix duplicate word typos in documentation #50738 🔨 Dependency Upgrades Upgrade to CycloneDX Maven Plugin 2.9.3 #51178 Upgrade to DB2 JDBC 12.1.5.0 #50977 Upgrade to Elasticsearch Client 9.2.9 #51366 Upgrade to Groovy 5.0.8 #51179 Upgrade to Hibernate 7.2.24.Final #51180 Upgrade to Jackson 2 Bom 2.21.5 #50980 Upgrade to Jackson Bom 3.1.5 #50981 Upgrade to Jetty 12.1.12 #51298 Upgrade to jOOQ 3.19.37 #51299 Upgrade to JSpecify 1.0.1 #51181 Upgrade to Log4j2 2.25.5 #50984 Upgrade to Logback 1.5.38 #50985 Upgrade to MariaDB 3.5.10 #51182 Upgrade to Maven Help Plugin 3.5.2 #50987 Upgrade to Micrometer 1.16.7 #51235 Upgrade to Micrometer Tracing 1.6.7 #51236 Upgrade to Netty 4.2.17.Final #51300 Upgrade to Postgresql 42.7.13 #50989 Upgrade to R2DBC MariaDB 1.3.1 #50990 Upgrade to R2DBC MSSQL 1.0.5.RELEASE #50991 Upgrade to R2DBC MySQL 1.4.3 #51183 Upgrade to R2DBC Postgresql 1.1.2.RELEASE #50992 Upgrade to Reactor Bom 2025.0.7 #51237 Upgrade to Spring AMQP 4.0.5 #51238 Upgrade to Spring Batch

Known issues

Publisher statement

Not stated. The verified publisher record does not contain a known-issues statement.

Affected products and versions

Products

  • Spring Boot

Affected versions

  • 4.0.8
  • 4.0
  • 2.9.3
  • 12.1.5.0
  • 9.2.9
  • 5.0.8
  • 7.2.24
  • 2.21.5
  • 3.1.5
  • 12.1.12
  • 3.19.37
  • 1.0.1
  • 2.25.5
  • 1.5.38
  • 3.5.10
  • 3.5.2
  • 1.16.7
  • 1.6.7
  • 4.2.17
  • 42.7.13
  • 1.3.1
  • 1.0.5
  • 1.4.3
  • 1.1.2
  • 2025.0.7
  • 4.0.5

Fixed versions or updates

  • No fixed version is stated in this record.

Recommended action

Review the official publisher document before deployment.

Official publisher evidence