Skip to content

chore(deps): update Spring Boot and Gradle wrapper#89

Open
deniswsrosa wants to merge 2 commits into
mainfrom
chore/dependency-update-20260706-t_3e9f43f6
Open

chore(deps): update Spring Boot and Gradle wrapper#89
deniswsrosa wants to merge 2 commits into
mainfrom
chore/dependency-update-20260706-t_3e9f43f6

Conversation

@deniswsrosa

@deniswsrosa deniswsrosa commented Jul 6, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Updates the Spring Boot Gradle plugin from 4.0.6 to 4.1.0.
  • Updates the Gradle wrapper distribution from 9.5.0 to 9.6.1.
  • Preserves the existing Gradle build tooling and keeps the diff limited to dependency metadata plus a CI action dependency update needed for GitHub Actions compatibility.

Hermes Kanban task: t_3e9f43f6

Dependency updates

Ecosystem Dependency Previous Updated Type Notes
Gradle org.springframework.boot Gradle plugin 4.0.6 4.1.0 Direct build plugin Latest stable release from Maven metadata. Existing Dependabot PR #86 also proposed this update; operator requested a Hermes PR anyway.
Gradle wrapper Gradle distribution 9.5.0 9.6.1 Build tool wrapper Updated with ./gradlew wrapper --gradle-version 9.6.1 --distribution-type bin. Existing Dependabot PR #88 also proposed this update; operator requested a Hermes PR anyway.
GitHub Actions ravsamhq/notify-slack-action v1 v2 CI action dependency Updated after CI showed v1's Docker action failing under its bundled Python dependency path (TypeError: 'type' object is not subscriptable) even after tests completed. v2 uses node20 with compatible inputs.

Dependencies checked but not changed

Dependency Current Latest stable checked Reason
io.spring.dependency-management Gradle plugin 1.1.7 1.1.7 Already current.
io.github.cdimascio:dotenv-java 3.2.0 3.2.0 Already current.
org.springdoc:springdoc-openapi-starter-webmvc-ui 3.0.3 3.0.3 Already current.

Validation

./gradlew wrapper --gradle-version 9.6.1 --distribution-type bin
python3 -c "import yaml; yaml.safe_load(open('.github/workflows/tests.yaml'))"
./gradlew clean test --stacktrace
DB_CONN_STR=couchbase://127.0.0.1 DB_USERNAME=<local-admin> DB_PASSWORD=<local-password> ./gradlew clean test --stacktrace
DB_CONN_STR=couchbase://127.0.0.1 DB_USERNAME=<local-admin> DB_PASSWORD=<local-password> ./gradlew bootRun
curl -fsS http://127.0.0.1:8080/v3/api-docs
curl -fsS http://127.0.0.1:8080/api/v1/airline/airline_10
Check Outcome Evidence
Wrapper regeneration Passed Gradle wrapper now resolves Gradle 9.6.1.
Workflow YAML parse Passed .github/workflows/tests.yaml parsed successfully and uses ravsamhq/notify-slack-action@v2.
Tests without Couchbase env Failed as expected Spring could not resolve DB_CONN_STR; this repository's integration tests require Couchbase credentials/environment.
Tests with local Couchbase travel-sample Passed BUILD SUCCESSFUL in 40s; 18 integration tests executed.
Swagger/OpenAPI browser evidence Passed Swagger UI loaded at http://127.0.0.1:8080/swagger-ui/index.html showing API title, OAS 3.1 docs, and Route/Airport/Airline endpoint groups. Screenshot captured locally as swagger-ui.png.
Live API evidence Passed GET /api/v1/airline/airline_10 returned 40-Mile Air from travel-sample. Screenshot captured locally as airline-api-response.png; JSON response captured locally as airline_10.json.
OpenAPI evidence Passed /v3/api-docs returned title Quickstart in Couchbase with Spring Data, version 2.0, and 8 paths.

Evidence status

  • Browser evidence: passed, screenshots captured locally during Hermes run.
  • Swagger/OpenAPI evidence: passed.
  • API evidence: passed against local Couchbase travel-sample.
  • Screenshot artifacts are not committed to the repository to avoid adding generated evidence blobs to source control.

Risk notes

  • Spring Boot 4.1.0 is a minor framework update; validation covered compile and integration tests against local Couchbase travel-sample.
  • Gradle 9.6.1 is a wrapper/tooling update; no build-script migration was required.
  • ravsamhq/notify-slack-action v2 is a CI action dependency update that keeps existing inputs and moves the action runtime to Node 20 after v1 failed in GitHub Actions.
  • Existing Dependabot PRs Bump org.springframework.boot from 4.0.6 to 4.1.0 #86 and Bump gradle-wrapper from 9.5.0 to 9.6.1 #88 cover the two Gradle-related version updates, but this Hermes PR was opened per operator instruction to ignore Dependabot PRs and provide validation/evidence.
  • No prerelease dependencies were selected.

Rollback

Revert this PR to restore Spring Boot Gradle plugin 4.0.6, Gradle wrapper 9.5.0, and ravsamhq/notify-slack-action@v1.

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the Spring Boot plugin version to 4.1.0 in build.gradle and upgrades the Gradle wrapper to version 9.6.1 in gradle-wrapper.properties. There are no review comments, and I have no additional feedback to provide.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant