From 4ae81b3e3da414109c318a1e065d060d8b4d264d Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 31 Jul 2026 12:28:17 +0000 Subject: [PATCH] fix(deps): bump spring-boot to 4.0.7 to resolve Spring Framework 7.0.8 (GHSA-cjpg-rgq5-fr37) This addresses Dependabot alerts #130 (spring-webmvc) and #131 (spring-webflux) for GHSA-cjpg-rgq5-fr37 by upgrading the Spring Boot BOM to 4.0.7, which manages Spring Framework 7.0.8 (patched version; vulnerable range was >= 7.0.0, <= 7.0.7). Co-Authored-By: Catarina Correia --- gradle/libs.versions.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml index 4b414e0..f2e7f8a 100644 --- a/gradle/libs.versions.toml +++ b/gradle/libs.versions.toml @@ -1,6 +1,6 @@ [versions] java = "21" -spring-boot = "4.0.6" +spring-boot = "4.0.7" spring-dependency-management = "1.1.7" openapi-generator = "7.21.0" openapi-tools = "0.2.9"