From bcf93bb0db65d313cd5528ea59f80bd41cdc98a4 Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 31 Jul 2026 12:32:54 +0000 Subject: [PATCH] fix(deps): bump spring-boot to 4.0.7 for patched Spring Framework 7.0.8 (GHSA-x23c-287f-qqv5) Spring Boot 4.0.6 manages Spring Framework 7.0.7, which is vulnerable to a Denial of Service issue in versioned resource handling in Spring MVC and WebFlux (GHSA-x23c-287f-qqv5, Dependabot alerts #119 and #120). Spring Boot 4.0.7 upgrades the managed Spring Framework version to the patched 7.0.8. Co-Authored-By: Catarina Pinheiro Correia --- gradle/libs.versions.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml index 4b414e0..f2e7f8a 100644 --- a/gradle/libs.versions.toml +++ b/gradle/libs.versions.toml @@ -1,6 +1,6 @@ [versions] java = "21" -spring-boot = "4.0.6" +spring-boot = "4.0.7" spring-dependency-management = "1.1.7" openapi-generator = "7.21.0" openapi-tools = "0.2.9"