chore(spring-boot): Bump Spring Boot version to 3.3.5

[mboskamp]

Related to #4551

[github-actions]

Java dependency diff

Omitted due to character limit. See workflow artifacts for full diff file.

Module details

Omitted due to character limit. See workflow artifacts for full diff file.

Checklist

Unique changes

• spring-jcl: 6.1.12 ✔ => 6.1.14 ✔
• spring-core: 6.1.12 ✔ => 6.1.14 ✔
• spring-beans: 6.1.12 ✔ => 6.1.14 ✔
• spring-aop: 6.1.12 ✔ => 6.1.14 ✔
• spring-expression: 6.1.12 ✔ => 6.1.14 ✔
• micrometer-commons: 1.13.3 ✔ => 1.13.6 ✔
• micrometer-observation: 1.13.3 ✔ => 1.13.6 ✔
• spring-context: 6.1.12 ✔ => 6.1.14 ✔
• spring-boot: 3.3.3 ✔ => 3.3.5 ✔
• spring-boot-autoconfigure: 3.3.3 ✔ => 3.3.5 ✔
• logback-core: 1.5.7 ⚠❓‼ => 1.5.11 ⚠❓‼
• logback-classic: 1.5.7 ⚠❓‼ => 1.5.11 ⚠❓‼
• spring-boot-starter-logging: 3.3.3 ✔ => 3.3.5 ✔
• spring-boot-starter: 3.3.3 ✔ => 3.3.5 ✔
• spring-test: 6.1.12 ✔ => 6.1.14 ✔
• spring-boot-test: 3.3.3 ✔ => 3.3.5 ✔
• spring-boot-test-autoconfigure: 3.3.3 ✔ => 3.3.5 ✔
• junit-platform-commons: 1.10.3 ⚠ => 1.10.5 ⚠
• junit-jupiter-api: 5.10.3 ⚠ => 5.10.5 ⚠
• junit-jupiter-params: 5.10.3 ⚠ => 5.10.5 ⚠
• junit-platform-engine: 1.10.3 ⚠ => 1.10.5 ⚠
• junit-jupiter-engine: 5.10.3 ⚠ => 5.10.5 ⚠
• junit-jupiter: 5.10.3 ⚠ => 5.10.5 ⚠
• mockito-junit-jupiter: 5.11.0 ✔ => 5.11.0 ✔
• spring-boot-starter-test: 3.3.3 ✔ => 3.3.5 ✔
• junit-vintage-engine: 5.10.3 ⚠ => 5.10.5 ⚠
• spring-tx: 6.1.12 ✔ => 6.1.14 ✔
• spring-jdbc: 6.1.12 ✔ => 6.1.14 ✔
• spring-orm: 6.1.12 ✔ => 6.1.14 ✔
• spring-boot-starter-aop: 3.3.3 ✔ => 3.3.5 ✔
• spring-boot-starter-jdbc: 3.3.3 ✔ => 3.3.5 ✔
• hibernate-core: 6.5.2.Final ❓ => 6.5.3.Final ❓
• spring-data-commons: 3.3.3 ✔ => 3.3.5 ✔
• spring-data-jpa: 3.3.3 ✔ => 3.3.5 ✔
• spring-aspects: 6.1.12 ✔ => 6.1.14 ✔
• spring-boot-starter-data-jpa: 3.3.3 ✔ => 3.3.5 ✔
• spring-boot-actuator: 3.3.3 ✔ => 3.3.5 ✔
• spring-boot-actuator-autoconfigure: 3.3.3 ✔ => 3.3.5 ✔
• micrometer-core: 1.13.3 ✔ => 1.13.6 ✔
• micrometer-jakarta9: 1.13.3 ✔ => 1.13.6 ✔
• spring-boot-starter-actuator: 3.3.3 ✔ => 3.3.5 ✔
• spring-web: 6.1.12 ✔ => 6.1.14 ✔
• spring-boot-starter-json: 3.3.3 ✔ => 3.3.5 ✔
• tomcat-embed-core: 10.1.28 ✔ => 10.1.31 ✔
• tomcat-embed-el: 10.1.28 ✔ => 10.1.31 ✔
• tomcat-embed-websocket: 10.1.28 ✔ => 10.1.31 ✔
• spring-boot-starter-tomcat: 3.3.3 ✔ => 3.3.5 ✔
• spring-webmvc: 6.1.12 ✔ => 6.1.14 ✔
• spring-boot-starter-web: 3.3.3 ✔ => 3.3.5 ✔
• spring-boot-starter-validation: 3.3.3 ✔ => 3.3.5 ✔
• jersey-common: 3.1.8 ⚠❓‼ => 3.1.9 ⚠❓‼
• jersey-client: 3.1.8 ⚠❓‼ => 3.1.9 ⚠❓‼
• jersey-server: 3.1.8 ⚠❓‼ => 3.1.9 ⚠❓‼
• jersey-container-servlet-core: 3.1.8 ⚠❓‼ => 3.1.9 ⚠❓‼
• jersey-container-servlet: 3.1.8 ⚠❓‼ => 3.1.9 ⚠❓‼
• jersey-bean-validation: 3.1.8 ⚠❓‼ => 3.1.9 ⚠❓‼
• jersey-hk2: 3.1.8 ⚠❓‼ => 3.1.9 ⚠❓‼
• jersey-spring6: 3.1.8 ⚠❓‼ => 3.1.9 ⚠❓‼
• jersey-entity-filtering: 3.1.8 ⚠❓‼ => 3.1.9 ⚠❓‼
• jersey-media-json-jackson: 3.1.8 ⚠❓‼ => 3.1.9 ⚠❓‼
• spring-boot-starter-jersey: 3.3.3 ✔ => 3.3.5 ✔
• spring-boot-configuration-processor: 3.3.3 ✔ => 3.3.5 ✔
• spring-boot-devtools: 3.3.3 ✔ => 3.3.5 ✔
• spring-security-crypto: 6.3.3 ✔ => 6.3.4 ✔
• spring-security-core: 6.3.3 ✔ => 6.3.4 ✔
• spring-security-config: 6.3.3 ✔ => 6.3.4 ✔
• spring-security-web: 6.3.3 ✔ => 6.3.4 ✔
• spring-boot-starter-security: 3.3.3 ✔ => 3.3.5 ✔
• spring-security-oauth2-core: 6.3.3 ✔ => 6.3.4 ✔
• spring-security-oauth2-client: 6.3.3 ✔ => 6.3.4 ✔
• spring-security-oauth2-jose: 6.3.3 ✔ => 6.3.4 ✔
• spring-boot-starter-oauth2-client: 3.3.3 ✔ => 3.3.5 ✔
• jakarta.servlet.jsp.jstl-api: 3.0.1 ⚠‼ => 3.0.2 ⚠‼
• jakarta.jakartaee-web-api: 10.0.0 ❓ => 10.0.0 ❓
• groovy: 4.0.22 ✔ => 4.0.23 ✔
• groovy-jsr223: 4.0.22 ✔ => 4.0.23 ✔
• groovy-json: 4.0.22 ✔ => 4.0.23 ✔
• groovy-xml: 4.0.22 ✔ => 4.0.23 ✔
• groovy-templates: 4.0.22 ✔ => 4.0.23 ✔
• groovy-dateutil: 4.0.22 ✔ => 4.0.23 ✔
• groovy-datetime: 4.0.22 ✔ => 4.0.23 ✔

Unique additions

Developer comments

Glossary

Limitations

• The reported transitive dependencies may not always be accurate in a multi-module project.
  The SBOM file format represents a unique dependency (coordinates + type) only once. In a multi-module
  project a dependency can be declared in multiple locations with different exclusions of transitive dependencies
  or different version overrides for transitive dependencies.

Emojies

• ✔: All licenses are on the Go list
• ⚠: (At least one) license is on the Caution list
• ❌: (At least one) license is on the Stop list
• ❓: (At least one) license cannot be determined or is unknown
• ‼: Dependency has multiple licenses declared
• ⬆: New dependency version is higher than previous
• ⬇: New dependency version is lower than previous
• 🔄: Dependency version is equal and the dependencies of this component changed (e.g. when comparing snapshots)
• 🤷: The change of the dependency version can not be determined further (e.g. because the version does not follow semantic versioning)

[mboskamp]

Dependency updates to investigate

• logback-core: 1.5.7 ⚠❓‼ => 1.5.11 ⚠❓‼ (EPL 1.0 - no change) ✅
• logback-classic: 1.5.7 ⚠❓‼ => 1.5.11 ⚠❓‼ (EPL 1.0 - no change) ✅
• jersey-common: 3.1.8 ⚠❓‼ => 3.1.9 ⚠❓‼ (EPL 2.0 - no change) ✅
• jersey-client: 3.1.8 ⚠❓‼ => 3.1.9 ⚠❓‼ (EPL 2.0 - no change) ✅
• jersey-server: 3.1.8 ⚠❓‼ => 3.1.9 ⚠❓‼ (EPL 2.0 - no change) ✅
• jersey-container-servlet-core: 3.1.8 ⚠❓‼ => 3.1.9 ⚠❓‼ (EPL 2.0 - no change) ✅
• jersey-container-servlet: 3.1.8 ⚠❓‼ => 3.1.9 ⚠❓‼ (EPL 2.0 - no change) ✅
• jersey-bean-validation: 3.1.8 ⚠❓‼ => 3.1.9 ⚠❓‼ (EPL 2.0 - no change) ✅
• jersey-hk2: 3.1.8 ⚠❓‼ => 3.1.9 ⚠❓‼ (EPL 2.0 - no change) ✅
• jersey-spring6: 3.1.8 ⚠❓‼ => 3.1.9 ⚠❓‼ (EPL 2.0 - no change) ✅
• jersey-entity-filtering: 3.1.8 ⚠❓‼ => 3.1.9 ⚠❓‼ (EPL 2.0 - no change) ✅
• jersey-media-json-jackson: 3.1.8 ⚠❓‼ => 3.1.9 ⚠❓‼ (EPL 2.0 - no change) ✅
• jakarta.servlet.jsp.jstl-api: 3.0.1 ⚠‼ => 3.0.2 ⚠‼ (EPL 2.0 - no change) ✅
• jakarta.jakartaee-web-api: 10.0.0 ❓ => 10.0.0 ❓ (EPL 2.0 - no change) ✅

[joaquinfelici]

Looks good.

[ap-development-workflow]

Successfully created backport PR for 7.22:

• camunda/camunda-bpm-platform-maintenance#1291