Skip to content

Upgrade Spring Boot 4.0.7#111

Open
klopfdreh wants to merge 1 commit into
micrometer-metrics:mainfrom
klopfdreh:feature/sb406
Open

Upgrade Spring Boot 4.0.7#111
klopfdreh wants to merge 1 commit into
micrometer-metrics:mainfrom
klopfdreh:feature/sb406

Conversation

@klopfdreh

@klopfdreh klopfdreh commented May 29, 2026

Copy link
Copy Markdown
Contributor

Fixes: #102

@jotamartos

Copy link
Copy Markdown

Hi! Thanks for working on this upgrade. Just a heads up regarding recent Netty CVEs (CVE-2026-42584, CVE-2026-42579, CVE-2026-42581): Spring Boot 4.0.6 manages Netty at version 4.2.12.Final, which is still vulnerable. The fixes were released in Netty 4.2.13.Final. Would it be possible to explicitly override the Netty version to 4.2.13.Final in this PR (or update to a newer Spring Boot version if available) so that these vulnerabilities are addressed?

@klopfdreh

Copy link
Copy Markdown
Contributor Author

The new Spring Boot version will be available in the next few days - I am going to update the PR.

@klopfdreh

klopfdreh commented Jun 10, 2026

Copy link
Copy Markdown
Contributor Author

Update to Spring Boot 4.0.7. Local build and tests succeeded.

@klopfdreh klopfdreh changed the title Upgrade Spring Boot 4.0.6 Upgrade Spring Boot 4.0.7 Jun 10, 2026
Signed-off-by: Tobias Soloschenko <tsoloschenko@apache.org>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[QUESTION] Compatibility with Spring Boot 4

2 participants