From 69d25494a68417850e1cfd9421cddd3c026cd676 Mon Sep 17 00:00:00 2001
From: brais <26645694+BraisVQ@users.noreply.github.com>
Date: Mon, 16 Mar 2026 14:49:07 +0100
Subject: [PATCH] Update Spring Boot version from 4.0.0 to 4.0.3 (#1153)

---
 CHANGELOG.md                   | 5 +++++
 be-java-springboot/Jenkinsfile | 2 +-
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 88ee88b0..3da89e75 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,11 @@
 
 ### Fixed
 
+## [4.12.1] - 2026-03-16
+### Fixed
+- Fix CVE-2025-66614 in Java Springboot QS ([#1153](https://github.com/opendevstack/ods-quickstarters/pull/1153))
+
+
 ## [4.12.0] - 2026-03-02
 ### Changed
 - Add specific quickstarter versioning to e2e-spock-geb and e2e-etl-python ([#1148](https://github.com/opendevstack/ods-quickstarters/pull/1148))
diff --git a/be-java-springboot/Jenkinsfile b/be-java-springboot/Jenkinsfile
index db5fc4e6..27c3f4b6 100644
--- a/be-java-springboot/Jenkinsfile
+++ b/be-java-springboot/Jenkinsfile
@@ -21,7 +21,7 @@ odsQuickstarterPipeline(
 
   stage('Build spring project') {
     dir(context.targetDir) {
-      def springBootVersion = '4.0.0'
+      def springBootVersion = '4.0.3'
       echo "--- create spring boot (v${springBootVersion}) project via spring initializr ---"
 
       def springInitializrUrl = "https://start.spring.io/starter.tgz?" +