feat(deps): update dependency org.springframework.boot:spring-boot-gradle-plugin to v4

.dockerignore

@@ -117,4 +117,5 @@ renovate.json
 
 ### User template
 db/
+release/
 README.md

.github/workflows/docker.yml

@@ -18,7 +18,7 @@ jobs:
     name: Lint Dockerfile
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
 
   build:
@@ -31,15 +31,15 @@ jobs:
       id-token: write
       security-events: write
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ github.token }}
       - uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
       - uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
-      - uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893 # v5.9.0
+      - uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
         id: meta
         env:
           DOCKER_METADATA_ANNOTATIONS_LEVELS: manifest,index
@@ -57,7 +57,7 @@ jobs:
           # on.push.branch: branchName
           # on.pull_request: pr-number (won't be pushed)
 
-      - uses: docker/bake-action@3acf805d94d93a86cce4ca44798a76464a75b88c # v6.9.0
+      - uses: docker/bake-action@5be5f02ff8819ecd3092ea6b2e6261c31774f2b4 # v6.10.0
         with:
           push: ${{ github.event_name != 'pull_request' && github.event_name != 'merge_group' }}
           files: |
@@ -70,7 +70,7 @@ jobs:
             *.cache-from=type=gha
             *.cache-to=type=gha,mode=max
 
-      - uses: anchore/scan-action@3aaf50d765cfcceafa51d322ccb790e40f6cd8c5 # v7.2.0
+      - uses: anchore/scan-action@40a61b52209e9d50e87917c5b901783d546b12d0 # v7.2.1
         id: scan
         if: ${{ github.event_name != 'pull_request' && github.event_name != 'merge_group' }}
         with:
@@ -79,7 +79,7 @@ jobs:
           severity-cutoff: 'high'
           fail-build: false
 
-      - uses: github/codeql-action/upload-sarif@fdbfb4d2750291e159f0156def62b853c2798ca2 # v4.31.5
+      - uses: github/codeql-action/upload-sarif@fe4161a26a8629af62121b670040955b330f9af2 # v4.31.6
         if: ${{ github.event_name != 'pull_request' && github.event_name != 'merge_group' }}
         with:
           sarif_file: ${{ steps.scan.outputs.sarif }}

.github/workflows/gradle.yml

@@ -18,7 +18,7 @@ jobs:
     permissions:
       id-token: write # for codecov
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: '0' # to allow sonar to attach git blame information
       - uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
@@ -43,7 +43,7 @@ jobs:
     runs-on: ubuntu-22.04-arm
     name: "Integration test"
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
         with:
           distribution: "liberica"

.github/workflows/release.yml

@@ -22,22 +22,26 @@ jobs:
           permission-issues: write # to be able to comment on released issues
           permission-pull-requests: write # to be able to comment on released pull requests
 
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           token: ${{ steps.release-token.outputs.token }}
           fetch-depth: 0
-          # persist-credentials: 'false'
+          sparse-checkout: release
 
       - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
+        with:
+          package_json_file: 'release/package.json'
 
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
-          node-version-file: package.json
+          node-version-file: 'release/.nvmrc'
           cache: 'pnpm'
-          cache-dependency-path: 'pnpm-lock.yaml'
+          cache-dependency-path: 'release/pnpm-lock.yaml'
 
-      - run: pnpm install
+      - run: pnpm install --frozen-lockfile
+        working-directory: release
 
       - run: pnpm run release
+        working-directory: release
         env:
           GH_TOKEN: ${{ steps.release-token.outputs.token }}

.github/workflows/scorecard.yml

@@ -31,7 +31,7 @@ jobs:
           permission-issues: write # to be able to comment on released issues
           permission-pull-requests: write # to be able to comment on released pull requests
 
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           persist-credentials: false
 
@@ -51,6 +51,6 @@ jobs:
           path: results.sarif
           retention-days: 5
 
-      - uses: github/codeql-action/upload-sarif@fdbfb4d2750291e159f0156def62b853c2798ca2 # v4.31.5
+      - uses: github/codeql-action/upload-sarif@fe4161a26a8629af62121b670040955b330f9af2 # v4.31.6
         with:
           sarif_file: results.sarif

.gitignore

@@ -102,9 +102,6 @@ gradle-app.setting
 # JDT-specific (Eclipse Java Development Tools)
 .classpath
 
-### Node template
-node_modules
-
 ### User template
 
 # Ignore local application profiles

Dockerfile

@@ -1,4 +1,4 @@
-FROM bellsoft/liberica-runtime-container:jdk-21.0.9_11-cds-musl@sha256:f061c5bdaae96640563262985c50f6fb5ed8fce17522e5979440019169c6774e AS build
+FROM bellsoft/liberica-runtime-container:jdk-21.0.9_11-cds-musl@sha256:47a25e6813844f43cdb9569e5823bff4a09e310191abd5442e098a5c14d2c019 AS build
 WORKDIR /usr/src/app
 # cache dependencies
 COPY ./buildSrc/*.gradle.kts             ./buildSrc/
@@ -26,7 +26,7 @@ ARG BUILD_ARG="bootJar"
 RUN --mount=type=cache,target=/root/.gradle \
     ./gradlew ${BUILD_ARG}
 
-FROM bellsoft/liberica-runtime-container:jre-25-cds-musl@sha256:c608a522fbd0937733e5d97f9b4749e76955fa56087707a48e90bf30ff31d132 AS app
+FROM bellsoft/liberica-runtime-container:jre-25-cds-musl@sha256:00847b4d088bb32cb4ac1b3717d82f314a70bcff4ea7657761fe99370872bf19 AS app
 # use non-root user
 RUN addgroup -S spring && adduser -S spring -G spring
 USER spring:spring

buildSrc/src/main/kotlin/hu/bsstudio/gradle/DependencyManagementPlugin.kt

@@ -13,7 +13,7 @@ class DependencyManagementPlugin : Plugin<Project> {
 
         project.dependencies {
             add("implementation", platform(org.springframework.boot.gradle.plugin.SpringBootPlugin.BOM_COORDINATES))
-            add("implementation", platform("org.springframework.cloud:spring-cloud-dependencies:2025.0.0"))
+            add("implementation", platform("org.springframework.cloud:spring-cloud-dependencies:2025.1.0"))
         }
     }
 }

buildSrc/src/main/kotlin/hu/bsstudio/gradle/IntegrationTestConventionPlugin.kt

@@ -16,8 +16,6 @@ class IntegrationTestConventionPlugin : Plugin<Project> {
                 register<JvmTestSuite>("integrationTest") {
                     useJUnitJupiter()
                     dependencies {
-                        implementation(platform(org.springframework.boot.gradle.plugin.SpringBootPlugin.BOM_COORDINATES))
-                        implementation(platform("org.springframework.cloud:spring-cloud-dependencies:2025.0.0"))
                         implementation("org.springframework.boot:spring-boot-starter-test") {
                             exclude(group = "org.hamcrest")
                             exclude(group = "org.assertj")
@@ -30,5 +28,9 @@ class IntegrationTestConventionPlugin : Plugin<Project> {
                 }
             }
         }
+        project.configurations.named("integrationTestImplementation") {
+            extendsFrom(project.configurations.getByName("implementation"))
+            extendsFrom(project.configurations.getByName("runtimeOnly"))
+        }
     }
 }

buildSrc/src/main/kotlin/hu/bsstudio/gradle/SpringAppConventionPlugin.kt

@@ -12,5 +12,13 @@ class SpringAppConventionPlugin : Plugin<Project> {
         project.dependencies {
             add("implementation", "org.springframework.boot:spring-boot-starter")
         }
+        project.configurations.named("developmentOnly") {
+            extendsFrom(project.configurations.getByName("runtimeOnly"))
+            extendsFrom(project.configurations.getByName("implementation"))
+        }
+        project.configurations.named("annotationProcessor") {
+            extendsFrom(project.configurations.getByName("runtimeOnly"))
+            extendsFrom(project.configurations.getByName("implementation"))
+        }
     }
 }

docker-compose.yml

@@ -28,7 +28,7 @@ services:
 
   postgres:
     # update server/data/src/test/resources/application.yml
-    image: "postgres:16.3-alpine3.18@sha256:64e18e8fb3e9c9aac89ac590c5dd8306b862478404f76cd9b5f7720d012b4c47"
+    image: "postgres:18-alpine@sha256:2c692d47ba7074205129f25e663ee5840816bc24e9af878995ad33336d83332a"
     environment:
       POSTGRES_DB: "bss"
       POSTGRES_USER: "user"
@@ -67,7 +67,7 @@ services:
       - "./docker/wiremock/stubs/oidc:/home/wiremock/mappings/oidc"
 
   prometheus:
-    image: "prom/prometheus:v3.7.3@sha256:49214755b6153f90a597adcbff0252cc61069f8ab69ce8411285cd4a560e8038"
+    image: "prom/prometheus:v3.8.0@sha256:d936808bdea528155c0154a922cd42fd75716b8bb7ba302641350f9f3eaeba09"
     ports:
       - "127.0.0.1:9090:9090"
     volumes:

gradle/libs.versions.toml

@@ -1,7 +1,7 @@
 [versions]
-springdoc = "2.8.14"
-springBoot = "3.5.8"
-kotest = "6.0.5"
+springdoc = "3.0.0"
+springBoot = "4.0.0"
+kotest = "6.0.7"
 spotless = "8.1.0"
 detekt = "1.23.8"
 

integration/build.gradle.kts

@@ -8,9 +8,13 @@ plugins {
 }
 
 dependencies {
-    integrationTestImplementation(project(":server:data"))
+    integrationTestImplementation(project(":server:data")) {
+        exclude("org.springframework.boot", "spring-boot-starter-flyway")
+    }
     integrationTestImplementation(project(":client"))
     integrationTestImplementation("org.springframework.cloud:spring-cloud-starter-openfeign")
     integrationTestImplementation("org.springframework.boot:spring-boot-starter-data-jpa")
     integrationTestImplementation("org.springframework.boot:spring-boot-starter-json")
+    integrationTestImplementation("org.springframework.boot:spring-boot-data-jpa-test")
+    integrationTestImplementation("org.springframework.boot:spring-boot-starter-validation-test")
 }

integration/src/integrationTest/kotlin/hu/bsstudio/bssweb/IntegrationTest.kt

@@ -18,7 +18,6 @@ import org.springframework.test.context.junit.jupiter.SpringJUnitConfig
         "bss.client.url=http://localhost:8080",
         "bss.client.username=user",
         "bss.client.password=password",
-        "spring.flyway.enabled=false",
         "spring.datasource.url=jdbc:postgresql://localhost:5432/bss?currentSchema=private",
         "spring.datasource.username=user",
         "spring.datasource.password=password",

release/.gitignore

@@ -0,0 +1,132 @@
+### Node template
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+.pnpm-debug.log*
+
+# Diagnostic reports (https://nodejs.org/api/report.html)
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+
+# Runtime data
+pids
+*.pid
+*.seed
+*.pid.lock
+
+# Directory for instrumented libs generated by jscoverage/JSCover
+lib-cov
+
+# Coverage directory used by tools like istanbul
+coverage
+*.lcov
+
+# nyc test coverage
+.nyc_output
+
+# Grunt intermediate storage (https://gruntjs.com/creating-plugins#storing-task-files)
+.grunt
+
+# Bower dependency directory (https://bower.io/)
+bower_components
+
+# node-waf configuration
+.lock-wscript
+
+# Compiled binary addons (https://nodejs.org/api/addons.html)
+build/Release
+
+# Dependency directories
+node_modules/
+jspm_packages/
+
+# Snowpack dependency directory (https://snowpack.dev/)
+web_modules/
+
+# TypeScript cache
+*.tsbuildinfo
+
+# Optional npm cache directory
+.npm
+
+# Optional eslint cache
+.eslintcache
+
+# Optional stylelint cache
+.stylelintcache
+
+# Microbundle cache
+.rpt2_cache/
+.rts2_cache_cjs/
+.rts2_cache_es/
+.rts2_cache_umd/
+
+# Optional REPL history
+.node_repl_history
+
+# Output of 'npm pack'
+*.tgz
+
+# Yarn Integrity file
+.yarn-integrity
+
+# dotenv environment variable files
+.env
+.env.development.local
+.env.test.local
+.env.production.local
+.env.local
+
+# parcel-bundler cache (https://parceljs.org/)
+.cache
+.parcel-cache
+
+# Next.js build output
+.next
+out
+
+# Nuxt.js build / generate output
+.nuxt
+dist
+
+# Gatsby files
+.cache/
+# Comment in the public line in if your project uses Gatsby and not Next.js
+# https://nextjs.org/blog/next-9-1#public-directory-support
+# public
+
+# vuepress build output
+.vuepress/dist
+
+# vuepress v2.x temp and cache directory
+.temp
+.cache
+
+# Docusaurus cache and generated files
+.docusaurus
+
+# Serverless directories
+.serverless/
+
+# FuseBox cache
+.fusebox/
+
+# DynamoDB Local files
+.dynamodb/
+
+# TernJS port file
+.tern-port
+
+# Stores VSCode versions used for testing VSCode extensions
+.vscode-test
+
+# yarn v2
+.yarn/cache
+.yarn/unplugged
+.yarn/build-state.yml
+.yarn/install-state.gz
+.pnp.*
+

release/.nvmrc

@@ -0,0 +1 @@
+v24.11.1