v5.0.0-RC1

v5.0.0-RC1

Major release upgrading to Spring Boot 4.0.0, Spring Framework 7.0.0, and Jackson 3.0.x.

Highlights

• Spring Boot 3.5.0 → 4.0.0 / Spring Framework 6.2.7 → 7.0.0
• Jackson 2.x → 3.x (tools.jackson package) as primary, with Jackson 2.x retained for Retrofit compatibility
• OkHttp 4.x → 5.x, Tomcat 10.x → 11.x, Testcontainers 1.x → 2.x
• Java module name (ee.bitweb.core) added to JAR manifest
• CI now tests on Java 17, 21, and 25

Breaking Changes

• Jackson 3 package rename: All internal Jackson usage moved from com.fasterxml.jackson to tools.jackson. Applications directly referencing library Jackson types must update imports.
• InvalidFormatValidationException now extends RuntimeException instead of InvalidFormatException
• MDCTaskDecorator removed — use BasicMDCTaskDecorator or SecurityAwareMDCTaskDecorator
• TrimmedStringDeserializer.addToObjectMapper() removed — use createModule() instead
• persistenceException log-level property removed — use entityNotFoundException and conflictException separately
• AMQP: Jackson2JsonMessageConverter replaced by JacksonJsonMessageConverter (Jackson 3)
• Actuator/Security import paths changed (Spring Boot 4 package reorganization)
• Test: AutoConfigureMockMvc moved to org.springframework.boot.webmvc.test.autoconfigure
• ObjectMapper config refactored: Now uses JsonMapperBuilderCustomizer for Jackson 3 and a nested customizer for Jackson 2

New

• Jackson2TrimmedStringDeserializer — Jackson 2 string trimming for Retrofit compatibility
• StringUtil.trim() utility method
• Dual Jackson auto-configuration (Jackson 2 + Jackson 3 configured identically)

Removed

• MDCTaskDecorator (deprecated since 3.3.0)
• persistenceException log-level property (deprecated since 3.1.0)
• OWASP dependency-check Gradle plugin
• Spring version matrix CI workflow

---

Full migration guide: Wiki

v4.0.5

What's Changed

• Fix FieldNameResolver bug dealing with @RequestParam by @rammrain in #91

Full Changelog: v4.0.4...v4.0.5

v4.0.4

What's Changed

• Fix StringIndexOutOfBoundsException in retrofit logger request body truncation by @oktaeri in #61

New Contributors

• @oktaeri made their first contribution in #61

Full Changelog: v4.0.3...v4.0.4

v4.0.3

What's Changed

• Bump Sonar plugin version by @rammrain in #57
• Bump peter-evans/create-pull-request from 6 to 7 by @dependabot[bot] in #54
• Move from Nexus OSSRH to Central Portal by @rammrain in #58

Full Changelog: v4.0.2...v4.0.3

v4.0.2

What's Changed

• Retrofit response body mapper fix by @ennoeller in #44
• Run tests with every supported Spring Boot version by @rammrain in #51
• Convert suppressed headers to lowercase before comparing by @rammrain in #53

Full Changelog: v4.0.1...v4.0.2

v4.0.1

What's Changed

• Ensure that Retrofit logging mappers work when response is null by @rammrain in #41
• Bump dependencies by @dependabot in #30, #33, #34, #36, #35, #37, #38, #39, #40

Full Changelog: v4.0.0...v4.0.1

4.0.0

What's Changed

• Bump the all-deps-minor-and-patch group with 13 updates by @dependabot in #29
• New Retrofit logging interceptor by @ennoeller in #23

Breaking changes:

• Logs are written to a single log entry now. Data from mappers is mostly added to MDC. The new log message looks as follows for every log level: GET https://localhost:3000/api?data=true&test 404 1024bytes 14ms
• RetrofitApiBuilder.create added a third argument, RetrofitLoggingInterceptor. Builder methods loggingLevel and suppressedHeaders have been removed.

New Contributors

• @ennoeller made their first contribution in #23

Full Changelog: v3.4.0...v4.0.0

v3.4.0

What's Changed

• Constraint validator field improvement by @sohlo in #26

New Contributors

• @sohlo made their first contribution in #26

Full Changelog: v3.3.0...v3.4.0

v3.3.0

What's Changed

• Replace MDCTaskDecorator with spring-security agnostic and basic version by @rammrain in #18

Full Changelog: v3.2.0...v3.3.0

3.2.0

Notable changes

• Added SilencedGelfTcpAppender to allow application to run when Graylog is unreachable

What's Changed

• Bump the all-deps-minor-and-patch group with 13 updates by @dependabot in #10
• Bump org.json:json from 20231013 to 20240205 by @dependabot in #11
• Bump the all-deps-minor-and-patch group with 15 updates by @dependabot in #12
• Bump org.json:json from 20240205 to 20240303 by @dependabot in #13
• Update README.md by @rammrain in #14
• Bump the all-deps-minor-and-patch group with 11 updates by @dependabot in #15
• Add SilencedGelfTcpAppender to silence GELF connection issues by @rammrain in #17

New Contributors

• @rammrain made their first contribution in #14

Full Changelog: v3.1.0...v3.2.0