fix(deps): update spring boot to v3.5.3 (minor)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
org.springframework.boot:spring-boot-maven-plugin (source)	build	minor	3.4.6 -> 3.5.3
org.springframework.boot:spring-boot-dependencies (source)	import	minor	3.4.6 -> 3.5.3

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

spring-projects/spring-boot (org.springframework.boot:spring-boot-maven-plugin)

v3.5.3

Compare Source

v3.5.2

Compare Source

v3.5.1

Compare Source

v3.5.0

Compare Source

Full release notes for Spring Boot 3.5 are available on the wiki.

⭐ New Features

• Make heapdump endpoint restricted by default #​45624
• Remove SSL status tag from metrics #​45602
• Remove 'spring.http.client' deprecation and change 'spring.http.reactiveclient.settings' to 'spring.http.reactiveclient' #​45507

🐞 Bug Fixes

• Unable to override/set nested ConfigurationProperties by passing as a system property #​45639
• ValidationAutoConfiguration triggers early initialization of properties binding #​45618
• Micrometer "enable" annotations property does not cover observed aspect #​45617
• spring.graphql.sse.timeout is no longer exposed #​45613
• SpringApplication.setEnvironmentPrefix is ignored when reading SPRING_PROFILES_ACTIVE #​45549
• IllegalStateException when extracting using layers a module with no code of its own #​45449
• Removed spring.batch.initialize-schema property is still considered #​45380
• ReactorHttpClientBuilder does not offer a factory method to create the HttpClient #​45378
• Suggested values for spring.jpa.hibernate.ddl-auto are not aligned with Hibernate #​45351
• Custom default units declared on a field are ignored when binding properties in a native image #​45347
• DockerRegistryConfigAuthentication uses the wrong serverUrl as a fallback for the Credentials helper #​45345
• Various spring.datasource properties are mistakenly marked as ignored #​45342
• JerseyWebApplicationInitializer always gets loaded, setting a ServletContext initParameter #​45297
• DockerRegistryConfigAuthentication does not align with Docker CLI #​45292
• Unlike the Docker CLI, "\x00" characters are not trimmed from a decoded Docker Registry password #​45290
• CloudFoundry security matcher logs a warning due to use of the 'ignoring()' method #​32622

📔 Documentation

• Document the java info contribution #​45634
• Document the process info contribution #​45632
• Document the os info contribution #​45630
• Document typical spring.application.group and name use #​45628
• Document that bean methods should be static when annotated with @ConfigurationPropertiesBinding #​45626
• Document the way that primary Kotlin constructors are used when binding #​45553
• Improve "profile" reference documentation with additional admonitions #​45551
• Improve setEnvironmentPrefix(...) reference documentation #​45376
• Document all the available Testcontainers integrations #​45367
• Document when a spring.config.import value is relative and when it is fixed #​45363
• Update org.cyclonedx.bom version in docs to 2.3.0 #​45320
• Update link to "Parameter Name Retention" section of Spring Framework's release notes #​45299

🔨 Dependency Upgrades

• Prevent upgrade to Prometheus Client 1.3.7 #​45541
• Upgrade to Couchbase Client 3.8.1 #​45539
• Upgrade to Elasticsearch 8.18.1 #​45447
• Upgrade to GraphQL Java 24.0 #​45588
• Upgrade to Hibernate 6.6.15.Final #​45540
• Upgrade to HttpClient5 5.4.4 #​45462
• Upgrade to Jackson Bom 2.18.4 #​45463
• Upgrade to Jackson Bom 2.19.0 #​45542
• Upgrade to Jetty 12.0.21 #​45519
• Upgrade to jOOQ 3.19.23 #​45465
• Upgrade to Kafka 3.9.1 #​45606
• Upgrade to Micrometer 1.15.0 #​45432
• Upgrade to Micrometer Tracing 1.5.0 #​45433
• Upgrade to Neo4j Java Driver 5.28.5 #​45446
• Upgrade to Netty 4.1.121.Final #​45466
• Upgrade to R2DBC Proxy 1.1.6.RELEASE #​45467
• Upgrade to Reactor Bom 2024.0.6 #​45434
• Upgrade to REST Assured 5.5.2 #​45571
• Upgrade to Spring Authorization Server 1.5.0 #​45435
• Upgrade to Spring Data Bom 2025.0.0 #​45436
• Upgrade to Spring Framework 6.2.7 #​45437
• Upgrade to Spring GraphQL 1.4.0 #​45438
• Upgrade to Spring HATEOAS 2.5.0 #​45559
• Upgrade to Spring Integration 6.5.0 #​45439
• Upgrade to Spring Kafka 3.3.6 #​45440
• Upgrade to Spring LDAP 3.3.0 #​45441
• Upgrade to Spring Pulsar 1.2.6 #​45442
• Upgrade to Spring Retry 2.0.12 #​45443
• Upgrade to Spring Security 6.5.0 #​45444
• Upgrade to Spring Session 3.5.0 #​45560
• Upgrade to Spring WS 4.1.0 #​45445
• Upgrade to Tomcat 10.1.41 #​45520
• Upgrade to XmlUnit2 2.10.1 #​45607

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​ahrytsiuk, @​izeye, @​lhotari, @​ngocnhan-tran1996, @​nosan, @​quaff, @​thecooldrop, and @​yybmion

v3.4.7

Compare Source

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.