Skip to content

Release/3.0.9#885

Merged
prachi-okta merged 27 commits intomasterfrom
release/3.0.9
Jan 30, 2026
Merged

Release/3.0.9#885
prachi-okta merged 27 commits intomasterfrom
release/3.0.9

Conversation

@prachi-okta
Copy link
Copy Markdown
Contributor

@prachi-okta prachi-okta commented Jan 30, 2026

Okta Spring Boot 3.0.9: Spring Boot 4.x & Spring Security 7.x Support

Summary

This release brings full support for Spring Boot 4.0.1 and Spring Security 7.0.2, including critical fixes for dependency management and reactive OAuth2 configuration compatibility.

What's Changed

✅ Core Updates

  • Spring Boot: Upgraded to 4.0.1 (requires Java 17+)
  • Spring Security: Updated to 7.0.2
  • Spring Framework: 7.0.2 (managed via Spring Boot)

✅ Critical Fixes

  1. Reactive OAuth2 Configuration - Fixed NoSuchMethodError in Spring Security 7.x

    • Refactored ReactiveAuthenticationManager to use proper bean injection
    • Removed problematic lambda-based method calls
  2. Commons-Logging Dependency Management - Added explicit exclusions

    • oauth2 module: spring-security-config, spring-boot-starter-security, spring-test
    • sdk module: spring-test
    • integration-tests modules: spring-boot-starter-security, spring-test
  3. Maven Central Validation - Explicit spring-core version management

    • Added org.springframework:spring-core:7.0.2 to dependencyManagement
    • Fixes "Dependency management dependency version information is missing" errors

📝 Breaking Changes

  • Requires Java 17+ (Spring Boot 4.x minimum)
  • No changes to API or configuration

…bility

Spring Security classes reference commons-logging types which are banned in
Spring Boot 4.x. The jcl-over-slf4j bridge needs to be available at compile
time, not just test time, to resolve these type references.
All child pom.xml files were referencing parent version 3.0.10-SNAPSHOT
which doesn't exist. Updated them to reference 3.0.9-SNAPSHOT.
@prachi-okta prachi-okta merged commit 9af64ae into master Jan 30, 2026
3 checks passed
@gysi
Copy link
Copy Markdown

gysi commented Feb 16, 2026

How is it possible that this PR got approved and merged.
Adding a major spring boot upgrade as transitive dependency in a bugfix version.

You seriously need to check your review process.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants