From d7fbfa502c113db7f1fd262649310e85769db7f2 Mon Sep 17 00:00:00 2001
From: Dachary Carey <dachary.carey@mongodb.com>
Date: Wed, 27 May 2026 10:08:06 -0400
Subject: [PATCH] chore(java-spring): bump Spring Boot to 4.0.6 and refresh
 deps
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the Java Spring Mflix sample to Spring Boot 4.0.6, which brings
the transitively-managed MongoDB Java Sync Driver from 5.5.2 to 5.6.5
(no GA Spring Boot release currently ships driver 5.7.0 — see
DOCSP-59938). Also refreshes other deps to keep the sample current.

- Spring Boot 3.5.13 -> 4.0.6
- springboot3-dotenv -> springboot4-dotenv (artifact rename)
- springdoc-openapi 2.8.13 -> 3.0.3 (SB4-compatible major line)
- langchain4j-voyage-ai 1.11.0-beta19 -> 1.15.0-beta25
- testcontainers junit-jupiter/mongodb -> testcontainers-junit-jupiter/
  testcontainers-mongodb (testcontainers 2.0 module rename)
- Add spring-boot-starter-webmvc-test (SB4 split @WebMvcTest out of
  spring-boot-starter-test) and update its import path
- Add spring-boot-jackson2 to opt back into Jackson 2 (SB4 defaults to
  Jackson 3); rename spring.jackson.* properties to spring.jackson2.*
  and drop write-dates-as-timestamps (Jackson 3 removed the feature
  and ISO-8601 is now the default)
- Drop commons-lang3 CVE-2025-48924 workaround (SB4 BOM ships 3.19.0,
  past the 3.18.0 fix)

JIRA: DOCSP-59938
---
 mflix/server/java-spring/pom.xml              | 39 ++++++++-----------
 .../src/main/resources/application.properties |  3 +-
 .../controller/MovieControllerTest.java       |  2 +-
 3 files changed, 18 insertions(+), 26 deletions(-)

diff --git a/mflix/server/java-spring/pom.xml b/mflix/server/java-spring/pom.xml
index a814870..938050b 100644
--- a/mflix/server/java-spring/pom.xml
+++ b/mflix/server/java-spring/pom.xml
@@ -8,7 +8,7 @@
     <parent>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-parent</artifactId>
-        <version>3.5.13</version>
+        <version>4.0.6</version>
         <relativePath/>
     </parent>
 
@@ -20,12 +20,11 @@
 
     <properties>
         <java.version>21</java.version>
-        <springdoc.version>2.8.13</springdoc.version>
+        <springdoc.version>3.0.3</springdoc.version>
         <dotenv.version>5.1.0</dotenv.version>
-        <commons.lang3.version>3.20.0</commons.lang3.version>
         <impsort.plugin.version>1.13.0</impsort.plugin.version>
         <byte-buddy.version>1.17.8</byte-buddy.version>
-        <langchain4j.version>1.11.0-beta19</langchain4j.version>
+        <langchain4j.version>1.15.0-beta25</langchain4j.version>
     </properties>
 
     <dependencies>
@@ -50,7 +49,7 @@
         <!-- Spring Dotenv - Load .env files -->
         <dependency>
             <groupId>me.paulschwarz</groupId>
-            <artifactId>springboot3-dotenv</artifactId>
+            <artifactId>springboot4-dotenv</artifactId>
             <version>${dotenv.version}</version>
         </dependency>
 
@@ -61,24 +60,11 @@
             <scope>provided</scope>
         </dependency>
 
-        <!-- Force version for Commons Lang used by SpringDoc (CVE-2025-48924) -->
-        <dependency>
-            <groupId>org.apache.commons</groupId>
-            <artifactId>commons-lang3</artifactId>
-            <version>${commons.lang3.version}</version>
-        </dependency>
-
         <!-- SpringDoc OpenAPI (Swagger UI) -->
         <dependency>
             <groupId>org.springdoc</groupId>
             <artifactId>springdoc-openapi-starter-webmvc-ui</artifactId>
             <version>${springdoc.version}</version>
-            <exclusions>
-                <exclusion>
-                    <groupId>org.apache.commons</groupId>
-                    <artifactId>commons-lang3</artifactId>
-                </exclusion>
-            </exclusions>
         </dependency>
 
         <!-- Spring Boot Test Starter -->
@@ -88,24 +74,31 @@
             <scope>test</scope>
         </dependency>
 
+        <!-- Spring Boot WebMVC Test Starter (provides @WebMvcTest in SB4+) -->
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-webmvc-test</artifactId>
+            <scope>test</scope>
+        </dependency>
+
         <!-- Testcontainers JUnit Jupiter integration -->
         <dependency>
             <groupId>org.testcontainers</groupId>
-            <artifactId>junit-jupiter</artifactId>
+            <artifactId>testcontainers-junit-jupiter</artifactId>
             <scope>test</scope>
         </dependency>
 
         <!-- MongoDB Atlas Local container for Testcontainers -->
         <dependency>
             <groupId>org.testcontainers</groupId>
-            <artifactId>mongodb</artifactId>
+            <artifactId>testcontainers-mongodb</artifactId>
             <scope>test</scope>
         </dependency>
 
-        <!-- Jackson Databind for JSON serialization/deserialization -->
+        <!-- Jackson 2 auto-configuration (SB4 defaults to Jackson 3; this opts back into Jackson 2) -->
         <dependency>
-            <groupId>com.fasterxml.jackson.core</groupId>
-            <artifactId>jackson-databind</artifactId>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-jackson2</artifactId>
         </dependency>
 
         <!-- LangChain4j Voyage AI for vector embeddings -->
diff --git a/mflix/server/java-spring/src/main/resources/application.properties b/mflix/server/java-spring/src/main/resources/application.properties
index 47bd6d0..1e89e1b 100644
--- a/mflix/server/java-spring/src/main/resources/application.properties
+++ b/mflix/server/java-spring/src/main/resources/application.properties
@@ -36,8 +36,7 @@ logging.logback.rollingpolicy.max-file-size=5MB
 logging.logback.rollingpolicy.max-history=5
 
 # Jackson Configuration (JSON serialization)
-spring.jackson.default-property-inclusion=non_null
-spring.jackson.serialization.write-dates-as-timestamps=false
+spring.jackson2.default-property-inclusion=non_null
 
 # API Documentation (Swagger/OpenAPI)
 springdoc.api-docs.path=/api-docs
diff --git a/mflix/server/java-spring/src/test/java/com/mongodb/samplemflix/controller/MovieControllerTest.java b/mflix/server/java-spring/src/test/java/com/mongodb/samplemflix/controller/MovieControllerTest.java
index 4eacf86..1b02f8f 100644
--- a/mflix/server/java-spring/src/test/java/com/mongodb/samplemflix/controller/MovieControllerTest.java
+++ b/mflix/server/java-spring/src/test/java/com/mongodb/samplemflix/controller/MovieControllerTest.java
@@ -34,7 +34,7 @@
 import org.junit.jupiter.api.DisplayName;
 import org.junit.jupiter.api.Test;
 import org.springframework.beans.factory.annotation.Autowired;
-import org.springframework.boot.test.autoconfigure.web.servlet.WebMvcTest;
+import org.springframework.boot.webmvc.test.autoconfigure.WebMvcTest;
 import org.springframework.http.MediaType;
 import org.springframework.test.context.bean.override.mockito.MockitoBean;
 import org.springframework.test.web.servlet.MockMvc;