Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

This pull request upgrades the project to the latest major versions of Spring Boot (4.x), Vaadin (25.x), and Gradle (9.x), along with related dependencies and build tools. It also updates the frontend dependencies to align with Vaadin 25 and React 19, and refactors several configurations to match the new library versions and best practices.

Build and Dependency Upgrades:

  • Spring Boot and Vaadin major upgrades: Upgraded org.springframework.boot from 3.5.7 to 4.0.1 and com.vaadin from 24.9.6 to 25.0.2 in simdesk-web/build.gradle. Also updated the Vaadin BOM and all related dependencies. [1] [2] [3] [4]
  • Gradle upgrade: Updated Gradle wrapper from 8.13 to 9.3.0 and adjusted wrapper scripts (gradlew, gradlew.bat) to use the new -jar invocation style. [1] [2] [3] [4] [5] [6]

Frontend and JavaScript Dependency Updates:

  • Vaadin 25 and React 19 migration: Updated all Vaadin frontend packages to 25.0.1 and React to 19.x in package.json. Removed legacy Vaadin and Polymer dependencies, updated devDependencies, and synchronized overrides. [1] [2]
  • Removed obsolete theme and style files: Deleted unused or incompatible theme files (theme.json, tabs.css) to align with new Vaadin theming. [1] [2]

Configuration and Codebase Refactoring:

  • Jackson and serialization configuration: Refactored JacksonConfiguration to use the new JsonMapperBuilderCustomizer API, added support for primitive boolean deserialization, and updated to use tools.jackson APIs.
  • Flyway and DataSource configuration: Updated imports to match new Spring Boot 4 package structure for Flyway and DataSource configuration.
  • RestClient configuration: Switched to the new configureMessageConverters API for customizing converters in Spring Boot 4.
  • Security configuration: Updated imports to remove deprecated or obsolete Vaadin security configuration classes and added new Spring Boot 4 web security imports. [1] [2]

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 1, 2026
Bumps the major-updates group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| com.vaadin:vaadin-bom | `24.9.6` | `25.0.2` |
| [org.mybatis.spring.boot:mybatis-spring-boot-starter](https://github.com/mybatis/spring-boot-starter) | `3.0.5` | `4.0.1` |
| [org.springdoc:springdoc-openapi-starter-webmvc-ui](https://github.com/springdoc/springdoc-openapi) | `2.8.13` | `3.0.0` |
| [org.springframework.boot](https://github.com/spring-projects/spring-boot) | `3.5.7` | `4.0.1` |
| [com.vaadin](https://github.com/vaadin/platform) | `24.9.6` | `25.0.2` |


Updates `com.vaadin:vaadin-bom` from 24.9.6 to 25.0.2

Updates `org.mybatis.spring.boot:mybatis-spring-boot-starter` from 3.0.5 to 4.0.1
- [Release notes](https://github.com/mybatis/spring-boot-starter/releases)
- [Commits](mybatis/spring-boot-starter@mybatis-spring-boot-3.0.5...mybatis-spring-boot-4.0.1)

Updates `org.springdoc:springdoc-openapi-starter-webmvc-ui` from 2.8.13 to 3.0.0
- [Release notes](https://github.com/springdoc/springdoc-openapi/releases)
- [Changelog](https://github.com/springdoc/springdoc-openapi/blob/main/CHANGELOG.md)
- [Commits](springdoc/springdoc-openapi@v2.8.13...v3.0.0)

Updates `org.springframework.boot` from 3.5.7 to 4.0.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.7...v4.0.1)

Updates `com.vaadin` from 24.9.6 to 25.0.2
- [Release notes](https://github.com/vaadin/platform/releases)
- [Commits](vaadin/platform@24.9.6...25.0.2)

---
updated-dependencies:
- dependency-name: com.vaadin:vaadin-bom
  dependency-version: 25.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: org.mybatis.spring.boot:mybatis-spring-boot-starter
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: org.springdoc:springdoc-openapi-starter-webmvc-ui
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: org.springframework.boot
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: com.vaadin
  dependency-version: 25.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/gradle/major-updates-e27c50616c branch from 698b751 to 05e9ef1 Compare January 1, 2026 11:20
@fabieu fabieu force-pushed the dependabot/gradle/major-updates-e27c50616c branch from 4616893 to 1d26192 Compare January 19, 2026 21:23
@fabieu fabieu requested a review from Copilot January 19, 2026 21:27
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request updates major dependencies including Spring Boot (3.5.7→4.0.1), Vaadin (24.9.6→25.0.2), MyBatis (3.0.5→4.0.1), and SpringDoc (2.8.13→3.0.0). The changes include configuration updates, Vaadin API migration for deprecated methods, and addition of new static CSS/font resources.

Changes:

  • Major framework upgrades: Spring Boot 4.0.1, Vaadin 25.0.2, MyBatis 4.0.1, SpringDoc 3.0.0
  • Jackson configuration migrated from YAML to Java code (JacksonConfiguration class)
  • Vaadin API updated: replaced deprecated args.length() with args.isEmpty() and args.getString(0) with args.get(0).asString()
  • Added explicit enabled: true flags for SpringDoc endpoints (breaking change in SpringDoc 3.0)
  • Added new CSS files, fonts, and static resources for the UI

Reviewed changes

Copilot reviewed 34 out of 65 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
application.yaml Removed Jackson and CORS configuration blocks, added SpringDoc enabled flags
LeaderboardLineRenderer.java Updated Vaadin API calls to use new methods (args.isEmpty(), args.get(0).asString())
styles.css Updated font path and removed tabs.css import
JacksonConfiguration.java Maintains Jackson configuration programmatically
Various CSS/font files New static resources for UI styling and fonts
Comments suppressed due to low confidence (1)

simdesk-web/src/main/resources/META-INF/resources/css/styles.css:22

  • The font path has been changed from "fonts/Roboto-Regular.ttf" to "../fonts/Roboto-Regular.ttf". Please verify that this path change is correct and that the font file is accessible at the new location. The relative path now points to a parent directory, which may cause the font to fail loading if the directory structure doesn't match expectations.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@fabieu fabieu merged commit cfe3884 into main Jan 19, 2026
7 checks passed
@fabieu fabieu deleted the dependabot/gradle/major-updates-e27c50616c branch January 19, 2026 21:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants