Update org.springframework.boot.version to v4.0.2

[xdev-renovate]

This PR contains the following updates:

Package	Type	Update	Change
org.springframework.boot:spring-boot-dependencies (source)	import	patch	4.0.1 → 4.0.2
org.springframework.boot:spring-boot-maven-plugin (source)	build	patch	4.0.1 → 4.0.2
org.springframework.boot:spring-boot-starter-test (source)	test	patch	4.0.1 → 4.0.2

---

Release Notes

spring-projects/spring-boot (org.springframework.boot:spring-boot-dependencies)

v4.0.2

Compare Source

⚠️ Noteworthy Changes

• The dependency on org.eclipse.jetty.ee11:jetty-ee11-servlets has been removed from spring-boot-jetty as it was unnecessary and unused. If your application code depends on a class from jetty-ee11-servlets, declare a dependency on it in your build configuration. #​48677

🐞 Bug Fixes

• No TransactionAutoConfiguration with spring-boot-starter-kafka for Spring Boot 4 #​48880
• Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #​48840
• When a bean condition references a type that is not present, it appears as ? in the condition evaluation report #​48838
• SessionAutoConfiguration creates a DefaultCookieSerializer with a default SameSite of null instead of Lax #​48830
• Setting graphql schema location to "classpath*:graphql/**/" causes failure due to incorrectly packaged test resource #​48829
• Message interpolation by MVC and WebFlux's Validators does not work correctly in a native image #​48828
• CloudFoundry integration fails in Servlet-based web app without a dependency on spring-boot-starter-restclient #​48826
• RestTestClientAutoConfiguration and TestRestTemplateAutoConfiguration should be package-private #​48820
• SSL metrics are no longer auto-configured #​48819
• Actuator /info endpoint fails in Java 25 Native Image (VirtualThreadSchedulerMXBean support) #​48812
• DataSourceBuilder cannot create oracle.ucp.jdbc.PoolDataSourceImpl in a native image #​48703
• The spring-boot-cloudfoundry module should only have an optional dependency on spring-boot-security #​48685
• Application JAR created by extract command is not reproductible #​48678
• AOT processing of tests should not be disabled when 'skipTests' is set #​48662
• @SpringBootTest(webEnvironment = WebEnvironment.RANDOM_PORT) is no longer applied to the management server #​48653
• Fix zero-length byte buffer in InspectedContent #​48650
• Can no longer override JacksonJsonHttpMessageConverter with ServerHttpMessageConvertersCustomizer #​48635
• HttpServiceClientProperties incorrectly uses the @ConfigurationProperties annotation on a LinkedHashMap class #​48616
• spring-boot-micrometer-tracing-opentelemetry fails if spring-boot-opentelemetry isn't there #​48585
• App fails to start with starter-webmvc and starter-zipkin #​48581
• Micrometer test modules should have an api dependency on micrometer-observation-test #​48386

📔 Documentation

• Fix typo in REST client documentation #​48907
• Remove duplicate word #​48874
• Document support for configuring arguments passed to Docker Compose #​48806
• The documentation related to EnvironmentPostProcessor links to deprecated interface #​48803
• Update documentation for Buildpack's AOT Cache support #​48769
• Correct docs to use new location for error handling configuration properties #​48767
• Document spring-boot-starter-cloudfoundry on Cloud Foundry Support Page #​48675
• Clarify javadoc to make it clear that HazelcastConfigCustomizer beans are only applied if Hazelcast is configured via a config file #​48659
• Example using excludeDevtools property should document that optional dependencies should be enabled #​48641
• Fix grammar and typos in the reference guide #​48601
• Update Tracing section for Spring Boot 4's modularity #​48576

🔨 Dependency Upgrades

• Upgrade to Classmate 1.7.3 #​48783
• Upgrade to Elasticsearch Client 9.2.3 #​48721
• Upgrade to Hibernate 7.2.1.Final #​48857
• Upgrade to HttpClient5 5.5.2 #​48784
• Upgrade to Jackson 2 Bom 2.20.2 #​48910
• Upgrade to Jackson Bom 3.0.4 #​48931
• Upgrade to JUnit Jupiter 6.0.2 #​48785
• Upgrade to Lettuce 6.8.2.RELEASE #​48859
• Upgrade to Logback 1.5.24 #​48786
• Upgrade to Logback 1.5.25 #​48885
• Upgrade to Micrometer 1.16.2 #​48712
• Upgrade to Micrometer Tracing 1.6.2 #​48713
• Upgrade to Native Build Tools Plugin 0.11.4 #​48911
• Upgrade to Pooled JMS 3.1.9 #​48787
• Upgrade to Postgresql 42.7.9 #​48886
• Upgrade to R2DBC MSSQL 1.0.4.RELEASE #​48858
• Upgrade to Reactor Bom 2025.0.2 #​48714
• Upgrade to Spring AMQP 4.0.2 #​48832
• Upgrade to Spring Batch 6.0.2 #​48715
• Upgrade to Spring Data Bom 2025.1.2 #​48716
• Upgrade to Spring Framework 7.0.3 #​48717
• Upgrade to Spring GraphQL 2.0.2 #​48718
• Upgrade to Spring HATEOAS 3.0.2 #​48834
• Upgrade to Spring Integration 7.0.2 #​48833
• Upgrade to Spring Kafka 4.0.2 #​48719
• Upgrade to Spring Pulsar 2.0.2 #​48720
• Upgrade to WebJars Locator Lite 1.1.3 #​48788
• Upgrade to XML Maven Plugin 1.2.1 #​48887

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​GaoSSR, @​ShaunHaldane, @​Zuohuang-Cai, @​izeye, @​mspiess, @​ngocnhan-tran1996, and @​philipbolting

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.