• Apply Spring Security Maven Plugin #4063
• Apply Spring Security Settings Plugin #4061
• Simplify Running on Internal CI #4031
• Update to spring-security-release-tools 1.0.20 #4062

• Fix buildSrc Tests #4060

• Bump ch.qos.logback:logback-core from 1.6.3 to 1.6.5 #4079
• Bump com.h2database:h2 from 2.5.250 to 2.5.252 #4072
• Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.16 to 0.0.17 #4080
• Bump org.postgresql:postgresql from 42.7.13 to 42.7.14 #4095

• Document Community Projects #3959

• DefaultCookieSerializer.setCookiePath missing @Nullable on cookiePath parameter #3960
• Fix: SQL Server DDL's VARCHAR usage causes Implicit Conversion on session #3949
• ReactiveRedisIndexedSessionRepository.RedisSession.saveChangeSessionId() doesn't remove old sessionId from sorted set #3953
• SortedSetRedisSessionExpirationStore touches Session itself instead of its expires key #3951

• Bump com.h2database:h2 from 2.4.240 to 2.5.250 #3940
• Bump io.spring.javaformat:spring-javaformat-checkstyle from 0.0.47 to 0.0.48 #3892
• Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.14 to 0.0.15 #3932
• Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.14 to 0.0.16 #3939
• Bump tools.jackson.core:jackson-databind from 3.1.4 to 3.2.2 #3893
• Update HikariCP to 7.1.0 #3966
• Update Jackson to 3.1.6 #3961
• Update Jedis to 8.0.1 #3964
• Update JUnit to 6.1.3 #3962
• Update Lettuce to 7.7.0.RELEASE #3963
• Update MSSQL JDBC to 13.6.0.jre11 #3967
• Update Reactor to 2026.0.0-M1 #3971
• Update Reactor to 2026.0.0-M2 #3996
• Update Spring Data to 2026.1.0-M1 #3970
• Update Spring Data to 2026.1.0-M2 #3997
• Update Spring Framework to 7.1.0-M1 #3968
• Update Spring Framework to 7.1.0-M2 #3995
• Update Spring Security to 7.2.0-M1 #3969
• Update Spring Security to 7.2.0-M2 #3998
• Update Testcontainers Redis to 2.2.4 #3965
• Update to spring-security-release-tools v1.0.18 #3974
• Upgrade to Spring Boot 4.2.0-M1 #3956

Thank you to all the contributors who worked on this release:

@Chienlin1014 and @rwinch

• Bump ch.qos.logback:logback-core from 1.5.34 to 1.5.35 #3836

• Bump ch.qos.logback:logback-core from 1.5.35 to 1.5.36 #3841

• Bump ch.qos.logback:logback-core from 1.5.36 to 1.5.37 #3848

• Bump ch.qos.logback:logback-core from 1.5.37 to 1.5.38 #3866

• Bump ch.qos.logback:logback-core from 1.5.38 to 1.6.0 #3869

• Bump ch.qos.logback:logback-core from 1.6.0 to 1.6.1 #3871

• Bump ch.qos.logback:logback-core from 1.6.1 to 1.6.2 #3890

• Bump ch.qos.logback:logback-core from 1.6.1 to 1.6.3 #3891

• Bump com.ibm.db2:jcc from 12.1.4.0 to 12.1.5.0 #3849

• Bump com.oracle.database.jdbc:ojdbc8 from 23.26.2.0.0 to 23.26.3.0.0 #3872

• Bump commons-logging:commons-logging from 1.3.6 to 1.4.0 #3831

• Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.13 to 0.0.14 #3839

• Bump org.mariadb.jdbc:mariadb-java-client from 3.5.8 to 3.5.9 #3828

• Bump org.mariadb.jdbc:mariadb-java-client from 3.5.9 to 3.5.10 #3874

• Bump org.postgresql:postgresql from 42.7.11 to 42.7.12 #3855

• Bump org.postgresql:postgresql from 42.7.12 to 42.7.13 #3860

• Bump org.springframework.boot:spring-boot-gradle-plugin from 4.1.0-SNAPSHOT to 4.1.0 #3825

• Bump tools.jackson.core:jackson-databind from 3.1.4 to 3.2.1 #3867

• Bump tools.jackson:jackson-bom from 3.1.4 to 3.2.1 #3868

• Upgrade to Spring Framework 7.0.9 #3880

• Upgrade to Spring Security 7.1.1 #3881

• Bump ch.qos.logback:logback-core from 1.5.34 to 1.5.35 #3838
• Bump ch.qos.logback:logback-core from 1.5.35 to 1.5.36 #3844
• Bump ch.qos.logback:logback-core from 1.5.36 to 1.5.37 #3852
• Bump ch.qos.logback:logback-core from 1.5.37 to 1.5.38 #3864
• Bump com.ibm.db2:jcc from 12.1.4.0 to 12.1.5.0 #3853
• Bump com.oracle.database.jdbc:ojdbc8 from 23.26.2.0.0 to 23.26.3.0.0 #3873
• Bump org.mariadb.jdbc:mariadb-java-client from 3.5.8 to 3.5.9 #3830
• Bump org.mariadb.jdbc:mariadb-java-client from 3.5.9 to 3.5.10 #3876
• Bump org.postgresql:postgresql from 42.7.11 to 42.7.12 #3856
• Bump org.postgresql:postgresql from 42.7.12 to 42.7.13 #3861
• Bump org.springframework.boot:spring-boot-gradle-plugin from 4.0.6 to 4.0.7 #3826
• Upgrade to Spring Framework 7.0.9 #3878
• Upgrade to Spring Security 7.0.7 #3879

• Bump ch.qos.logback:logback-core from 1.5.32 to 1.5.33 #3792
• Bump ch.qos.logback:logback-core from 1.5.33 to 1.5.34 #3799
• Bump com.github.ben-manes:gradle-versions-plugin from 0.53.0 to 0.54.0 #3745
• Bump com.google.code.gson:gson from 2.13.2 to 2.14.0 #3756
• Bump com.ibm.db2:jcc from 12.1.3.0 to 12.1.4.0 #3696
• Bump com.mysql:mysql-connector-j from 9.6.0 to 9.7.0 #3754
• Bump com.oracle.database.jdbc:ojdbc8 from 23.26.1.0.0 to 23.26.2.0.0 #3789
• Bump commons-logging:commons-logging from 1.3.5 to 1.3.6 #3695
• Bump io.projectreactor:reactor-bom from 2025.0.3 to 2025.0.5 #3743
• Bump io.projectreactor:reactor-bom from 2025.0.5 to 2025.0.6 #3803
• Bump io.projectreactor:reactor-core from 3.8.3 to 3.8.5 #3742
• Bump io.projectreactor:reactor-core from 3.8.5 to 3.8.6 #3805
• Bump io.spring.gradle:spring-security-release-plugin from 1.0.14 to 1.0.15 #3709
• Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.11 to 0.0.13 #3740
• Bump org.jfrog.buildinfo:build-info-extractor-gradle from 4.35.6 to 4.35.9 #3791
• Bump org.mariadb.jdbc:mariadb-java-client from 3.5.7 to 3.5.8 #3734
• Bump org.mockito:mockito-bom from 5.21.0 to 5.23.0 #3702
• Bump org.postgresql:postgresql from 42.7.10 to 42.7.11 #3790
• Bump org.springframework.boot:spring-boot-gradle-plugin from 4.1.0-M1 to 4.1.0-SNAPSHOT #3760
• Bump org.springframework.data:spring-data-bom from 2025.1.3 to 2025.1.5 #3744
• Bump org.springframework.data:spring-data-bom from 2025.1.5 to 2025.1.6 #3813
• Bump org.springframework.security:spring-security-bom from 7.0.3 to 7.0.5 #3749
• Bump org.springframework.security:spring-security-bom from 7.0.5 to 7.1.0 #3816
• Bump org.springframework:spring-framework-bom from 7.0.4 to 7.0.7 #3746
• Bump org.springframework:spring-framework-bom from 7.0.7 to 7.0.8 #3804
• Bump org.testcontainers:testcontainers-bom from 2.0.3 to 2.0.5 #3750
• Bump tools.jackson.core:jackson-databind from 3.0.4 to 3.1.3 #3780
• Bump tools.jackson.core:jackson-databind from 3.1.3 to 3.1.4 #3796
• Bump tools.jackson:jackson-bom from 3.0.4 to 3.1.3 #3772
• Bump tools.jackson:jackson-bom from 3.1.3 to 3.1.4 #3797

• Bump ch.qos.logback:logback-core from 1.5.26 to 1.5.32 #3785
• Bump ch.qos.logback:logback-core from 1.5.32 to 1.5.33 #3793
• Bump ch.qos.logback:logback-core from 1.5.33 to 1.5.34 #3800
• Bump com.ibm.db2:jcc from 12.1.3.0 to 12.1.4.0 #3779
• Bump com.oracle.database.jdbc:ojdbc8 from 23.26.0.0.0 to 23.26.2.0.0 #3775
• Bump commons-logging:commons-logging from 1.3.5 to 1.3.6 #3777
• Bump io.projectreactor:reactor-bom from 2025.0.2 to 2025.0.5 #3774
• Bump io.projectreactor:reactor-bom from 2025.0.5 to 2025.0.6 #3809
• Bump io.projectreactor:reactor-core from 3.8.2 to 3.8.5 #3778
• Bump io.projectreactor:reactor-core from 3.8.5 to 3.8.6 #3807
• Bump io.spring.gradle:spring-security-release-plugin from 1.0.13 to 1.0.15 #3782
• Bump org.jfrog.buildinfo:build-info-extractor-gradle from 4.35.6 to 4.35.9 #3784
• Bump org.mariadb.jdbc:mariadb-java-client from 3.5.7 to 3.5.8 #3776
• Bump org.postgresql:postgresql from 42.7.9 to 42.7.11 #3783
• Bump org.springframework.boot:spring-boot-gradle-plugin from 4.0.2 to 4.0.6 #3781
• Bump org.springframework.data:spring-data-bom from 2025.1.2 to 2025.1.5 #3771
• Bump org.springframework.data:spring-data-bom from 2025.1.5 to 2025.1.6 #3812
• Bump org.springframework.security:spring-security-bom from 7.0.2 to 7.0.5 #3773
• Bump org.springframework.security:spring-security-bom from 7.0.5 to 7.0.6 #3810
• Bump org.springframework:spring-framework-bom from 7.0.2 to 7.0.7 #3768
• Bump org.springframework:spring-framework-bom from 7.0.7 to 7.0.8 #3808
• Bump org.testcontainers:testcontainers-bom from 2.0.3 to 2.0.5 #3770

• Bump ch.qos.logback:logback-core from 1.5.32 to 1.5.34 #3815
• Bump com.fasterxml.jackson.core:jackson-databind from 2.18.6 to 2.18.7 #3759
• Bump com.fasterxml.jackson.core:jackson-databind from 2.18.7 to 2.18.8 #3811
• Bump com.ibm.db2:jcc from 12.1.3.0 to 12.1.4.0 #3697
• Bump io.projectreactor:reactor-bom from 2024.0.17 to 2024.0.18 #3819
• Bump org.postgresql:postgresql from 42.7.10 to 42.7.11 #3761
• Bump org.springframework.data:spring-data-bom from 2025.0.11 to 2025.0.12 #3814
• Bump org.springframework.security:spring-security-bom from 6.5.10 to 6.5.11 #3817
• Bump org.springframework:spring-framework-bom from 6.2.18 to 6.2.19 #3818

• Bump com.fasterxml.jackson.core:jackson-databind from 2.18.5 to 2.18.6 #3687
• Bump io.projectreactor:reactor-bom from 2024.0.15 to 2024.0.16 #3701
• Bump io.projectreactor:reactor-bom from 2024.0.16 to 2024.0.17 #3741
• Bump io.spring.gradle:spring-security-release-plugin from 1.0.14 to 1.0.15 #3710
• Bump org.mariadb.jdbc:mariadb-java-client from 3.5.7 to 3.5.8 #3735
• Bump org.springframework.boot:spring-boot-gradle-plugin from 3.5.11-SNAPSHOT to 3.5.12-SNAPSHOT #3686
• Bump org.springframework.boot:spring-boot-gradle-plugin from 3.5.12-SNAPSHOT to 3.5.13-SNAPSHOT #3713
• Bump org.springframework.boot:spring-boot-gradle-plugin from 3.5.13-SNAPSHOT to 3.5.14-SNAPSHOT #3727
• Bump org.springframework.data:spring-data-bom from 2025.0.10 to 2025.0.11 #3747
• Bump org.springframework.data:spring-data-bom from 2025.0.9 to 2025.0.10 #3707
• Bump org.springframework.security:spring-security-bom from 6.5.8 to 6.5.9 #3711
• Bump org.springframework.security:spring-security-bom from 6.5.9 to 6.5.10 #3751
• Bump org.springframework:spring-framework-bom from 6.2.16 to 6.2.17 #3706
• Bump org.springframework:spring-framework-bom from 6.2.17 to 6.2.18 #3748
• Release 3.5.6 #3684

• Fix docs for Spring Boot 4 #3726

Thank you to all the contributors who worked on this release:

@rwinch

• Fix docs for Spring Boot 4 #3724

Thank you to all the contributors who worked on this release:

@rwinch