fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3 by renovate[bot] · Pull Request #50 · experienced-dev/java-starter-template

renovate · 2025-11-21T06:15:42Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
org.springdoc:springdoc-openapi-starter-webmvc-ui (source)	`2.2.0` → `3.2.0`

Release Notes

springdoc/springdoc-openapi (org.springdoc:springdoc-openapi-starter-webmvc-ui)

`v3.2.0`

Added

#3370 – A ParameterCustomizer can read the type-use annotations of a parameter, including the ones declared on the value wrapped in an Optional, such as Optional<@MyAnnotation Foo>
#3382 – Mark the Java properties annotated with @Nullable (JSpecify, Spring, JSR-305) as nullable in their schema, including $ref and oneOf properties. Opt-in with springdoc.model-converters.java-nullable-property-customizer.enabled=true
#3390 – Add springdoc.model-converters.polymorphic-converter.one-of-as-ref to emit the polymorphic oneOf unions as reusable component schemas, named after the parent schema with the suffix set by springdoc.model-converters.polymorphic-converter.one-of-ref-suffix (Variant by default)
#3388 – Register the MCP tools with a McpStatelessSyncServer, for the STATELESS protocol

Changed

The MCP dashboard no longer pre-fills the OAuth2 token endpoint, client id and client secret. The form shows hints instead, and warns when the token endpoint is not HTTPS
#3354 – The default API version is only listed in the header or query parameter of the operations that serve it: a handler method mapped to it, or one without a version
#3360 – The properties of Spring Data PagedModel and its PageMetadata are now marked as required, as they are always serialized
#3361 – The amount and currency properties of MonetaryAmount are now marked as required
#3359 – Upgrade Scalar to version 0.6.83. The first tag is now open by default, and the links to models changed from #model/name to #models/Name
#3383 – Upgrade Spring AI to version 2.0.1. The MCP SDK version is now the one required by Spring AI
Upgrade spring-boot to version 4.1.2
Upgrade swagger-ui to version 5.34.0
Upgrade spring-cloud-function to version 5.0.5
Use the spring-security-oauth2-authorization-server version managed by Spring Boot (7.1.2) instead of 2.0.0-M2

Fixed

#3352 – A @ResponseStatus on a controller class is now applied to the responses of its operations
#3355 – An injected WebSession parameter is no longer documented as a query parameter in WebFlux applications
#3354 – /v3/api-docs no longer fails when an API version parameter declares @Schema(allowableValues)
#3364 – The application no longer fails to start when Spring HATEOAS is on the classpath without a LinkRelationProvider bean
#3368 – A WebAsyncTask return type is now unwrapped, so its response is described by its result type
#3377 – A JSpecify @Nullable on a controller method parameter now makes its schema nullable
#3381 – A nullable Kotlin property described by a oneOf schema, such as a sealed class, is now documented as nullable
#3387 – Scalar's own integration works again with the Swagger UI and API-only starters: only the Springdoc Scalar starters replace it
#3373 – springdoc no longer lifts Jackson 2 above the version managed by Spring Boot in Gradle builds

`v3.1.1`

Compare Source

Security

GHSA-6f5m-mhjg-qwxq – MCP tool callbacks do not encode path parameters, allowing request retargeting
GHSA-4v2q-56v7-2cpw – MCP transport, admin and dashboard endpoints are exposed by default
GHSA-m4cg-mhpg-rh2r – MCP audit events record credentials and request/response bodies without redaction
GHSA-5f9r-4mc4-qh3c – Unbounded MCP pending-confirmation store allows memory exhaustion
GHSA-jcgg-59c8-w4wh – MCP request context in a ThreadLocal can leak headers between concurrent WebFlux requests
GHSA-rhhx-6j8h-8cvw – Unbounded per-locale OpenAPI cache allows memory exhaustion via Accept-Language
GHSA-c925-vm88-mpp9 – Scalar starters trust client-supplied forwarded headers and render from a shared mutable bean
CVE-2026-75838 – Cross-site scripting in the DOMPurify bundled with swagger-ui, addressed by upgrading swagger-ui to 5.32.14

Added

#3340 – Describe JsonNullable values without their Java wrapper
#3325 – Manage the swagger artifacts in springdoc-openapi-bom, so that modules holding only the annotations stay in lockstep
#3321 – Add springdoc.login-endpoint.username-example and springdoc.login-endpoint.password-example to document the Spring Security login endpoint

Changed

MCP is now opt-in. Set springdoc.ai.mcp.enabled=true, and springdoc.ai.mcp.dashboard-enabled=true for the dashboard
The Scalar starters no longer register forwarded-header handling. Set server.forward-headers-strategy=framework (or native) behind a trusted proxy
Add springdoc.cache.max-entries (default 100) to bound the per-locale OpenAPI cache
Add springdoc.ai.mcp.audit.redact (default true) to mask secrets in MCP audit events
Document that the MCP approval flow is a confirmation step, not an authorization control
Document the security policy and the release versioning scheme
#3351 – java.time.Duration, LocalTime and OffsetTime are now resolved by swagger-core instead of being forced to a bare string, so they carry a format: duration, time-local and time respectively (partial-time for LocalTime after PrimitiveType.enablePartialTime())
A property whose type only implements Set indirectly (LinkedHashSet, TreeSet, …) is now described with uniqueItems: true, following swagger-api/swagger-core#5265
Upgrade swagger-core to version 2.2.55
Upgrade swagger-ui to version 5.32.14

Fixed

#3328, #3337 – /v3/api-docs fails with a NullPointerException when spring-hateoas is on the classpath without HateoasProperties
#3314 – Json Processing Exception occurred is logged for every constrained parameter whose schema is not a JsonSchema
#3317 – An injected HttpHeaders parameter is described as a schema
#3332 – The properties a Kotlin entity inherits from an @Embeddable are missing from the Spring Data REST schemas
#3320 – @Order and Ordered ignored when applying customizers
#3319 – A Page nested in another schema is not replaced by PagedModel
#3313 – Springdoc auto-configurations rely on unspecified auto-configuration ordering
#3331 – Validation annotations declared inside Optional parameters are dropped
#3322 – Validation annotations on a container's type argument leak between parameters
#3315 – An OAS 3.1 JsonSchema cannot be cloned through JSON
#3300 – TYPE_USE annotations on @ParameterObject fields are not passed along
#3341 – Stabilize Spring Data Sort and Pageable schema property order
#3338 – Kotlin nullability interpretation of the Any? type
#3136 – A Spring Data REST association to a non-exported entity expands its @EmbeddedId and @MapsId fields recursively in the response schemas
The Spring Data REST response post-processing rewrote an association property in place, so the …Response refs could leak into the schema shared with the request body representation

`v3.1.0`

Added

#3269 – Add mechanism to disable nullable for Kotlin properties
Allow request-specific Swagger UI index transformation

Changed

Upgrade Spring Boot to version 4.1.0
Upgrade Spring AI to version 2.0.0
Upgrade swagger-core to version 2.2.52
Upgrade swagger-ui to version 5.32.11
#3307 – Act upon SonarQube warnings
#3306 – Act upon SonarQube warnings

Fixed

#3304 – Kotlin parent class's field is not properly marked as nullable
#3294 – Duplicated path getting swagger-config
#3293 – Inconsistent OpenAPI schema naming with SNAKE_CASE: some Java record fields remain camelCase
#3292 – Make WebProperties and WebMvcProperties optional in SwaggerConfig
#3284 – Upgrade swagger-core from version 2.2.48 to 2.2.49
#3282 – Preserve version from nest() predicate across all routes in nest
#3281 – Stabilize Spring Data Page schema property order
#3274 – Description disappears from the generated json after upgrade to 3.0.3
#3270 – Validation annotation of ParameterObject property applied to PathVariable with the same name, even in unrelated endpoints
#3266 – Upgrade swagger-core from version 2.2.47 to 2.2.48
#3263 – Null key for a Map not allowed in JSON

`v3.0.3`

Added

#3246 – Add Springdoc OpenAPI MCP (Model Context Protocol) support
#3256 – Auto-set nullable: true for Kotlin nullable types in schema properties
#3239 – Add support for the @Range constraint validation annotation
#3244 – Handle default values for LocalDate

Changed

Upgrade Spring Boot to version 4.0.5
Upgrade swagger-core to version 2.2.47
Upgrade swagger-ui to version 5.32.2
#3260 – @ConditionalOnClass(HateoasProperties.class) in SpringDocHateoasConfiguration
Forwards all MCP non-transport headers to downstream methods
Dynamically resolve the base path from window.location.pathname for MCP UI

Fixed

#3258 – Setting API Version Required when using WebFlux breaks the Swagger UI
#3259 – Annotated Generic properties getting applied to sibling properties
#3255 – Direction enum: fixed visibility scope of group order so that setGroupsOrder method can be used
#3247 – Preserve YAML group URLs in Swagger UI
#3245 – Upgrade swagger-core from version 2.2.43 to 2.2.45
#3235 – PropertyResolverUtils retains a JsonNode when reading an ExtensionProperty annotation
#3226 – Propagate JsonView context when resolving Page<T> schema

`v3.0.2`

Added

#3229 – Add support for Spring Framework API Versioning with Functional Endpoints
#3208 – Add springdoc.swagger-ui.document-title property

Changed

Upgrade Spring Boot to version 4.0.3
Upgrade swagger-core to version 2.2.43
Upgrade swagger-ui to version 5.32.0
Upgrade Scalar to version 0.5.55

Fixed

#3232 – Gracefully handle springdoc endpoint paths during API version resolution
#3230 – Scalar source URLs resolve to null/<groupName> on second request when using GroupedOpenApi
#3228 – springdoc-openapi-starter 3.x doesn't depend on org.springframework.boot:spring-boot-starter
#3220 – Reachability metadata not compatible with GraalVM 25
#3195 – Application won't compile when OpenApi and spring-boot-data-rest is present
#3193 – OpenApi field in SpringDocConfigProperties does not comply with camel case naming conventions
#3215 – Type annotation not considered when Kotlin is not present
#3199 – Prevent duplicate _links in allOf child schemas
#3198 – Property resolution for parameter default values
#3206 – Upgrade swagger-core from version 2.2.41 to 2.2.42

`v3.0.1`

Added

#3122 – Add log notifications when SpringDocs / Scalar are enabled by default
#3123 – Add support for serving static resources
#3151 – Add @Order to ApplicationReadyEvent listener
#3158 – Add support for API groups in Scalar
#3187 – Add Scalar WebMVC and WebFlux support
#3185 – Disable creation of blank GitHub issues (GitHub settings & workflow)
#3186 – Decouple Web Server APIs following Spring Boot modularization
#3131 – Improve warning messages when documentation is explicitly enabled
#3183 – Remove unused operations consumer from route builder methods
#3141 – Change handling so useReturnTypeSchema is evaluated at HTTP status code level instead of method level

Changed

Upgrade Spring Boot to version 4.0.1
Upgrade swagger-core to version 2.2.41
Upgrade swagger-ui to version 5.31.0
Upgrade Scalar to version 0.4.3

Fixed

#3133 – Fix regression where content type from Swagger @RequestBody did not take precedence
#3146 – Fix WebJar resource handler mappings for Swagger UI resources
#3168 – Support @Schema annotations on Kotlin value classes
#3178 – Fix regression when generating documentation for Kotlin LinkedHashSet
#3170 – Fix warnings when setting title and description in application.yml
#3173 – Fix /v3/api-docs returning Base64-encoded response with Spring Framework 7.0.2
#3155 – Fix native image support regression with SpringDoc 3.0 and Spring Boot 4.0

`v3.0.0`

Added

#2975 - Spring Framework 7 - Initial API versioning support
#3123 - Support static resources for webflux

Changed

Upgrade to Spring Boot 4.0.0
Upgrade to Scalar 0.4.3

Fixed

#3131 - Warning messages when docs are explicitly enabled
#3121 - NPE in KotlinDeprecatedPropertyCustomizer - resolvedSchema is null

`v2.10.0`: springdoc-openapi v2.10.0 released!

Compare Source

Spring Boot 3.5.x line (built on Spring Boot 3.5.16).

⚠️ Changes you may notice

Newly required properties (#3360, #3361): the PagedModel / PageMetadata properties and the amount / currency properties of MonetaryAmount are now marked as required, as they are always serialized. Generated clients will see them as non-nullable.
Scalar 0.6 (#3359): upgraded to 0.6.83. The first tag is now open by default, and model links changed from #model/name to #models/Name.
Scalar's standalone integration (#3387): with the Swagger UI or API-only starters, Scalar's own auto-configuration is no longer disabled by springdoc. If you have com.scalar.maven on the classpath and don't want it, set scalar.enabled=false.

New

Opt-in nullability for Java models (#3382): springdoc.model-converters.java-nullable-property-customizer.enabled=true marks properties annotated with @Nullable (JSpecify, Spring, JSR-305) as nullable, including $ref and oneOf properties, without changing shared components.
Polymorphic oneOf as reusable components (#3390): springdoc.model-converters.polymorphic-converter.one-of-as-ref=true, with the name suffix set by springdoc.model-converters.polymorphic-converter.one-of-ref-suffix (Variant by default).
ParameterCustomizer can read type-use annotations, including inside Optional<@MyAnnotation Foo> (#3370).

Fixed

@ResponseStatus on a controller class is applied to its operations (#3352).
An injected WebSession is no longer documented as a query parameter in WebFlux (#3355).
The application no longer fails to start with Spring HATEOAS on the classpath but no LinkRelationProvider bean (#3364).
WebAsyncTask return types are unwrapped (#3368).
A JSpecify @Nullable on a controller parameter makes its schema nullable (#3377).
Nullable Kotlin properties described by a oneOf (e.g. sealed classes) are documented as nullable (#3381).
Gradle builds no longer lift Jackson 2 above the version managed by Spring Boot (#3373).

Dependencies

swagger-ui 5.34.0 · Scalar 0.6.83 · Spring Cloud Function 4.2.4 · commons-lang3 3.21.0

Thanks to all the contributors of this release: @MaxFreedomPollard, @kdelay, @dpkass, @anupamchaubey, @Mattias-Sehlstedt, @Naresh7175, @ys0v9, @sharanggupta, @itd-sw, @Tework123, @awinishere.

`v2.9.1`: springdoc-openapi v2.9.1 released!

Security

GHSA-rhhx-6j8h-8cvw – Unbounded per-locale OpenAPI cache allows memory exhaustion via Accept-Language
GHSA-c925-vm88-mpp9 – Scalar starters trust client-supplied forwarded headers and render from a shared mutable bean
CVE-2026-75838 – Cross-site scripting in the DOMPurify bundled with swagger-ui, addressed by upgrading swagger-ui to 5.32.14

Added

#3340 – Describe JsonNullable values without their Java wrapper
#3325 – Manage the swagger artifacts in springdoc-openapi-bom, so that modules holding only the annotations stay in lockstep
#3321 – Add springdoc.login-endpoint.username-example and springdoc.login-endpoint.password-example to document the Spring Security login endpoint

Changed

The Scalar starters no longer register forwarded-header handling. Set server.forward-headers-strategy=framework (or native) behind a trusted proxy
Add springdoc.cache.max-entries (default 100) to bound the per-locale OpenAPI cache
Document the security policy and the release versioning scheme
#3351 – java.time.Duration, LocalTime and OffsetTime are now resolved by swagger-core instead of being forced to a bare string, so they carry a format (duration and partial-time respectively for the first two)
A property whose type only implements Set indirectly (LinkedHashSet, TreeSet, …) is now described with uniqueItems: true, following swagger-api/swagger-core#5265
Upgrade swagger-core to version 2.2.55
Upgrade swagger-ui to version 5.32.14

Fixed

#3320 – @Order and Ordered ignored when applying customizers
#3319 – A Page nested in another schema is not replaced by PagedModel
#3313 – Springdoc auto-configurations rely on unspecified auto-configuration ordering
#3331 – Validation annotations declared inside Optional parameters are dropped
#3322 – Validation annotations on a container's type argument leak between parameters
#3315 – An OAS 3.1 JsonSchema cannot be cloned through JSON
#3314 – Json Processing Exception occurred is logged for every constrained parameter whose schema is not a JsonSchema
#3300 – TYPE_USE annotations on @ParameterObject fields are not passed along
#3341 – Stabilize Spring Data Sort and Pageable schema property order
#3338 – Kotlin nullability interpretation of the Any? type
#3332 – The properties a Kotlin entity inherits from an @Embeddable are missing from the Spring Data REST schemas
#3136 – A Spring Data REST association to a non-exported entity expands its @EmbeddedId and @MapsId fields recursively in the response schemas
The Spring Data REST response post-processing rewrote an association property in place, so the …Response refs could leak into the schema shared with the request body representation
#3317 – Ignore an injected HttpHeaders parameter explicitly. The reported failure needs Spring Framework 7, where HttpHeaders stopped implementing MultiValueMap; on this line it is still covered by the Map entry of the ignore list, so this is regression cover rather than a behaviour change
Harden the Spring Data REST response post-processing against an _embedded schema that carries no properties

New Contributors

@tthornton3-chwy made their first contribution in #3300

Full Changelog: springdoc/springdoc-openapi@v2.9.0...v2.9.1

`v2.9.0`: springdoc-openapi v2.9.0 released!

Compare Source

What's Changed

Fix version mismatch in springdoc-openapi-tests: update sub-modules to 2.8.18-SNAPSHOT by @ankushsurani in #3262
Upgrade swagger-core from version 2.2.47 to 2.2.48 by @Mattias-Sehlstedt in #3266
Add mechanism to disable nullable for Kotlin properties by @0xabadea in #3269
Stabilize Spring Data Page schema property order by @dpkass in #3281
Upgrade swagger-core from version 2.2.48 to 2.2.49 by @Mattias-Sehlstedt in #3284
Fix vulnerabilities: upgrade spring boot to 3.5.14 and swagger-ui to 5.32.5 by @Axel-1 in #3291

Make WebProperties and WebMvcProperties optional in SwaggerConfig by @seonwooj0810 in #3292
chore: act upon SonarQube warnings by @Mattias-Sehlstedt in #3306

Upgrade Spring Boot to version 3.5.16
Upgrade swagger-core to version 2.2.52
Upgrade swagger-ui to version 5.32.11
Upgrade commons-lang to version 3.20.0
Act upon SonarQube warnings (#3306, #3307)

Added

Allow request-specific Swagger UI index transformation
Add a mechanism to disable nullable for Kotlin properties

Fixed

#3304 – Kotlin parent class's field is not properly marked as nullable
#3298 – Update Spring Boot to 3.5.16
#3294 – Duplicated path getting swagger-config
#3293 – Inconsistent OpenAPI schema naming with SNAKE_CASE: some Java record fields remain camelCase
#3291 – Fix vulnerabilities: upgrade Spring Boot to 3.5.14 and swagger-ui to 5.32.5
#3288 – Make WebProperties and WebMvcProperties optional in SwaggerConfig
#3281 – Stabilize Spring Data Page schema property order
#3274 – Description disappears from the generated JSON after upgrade to 3.0.3
#3270 – Validation annotation of ParameterObject property applied to PathVariable with the same name, even in unrelated endpoints
#3263 – Null key for a Map not allowed in JSON
#3262 – Fix version mismatch in springdoc-openapi-tests modules

New Contributors

@ankushsurani made their first contribution in #3262
@0xabadea made their first contribution in #3269
@dpkass made their first contribution in #3281
@Axel-1 made their first contribution in #3291

Full Changelog: springdoc/springdoc-openapi@v2.8.17...v2.9.0

`v2.8.17`: springdoc-openapi v2.8.17 released!

Compare Source

Added

Add support for the @Range constraint validation annotation
Auto-set nullable: true for Kotlin nullable types in schema properties

Changed

Upgrade Spring Boot to version 3.5.13
Upgrade swagger-core to version 2.2.47
Upgrade swagger-ui to version 5.32.2

Fixed

#3259 – Fix an issue with annotated types with generics on parameters
#3255 – Handle $ref nullable wrapping and OAS 3.1 support
#3245 – Upgrade swagger-core from 2.2.43 to 2.2.45 (fixes schema resolution issues)
#3241 – Generic error responses from multiple @ControllerAdvice are still nondeterministic across OS
#3236 – Preserve YAML group URLs in Swagger UI
Fix PropertyResolverUtils to retain a JsonNode when reading an ExtensionProperty annotation
Fix handling of default values for LocalDate

New Contributors

@soowanx made their first contribution in #3247
@pcalouche made their first contribution in #3254
@sisco70 made their first contribution in #3255
@thejeff77 made their first contribution in #3256
@mcclellanmj made their first contribution in #3259

Full Changelog: springdoc/springdoc-openapi@v2.8.16...v2.8.17

`v2.8.16`: springdoc-openapi v2.8.16 released!

Compare Source

Added

#3208 - Add support for springdoc.swagger-ui.document-title property to customize the browser tab title

Changed

Upgrade Spring Boot to version 3.5.11
Upgrade swagger-core to version 2.2.43
Upgrade swagger-ui to version 5.32.0
Upgrade Scalar to version 0.5.55

Fixed

#3230 – Scalar source URLs resolve to null/<groupName> on second request when using GroupedOpenApi
#3226 – Propagate @JsonView context when resolving Page<T> schema in PageOpenAPIConverter
#3205 – springdoc-ui does not work with native compile GraalVM 25
#3219 – Upgrade swagger-core from 2.2.42 to 2.2.43 (fixes schema resolution issues)
#3193 – OpenApi field in SpringDocConfigProperties does not comply with camelCase naming conventions
#3161 – Prevent duplicate _links in allOf child schemas extending RepresentationModel
Fix type annotation not considered when Kotlin is not present
Fix property resolution for parameter default values

What's Changed

Update CONTRIBUTING.adoc by @gwr0-0 in #3209
Upgrade swagger-core from version 2.2.41 to 2.2.42 by @Mattias-Sehlstedt in #3206
Fix Gradle dependencies in README by @minseo6753 in #3190
Fix: Property resolution for parameter default values by @Mattias-Sehlstedt in #3198
fix(#3161): Prevent duplicate _links in allOf child schemas by @huisoo in #3199
feat(swagger-ui): add springdoc.swagger-ui.document-title property by @ardaaltinors in #3208
docs: fix typos and correct Gradle artifact IDs by @vidya381 in #3211
fix: add so that the type annotation is considered again if kotlin is not present by @Mattias-Sehlstedt in #3215
Improve README by @bwaldvogel in #3217
Upgrade swagger-core from version 2.2.42 to 2.2.43 by @Mattias-Sehlstedt in #3219
fix: propagate JsonView context when resolving Page schema by @Akila-1329 in #3226

New Contributors

@gwr0-0 made their first contribution in #3209
@minseo6753 made their first contribution in #3190
@huisoo made their first contribution in #3199
@ardaaltinors made their first contribution in #3208
@vidya381 made their first contribution in #3211
@bwaldvogel made their first contribution in #3217
@Akila-1329 made their first contribution in #3226

Full Changelog: springdoc/springdoc-openapi@v2.8.15...v2.8.16

`v2.8.15`: springdoc-openapi v2.8.15 released!

Compare Source

Added

#3122 – Add log notifications when SpringDocs / Scalar are enabled by default
#3123 – Add support for serving static resources
#3151 – Add @Order to ApplicationReadyEvent listener
#3158 – Add support for API groups in Scalar
#3187 – Add Scalar WebMVC and WebFlux support
#3185 – Disable creation of blank GitHub issues (GitHub settings & workflow)
#3186 – Decouple Web Server APIs following Spring Boot modularization
#3131 - Improve warning messages when documentation is explicitly enabled
#3183 - Remove unused operations consumer from route builder methods
#3141 - Change handling so useReturnTypeSchema is evaluated at HTTP status code level instead of method level

Changed

Upgrade Spring Boot to version 3.5.9
Upgrade swagger-core to version 2.2.41
Upgrade swagger-ui to version 5.31.0
Upgrade Scalar to version 0.4.3

Fixed

#3133 – Fix regression where content type from Swagger @RequestBody did not take precedence
#3146 – Fix WebJar resource handler mappings for Swagger UI resources
#3168 – Support @Schema annotations on Kotlin value classes
#3178 – Fix regression when generating documentation for Kotlin LinkedHashSet
#3170 – Fix warnings when setting title and description in application.yml
#3187 – Add scalar scalar-webmvc and scalar-webflux support

What's Changed

feat: static resources by @TiPo4u4eK in #3123
[Fix] Regression where content type from swagger @RequestBody does not take precedence by @Mattias-Sehlstedt in #3133
docs(security): allow /v3/api-docs(.yaml) & Swagger UI when Spring Security is enabled (management port) by @RituMalav in #3150
docs(management-port): add example for /v3/api-docs and Swagger UI (#… by @RituMalav in #3148
Change so useReturnTypeSchema is considered on an http code level by @Mattias-Sehlstedt in #3141
feat: add @Order to ApplicationReadyEvent listener (#3151) by @WeisSebastian in #3153
Remove unused operations consumer from route builder methods by @JohnNiang in #3183
Disable creation of a blank GitHub issue by @Mattias-Sehlstedt in #3185

New Contributors

@TiPo4u4eK made their first contribution in #3123
@RituMalav made their first contribution in #3150
@WeisSebastian made their first contribution in #3153

Full Changelog: springdoc/springdoc-openapi@v2.8.14...v2.8.15

`v2.8.14`

Added

#3090 - Add logs to notify when SpringDocs/Scalar is enabled because SpringDocs/Scalar is enabled by default

Changed

Upgrade swagger-ui to v5.30.1
Upgrade swagger-core to v2.2.38
Upgrade spring-boot to v3.5.7
Upgrade commons-lang3 to v3.18.0
Upgrade scalar to v0.3.12

Fixed

#3107 - Fix:compatible with lower version of getOpenApi().
#3121 - NPE in KotlinDeprecatedPropertyCustomizer - resolvedSchema is null

`v2.8.13`

Added

#3084 - Add Scalar Support

Changed

Upgrade swagger-ui to v5.28.1

Fixed

#3076 - With oneOf the response schema contains an extra type: string

`v2.8.12`

Changed

Upgrade swagger-ui to v5.28.0

Fixed

#3073 - Duplicate key class Parameter when documenting two GET methods with same path and PathVariable.
#3071 - @io.swagger.v3.oas.annotations.parameters.RequestBody does not work well with @RequestPart
#3066 - Parameter is now required after upgrading to springdoc-openapi 2.8.10

`v2.8.11`: springdoc-openapi v2.8.11 released!

Added

#3065 - javadoc and overall performance optimization

Changed

Upgrade spring-boot to v3.5.5

Fixed

#3064 -ClassNotFoundException: kotlin.reflect.full.KClasses

New Contributors

@rayuuuu made their first contribution in #3065

Full Changelog: springdoc/springdoc-openapi@v2.8.10...v2.8.11

`v2.8.10`

Added

#3046 - Feature Request: Support @jakarta.annotation.Nonnull.
#3042 - Support externalDocs configure on SpecPropertiesCustomizer
#3057 - Refactor webhook discovery and scanning mechanism

Changed

Upgrade spring-boot to v3.5.4
Upgrade swagger-ui to v5.27.1
Upgrade swagger-core to 2.2.36

Fixed

#3050 - @RequestPart JSON parameters missing Content-Type in generated curl commands, causing 415 errors.
#2978 - Parameter is no longer optional after upgrade to 2.8.8
#3022 - NullPointerException thrown in SchemaUtils.
#3026 - Fix unexpected merging of media types
#3036 - Fixed "desciption"
#3039 - Fix: Property resolution for extensions within @OpenAPIDefinition Info object
#3051 - Fixes so that a RequestPart with a Map is added to the RequestBody
#3060 - Use adaptFromForwardedHeaders instead of deprecated fromHttpRequest

`v2.8.9`

Added

#2944 - Support for @Positive
#3011 - type-use for method parameters

Changed

Upgrade spring-boot to version 3.5.0

Fixed

#2982 - application/problem+json content type is not set for ProblemDetails
#2990 - Issues with POST Request, application/x-www-form-urlencoded and only one parameter
#2998 - io.swagger.v3.oas.annotations.Webhook does not work when defined on the method level
#3012 - Order of examples is (sometimes) not preserved

`v2.8.8`

Fixed

#2977 - Handle projects not using kotlin-reflect #2977

`v2.8.7`

Added

#2944 - Introducing springdoc-openapi-bom project
#2948 - Customize Servers via application.yml
#2963 - Set default content type for pr

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

…webmvc-ui to v3

renovate Bot force-pushed the renovate/org.springdoc-springdoc-openapi-starter-webmvc-ui-3.x branch from 0e3e49f to f45d131 Compare January 1, 2026 18:38

renovate Bot force-pushed the renovate/org.springdoc-springdoc-openapi-starter-webmvc-ui-3.x branch from f45d131 to f74a513 Compare February 28, 2026 20:47

renovate Bot force-pushed the renovate/org.springdoc-springdoc-openapi-starter-webmvc-ui-3.x branch from f74a513 to 6ef265c Compare April 12, 2026 01:58

renovate Bot force-pushed the renovate/org.springdoc-springdoc-openapi-starter-webmvc-ui-3.x branch from 6ef265c to 99db2cb Compare August 1, 2026 21:28

renovate Bot force-pushed the renovate/org.springdoc-springdoc-openapi-starter-webmvc-ui-3.x branch from 99db2cb to 5f3b3ec Compare September 6, 2026 17:56

fix(deps): update dependency org.springdoc:springdoc-openapi-starter-…

4d6c91a

…webmvc-ui to v3

renovate Bot force-pushed the renovate/org.springdoc-springdoc-openapi-starter-webmvc-ui-3.x branch from 5f3b3ec to 4d6c91a Compare October 24, 2026 18:14

Navigation Menu

Repository navigation

fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3 - #50

fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3#50
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/org.springdoc-springdoc-openapi-starter-webmvc-ui-3.x

renovate Bot commented Nov 21, 2025 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Nov 21, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Added

Changed

Fixed

Security

Added

Changed

Fixed

Added

Changed

Fixed

Added

Changed

Fixed

Added

Changed

Fixed

Added

Changed

Fixed

Added

Changed

Fixed

v2.10.0: springdoc-openapi v2.10.0 released!

⚠️ Changes you may notice

New

Fixed

Dependencies

v2.9.1: springdoc-openapi v2.9.1 released!

Security

Added

Changed

Fixed

New Contributors

v2.9.0: springdoc-openapi v2.9.0 released!

What's Changed

Added

Fixed

New Contributors

v2.8.17: springdoc-openapi v2.8.17 released!

Added

Changed

Fixed

New Contributors

v2.8.16: springdoc-openapi v2.8.16 released!

Added

Changed

Fixed

What's Changed

New Contributors

v2.8.15: springdoc-openapi v2.8.15 released!

Added

Changed

Fixed

What's Changed

New Contributors

Added

Changed

Fixed

Added

Changed

Fixed

Changed

Fixed

v2.8.11: springdoc-openapi v2.8.11 released!

Added

Changed

Fixed

New Contributors

Added

Changed

Fixed

Added

Changed

Fixed

Fixed

Added

renovate Bot commented Nov 21, 2025 •

edited

Loading

`v2.10.0`: springdoc-openapi v2.10.0 released!

`v2.9.1`: springdoc-openapi v2.9.1 released!

`v2.9.0`: springdoc-openapi v2.9.0 released!

`v2.8.17`: springdoc-openapi v2.8.17 released!

`v2.8.16`: springdoc-openapi v2.8.16 released!

`v2.8.15`: springdoc-openapi v2.8.15 released!

`v2.8.11`: springdoc-openapi v2.8.11 released!