From b6ae803bb0f38203f89fbf080de27e1ca5707aee Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 27 Oct 2026 08:14:36 +0000 Subject: [PATCH 1/4] build(deps): bump org.springframework.boot:spring-boot-starter-parent Bumps [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) from 4.1.1 to 4.1.2. - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](https://github.com/spring-projects/spring-boot/compare/v4.1.1...v4.1.2) --- updated-dependencies: - dependency-name: org.springframework.boot:spring-boot-starter-parent dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- examples/spring-app/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/examples/spring-app/pom.xml b/examples/spring-app/pom.xml index 5374c5d..36b3334 100644 --- a/examples/spring-app/pom.xml +++ b/examples/spring-app/pom.xml @@ -1,6 +1,6 @@ 4.0.0 - org.springframework.bootspring-boot-starter-parent4.1.1 + org.springframework.bootspring-boot-starter-parent4.1.2 com.quantipixels.ogiri.examplesspring-app0.1.0 1711.0.273.1.7 From 2995e8de848d6f63e8b22c634e10b7c52ee2a307 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 27 Oct 2026 08:14:39 +0000 Subject: [PATCH 2/4] build(deps): bump spring-boot.version from 4.1.1 to 4.1.2 Bumps `spring-boot.version` from 4.1.1 to 4.1.2. Updates `org.springframework.boot:spring-boot-dependencies` from 4.1.1 to 4.1.2 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](https://github.com/spring-projects/spring-boot/compare/v4.1.1...v4.1.2) Updates `org.springframework.boot:spring-boot-configuration-processor` from 4.1.1 to 4.1.2 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](https://github.com/spring-projects/spring-boot/compare/v4.1.1...v4.1.2) Updates `org.springframework.boot:spring-boot-autoconfigure-processor` from 4.1.1 to 4.1.2 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](https://github.com/spring-projects/spring-boot/compare/v4.1.1...v4.1.2) --- updated-dependencies: - dependency-name: org.springframework.boot:spring-boot-dependencies dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: org.springframework.boot:spring-boot-configuration-processor dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: org.springframework.boot:spring-boot-autoconfigure-processor dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 7ec4317..e0d80ab 100644 --- a/pom.xml +++ b/pom.xml @@ -16,7 +16,7 @@ UTF-8 2026-09-07T00:00:00Z - 4.1.1 + 4.1.2 3.1.7${java.home}/bin/java 11.0.27 42.7.13 From 38b893c9f40d803426c12448cec0f2e7d3e0cb0c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 27 Oct 2026 08:14:50 +0000 Subject: [PATCH 3/4] build(deps): bump tools.jackson:jackson-bom from 3.1.7 to 3.2.4 Bumps [tools.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 3.1.7 to 3.2.4. - [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-3.1.7...jackson-bom-3.2.4) --- updated-dependencies: - dependency-name: tools.jackson:jackson-bom dependency-version: 3.2.4 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index e0d80ab..f9111ea 100644 --- a/pom.xml +++ b/pom.xml @@ -17,7 +17,7 @@ 2026-09-07T00:00:00Z 4.1.2 - 3.1.7${java.home}/bin/java + 3.2.4${java.home}/bin/java 11.0.27 42.7.13 From ca3f254c516ba80ca44f168c386561b11dd3392c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Olu=CC=81was=CC=A3e=CC=80yi=CC=81=20S=CC=A3o=CC=81bande?= =?UTF-8?q?=CC=81?= Date: Sun, 8 Nov 2026 07:26:53 +0000 Subject: [PATCH 4/4] build: align docs and sample app with Boot 4.1.2 and Jackson 3.2.4 --- PUBLISHING.md | 2 +- README.md | 8 ++++---- examples/spring-app/pom.xml | 4 ++-- pom.xml | 2 +- 4 files changed, 8 insertions(+), 8 deletions(-) diff --git a/PUBLISHING.md b/PUBLISHING.md index 79660e9..0714950 100644 --- a/PUBLISHING.md +++ b/PUBLISHING.md @@ -2,7 +2,7 @@ Version is `0.1.0`. The reactor publishes five coordinates under `com.quantipixels.ogiri`: `ogiri-parent` and `ogiri-bom` (POMs), plus `ogiri`, `ogiri-spring-boot-autoconfigure`, and `ogiri-spring-boot-starter` (binary, sources and Javadoc JARs with POMs). The dependency-only starter's source/Javadoc attachments contain an explanatory README. The standalone BOM aligns only the three Ogiri libraries, without importing the build parent's dependency management. -Supported runtime: Spring Boot 4.x, Java 17+, Jackson 3; current dependency baseline is Boot 4.1.1/Jackson 3.1.7. Build tools require Java 21+; the gate selects JDK 25. Boot 3/Jackson 2 are unsupported. +Supported runtime: Spring Boot 4.x, Java 17+, Jackson 3; current dependency baseline is Boot 4.1.2/Jackson 3.2.4. Build tools require Java 21+; the gate selects JDK 25. Boot 3/Jackson 2 are unsupported. ## Local unsigned rehearsal diff --git a/README.md b/README.md index 6891564..658632b 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ Ogiri adds database-backed opaque sessions and devise_token_auth (DTA) account endpoints to a Spring Boot application. Existing DTA frontends keep working. Every authenticated request checks the stored session and the current account. Your application keeps its account model and authorization rules. -Requirements: Spring Boot 4.x (built against 4.1.1), Java 17+, Jackson 3, PostgreSQL or MySQL 8.4 (InnoDB). Boot 3 and Jackson 2 are unsupported. Version `0.1.0` is an unpublished prototype; before 1.0, API and schema changes can break compatibility (see the [changelog](CHANGELOG.md)). +Requirements: Spring Boot 4.x (built against 4.1.2), Java 17+, Jackson 3, PostgreSQL or MySQL 8.4 (InnoDB). Boot 3 and Jackson 2 are unsupported. Version `0.1.0` is an unpublished prototype; before 1.0, API and schema changes can break compatibility (see the [changelog](CHANGELOG.md)). Coding agents: use the [ogiri-integration skill](skills/ogiri-integration/SKILL.md) to add Ogiri to an app, and [auth-design](skills/auth-design/SKILL.md) to plan auth first. @@ -16,11 +16,11 @@ mise exec -- bash scripts/platform/java.sh sample This stages the artifacts in `target/java/consumer-cache` and writes `target/java/consumer-settings.xml`; pass that file with `mvn -s` from your application. It needs no database and does not touch your shared Maven cache. -In your application's POM (with `spring-boot-starter-parent` 4.1.1): +In your application's POM (with `spring-boot-starter-parent` 4.1.2): ```xml - 3.1.7 + 3.2.4 11.0.27 @@ -47,7 +47,7 @@ In your application's POM (with `spring-boot-starter-parent` 4.1.1): ``` -For MySQL use `com.mysql:mysql-connector-j`. The Jackson and Tomcat overrides pick up security fixes missing from Boot 4.1.1's defaults. The BOM aligns only Ogiri artifacts. +For MySQL use `com.mysql:mysql-connector-j`. The Jackson override matches the Jackson version Ogiri is built against; the Tomcat pin matches Boot 4.1.2's default and keeps older Boot 4.1.x releases on a patched Tomcat. The BOM aligns only Ogiri artifacts. ## 2. Create the tables diff --git a/examples/spring-app/pom.xml b/examples/spring-app/pom.xml index 36b3334..a85ecfa 100644 --- a/examples/spring-app/pom.xml +++ b/examples/spring-app/pom.xml @@ -2,8 +2,8 @@ 4.0.0 org.springframework.bootspring-boot-starter-parent4.1.2 com.quantipixels.ogiri.examplesspring-app0.1.0 - 1711.0.273.1.7 - + 1711.0.273.2.4 + com.quantipixels.ogiriogiri-bom0.1.0pomimport diff --git a/pom.xml b/pom.xml index f9111ea..fd3cb73 100644 --- a/pom.xml +++ b/pom.xml @@ -23,7 +23,7 @@ tools.jacksonjackson-bom${jackson.version}pomimport - + org.apache.tomcat.embedtomcat-embed-core${tomcat.version} org.apache.tomcat.embedtomcat-embed-el${tomcat.version} org.apache.tomcat.embedtomcat-embed-websocket${tomcat.version}