v5.0.0

v5.0.0

Major release upgrading to Spring Boot 4, Spring Framework 7, and Jackson 3.

Highlights

• Spring Boot 3.5.0 → 4 / Spring Framework 6.2.7 → 7
• Jackson 2.x → 3.x (tools.jackson package) as primary, with Jackson 2.x retained for Retrofit compatibility
• OkHttp 4.x → 5.x, Tomcat 10.x → 11.x, Testcontainers 1.x → 2.x
• Java module name (ee.bitweb.core) added to JAR manifest
• CI now tests on Java 17, 21, and 25

Breaking Changes

• Jackson 3 package rename: All internal Jackson usage moved from com.fasterxml.jackson to tools.jackson. Applications directly referencing library Jackson types must update imports.
• InvalidFormatValidationException now extends RuntimeException instead of InvalidFormatException
• MDCTaskDecorator removed — use BasicMDCTaskDecorator or SecurityAwareMDCTaskDecorator
• TrimmedStringDeserializer.addToObjectMapper() removed — use createModule() instead
• persistenceException log-level property removed — use entityNotFoundException and conflictException separately
• AMQP: Jackson2JsonMessageConverter replaced by JacksonJsonMessageConverter (Jackson 3)
• Actuator/Security import paths changed (Spring Boot 4 package reorganization)
• Test: AutoConfigureMockMvc moved to org.springframework.boot.webmvc.test.autoconfigure
• ObjectMapper config refactored: Now uses JsonMapperBuilderCustomizer for Jackson 3 and a nested customizer for Jackson 2

New

• Jackson2TrimmedStringDeserializer — Jackson 2 string trimming for Retrofit compatibility
• StringUtil.trim() utility method
• Dual Jackson auto-configuration (Jackson 2 + Jackson 3 configured identically)

Removed

• MDCTaskDecorator (deprecated since 3.3.0)
• persistenceException log-level property (deprecated since 3.1.0)
• OWASP dependency-check Gradle plugin
• Spring version matrix CI workflow

---

Full migration guide: Wiki