Update Spring Boot to 2.3.x

[php-coder]

Changelogs:

• Spring Boot 2.3
  • https://spring.io/blog/2020/01/23/spring-boot-2-3-0-m1-is-now-available
    • https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.3.0-M1-Release-Notes
    • https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.3.0-M1-Configuration-Changelog
  • https://spring.io/blog/2020/02/13/spring-boot-2-3-0-m2-available-now
    • https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.3.0-M2-Release-Notes
    • https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.3.0-M2-Configuration-Changelog
    • https://spring.io/blog/2020/01/27/creating-docker-images-with-spring-boot-2-3-0-m1
  • https://spring.io/blog/2020/03/12/spring-boot-2-3-0-m3-available-now
    • https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.3.0-M3-Release-Notes
    • https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.3.0-M3-Configuration-Changelog
  • https://spring.io/blog/2020/04/03/spring-boot-2-3-0-m4-available-now
    • https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.3.0-M4-Release-Notes
    • https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.3.0-M4-Configuration-Changelog
    • https://spring.io/blog/2020/03/25/liveness-and-readiness-probes-with-spring-boot
  • https://spring.io/blog/2020/05/01/spring-boot-2-3-0-rc1-available-now
    • https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.3.0-RC1-Release-Notes
    • https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.3.0-RC1-Configuration-Changelog
  • https://spring.io/blog/2020/05/15/spring-boot-2-3-0-available-now
    • https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.3-Release-Notes
    • https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.3.0-Configuration-Changelog
  • https://spring.io/blog/2020/06/12/spring-boot-2-3-1-available-now
  • https://spring.io/blog/2020/07/24/spring-boot-2-3-2-available-now
  • https://spring.io/blog/2020/08/13/spring-boot-2-3-3-available-now
  • https://spring.io/blog/2020/09/17/spring-boot-2-3-4-available-now
  • https://spring.io/blog/2020/10/29/spring-boot-2-3-5-available-now
  • https://spring.io/blog/2020/11/13/spring-boot-2-3-6-available-now
  • https://spring.io/blog/2020/12/11/spring-boot-2-3-7-available-now
  • https://spring.io/blog/2021/01/14/spring-boot-2-3-8-available-now
  • https://spring.io/blog/2021/02/18/spring-boot-2-3-9-is-now-available
  • https://spring.io/blog/2021/04/15/spring-boot-2-3-10-is-now-available
  • https://spring.io/blog/2021/05/20/spring-boot-2-3-11-available-now
  • https://spring.io/blog/2021/06/10/spring-boot-2-3-12-release-available-now
  • https://rieckpil.de/whats-new-in-spring-boot-2-3/ (+pinboard)
  • https://www.infoq.com/news/2020/06/spring-boot-230-cloud/ (+pinboard)
  • https://spring.io/blog/2020/08/14/creating-efficient-docker-images-with-spring-boot-2-3 (+pinboard)
  • https://spring.io/blog/2021/01/04/ymnnalft-easy-docker-image-creation-with-the-spring-boot-maven-plugin-and-buildpacks (+pinboard)
• Spring Security 5.3
  • https://github.com/spring-projects/spring-security/releases/tag/5.3.0.M1
  • https://github.com/spring-projects/spring-security/releases/tag/5.3.0.RC1
  • https://github.com/spring-projects/spring-security/releases/tag/5.3.0.RELEASE
  • https://spring.io/blog/2020/03/05/spring-security-5-3-goes-ga
  • https://docs.spring.io/spring-security/site/docs/5.3.x/reference/html5/#new
  • https://spring.io/blog/2020/04/02/spring-security-5-3-1-5-2-3-5-1-9-5-0-15-4-2-15-released
    • https://spring.io/blog/2020/05/13/cve-reports-published-for-spring-security
      • https://spring.io/security/cve-2020-5407
      • https://spring.io/security/cve-2020-5408
  • https://spring.io/blog/2020/05/07/spring-security-5-3-2-5-2-4-5-1-10-5-0-16-4-2-16-released
  • https://spring.io/blog/2020/06/03/spring-security-5-3-3-5-2-5-5-1-11-5-0-17-4-2-17-released
  • https://spring.io/blog/2020/08/12/spring-security-5-3-4-5-2-6-5-1-12-5-0-18-4-2-18-released
  • https://spring.io/blog/2020/10/08/spring-security-5-4-1-5-3-5-5-2-7-5-1-13-5-0-19-4-2-19-released
  • https://spring.io/blog/2020/12/03/spring-security-5-4-2-5-3-6-and-5-2-8-released
  • https://github.com/spring-projects/spring-security/releases/tag/5.3.7.RELEASE
  • https://spring.io/blog/2021/02/11/spring-security-5-4-4-5-3-8-and-5-2-9-released
  • https://spring.io/blog/2021/04/12/spring-security-5-2-10-5-3-9-and-5-4-6-released
  • https://spring.io/blog/2021/06/22/spring-security-5-5-1-5-4-7-5-3-10-and-5-2-11-released
    • https://spring.io/blog/2021/06/28/cve-report-published-for-spring-security
      • https://spring.io/security/cve-2021-22119
  • https://github.com/spring-projects/spring-security/releases/tag/5.3.11.RELEASE
  • https://github.com/spring-projects/spring-security/releases/tag/5.3.12.RELEASE
  • https://spring.io/blog/2021/12/20/spring-security-5-2-15-5-3-13-5-4-10-5-5-4-and-5-6-1-released

Action points:

• pom.xml: consider removing spring-security.version (resolution: keep it as we use 2.3.12 where Spring Boot has 2.3.9)
• try spring-boot-properties-migrator for checking properties that should be migrated
• consider adding a dependency on spring-boot-starter-validation (+ final release notes)
• try ./mvnw spring-boot:build-image (resolution: we can't as "The build-image goal is not supported with projects using war packaging")
• use layered build in Dockerfile (+final release notes)
• play with gracefull shutdown (+ final release notes)
• play with server.jetty.threads.min to reduce a number of threads for test profile
• try spring.codec.log-request-details (resolution: I see no effect)

[php-coder]

I consider this as done.