fix: upgrade Spring Boot 3.5.11, Springdoc 2.8.16, regenerate OpenAPI spec, update OpenAPI generator 7.20.0 and resolve Jackson vulnerabilities

Author: bsayli

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -39,7 +39,7 @@ body:
       description: "Tool versions or environment details."
       placeholder: |
         - Java: 21
-        - OpenAPI Generator: 7.19.0
+        - OpenAPI Generator: 7.20.0
         - Spring Boot: 3.5.x
         - OS: macOS / Windows / Linux
   - type: textarea

PULL_REQUEST_TEMPLATE.md

@@ -101,7 +101,7 @@ Please confirm the following:
 
 **Type:** `feature` / `bugfix` / `docs` / `refactor` / `chore` / `test` / `ci`
 **Related Issue / Discussion:** (optional) `#number`
-**Target Release:** (optional) e.g. `v0.7.5`
+**Target Release:** (optional) e.g. `v0.7.6`
 
 ---
 

README.md

@@ -4,8 +4,8 @@
 [![Release](https://img.shields.io/github/v/release/bsayli/spring-boot-openapi-generics-clients?logo=github\&label=release)](https://github.com/bsayli/spring-boot-openapi-generics-clients/releases/latest)
 [![codecov](https://codecov.io/gh/bsayli/spring-boot-openapi-generics-clients/branch/main/graph/badge.svg)](https://codecov.io/gh/bsayli/spring-boot-openapi-generics-clients)
 [![Java](https://img.shields.io/badge/Java-21-red?logo=openjdk)](https://openjdk.org/projects/jdk/21/)
-[![Spring Boot](https://img.shields.io/badge/Spring%20Boot-3.5.10-green?logo=springboot)](https://spring.io/projects/spring-boot)
-[![OpenAPI Generator](https://img.shields.io/badge/OpenAPI%20Generator-7.19.0-blue?logo=openapiinitiative)](https://openapi-generator.tech/)
+[![Spring Boot](https://img.shields.io/badge/Spring%20Boot-3.5.11-green?logo=springboot)](https://spring.io/projects/spring-boot)
+[![OpenAPI Generator](https://img.shields.io/badge/OpenAPI%20Generator-7.20.0-blue?logo=openapiinitiative)](https://openapi-generator.tech/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 
 <p align="center">
@@ -284,7 +284,7 @@ generator-safe evolution.
 | --------------------------- |----------------------------------------------------------------------------------------------------------------------------|
 | **API Producer (Server)**   | Spring Boot service publishing an **OpenAPI 3.1** spec via Springdoc, backed by the shared `api-contract`                  |
 | **OpenAPI Schema Enricher** | `OpenApiCustomizer` detecting `ServiceResponse<T>` and emitting vendor extensions (`x-api-wrapper`, `x-data-container`, …) |
-| **Code Generation**         | OpenAPI Generator **7.19.0** (`java / restclient`) with Mustache overlays bound to the canonical contract                  |
+| **Code Generation**         | OpenAPI Generator **7.20.0** (`java / restclient`) with Mustache overlays bound to the canonical contract                  |
 | **Generated Client**        | Thin wrapper models, domain DTOs, APIs, `RestClient`, and `ApiClient` (invoker layer)                                      |
 | **Error Handling**          | RFC 9457 **Problem Details** decoded into `ApiProblemException` with extension support                                     |
 | **API Consumer**            | Application/service layer using adapter interfaces and receiving fully type-safe responses                                 |

api-contract/README.md

@@ -225,7 +225,7 @@ Add to both server and client modules:
 <dependency>
   <groupId>io.github.bsayli</groupId>
   <artifactId>api-contract</artifactId>
-  <version>0.7.5</version>
+  <version>0.7.6</version>
 </dependency>
 ```
 

api-contract/pom.xml

@@ -6,7 +6,7 @@
 
     <groupId>io.github.bsayli</groupId>
     <artifactId>api-contract</artifactId>
-    <version>0.7.5</version>
+    <version>0.7.6</version>
 
     <name>api-contract</name>
     <description>Shared API contract for the unified {data, meta} response model and pagination primitives.</description>
@@ -47,7 +47,7 @@
         <maven.compiler.source>21</maven.compiler.source>
         <maven.compiler.target>21</maven.compiler.target>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-        <jackson-annotations.version>2.19.4</jackson-annotations.version>
+        <jackson-annotations.version>2.21</jackson-annotations.version>
     </properties>
 
     <dependencies>

customer-service-client/README.md

@@ -1,8 +1,8 @@
 # customer-service-client
 
 [![Java 21](https://img.shields.io/badge/Java-21-red?logo=openjdk)](https://openjdk.org/projects/jdk/21/)
-[![Spring Boot](https://img.shields.io/badge/Spring%20Boot-3.5.10-green?logo=springboot)](https://spring.io/projects/spring-boot)
-[![OpenAPI Generator](https://img.shields.io/badge/OpenAPI%20Generator-7.19.0-blue?logo=openapiinitiative)](https://openapi-generator.tech/)
+[![Spring Boot](https://img.shields.io/badge/Spring%20Boot-3.5.11-green?logo=springboot)](https://spring.io/projects/spring-boot)
+[![OpenAPI Generator](https://img.shields.io/badge/OpenAPI%20Generator-7.20.0-blue?logo=openapiinitiative)](https://openapi-generator.tech/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](../LICENSE)
 
 ---
@@ -99,7 +99,7 @@ mvn -q clean install
 
 ## ✅ What You Get
 
-* **OpenAPI Generator 7.19.0** + **Spring `RestClient`**-based Java client.
+* **OpenAPI Generator 7.20.0** + **Spring `RestClient`**-based Java client.
 * Canonical response envelope: **`ServiceResponse<T>`** (from `api-contract`).
 * **Page-only nested generics** support: `ServiceResponse<Page<CustomerDto>>`.
 * **RFC 9457 Problem decoding** surfaced as `ApiProblemException`.

customer-service-client/pom.xml

@@ -6,7 +6,7 @@
 
     <groupId>io.github.bsayli</groupId>
     <artifactId>customer-service-client</artifactId>
-    <version>0.7.5</version>
+    <version>0.7.6</version>
     <name>customer-service-client</name>
     <description>Generated client (RestClient) using generics-aware OpenAPI templates</description>
     <packaging>jar</packaging>
@@ -40,9 +40,8 @@
         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
         <java.version>21</java.version>
 
-        <spring-boot.version>3.5.10</spring-boot.version>
-        <openapi.generator.version>7.19.0</openapi.generator.version>
-        <assertj.version>3.27.7</assertj.version>
+        <spring-boot.version>3.5.11</spring-boot.version>
+        <openapi.generator.version>7.20.0</openapi.generator.version>
 
         <jakarta.validation.version>3.1.1</jakarta.validation.version>
         <jakarta.annotation-api.version>3.0.0</jakarta.annotation-api.version>
@@ -60,8 +59,11 @@
 
         <openapi.templates.upstream>${project.build.directory}/upstream-templates</openapi.templates.upstream>
         <openapi.templates.effective>${project.build.directory}/effective-templates</openapi.templates.effective>
-        <api-contract.version>0.7.5</api-contract.version>
+        <api-contract.version>0.7.6</api-contract.version>
+        <slf4j-api.version>2.0.17</slf4j-api.version>
+        <logback.version>1.5.32</logback.version>
         <argLine/>
+        <jackson.version>2.21.1</jackson.version>
     </properties>
 
     <dependencies>
@@ -114,20 +116,39 @@
         </dependency>
 
         <dependency>
-            <groupId>org.assertj</groupId>
-            <artifactId>assertj-core</artifactId>
-            <version>${assertj.version}</version>
+            <groupId>com.squareup.okhttp3</groupId>
+            <artifactId>mockwebserver</artifactId>
+            <version>${mockwebserver.version}</version>
             <scope>test</scope>
         </dependency>
 
         <dependency>
-            <groupId>com.squareup.okhttp3</groupId>
-            <artifactId>mockwebserver</artifactId>
-            <version>${mockwebserver.version}</version>
+            <groupId>org.slf4j</groupId>
+            <artifactId>slf4j-api</artifactId>
+            <version>${slf4j-api.version}</version>
+        </dependency>
+
+        <dependency>
+            <groupId>ch.qos.logback</groupId>
+            <artifactId>logback-classic</artifactId>
+            <version>${logback.version}</version>
             <scope>test</scope>
         </dependency>
+
     </dependencies>
 
+    <dependencyManagement>
+        <dependencies>
+            <dependency>
+                <groupId>com.fasterxml.jackson</groupId>
+                <artifactId>jackson-bom</artifactId>
+                <version>${jackson.version}</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
+        </dependencies>
+    </dependencyManagement>
+
     <build>
         <resources>
             <resource>

customer-service-client/src/main/java/io/github/bsayli/openapi/client/adapter/support/ProblemDetailFallbacks.java

@@ -2,7 +2,7 @@
 
 import io.github.bsayli.openapi.client.generated.dto.ErrorItem;
 import io.github.bsayli.openapi.client.generated.dto.ProblemDetail;
-import io.github.bsayli.openapi.client.generated.dto.ProblemDetailExtensions;
+import io.github.bsayli.openapi.client.generated.dto.ProblemExtensions;
 import java.net.URI;
 import org.springframework.http.HttpStatusCode;
 import org.springframework.http.MediaType;
@@ -117,7 +117,7 @@ private static void addContextErrors(
       MediaType contentType,
       Throwable cause) {
 
-    ProblemDetailExtensions ext = new ProblemDetailExtensions();
+    ProblemExtensions ext = new ProblemExtensions();
 
     String ct = contentType != null ? contentType.toString() : "";
     if (!ct.isBlank()) {

customer-service-client/src/main/java/io/github/bsayli/openapi/client/common/problem/ApiProblemException.java

@@ -2,7 +2,7 @@
 
 import io.github.bsayli.openapi.client.generated.dto.ErrorItem;
 import io.github.bsayli.openapi.client.generated.dto.ProblemDetail;
-import io.github.bsayli.openapi.client.generated.dto.ProblemDetailExtensions;
+import io.github.bsayli.openapi.client.generated.dto.ProblemExtensions;
 import java.io.Serial;
 import java.io.Serializable;
 import java.util.List;
@@ -45,7 +45,7 @@ private static String resolveErrorCode(ProblemDetail pd) {
 
   private static List<ErrorItem> resolveErrors(ProblemDetail pd) {
     if (pd == null) return List.of();
-    ProblemDetailExtensions ext = pd.getExtensions();
+    ProblemExtensions ext = pd.getExtensions();
     if (ext == null) return List.of();
     List<ErrorItem> list = ext.getErrors();
     if (list == null || list.isEmpty()) return List.of();
@@ -70,7 +70,7 @@ private static String buildMessage(ProblemDetail pd, int status) {
   }
 
   private static int countErrors(ProblemDetail pd) {
-    ProblemDetailExtensions ext = pd.getExtensions();
+    ProblemExtensions ext = pd.getExtensions();
     if (ext == null) return 0;
     List<ErrorItem> errors = ext.getErrors();
     return (errors == null) ? 0 : errors.size();

customer-service-client/src/main/resources/customer-api-docs.yaml

@@ -2,7 +2,7 @@ openapi: 3.1.0
 info:
   title: Customer Service API
   description: Customer Service API with type-safe generic responses using OpenAPI
-  version: 0.7.5
+  version: 0.7.6
 servers:
   - url: http://localhost:8084/customer-service
     description: Local service URL
@@ -408,6 +408,16 @@ components:
       required:
         - code
         - message
+    ProblemExtensions:
+      type: object
+      additionalProperties: false
+      description: Additional problem metadata.
+      properties:
+        errors:
+          type: array
+          description: List of error items (field-level or domain-specific).
+          items:
+            $ref: "#/components/schemas/ErrorItem"
     ProblemDetail:
       type: object
       additionalProperties: false
@@ -434,15 +444,7 @@ components:
           type: string
           description: Application-specific error code.
         extensions:
-          type: object
-          additionalProperties: false
-          description: Additional problem metadata.
-          properties:
-            errors:
-              type: array
-              description: List of error items (field-level or domain-specific).
-              items:
-                $ref: "#/components/schemas/ErrorItem"
+          $ref: "#/components/schemas/ProblemExtensions"
     ServiceResponse:
       type: object
       properties: