Build(deps): bump org.springframework.boot:spring-boot-starter-parent from 4.2.0-M1 to 4.2.0-M2 - #3822

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.2.0-M2

⭐ New Features

• Deprecate AppOptics as it has retired #51810
• Improve classpath entry lookup performance during jar creation and extraction #51787
• Add spring.kafka.listener.await-async-results-on-stop property #51774
• Rationalize Kafka configuration outside of KafkaProperties #51769
• Make the active Observation LongTaskTimer on the auto-configured DefaultMeterObservationHandler opt-in #51762
• Configure allowed HTTP methods in GraphQL transports #51732
• Allow to use Mongo JobRepository with any PlatformTransactionManager #51725
• Resolve property placeholders in constructor binding default values #51661
• Add auto-configured BaggageTaggingSpanProcessor for OpenTelemetry tag fields #51656
• Improve the performance of layer index creation #51654
• Speed up layer lookups when extracting a layered jar #51653
• Move Tomcat's servlet-specific properties beneath server.tomcat.servlet #51603
• Align handling of null and empty values in SPRING_APPLICATION_JSON with YAML processing #51583
• Remove Dependency Management for Janino #51567
• Add jarmode tools command to print / export the SBOM #51505
• Pick up all @TypeExcludeFilters annotations on test classes #51489
• Make it easier to map MessageSourceProperties onto a user-provided AbstractResourceBasedMessageSource #51484
• Support multi-segment additional health endpoint paths #51470
• Honor spring.ldap.* properties in the Embedded LDAP server #51465
• Add a configuration property for configuring embedded LDAP operation types that require authentication #51461
• Add TWENTY_SEVEN to JavaVersion enum #51427
• Automatically filter additional configuration metadata from Spring Boot-built archives #51386
• Add SSL bundle support to LDAP auto-configuration #51382
• Align the default for server.tomcat.use-relative-redirects with Tomcat's default #51173
• Allow configuring Micrometer Tracing MDC keys #50595
• Add common OTLP configuration for endpoint, compression and headers #50461
• Retain probe defaults when configuring other properties on probe health groups #50296
• Include security error body in WebFlux Cloud Foundry endpoint responses #50256
• Provide a configuration property to switch from Micrometer to OpenTelemetry semantic conventions #49241
• Support listener and template specific Kafka Admin properties #38830

🐞 Bug Fixes

• spring.http.clients.cookie-handling has no effect when using a reactive client backed by an HttpComponents connector #51767
• NullPointerException can be thrown when using uber jars due to a race condition in NestedJarFileResources #51746
• Connection fails when rabbitmq Docker Compose service is configured to use SSL #51668
• SBOM-related manifest attributes are missing from Maven-packaged wars #51652
• When server.reactive.session.cookie.same-site is not set, session cookies have no SameSite attribute #51640
• OAuth2 resource server ignores authorities-claim-delimiter when set on its own #51631
• developmentOnly and testAndDevelopmentOnly configurations do not specify any attributes causing potential resolution problems #51624
• In a reactive web application, Cloud Foundry security integration returns a 500 rather than a 503 when the cloud controller URL is unavailable #51615
• ReactiveOAuth2ResourceServerWebSecurityAutoConfiguration annotated with wrong condition #51588
• WritableJson.toByteArray() may corrupt supplementary characters #51586
• Layer temp file is not deleted when layer creation fails #51582
• Docker Compose integration for RabbitMQ skips credential fallbacks when an environment variable has no value #51579
• Some assertion messages name the wrong parameter #51575
• OAuth2ResourceServerProperties.Jwt has a setter that does not match its getter #51566

... (truncated)

• 599ec55 Release 4.2.0-M2
• a52645d Upgrade to Spring Session 4.2.0-M1
• 7b2c9b4 Upgrade to Spring Security 7.2.0-M2
• 220b5bd Upgrade to Spring LDAP 4.2.0-M1
• 3e9d67e Upgrade to Spring HATEOAS 3.2.0-M2
• 042378e Upgrade to Spring Batch 6.1.0-M2
• 68c5367 Upgrade to Micrometer Tracing 1.8.0-M2
• 2e36ab0 Upgrade to Micrometer 1.18.0-M2
• ce60302 Upgrade to Spring Data Bom 2026.1.0-M2
• 3c637ed Upgrade to Spring GraphQL 2.1.0-M1
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)