Update Spring Boot to 2.1.x

[php-coder]

Update procedure:

• Use newer versions (also update the comments)
• Compare dependencies (./mvnw dependency:tree and jar tvf target/mystamps.war | grep '\.jar$' | awk '{print $8}' | cut -d/ -f3 | sort)
• Compare WAR sizes (./mvnw package -DskipUnitTests=true && ls -lh target/mystamps.war)
  2.0.x: 31M
  2.1.x: 31M
• Compare a number of JARs
  2.0.x: 84
  2.1.x: 84
• Compare time for application run (average for 3 times)
  2.0.x: Started ApplicationBootstrap in 6 seconds (JVM running for 20.79)
  2.1.x: Started ApplicationBootstrap in 5.86 seconds (JVM running for 20.98)
• Compare time for running ./mvnw verify -DskipUnitTests=true (average for 3 times)
  2.0.x: 02:13 min
  2.1.x: 02:21 min (Run suite 'Robotframework' with 200 tests in 1 minute 52 seconds)
• Compare a number of threads
  2.0.x: Live threads: 36 Daemon threads: 17
  2.1.x: Live threads: 37 Daemon threads: 17

Spring Boot

• https://spring.io/blog/2018/07/30/spring-boot-2-1-m1
• https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.1.0-M1-Release-Notes
• https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.1.0-M1-Configuration-Changelog
• https://spring.io/blog/2018/08/21/spring-boot-2-1-m2-available-now
• https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.1.0-M2-Release-Notes
• https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.1.0-M2-Configuration-Changelog
• https://spring.io/blog/2018/09/13/spring-boot-2-1-m3-available-now
• https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.1.0-M3-Release-Notes
• https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.1.0-M3-Configuration-Changelog
• https://spring.io/blog/2018/09/25/spring-boot-2-1-m4-available-now
• https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.1.0-M4-Release-Notes
• https://spring.io/blog/2018/10/17/spring-boot-2-1-0-rc1-available-now
• https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.1.0-RC1-Release-Notes
• https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.1.0-RC1-Configuration-Changelog
• https://spring.io/blog/2018/10/30/spring-boot-2-1-0
• https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.1-Release-Notes
• https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.1.0-Configuration-Changelog
• https://spring.io/blog/2018/11/30/spring-boot-2-1-1-available-now
• https://spring.io/blog/2019/01/12/spring-boot-2-1-2-released
• https://spring.io/blog/2019/02/15/spring-boot-2-1-3-available-now
• https://spring.io/blog/2019/04/04/spring-boot-2-1-4-released
• https://spring.io/blog/2019/05/15/spring-boot-2-1-5-released
• https://spring.io/blog/2019/06/19/spring-boot-2-1-6-released
• https://spring.io/blog/2019/08/06/spring-boot-2-1-7-available-now
• https://spring.io/blog/2019/09/06/spring-boot-2-1-8-available-now
• https://spring.io/blog/2019/10/02/spring-boot-2-1-9-available-now
• https://spring.io/blog/2019/11/06/spring-boot-2-1-10-available-now
• https://spring.io/blog/2019/12/06/spring-boot-2-1-11-is-now-available
• https://spring.io/blog/2020/01/16/spring-boot-2-1-12-released
• https://spring.io/blog/2020/02/27/spring-boot-2-1-13-released
• https://spring.io/blog/2020/05/07/spring-boot-2-1-14-available-now
• https://spring.io/blog/2020/06/11/spring-boot-2-1-15-available-now
• https://spring.io/blog/2020/07/24/spring-boot-2-1-16-available-now
• https://spring.io/blog/2020/09/17/spring-boot-2-1-17-available-now
• https://spring.io/blog/2020/10/29/spring-boot-2-1-18-available-now
• https://www.baeldung.com/spring-boot-log-groups
• https://rieckpil.de/review-whats-new-in-spring-boot-2-1/

Spring Framework

• https://spring.io/blog/2018/07/26/spring-framework-5-1-goes-rc1
• https://spring.io/blog/2018/08/17/spring-framework-5-1-rc2-available-now
• https://spring.io/blog/2018/09/07/spring-framework-5-1-rc3-5-0-9-and-4-3-19-available-now
• https://spring.io/blog/2018/09/21/spring-framework-5-1-goes-ga
• https://github.com/spring-projects/spring-framework/wiki/What's-New-in-Spring-Framework-5.x#whats-new-in-version-51
• https://github.com/spring-projects/spring-framework/wiki/Upgrading-to-Spring-Framework-5.x#upgrading-to-version-51
• https://spring.io/blog/2018/10/15/spring-framework-5-1-1-5-0-10-and-4-3-20-available-now
• https://spring.io/blog/2018/10/29/spring-framework-5-1-2-available-now
• https://spring.io/blog/2018/11/27/spring-framework-5-1-3-5-0-11-and-4-3-21-available-now
• https://spring.io/blog/2019/01/09/spring-framework-5-1-4-5-0-12-and-4-3-22-available-now
• https://spring.io/blog/2019/02/13/spring-framework-5-1-5-available-now
• https://spring.io/blog/2019/04/01/spring-framework-5-1-6-5-0-13-and-4-3-23-available-now
• https://spring.io/blog/2019/05/10/spring-framework-5-2-0-m2-5-1-7-5-0-14-and-4-3-24-available-now
• https://spring.io/blog/2019/06/13/spring-framework-5-2-0-m3-and-5-1-8-available-now
• https://spring.io/blog/2019/08/02/spring-framework-5-1-9-5-0-15-and-4-3-25-available-now
• https://spring.io/blog/2019/09/28/spring-framework-5-1-10-available-now
• https://spring.io/blog/2019/11/04/spring-framework-5-2-1-and-5-1-11-available-now
• https://spring.io/blog/2019/12/03/spring-framework-5-2-2-and-5-1-12-available-now
• https://spring.io/blog/2020/01/16/spring-framework-5-2-3-5-1-13-5-0-16-and-4-3-26-releases
  • https://tanzu.vmware.com/security/cve-2020-5398
• https://spring.io/blog/2020/02/25/spring-framework-5-2-4-and-5-1-14-available-now
• https://spring.io/blog/2020/04/28/spring-framework-5-2-6-5-1-15-5-0-17-and-4-3-27-available-now
• https://spring.io/blog/2020/06/09/spring-framework-5-2-7-and-5-1-16-available-now
• https://spring.io/blog/2020/07/21/spring-framework-5-2-8-5-1-17-5-0-18-and-4-3-28-available-now
• https://spring.io/blog/2020/09/15/spring-framework-5-2-9-5-1-18-5-0-19-and-4-3-29-available-now
  • https://tanzu.vmware.com/security/cve-2020-5421
• https://spring.io/blog/2020/10/27/spring-framework-5-2-10-and-5-1-19-available-now
• https://spring.io/blog/2020/12/09/spring-framework-5-3-2-5-2-12-5-1-20-5-0-20-and-4-3-30-available-now

Spring Security

• https://spring.io/blog/2018/05/15/spring-security-5-1-0-m1-released
• https://spring.io/blog/2018/07/30/spring-security-5-1-0-m2-released
• https://spring.io/blog/2018/08/21/spring-security-5-1-0-rc1-released
• https://spring.io/blog/2018/09/10/spring-security-5-1-0-rc2-released
• https://spring.io/blog/2018/09/27/spring-security-5-1-goes-ga
• https://docs.spring.io/spring-security/site/docs/5.1.x/reference/htmlsingle/#new
• https://spring.io/blog/2018/10/16/spring-security-5-1-1-5-0-9-and-4-2-9-released
• https://spring.io/blog/2018/11/29/spring-security-5-1-2-5-0-10-4-2-10-released
• https://spring.io/blog/2019/01/11/spring-security-5-1-3-5-0-11-4-2-11-released
• https://spring.io/blog/2019/02/14/spring-security-5-1-4-released
• https://spring.io/blog/2019/04/03/spring-security-5-1-5-5-0-12-4-2-12-released
  • https://spring.io/blog/2019/04/05/cve-2019-3795-spring-security-4-2-12-5-0-12-5-1-5-released
  • https://pivotal.io/security/cve-2019-3795
• https://spring.io/blog/2019/08/05/spring-security-5-1-6-and-5-0-13-released
• https://spring.io/blog/2019/11/04/spring-security-5-2-1-and-5-1-7-released
• https://spring.io/blog/2020/02/05/spring-security-5-2-2-5-1-8-and-5-0-14-released
• https://spring.io/blog/2020/04/02/spring-security-5-3-1-5-2-3-5-1-9-5-0-15-4-2-15-released
• https://spring.io/blog/2020/05/07/spring-security-5-3-2-5-2-4-5-1-10-5-0-16-4-2-16-released
  • https://spring.io/blog/2020/05/13/cve-reports-published-for-spring-security
  • https://tanzu.vmware.com/security/cve-2020-5407
  • https://tanzu.vmware.com/security/cve-2020-5408
• https://spring.io/blog/2020/06/03/spring-security-5-3-3-5-2-5-5-1-11-5-0-17-4-2-17-released
• https://spring.io/blog/2020/08/12/spring-security-5-3-4-5-2-6-5-1-12-5-0-18-4-2-18-released
• https://spring.io/blog/2020/10/08/spring-security-5-4-1-5-3-5-5-2-7-5-1-13-5-0-19-4-2-19-released

Other:

• Explicitly update Spring Framework to 5.1.20 (use the spring-framework.version property)
• Do we need to update anything for Auto-configuration for task execution (@EnableAsync) and task scheduling (@EnableScheduling)?
• you now don't have to do any custom setup for your Maven plugins to make use of JUnit 5 -- test it (resolution: I'll test it later, during junit5 migration)
• Dependency management and auto-configuration for Thymeleaf’s Spring Security Extras module has switched from thymeleaf-extras-springsecurity4 to thymeleaf-extras-springsecurity5
• add a TODO comment for implementing Feature-Policy
• Update a list of the excluded autoconfigurations
• add (commented out) examples for enabling debug (logging.level.web: DEBUG, logging.level.sql: DEBUG, spring.http.log-request-details: true)
• JdbcCategoryDaoTest: disable info message

[php-coder]

"maintenance for Spring Boot 2.1 will end on November 1st 2020" (c) https://spring.io/blog/2019/12/10/spring-boot-2-1-x-eol-november-1st-2020