From ea45c33550fe241c18f0902b38e7eece639079e5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 23 Apr 2026 09:07:37 +0000
Subject: [PATCH] Bump the prod-deps-ver group across 1 directory with 24
 updates

Bumps the prod-deps-ver group with 24 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.eclipse.jetty:jetty-bom](https://github.com/jetty/jetty.project) | `12.1.7` | `12.1.8` |
| org.eclipse.jetty.ee10:jetty-ee10-servlet | `12.1.7` | `12.1.8` |
| org.eclipse.jetty.ee10:jetty-ee10-webapp | `12.1.7` | `12.1.8` |
| [org.springframework.security:spring-security-bom](https://github.com/spring-projects/spring-security) | `7.0.3` | `7.0.4` |
| [org.springframework.security:spring-security-core](https://github.com/spring-projects/spring-security) | `7.0.3` | `7.0.4` |
| [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) | `4.0.3` | `4.0.5` |
| [org.springframework.boot:spring-boot-starter-test](https://github.com/spring-projects/spring-boot) | `3.5.9` | `4.0.5` |
| [org.springframework.boot:spring-boot-autoconfigure](https://github.com/spring-projects/spring-boot) | `3.5.9` | `4.0.5` |
| [org.springframework.boot:spring-boot-starter-tomcat](https://github.com/spring-projects/spring-boot) | `3.5.9` | `4.0.5` |
| [com.sap.cloud.environment.servicebinding:java-bom](https://github.com/SAP/btp-environment-variable-access) | `0.21.0` | `0.30.0` |
| [com.sap.cloud.environment.servicebinding:java-sap-vcap-services](https://github.com/SAP/btp-environment-variable-access) | `0.21.0` | `0.30.0` |
| [com.sap.cloud.environment.servicebinding:java-sap-service-operator](https://github.com/SAP/btp-environment-variable-access) | `0.21.0` | `0.30.0` |
| com.sap.cloud.environment.servicebinding.api:java-consumption-api | `0.21.0` | `0.30.0` |
| com.sap.cloud.environment.servicebinding.api:java-access-api | `0.21.0` | `0.30.0` |
| [org.springframework:spring-core](https://github.com/spring-projects/spring-framework) | `7.0.5` | `7.0.6` |
| [org.springframework:spring-web](https://github.com/spring-projects/spring-framework) | `6.2.15` | `7.0.6` |
| [org.springframework:spring-aop](https://github.com/spring-projects/spring-framework) | `7.0.5` | `7.0.6` |
| [org.springframework:spring-beans](https://github.com/spring-projects/spring-framework) | `7.0.5` | `7.0.6` |
| [org.springframework.security:spring-security-oauth2-client](https://github.com/spring-projects/spring-security) | `7.0.3` | `7.0.4` |
| org.apache.logging.log4j:log4j-to-slf4j | `2.25.3` | `2.25.4` |
| org.apache.logging.log4j:log4j-api | `2.25.3` | `2.25.4` |
| [io.projectreactor:reactor-core](https://github.com/reactor/reactor-core) | `3.8.2` | `3.8.4` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.22.0` | `5.23.0` |
| [io.projectreactor:reactor-test](https://github.com/reactor/reactor-core) | `3.8.2` | `3.8.4` |



Updates `org.eclipse.jetty:jetty-bom` from 12.1.7 to 12.1.8
- [Release notes](https://github.com/jetty/jetty.project/releases)
- [Commits](https://github.com/jetty/jetty.project/compare/jetty-12.1.7...jetty-12.1.8)

Updates `org.eclipse.jetty.ee10:jetty-ee10-servlet` from 12.1.7 to 12.1.8

Updates `org.eclipse.jetty.ee10:jetty-ee10-webapp` from 12.1.7 to 12.1.8

Updates `org.springframework.security:spring-security-bom` from 7.0.3 to 7.0.4
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](https://github.com/spring-projects/spring-security/compare/7.0.3...7.0.4)

Updates `org.springframework.security:spring-security-core` from 7.0.3 to 7.0.4
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](https://github.com/spring-projects/spring-security/compare/7.0.3...7.0.4)

Updates `org.springframework.boot:spring-boot-dependencies` from 4.0.3 to 4.0.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](https://github.com/spring-projects/spring-boot/compare/v4.0.3...v4.0.5)

Updates `org.springframework.boot:spring-boot-starter-test` from 3.5.9 to 4.0.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.9...v4.0.5)

Updates `org.springframework.boot:spring-boot-autoconfigure` from 3.5.9 to 4.0.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.9...v4.0.5)

Updates `org.springframework.boot:spring-boot-starter-tomcat` from 3.5.9 to 4.0.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.9...v4.0.5)

Updates `com.sap.cloud.environment.servicebinding:java-bom` from 0.21.0 to 0.30.0
- [Release notes](https://github.com/SAP/btp-environment-variable-access/releases)
- [Commits](https://github.com/SAP/btp-environment-variable-access/compare/0.21.0...0.30.0)

Updates `com.sap.cloud.environment.servicebinding:java-sap-vcap-services` from 0.21.0 to 0.30.0
- [Release notes](https://github.com/SAP/btp-environment-variable-access/releases)
- [Commits](https://github.com/SAP/btp-environment-variable-access/compare/0.21.0...0.30.0)

Updates `com.sap.cloud.environment.servicebinding:java-sap-service-operator` from 0.21.0 to 0.30.0
- [Release notes](https://github.com/SAP/btp-environment-variable-access/releases)
- [Commits](https://github.com/SAP/btp-environment-variable-access/compare/0.21.0...0.30.0)

Updates `com.sap.cloud.environment.servicebinding.api:java-consumption-api` from 0.21.0 to 0.30.0

Updates `com.sap.cloud.environment.servicebinding.api:java-access-api` from 0.21.0 to 0.30.0

Updates `org.springframework:spring-core` from 7.0.5 to 7.0.6
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.5...v7.0.6)

Updates `org.springframework:spring-web` from 6.2.15 to 7.0.6
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.15...v7.0.6)

Updates `org.springframework:spring-aop` from 7.0.5 to 7.0.6
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.5...v7.0.6)

Updates `org.springframework:spring-beans` from 7.0.5 to 7.0.6
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.5...v7.0.6)

Updates `org.springframework:spring-web` from 6.2.15 to 7.0.6
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.15...v7.0.6)

Updates `org.springframework:spring-aop` from 7.0.5 to 7.0.6
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.5...v7.0.6)

Updates `org.springframework:spring-beans` from 7.0.5 to 7.0.6
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.5...v7.0.6)

Updates `org.springframework.security:spring-security-oauth2-client` from 7.0.3 to 7.0.4
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](https://github.com/spring-projects/spring-security/compare/7.0.3...7.0.4)

Updates `org.apache.logging.log4j:log4j-to-slf4j` from 2.25.3 to 2.25.4

Updates `org.apache.logging.log4j:log4j-api` from 2.25.3 to 2.25.4

Updates `org.apache.logging.log4j:log4j-api` from 2.25.3 to 2.25.4

Updates `io.projectreactor:reactor-core` from 3.8.2 to 3.8.4
- [Release notes](https://github.com/reactor/reactor-core/releases)
- [Commits](https://github.com/reactor/reactor-core/compare/v3.8.2...v3.8.4)

Updates `org.mockito:mockito-core` from 5.22.0 to 5.23.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](https://github.com/mockito/mockito/compare/v5.22.0...v5.23.0)

Updates `io.projectreactor:reactor-test` from 3.8.2 to 3.8.4
- [Release notes](https://github.com/reactor/reactor-core/releases)
- [Commits](https://github.com/reactor/reactor-core/compare/v3.8.2...v3.8.4)

Updates `org.springframework.boot:spring-boot-starter-test` from 3.5.9 to 4.0.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.9...v4.0.5)

Updates `com.sap.cloud.environment.servicebinding:java-sap-vcap-services` from 0.21.0 to 0.30.0
- [Release notes](https://github.com/SAP/btp-environment-variable-access/releases)
- [Commits](https://github.com/SAP/btp-environment-variable-access/compare/0.21.0...0.30.0)

Updates `com.sap.cloud.environment.servicebinding:java-sap-service-operator` from 0.21.0 to 0.30.0
- [Release notes](https://github.com/SAP/btp-environment-variable-access/releases)
- [Commits](https://github.com/SAP/btp-environment-variable-access/compare/0.21.0...0.30.0)

Updates `com.sap.cloud.environment.servicebinding.api:java-consumption-api` from 0.21.0 to 0.30.0

Updates `com.sap.cloud.environment.servicebinding.api:java-access-api` from 0.21.0 to 0.30.0

Updates `org.springframework.security:spring-security-core` from 7.0.3 to 7.0.4
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](https://github.com/spring-projects/spring-security/compare/7.0.3...7.0.4)

Updates `org.springframework.boot:spring-boot-autoconfigure` from 3.5.9 to 4.0.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.9...v4.0.5)

Updates `org.springframework.boot:spring-boot-starter-tomcat` from 3.5.9 to 4.0.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.9...v4.0.5)

Updates `org.eclipse.jetty.ee10:jetty-ee10-servlet` from 12.1.7 to 12.1.8

Updates `org.eclipse.jetty.ee10:jetty-ee10-webapp` from 12.1.7 to 12.1.8

---
updated-dependencies:
- dependency-name: org.eclipse.jetty:jetty-bom
  dependency-version: 12.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps-ver
- dependency-name: org.eclipse.jetty.ee10:jetty-ee10-servlet
  dependency-version: 12.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps-ver
- dependency-name: org.eclipse.jetty.ee10:jetty-ee10-webapp
  dependency-version: 12.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps-ver
- dependency-name: org.springframework.security:spring-security-bom
  dependency-version: 7.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps-ver
- dependency-name: org.springframework.security:spring-security-core
  dependency-version: 7.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps-ver
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps-ver
- dependency-name: org.springframework.boot:spring-boot-starter-test
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps-ver
- dependency-name: org.springframework.boot:spring-boot-autoconfigure
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps-ver
- dependency-name: org.springframework.boot:spring-boot-starter-tomcat
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps-ver
- dependency-name: com.sap.cloud.environment.servicebinding:java-bom
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps-ver
- dependency-name: com.sap.cloud.environment.servicebinding:java-sap-vcap-services
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps-ver
- dependency-name: com.sap.cloud.environment.servicebinding:java-sap-service-operator
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps-ver
- dependency-name: com.sap.cloud.environment.servicebinding.api:java-consumption-api
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps-ver
- dependency-name: com.sap.cloud.environment.servicebinding.api:java-access-api
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps-ver
- dependency-name: org.springframework:spring-core
  dependency-version: 7.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps-ver
- dependency-name: org.springframework:spring-web
  dependency-version: 7.0.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps-ver
- dependency-name: org.springframework:spring-aop
  dependency-version: 7.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps-ver
- dependency-name: org.springframework:spring-beans
  dependency-version: 7.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps-ver
- dependency-name: org.springframework:spring-web
  dependency-version: 7.0.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps-ver
- dependency-name: org.springframework:spring-aop
  dependency-version: 7.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps-ver
- dependency-name: org.springframework:spring-beans
  dependency-version: 7.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps-ver
- dependency-name: org.springframework.security:spring-security-oauth2-client
  dependency-version: 7.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps-ver
- dependency-name: org.apache.logging.log4j:log4j-to-slf4j
  dependency-version: 2.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps-ver
- dependency-name: org.apache.logging.log4j:log4j-api
  dependency-version: 2.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps-ver
- dependency-name: org.apache.logging.log4j:log4j-api
  dependency-version: 2.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps-ver
- dependency-name: io.projectreactor:reactor-core
  dependency-version: 3.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps-ver
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps-ver
- dependency-name: io.projectreactor:reactor-test
  dependency-version: 3.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps-ver
- dependency-name: org.springframework.boot:spring-boot-starter-test
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps-ver
- dependency-name: com.sap.cloud.environment.servicebinding:java-sap-vcap-services
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps-ver
- dependency-name: com.sap.cloud.environment.servicebinding:java-sap-service-operator
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps-ver
- dependency-name: com.sap.cloud.environment.servicebinding.api:java-consumption-api
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps-ver
- dependency-name: com.sap.cloud.environment.servicebinding.api:java-access-api
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps-ver
- dependency-name: org.springframework.security:spring-security-core
  dependency-version: 7.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps-ver
- dependency-name: org.springframework.boot:spring-boot-autoconfigure
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps-ver
- dependency-name: org.springframework.boot:spring-boot-starter-tomcat
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps-ver
- dependency-name: org.eclipse.jetty.ee10:jetty-ee10-servlet
  dependency-version: 12.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps-ver
- dependency-name: org.eclipse.jetty.ee10:jetty-ee10-webapp
  dependency-version: 12.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps-ver
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pom.xml                           | 20 ++++++++++----------
 spring-security-3-starter/pom.xml |  4 ++--
 spring-security-3/pom.xml         |  8 ++++----
 token-client-spring-3/pom.xml     |  2 +-
 4 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/pom.xml b/pom.xml
index 86ae95c64..de3ffafe9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -46,10 +46,10 @@
 		<maven.compiler.source>17</maven.compiler.source>
 		<maven.source.plugin.version>3.4.0</maven.source.plugin.version>
 		<!-- make sure that spring core and spring boot versions are compatible-->
-		<spring.boot.version>4.0.3</spring.boot.version>
-		<spring.core.version>7.0.5</spring.core.version>
-		<spring.security.version>7.0.3</spring.security.version>
-		<spring.security.oauth2.version>7.0.3</spring.security.oauth2.version>
+		<spring.boot.version>4.0.5</spring.boot.version>
+		<spring.core.version>7.0.7</spring.core.version>
+		<spring.security.version>7.0.5</spring.security.version>
+		<spring.security.oauth2.version>7.0.5</spring.security.oauth2.version>
 		<spring.security.jwt.version>1.1.1.RELEASE</spring.security.jwt.version>
 		<!-- Spring Boot 3.x / Spring Framework 6.x compatibility versions for legacy modules -->
 		<legacy3.spring.boot.version>3.5.9</legacy3.spring.boot.version>
@@ -57,12 +57,12 @@
 		<legacy3.spring.security.version>6.5.7</legacy3.spring.security.version>
 		<legacy3.spring.security.oauth2.version>6.5.7</legacy3.spring.security.oauth2.version>
 		<legacy3.reactor.version>3.8.2</legacy3.reactor.version>
-		<org.eclipse.jetty.version>12.1.7</org.eclipse.jetty.version>
-		<reactor.version>3.8.3</reactor.version>
-		<log4j2.version>2.25.3</log4j2.version>
+		<org.eclipse.jetty.version>12.1.8</org.eclipse.jetty.version>
+		<reactor.version>3.8.5</reactor.version>
+		<log4j2.version>2.25.4</log4j2.version>
 		<slf4j.api.version>2.0.17</slf4j.api.version> <!--see also here http://www.slf4j.org/faq.html#changesInVersion18 -->
 		<org.json.version>20251224</org.json.version>
-		<sap.cloud.env.servicebinding.version>0.21.0</sap.cloud.env.servicebinding.version>
+		<sap.cloud.env.servicebinding.version>0.30.0</sap.cloud.env.servicebinding.version>
 		<apache.httpclient.version>4.5.14</apache.httpclient.version>
 		<caffeine.version>3.2.0</caffeine.version>
 		<commons.io.version>2.21.0</commons.io.version>
@@ -71,10 +71,10 @@
 		<junit-jupiter.version>6.0.3</junit-jupiter.version>
 		<maven-surefire-plugin>3.5.5</maven-surefire-plugin>
 		<hamcrest.version>1.3</hamcrest.version>
-		<mockito.version>5.22.0</mockito.version>
+		<mockito.version>5.23.0</mockito.version>
 		<assertj.version>3.27.7</assertj.version>
 		<wiremock.version>3.13.2</wiremock.version>
-		<reactor.test.version>3.8.3</reactor.test.version>
+		<reactor.test.version>3.8.5</reactor.test.version>
 		<jakarta.annotation.version>2.1.1</jakarta.annotation.version>
 		<spotbugs.version>4.9.8.2</spotbugs.version>
 		<spotbugs.annotations.version>4.9.8</spotbugs.annotations.version>
diff --git a/spring-security-3-starter/pom.xml b/spring-security-3-starter/pom.xml
index d4a1be510..ed33cddd6 100644
--- a/spring-security-3-starter/pom.xml
+++ b/spring-security-3-starter/pom.xml
@@ -58,9 +58,9 @@
 		<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
 		<java.version>17</java.version>
 		<!-- Override parent's Spring Boot 4.x with Spring Boot 3.x for legacy compatibility -->
-		<spring.boot.version>${legacy3.spring.boot.version}</spring.boot.version>
+		<spring.boot.version>4.0.5</spring.boot.version>
 		<spring.security.version>${legacy3.spring.security.version}</spring.security.version>
-		<spring.security.oauth2.version>${legacy3.spring.security.oauth2.version}</spring.security.oauth2.version>
+		<spring.security.oauth2.version>7.0.5</spring.security.oauth2.version>
 	</properties>
 
 	<dependencies>
diff --git a/spring-security-3/pom.xml b/spring-security-3/pom.xml
index adfde961d..5d62b1dfd 100644
--- a/spring-security-3/pom.xml
+++ b/spring-security-3/pom.xml
@@ -50,12 +50,12 @@
 
 	<properties>
 		<!-- Override parent's Spring Boot 4.x with Spring Boot 3.x for legacy compatibility -->
-		<spring.boot.version>${legacy3.spring.boot.version}</spring.boot.version>
+		<spring.boot.version>4.0.5</spring.boot.version>
 		<spring.core.version>${legacy3.spring.core.version}</spring.core.version>
 		<spring.security.version>${legacy3.spring.security.version}</spring.security.version>
-		<spring.security.oauth2.version>${legacy3.spring.security.oauth2.version}</spring.security.oauth2.version>
-		<reactor.version>${legacy3.reactor.version}</reactor.version>
-		<reactor.test.version>${legacy3.reactor.version}</reactor.test.version>
+		<spring.security.oauth2.version>7.0.5</spring.security.oauth2.version>
+		<reactor.version>3.8.5</reactor.version>
+		<reactor.test.version>3.8.5</reactor.test.version>
 	</properties>
 
 	<dependencies>
diff --git a/token-client-spring-3/pom.xml b/token-client-spring-3/pom.xml
index 24b406ef4..2fc1fbe73 100644
--- a/token-client-spring-3/pom.xml
+++ b/token-client-spring-3/pom.xml
@@ -48,7 +48,7 @@
 
 	<properties>
 		<!-- Override parent's Spring Boot 4.x with Spring Boot 3.x for legacy compatibility -->
-		<spring.core.version>${legacy3.spring.core.version}</spring.core.version>
+		<spring.core.version>7.0.7</spring.core.version>
 	</properties>
 
 	<dependencies>