LIBRARIES-1670 - update to springboot3 and java21/migration to junit5/mockito

.github/workflows/nightly.yml

@@ -15,14 +15,14 @@ jobs:
     steps:
       # Checkout the git repository
       - name: checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
           fetch-depth: 0
 
       # Get the current project version from pom.xml
       - name: get-project-version
         id: get_project_version
-        uses: avides/actions-project-version-check@v2
+        uses: avides/actions-project-version-check@224a5bc1566086f70c95eb6647fc8f7f821073fc # v2
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           file-to-check: pom.xml
@@ -43,14 +43,14 @@ jobs:
 
       # Setup java environment
       - name: setup-java
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5
         with:
           distribution: temurin
           java-version: ${{ steps.determine_java_version.outputs.detected_java_version }}
 
       # Setup/load GitHub Actions caching for external dependencies, in this case especially for Maven
       - name: caching
-        uses: actions/cache@v5
+        uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5
         with:
           path: ~/.m2/repository
           key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}

.github/workflows/release.yml

@@ -16,14 +16,14 @@ jobs:
     steps:
       # Checkout the git repository
       - name: checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
           fetch-depth: 0
 
       # Get the current project version from pom.xml
       - name: get-project-version
         id: get_project_version
-        uses: avides/actions-project-version-check@v2
+        uses: avides/actions-project-version-check@224a5bc1566086f70c95eb6647fc8f7f821073fc # v2
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           file-to-check: pom.xml
@@ -44,7 +44,7 @@ jobs:
 
       # Setup java environment
       - name: setup-java
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5
         with:
           distribution: temurin
           java-version: ${{ steps.determine_java_version.outputs.detected_java_version }}
@@ -54,7 +54,7 @@ jobs:
 
       # Setup GitHub Actions caching for external dependencies, in this case especially for Maven
       - name: caching
-        uses: actions/cache@v5
+        uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5
         with:
           path: ~/.m2/repository
           key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
@@ -71,13 +71,13 @@ jobs:
         env:
           OS_CENTRAL_USERNAME: ${{ secrets.OS_CENTRAL_USERNAME }}
           OS_CENTRAL_PASSWORD: ${{ secrets.OS_CENTRAL_PASSWORD }}
-          GPG_PASSPHRASE: ${{ secrets.OS_GPG_PASSPHRASE }}
+          MAVEN_GPG_PASSPHRASE: ${{ secrets.OS_GPG_PASSPHRASE }}
           PROJECT_VERSION: ${{ steps.get_project_version.outputs.version }}
         run: |
           if [[ "$PROJECT_VERSION" == *"SNAPSHOT"* || "$PROJECT_VERSION" == *"RC"* ]]; then
-            mvn -Dmaven.wagon.http.pool=false -Dgpg.executable=gpg -Dgpg.passphrase=${GPG_PASSPHRASE} clean deploy
+            mvn -Dmaven.wagon.http.pool=false -Dgpg.executable=gpg clean deploy
           else
-            mvn -Dmaven.wagon.http.pool=false -Dgpg.executable=gpg -Dgpg.passphrase=${GPG_PASSPHRASE} -DskipUTs -DskipITs clean deploy
+            mvn -Dmaven.wagon.http.pool=false -Dgpg.executable=gpg -DskipUTs -DskipITs clean deploy
           fi
 
       # Execute sonar analysis and publish results to the sonarcloud server
@@ -109,7 +109,7 @@ jobs:
 
       # Create and publish GitHub Release tag
       - name: github-release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2
         with:
           token: ${{ secrets.GPR_TOKEN }}
           tag_name: ${{ steps.get_project_version.outputs.version }}

.github/workflows/review.yml

@@ -19,22 +19,22 @@ jobs:
     steps:
       # Checkout the git repository
       - name: checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
           token: ${{ secrets.GPR_TOKEN }}
           ref: ${{ github.head_ref }}
           fetch-depth: 0
 
       # Update GitHub Action configuration if necessary
       - name: action-configuration-autoupdate
-        uses: avides/actions-action-configuration-autoupdate@v2
+        uses: avides/actions-action-configuration-autoupdate@b900b564c8a82b2f586e4cb541e3bb24c9c414c6 # v2
         with:
           token: ${{ secrets.GPR_TOKEN }}
           actions-configuration-files: os-java-library/nightly.yml,os-java-library/release.yml,os-java-library/review.yml
           source-repository: ${{ secrets.ACTIONS_CONFIG_AUTOUPDATE_REPO }}
 
       # Push updated GitHub Actions configuration if necessary
-      - uses: stefanzweifel/git-auto-commit-action@v7
+      - uses: stefanzweifel/git-auto-commit-action@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d # v7
         with:
           file_pattern: .github/workflows/*.yml
           commit_user_name: ${{ secrets.ACTIONS_CONFIG_AUTOUPDATE_USER }}
@@ -44,7 +44,7 @@ jobs:
 
       # Verify project version is updated
       - name: project-version-check
-        uses: avides/actions-project-version-check@v2
+        uses: avides/actions-project-version-check@224a5bc1566086f70c95eb6647fc8f7f821073fc # v2
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           file-to-check: pom.xml
@@ -65,22 +65,22 @@ jobs:
 
       # Setup java environment
       - name: setup-java
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5
         with:
           distribution: temurin
           java-version: ${{ steps.determine_java_version.outputs.detected_java_version }}
 
       # Check if reminder comment is already given
       - name: find-reminder-comment
-        uses: peter-evans/find-comment@v4
+        uses: peter-evans/find-comment@b30e6a3c0ed37e7c023ccd3f1db5c6c0b0c23aad # v4
         id: find_reminder_comment
         with:
           issue-number: ${{ github.event.number }}
           body-includes: "Documentation added or updated?"
 
       # Add reminder comment if not given
       - name: reminder-comment
-        uses: peter-evans/create-or-update-comment@v5
+        uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5
         id: create
         if: ${{ steps.find_reminder_comment.outputs.comment-id == 0 }}
         with:
@@ -102,7 +102,7 @@ jobs:
 
       # Setup/load GitHub Actions caching for external dependencies, in this case especially for Maven
       - name: caching
-        uses: actions/cache@v5
+        uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5
         with:
           path: ~/.m2/repository
           key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}

README.md

@@ -1,18 +1,17 @@
 # Spring-Rabbit
 
-[![Maven Central](https://maven-badges.herokuapp.com/maven-central/com.avides.spring/spring-rabbit/badge.svg)](https://maven-badges.herokuapp.com/maven-central/com.avides.spring/spring-rabbit)
-[![Build](https://github.com/avides/spring-rabbit/workflows/release/badge.svg)](https://github.com/avides/spring-rabbit/actions)
-[![Nightly build](https://github.com/avides/spring-rabbit/workflows/nightly/badge.svg)](https://github.com/avides/spring-rabbit/actions)
-[![Coverage report](https://sonarcloud.io/api/project_badges/measure?project=avides_spring-rabbit&metric=coverage)](https://sonarcloud.io/dashboard?id=avides_spring-rabbit)
-[![Quality Gate](https://sonarcloud.io/api/project_badges/measure?project=avides_spring-rabbit&metric=alert_status)](https://sonarcloud.io/dashboard?id=avides_spring-rabbit)
-[![Technical dept](https://sonarcloud.io/api/project_badges/measure?project=avides_spring-rabbit&metric=sqale_index)](https://sonarcloud.io/dashboard?id=avides_spring-rabbit)
+[![Maven Central](https://img.shields.io/maven-central/v/com.avides.spring/spring-rabbit.svg?label=maven-central)](https://search.maven.org/artifact/com.avides.spring/spring-rabbit)
+[![Release](https://github.com/avides/spring-rabbit/actions/workflows/release.yml/badge.svg)](https://github.com/avides/spring-rabbit/actions/workflows/release.yml)
+[![Nightly build](https://github.com/avides/spring-rabbit/actions/workflows/nightly.yml/badge.svg)](https://github.com/avides/spring-rabbit/actions/workflows/nightly.yml)
+[![Quality Gate](https://sonarcloud.io/api/project_badges/measure?project=avides_spring-rabbit&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=avides_spring-rabbit)
+[![Coverage](https://sonarcloud.io/api/project_badges/measure?project=avides_spring-rabbit&metric=coverage)](https://sonarcloud.io/summary/new_code?id=avides_spring-rabbit)
 
 ### Dependency
 ``` xml
 <dependency>
 	<groupId>com.avides.spring</groupId>
 	<artifactId>spring-rabbit</artifactId>
-	<version>3.0.0</version>
+	<version>4.0.0</version>
 </dependency>
 ```