chore(deps): Update spring

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.springframework.ai:spring-ai-bom	2.0.0 → 2.0.1
org.springframework.boot (source)	4.1.0 → 4.1.1
org.springframework.boot:spring-boot-dependencies (source)	4.1.0 → 4.1.1

---

Release Notes

spring-projects/spring-ai (org.springframework.ai:spring-ai-bom)

v2.0.1: Spring AI 2.0.1

Compare Source

For upgrading from 2.0.0 to 2.0.1, please refer to the upgrade notes here.

For the detailed reference documentation on 2.0.1, please refer here

⭐ New Features

• Harden Ollama integration tests against flakiness #​6776
• Retire deprecated Mistral AI chat models #​6772
• Document additional 2.0.1 breaking changes #​6771
• Support audio streaming in OpenAiAudioSpeechModel #​6733
• Add configurable tool call limits #​6726
• Enrich OpenAI transcription options and responses #​6697
• Update Couchbase vector store to use Spring Boot-managed client #​6583
• Remove explicit protobuf-java version properties #​6552
• Add ToolChoice support for Google GenAI chat model #​6531
• Remove fastjson2 dependency from spring-ai-azure-store #​6508
• Refactor Media builder to use typed data overloads #​6481
• Validate TokenTextSplitter builder arguments #​6452
• Support page ranges in PagePdfDocumentReader #​6445
• Revise DeepSeekApi #​6428
• GraalVM for mcp annotations doesn't work in Spring AI 2.0.0 #​6427
• Rename spring-ai-autoconfigure-model-chat-memory-redis #​6416
• Restore PDF media mapping in OpenAiChatModel #​6410
• Google Image generation support #​6408
• Remove unused field maxResults #​6344
• Confusing WARN log while AWS region resolving #​5108
• SpringAI does not follow the AWS SDK's default region resolution rules #​823

🐞 Bug Fixes

• Reserve Redis chat memory timestamps atomically #​6784
• Fix RedisChatMemoryRepository clear() #​6783
• Escape metadata values in Redis chat memory queries #​6765
• Validate resolved resource path #​6764
• Introduce maxSessions and sessionIdleTimeout #​6760
• Fix OpenAiAudioTranscriptionModel leaking the stream on cancellation #​6759
• Merge java-compile compilerArgs instead of overriding #​6756
• Default OpenAI tool-calling strict mode to false #​6755
• Use temporary directory for cache #​6754
• Handle malformed pdf in PdfDocumentReader #​6753
• Make tool resolution fallback configurable #​6751
• Use full length hash #​6746
• Correct ToolContext parameter detection #​6744
• Return a single Generation on ToolCallLimitExceededException #​6742
• Fix ToolCallingAdvisor streaming loop dropping doBeforeStream mutations #​6737
• Add instructions option to OpenAiAudioSpeechModel #​6731
• Apply MCP HTTP client request customizer beans #​6716
• Close OpenAI stream response on cancellation #​6656
• Validate text length to prevent StringIndexOutOfBoundsException for MarkdownCodeBlockCleaner #​6645
• Fix AnthropicChatOptions.timeout(Duration) being ignored outside model construction #​6605
• Close native resources in TransformersEmbeddingModel #​6572
• Fix OllamaChatModel prompt options not inheriting configured model #​6567
• Use Locale.ROOT for String uppercase/lowercase operations on wire/protocol values #​6566
• Handle null fields in Mistral AI moderation Categories and CategoryScores #​6565
• Fix Azure OpenAI authentication failure behind a TLS-inspecting proxy #​6553
• Fix OpenSearchVectorStore document deserialization #​6550
• Fix group precedence in MilvusFilterExpressionConverter #​6543
• Fix strict mode payload placement in OpenAiChatModel #​6540
• Align @McpTool exception handling with @Tool contract #​6534
• Fix MCP stdio connections without args #​6533
• Fix Milvus metadata integer values deserialized as Long instead of Double #​6517
• Fix OpenAI stream handling for empty tool_calls #​6504
• Fix shared mutable state in chat options builder clone() #​6498
• Fix tool-search reference extraction for parallel calls #​6497
• Fix incorrect assertions in CouchbaseSearchVectorStore.Builder #​6490
• Fix shared mutable state in AnthropicChatOptions.Builder.clone() #​6487
• Fix null parent for tool call observations in blocking mode #​6475
• Fix Milvus filters with custom metadata field #​6470
• Add tool-search advisor modules to BOM #​6464
• Use model-independent assertions for tool-call token usage #​6461
• Fix tool-search advisor auto-config ordering #​6458
• There is a bug in the openai streaming mode #​6441
• Validate PgVectorStore table schema after initialization #​6438
• Accumulate tool calling advisor usage #​6424
• Fix MarkdownCodeBlockCleaner discarding content of single-line fenced code blocks #​6423
• Merge streaming tool call deltas by index in OpenAiChatModel #​6381
• reasoningContent in metadata is always null when calling DeepSeek model via OpenAI API #​6375
• Fix genai thinking level validation #​6339
• Fix Microsoft Foundry URL path mode for proxy hosts #​6180
• Perform Optional unwrapping in OpenAiChatModel#buildGeneration #​6009
• Fix Streamable HTTP WebClient transport to accept SSE frames without event field #​5783

📔 Documentation

• Fix inaccurate Content interface Javadoc #​6704
• Document conversation ID scoping for chat memory #​6651
• Fix OpenAI audio documentation title and broken link #​6606
• Restructure structured-output documentation #​6495
• Restore the CosmosDBChatMemoryRepository section #​6491
• Fix typos in McpTool JavaDoc comments #​6449
• Restructure tool calling reference docs #​6432
• Remove ToolSearchToolCallingAdvisor for upgrade notes #​6421
• Fix dead JavaDoc link in upgrade notes #​6419
• Update outdated Pinecone free-tier namespace notes #​6383
• Fix duplicate "is is" typo in openai-chat.adoc #​6037
• Update Ollama OpenAI API compatibility example to use builder pattern #​5999

🔨 Dependency Upgrades

• Delegate Maven plugin versions to Spring Boot BOM #​6586
• Align gRPC version management with Spring Boot #​6585
• Upgrade Milvus java client to 2.6.21 #​6503
• Upgrade pinecone client to 6.2.0 #​6496
• Upgrade qdrant client to 1.18.0 #​6494

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​DragonFSKY, @​EvanYao826, @​JamesBLewis, @​MKP999, @​OneZero-Y, @​OreOreDa, @​Seol-JY, @​TimurRakhmatullin86, @​YashRL, @​ZhangDT-sky, @​angus-guo, @​chaechaepower, @​chemicL, @​dimitarproynov, @​ericbottard, @​gaoxiaolei-s59, @​gh7035, @​guanxuc, @​hutiefang76, @​ilayaperumalg, @​iuliiasobolevska, @​jewoodev, @​kamalcis, @​kezhenxu94, @​leeworms, @​liushenling2001, @​nicolaskrier, @​prachipanditrao, @​pyg410, @​quaff, @​rea9r, @​sdeleuze, @​sdudzin, @​seeun0210, @​sobychacko, @​strogiyotec, @​subhashpolisetti, @​thjanssen, @​tzolov, @​ultramancode, and @​yyyCode

spring-projects/spring-boot (org.springframework.boot)

v4.1.1

---

Configuration

📅 Schedule: (in timezone Asia/Seoul)

• Branch creation
  • "before 10am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

Claude finished @renovate[bot]'s task in 1m 28s —— View job

---

🤖 Claude 의존성 영향도 분석

📦 변경점 요약

라이브러리	변경	유형
org.springframework.boot	4.1.0 → 4.1.1	patch
org.springframework.ai:spring-ai-bom	2.0.0 → 2.0.1	patch

Spring Boot 4.1.1 — PR 본문에 상세 release notes 없음 (GitHub compare 링크만 존재). 패치 릴리즈 수준의 버그 수정 포함으로 추정.

Spring AI 2.0.1 주요 변경 내용:

• Media 빌더를 typed data overload로 리팩토링 (#6481) — upgrade notes에 breaking change로 분류
• Google GenAI: ToolChoice 지원 추가, thinking level validation 버그 수정
• BeanOutputConverter 등 구조화 출력 관련 버그 수정 다수
• MarkdownCodeBlockCleaner 버그 수정 (단일 라인 fenced 코드 블록 처리)

주요 transitive 의존성 변화 (lockfile 기준):

라이브러리	변경
logback-classic/core	1.5.34 → 1.5.38
jackson-*	2.21.4 → 2.21.5
micrometer-*	1.17.0 → 1.17.1
com.google.genai:google-genai	1.58.0 → 1.65.0
protobuf-java*	4.34.2 → 4.35.1
io.grpc:*	1.83.0 → 1.83.1
nimbus-jose-jwt	10.9 → 10.9.1
oauth2-oidc-sdk	11.37.2 → 11.38.2

---

🎯 Q-Asker 영향도: 🟡 MEDIUM

Spring AI 사용처:

• modules/quiz-ai/impl/... — Gemini 퀴즈 생성, 에세이 채점, 품질 검증의 핵심 모듈
  • ChunkedQuizGenerator, QualityVerifierImpl, EssayGradingServiceImpl, GeminiContextCacheManager 등 17개 파일

⚠️ 핵심 체크포인트 — Media 생성자 사용:

modules/quiz-ai/impl/src/main/java/.../ai/service/ChunkedQuizGenerator.java:133에서 Media 생성자를 직접 사용 중:

new Media(MimeTypeUtils.parseMimeType("application/pdf"), URI.create(metadata.uri()));

Spring AI 2.0.1은 Media 빌더 리팩토링을 breaking change로 명시. 생성자 시그니처 변경 여부를 빌드 후 반드시 확인 필요.

Fix this →

예상 영향:

• google-genai 1.58.0 → 1.65.0 점프 — Spring AI가 이를 통해 Gemini 통신하므로 간접 영향 가능. 단 Spring AI 추상화 레이어가 감싸므로 직접 API 변경 노출은 없을 것
• Media 생성자 외 나머지 API(ChatModel, ChatResponse, Prompt, GoogleGenAiChatOptions, BeanOutputConverter 등)는 breaking change 없음으로 확인됨
• Jackson, Micrometer, gRPC, Logback 모두 patch 수준 — 동작 변화 없음

---

✅ 권장 액션

• CI 빌드 통과 확인 — Media 생성자 시그니처 변경 시 컴파일 에러로 즉시 발견됨
• CI green 후 핵심 시나리오 확인: 퀴즈 생성(PDF 업로드 → SSE 스트리밍), 에세이 채점
• (필요 시) new Media(MimeType, URI) → Spring AI 2.0.1 권장 빌더 패턴으로 마이그레이션

---

📋 참고

• Release Notes: PR 본문 참조 (Spring AI 2.0.1 upgrade notes 포함)
• 분석 모델: claude-sonnet-4-6