SpringBoot Angular Example 0.0.10

• Backend: Update to Gradle 9.0.0. Also enabling the new configuration cache feature
• Backend: Provide an example how to configure Codeberg.org as an OIDC IdP for the application
• Backend: Update Spring Boot 3.5.4, Spring Modulith 1.4.2, Hibernate 7.1.0.Final, Gradle Plugins: Spotless 7.2.1, CycloneDX 2.3.1, BouncyCastle 1.81, Google Java Format 1.28.0, Jacoco 0.8.13
• Backend: Fixed SPACspNonceFilter - it originally omitted the end of line character when parsing static HTML files to insert CSPNonce. This lead to obscure bugs in the Angular frontend ("Unexpected end of input")
• Backend: Added documentation how to generate Software Bill of Material (SBOM) for backend using CycloneDX for Gradle
• Frontend: Update Angular 20
• Frontend: Include offline fonts/icons from https://fontsource.org/ instead of static repository
• Frontend: Software Bill of Material (SBOM) for frontend using CycloneDX for Node

SpringBoot Angular Example 0.0.9

• Backend: Hardened configuration of actuator and improved configuration documentation around it
• Backend: Include H2 in-memory database only when using bootRun (Gradle: developmentOnly) and not when deploying as it is only for local development. Real database drivers (e.g. postgres JDBC) for production should be included using implementation.
• Backend: Configure HTTP Security Header permission policy with .permissionsPolicyHeader as .permissionPolicy is deprecated
• Backend: Gradle 8.13
• Backend: Spring Boot 3.4.3, Spring Modulith 1.3.2, Hibernate 6.6.8.Final
• Backend: Gradle Plugins: Spring Dependency Plugin 1.1.7, Spotless 7.0.2, Spotless googleJavaFormat 1.25.2, CycloneDX 2.1.0, Ben Names Update Plugin 0.52.0, jacoco 0.8.12
• Backend: Build tool Gradle 8.12, BouncyCastle 1.80
• Backend: OIDC: Support extraction of claims from IdToken, EndUser Endpoint and end user attributes. Claims are converted to Granted Authorities (roles) thart can natively be used in Spring for authorizing access
• Backend: Enable PKCE by default for Authorization Code Flow. This is a recommended security setting also for secure clients and mandatory by OAuth 2.1
• Frontend: Angular 19.1.1
• Container: Remove JDK parameter for generational ZGC as it will be anyway the only possible in upcoming JDKs.

SpringBoot Angular Example 0.0.8

• Backend: update to Spring Boot 3.4.1, Hibernate 6.6.4.Final, Spring Modulith 1.3.1
• Backend: enable Gradle Configuration Cache
• Frontend: update to nodejs 22 LTS for the build process
• Frontend: Update Angular 19.0.5