spring-boot-verify

# Spring Boot 4.x Project Verification

Analyzes Spring Boot projects for dependency compatibility, configuration correctness, and migration readiness.

## Verification Workflow

1. **Detect Build System** → Find pom.xml or build.gradle, extract Spring Boot version
2. **Analyze Dependencies** → Check versions, find deprecated libraries, validate compatibility
3. **Validate Configuration** → Check application.yml/properties, security config, actuator settings
4. **Generate Report** → Structured markdown with severity levels and remediation code
5. **Lookup Docs** → Use Exa MCP to fetch latest Spring Boot 4.x documentation when needed

## Dependency Quick Reference

| Check | Severity | Action |
|-------|----------|--------|
| Spring Boot version < 4.0 | CRITICAL | Upgrade to 4.0.x |
| Jackson 2.x (`com.fasterxml`) | CRITICAL | Migrate to Jackson 3 (`tools.jackson`) |
| `javax.*` imports | CRITICAL | Migrate to `jakarta.*` namespace |
| `@MockBean` in tests | ERROR | Replace with `@MockitoBean` |
| Undertow server | ERROR | Switch to Tomcat or Jetty |
| Java version < 17 | ERROR | Minimum Java 17 required |
| Gradle version < 8.14 | ERROR | Upgrade Gradle (required for Kotlin 2.2/Boot 4) |
| `spring-boot-starter-web` | WARNING | Use `spring-boot-starter-webmvc` |
| Missing Virtual Threads | INFO | Enable with `spring.threads.virtual.enabled=true` |

## Configuration Quick Reference

| Check | Severity | Action |
|-------|----------|--------|
| Security `and()` chaining | CRITICAL | Convert to Lambda DSL closures |
| `antMatchers()` usage | ERROR | Replace with `requestMatchers()` |
| `authorizeRequests()` | ERROR | Replace with `authorizeHttpRequests()` |
| All actuator endpoints exposed | WARNING | Limit to health, info, metrics |
| 100% trace sampling | WARNING | Use 10% in production |

## Jakarta Namespace Migration

**Critical for Spring Boot 3+**: All `javax.*` packages must migrate to `jakarta.*`:

| Old Package | New Package |
|-------------|-------------|
| `