chore(deps+docs): upgrade to Spring Boot 3.4.11 and OpenAPI Generator 7.17.0, update docs and CodeQL

- Upgraded Spring Boot to 3.4.11 and OpenAPI Generator to 7.17.0
- Updated architectural diagram to reflect current stack (Spring Boot 3.4.x, RFC 9457)
- Revised documentation and version references across README and guides
- Enhanced CodeQL configuration with +security-and-quality query pack
- No functional changes; maintenance and alignment release groundwork for v0.7.3

Author: bsayli

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -39,7 +39,7 @@ body:
       description: "Tool versions or environment details."
       placeholder: |
         - Java: 21
-        - OpenAPI Generator: 7.16.0
+        - OpenAPI Generator: 7.17.0
         - Spring Boot: 3.4.x
         - OS: macOS / Windows / Linux
   - type: textarea

.github/workflows/codeql.yml

@@ -33,6 +33,8 @@ jobs:
         uses: github/codeql-action/init@v3
         with:
           languages: java
+          queries: +security-and-quality
+
       - name: Build (customer-service)
         run: mvn -q -ntp -DskipTests=true clean package
         working-directory: customer-service

README.md

@@ -4,8 +4,8 @@
 [![Release](https://img.shields.io/github/v/release/bsayli/spring-boot-openapi-generics-clients?logo=github\&label=release)](https://github.com/bsayli/spring-boot-openapi-generics-clients/releases/latest)
 [![codecov](https://codecov.io/gh/bsayli/spring-boot-openapi-generics-clients/branch/main/graph/badge.svg)](https://codecov.io/gh/bsayli/spring-boot-openapi-generics-clients)
 [![Java](https://img.shields.io/badge/Java-21-red?logo=openjdk)](https://openjdk.org/projects/jdk/21/)
-[![Spring Boot](https://img.shields.io/badge/Spring%20Boot-3.4.10-green?logo=springboot)](https://spring.io/projects/spring-boot)
-[![OpenAPI Generator](https://img.shields.io/badge/OpenAPI%20Generator-7.16.0-blue?logo=openapiinitiative)](https://openapi-generator.tech/)
+[![Spring Boot](https://img.shields.io/badge/Spring%20Boot-3.4.11-green?logo=springboot)](https://spring.io/projects/spring-boot)
+[![OpenAPI Generator](https://img.shields.io/badge/OpenAPI%20Generator-7.17.0-blue?logo=openapiinitiative)](https://openapi-generator.tech/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 
 ---
@@ -16,7 +16,7 @@
   <em><strong>End-to-end generics-aware OpenAPI clients</strong> — unified <code>{ data, meta }</code> responses without boilerplate.</em>
 </p>
 
-**Modern, type-safe OpenAPI client generation** — powered by **Spring Boot 3.4**, **Java 21**, and **OpenAPI Generator 7.16.0**.  
+**Modern, type-safe OpenAPI client generation** — powered by **Spring Boot 3.4**, **Java 21**, and **OpenAPI Generator 7.17.0**.  
 This repository demonstrates a production-grade setup where backend and client remain fully aligned through generics, supporting nested envelopes like `ServiceResponse<Page<T>>` and standardized [**RFC 9457 — Problem Details for HTTP APIs**](https://www.rfc-editor.org/rfc/rfc9457) error handling.
 
 > 🧠 **RFC 9457 vs RFC 7807**  
@@ -139,6 +139,7 @@ public class ServiceResponsePageCustomerDto
 
 ---
 
+<a id="architecture-overview"></a>
 ## ⚙️ Architecture Overview
 
 <p align="center">
@@ -148,9 +149,9 @@ public class ServiceResponsePageCustomerDto
 </p>
 
 | Layer                 | Description                                                                                           |
-| --------------------- | ----------------------------------------------------------------------------------------------------- |
+| --------------------- |-------------------------------------------------------------------------------------------------------|
 | **Server (Producer)** | Publishes an **OpenAPI 3.1-compliant** spec via Springdoc 2.8.13 with auto-registered wrapper schemas |
-| **Client (Consumer)** | Uses **OpenAPI Generator 7.16.0** with Mustache overlays for generics support                         |
+| **Client (Consumer)** | Uses **OpenAPI Generator 7.17.0** with Mustache overlays for generics support                         |
 | **Envelope Model**    | Unified `{ data, meta }` response structure                                                           |
 | **Error Handling**    | **RFC 9457-compliant Problem Details** decoded into `ClientProblemException`                          |
 | **Nested Generics**   | Full support for `ServiceResponse<Page<T>>`                                                           |
@@ -262,11 +263,11 @@ for (CustomerDto c : page.content()) {
 ## 🧩 Tech Stack
 
 | Component             | Version | Purpose                               |
-| --------------------- | ------- | ------------------------------------- |
+| --------------------- |---------| ------------------------------------- |
 | **Java**              | 21      | Language baseline                     |
-| **Spring Boot**       | 3.4.10  | REST + OpenAPI provider               |
+| **Spring Boot**       | 3.4.11  | REST + OpenAPI provider               |
 | **Springdoc**         | 2.8.13  | OpenAPI 3.1 integration               |
-| **OpenAPI Generator** | 7.16.0  | Generics-aware code generation        |
+| **OpenAPI Generator** | 7.17.0  | Generics-aware code generation        |
 | **HttpClient5**       | 5.5     | Pooled, production-ready HTTP backend |
 
 ---

customer-service-client/README.md

@@ -1,8 +1,8 @@
 # customer-service-client
 
 [![Java 21](https://img.shields.io/badge/Java-21-red?logo=openjdk)](https://openjdk.org/projects/jdk/21/)
-[![Spring Boot](https://img.shields.io/badge/Spring%20Boot-3.4.10-green?logo=springboot)](https://spring.io/projects/spring-boot)
-[![OpenAPI Generator](https://img.shields.io/badge/OpenAPI%20Generator-7.16.0-blue?logo=openapiinitiative)](https://openapi-generator.tech/)
+[![Spring Boot](https://img.shields.io/badge/Spring%20Boot-3.4.11-green?logo=springboot)](https://spring.io/projects/spring-boot)
+[![OpenAPI Generator](https://img.shields.io/badge/OpenAPI%20Generator-7.17.0-blue?logo=openapiinitiative)](https://openapi-generator.tech/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](../LICENSE)
 
 Generated Java client for the **customer-service**, showcasing **type‑safe generic responses** and **nested generics** with a minimal OpenAPI Generator Mustache overlay.
@@ -32,7 +32,7 @@ mvn -q clean install
 
 ## ✅ What You Get
 
-* **OpenAPI Generator 7.16.0** + **Spring `RestClient`**-based Java client.
+* **OpenAPI Generator 7.17.0** + **Spring `RestClient`**-based Java client.
 * Reusable generic base: `ServiceClientResponse<T>` containing `{ data, meta }`.
 * **Nested generics** support: `ServiceClientResponse<Page<CustomerDto>>`.
 * **RFC 9457 Problem decoding** via `ClientProblemException`.
@@ -270,7 +270,7 @@ These classes already exist in the shared `common` package and are excluded from
 
 ## 📚 Notes
 
-* **Toolchain:** Java 21, Spring Boot 3.4.10, OpenAPI Generator 7.16.0
+* **Toolchain:** Java 21, Spring Boot 3.4.11, OpenAPI Generator 7.17.0
 * **Options:** `useSpringBoot3=true`, `useJakartaEe=true`, `serializationLibrary=jackson`, `dateLibrary=java8`
 * **Spec file:** `src/main/resources/customer-api-docs.yaml`
 * Optional: `x-class-extra-annotation` injects annotations on wrappers.

customer-service-client/pom.xml

@@ -6,7 +6,7 @@
 
     <groupId>io.github.bsayli</groupId>
     <artifactId>customer-service-client</artifactId>
-    <version>0.7.2</version>
+    <version>0.7.3</version>
     <name>customer-service-client</name>
     <description>Generated client (RestClient) using generics-aware OpenAPI templates</description>
     <packaging>jar</packaging>
@@ -16,11 +16,11 @@
         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
         <java.version>21</java.version>
 
-        <spring-boot.version>3.4.10</spring-boot.version>
-        <openapi.generator.version>7.16.0</openapi.generator.version>
+        <spring-boot.version>3.4.11</spring-boot.version>
+        <openapi.generator.version>7.17.0</openapi.generator.version>
 
         <jakarta.validation.version>3.1.1</jakarta.validation.version>
-        <jakarta.annotation-api.version>${spotless-maven-plugin.version}</jakarta.annotation-api.version>
+        <jakarta.annotation-api.version>3.0.0</jakarta.annotation-api.version>
         <mockwebserver.version>5.1.0</mockwebserver.version>
         <httpclient5.version>5.5</httpclient5.version>
         <junit-jupiter.version>5.13.4</junit-jupiter.version>

customer-service-client/src/main/resources/customer-api-docs.yaml

@@ -2,7 +2,7 @@ openapi: 3.1.0
 info:
   title: Customer Service API
   description: Customer Service API with type-safe generic responses using OpenAPI
-  version: 0.7.2
+  version: 0.7.3
 servers:
   - url: http://localhost:8084/customer-service
     description: Local service URL

customer-service/README.md

@@ -1,7 +1,7 @@
 # customer-service
 
 [![Java](https://img.shields.io/badge/Java-21-red?logo=openjdk)](https://openjdk.org/projects/jdk/21/)
-[![Spring Boot](https://img.shields.io/badge/Spring%20Boot-3.4.10-green?logo=springboot)](https://spring.io/projects/spring-boot)
+[![Spring Boot](https://img.shields.io/badge/Spring%20Boot-3.4.11-green?logo=springboot)](https://spring.io/projects/spring-boot)
 [![Build](https://github.com/bsayli/spring-boot-openapi-generics-clients/actions/workflows/build.yml/badge.svg)](https://github.com/bsayli/spring-boot-openapi-generics-clients/actions/workflows/build.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](../LICENSE)
 
@@ -60,7 +60,7 @@ This module serves as the **server-side anchor**: the reference point for generi
 ## 🛠 Tech Stack
 
 * **Java 21**
-* **Spring Boot 3.4.10**
+* **Spring Boot 3.4.11**
 
   * spring-boot-starter-web
   * spring-boot-starter-validation

customer-service/pom.xml

@@ -7,13 +7,13 @@
     <parent>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-parent</artifactId>
-        <version>3.4.10</version>
+        <version>3.4.11</version>
         <relativePath/>
     </parent>
 
     <groupId>io.github.bsayli</groupId>
     <artifactId>customer-service</artifactId>
-    <version>0.7.2</version>
+    <version>0.7.3</version>
     <name>customer-service</name>
     <description>Spring Boot 3.4 + Springdoc (OpenAPI) for generics-aware client generation</description>
 
@@ -23,7 +23,7 @@
         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
         <springdoc-openapi-starter.version>2.8.13</springdoc-openapi-starter.version>
         <maven.compiler.release>${java.version}</maven.compiler.release>
-        <commons-lang3.version>3.18.0</commons-lang3.version>
+        <commons-lang3.version>3.19.0</commons-lang3.version>
         <maven-surefire-plugin.version>3.2.5</maven-surefire-plugin.version>
         <maven-failsafe-plugin.version>3.2.5</maven-failsafe-plugin.version>
         <jacoco-maven-plugin.version>0.8.13</jacoco-maven-plugin.version>

docs/adoption/client-side-adoption-pom.md

@@ -69,7 +69,7 @@ Define reusable properties to simplify plugin management and template resolution
 ```xml
 
 <properties>
-    <openapi.generator.version>7.16.0</openapi.generator.version>
+    <openapi.generator.version>7.17.0</openapi.generator.version>
     <openapi.templates.upstream>${project.build.directory}/openapi-templates-upstream</openapi.templates.upstream>
     <openapi.templates.effective>${project.build.directory}/openapi-templates-effective</openapi.templates.effective>
     <build.helper.plugin.version>3.6.0</build.helper.plugin.version>