René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"The spring-boot-cloudfoundry module should only have an optional dependency on spring-boot-security","articleBody":"\u003c!--\nThanks for raising a Spring Boot issue. Please take the time to review the following\ncategories as some of them do not apply here.\n\n🙅 \"Please DO NOT Raise an Issue\" Cases\n- Question\nSTOP!! Please ask questions about how to use something, or to understand why something isn't\nworking as you expect it to, on Stack Overflow using the spring-boot tag.\n- Security Vulnerability\nSTOP!! Please don't raise security vulnerabilities here. Head over to https://spring.io/security-policy to learn how to disclose them responsibly.\n- Managed Dependency Upgrade\nYou DO NOT need to raise an issue for a managed dependency version upgrade as there's a semi-automatic process for checking managed dependencies for new versions before a release. BUT pull requests for upgrades that are more involved than just a version property change are still most welcome.\n- With an Immediate Pull Request\nAn issue will be closed as a duplicate of the immediate pull request, so you don't have to raise an issue if you plan to create a pull request immediately.\n\nspring-boot-security should be an Optional Dependency of spring-boot-cloud-foundry\n\n🐞 Bug report (please don't include this emoji/text, just add your details)\nPlease provide details of the problem, including the version of Spring Boot that you\nare using. If possible, please provide a test case or sample application that reproduces\nthe problem. This makes it much easier for us to diagnose the problem and to verify that\nwe have fixed it.\n\n🎁 Enhancement (please don't include this emoji/text, just add your details)\nPlease start by describing the problem that you are trying to solve. There may already\nbe a solution, or there may be a way to solve it that you hadn't considered.\n\n\nTIP: You can always edit your issue if it isn't formatted correctly.\n     See https://guides.github.com/features/mastering-markdown \n--\u003e\n\n\n`spring-boot-cloudfoundry` has an `implementation` dependency on `spring-boot-security`:\nhttps://github.com/spring-projects/spring-boot/blob/b2bc463d997df6f1b9eba8aaa1f7c2b38fb6f012/module/spring-boot-cloudfoundry/build.gradle#L31\n\nThis causes Spring Security to be configured in applications otherwise not using it. Should `spring-boot-security` be an optional dependency instead?\n\nexcluding `spring-boot-security` from `spring-boot-cloudfoundry` seems to function as expected.\n\n```xml\n\u003cdependency\u003e\n      \u003cgroupId\u003eorg.springframework.boot\u003c/groupId\u003e\n      \u003cartifactId\u003espring-boot-starter-cloudfoundry\u003c/artifactId\u003e\n      \u003cexclusions\u003e\n        \u003cexclusion\u003e\n            \u003cgroupId\u003eorg.springframework.boot\u003c/groupId\u003e\n            \u003cartifactId\u003espring-boot-security\u003c/artifactId\u003e\n        \u003c/exclusion\u003e\n      \u003c/exclusions\u003e\n\u003c/dependency\u003e\n```","author":{"url":"https://github.com/matthew-js-porter","@type":"Person","name":"matthew-js-porter"},"datePublished":"2026-01-06T20:28:12.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/48685/spring-boot/issues/48685"}