java -version

- import javax.servlet.http.HttpServletRequest;

+ import jakarta.servlet.http.HttpServletRequest;

// 2.x旧写法（已经out啦）

@EnableWebSecurity

public class SecurityConfig extends WebSecurityConfigurerAdapter {

@Override

protected void configure(HttpSecurity http) throws Exception {

http.authorizeRequests().anyRequest().authenticated();

}

}

// 3.x新写法，更简洁更时尚

@Configuration

@EnableWebSecurity

public class SecurityConfig {

@Bean

public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {

return http

.authorizeHttpRequests(auth -> auth

.anyRequest().authenticated()

)

.build();

}

}

组件

最低要求版本

注意事项

MySQL

8.0

方言类名变更（MySQL5Dialect → MySQLDialect）

Thymeleaf

3.1.x

严格模式模板校验

Spring Data JPA

3.0.x

分页查询返回类型变更（Page → Slice）

Spring Kafka

3.0.x

消费者位点管理策略调整

Spring Cloud

2022.0.x+

Bootstrap 上下文默认禁用

@SpringBootApplication

public class Application {

public static void main(String[] args) {

System.out.println("Spring Boot Version: " + SpringBootVersion.getVersion());

SpringApplication.run(Application.class, args);

}

}

错误现象

解决方案

java.lang.NoClassDefFoundError: jakarta/servlet/http/HttpServletRequest

检查是否遗漏 javax→jakarta 包名替换

Parameter 0 of constructor in ... required a bean of type ...

添加显式包扫描：@SpringBootApplication (scanBasePackages = {"com.***.***"})

Spring Security 6: AuthenticationManager cannot be cast to ...

使用新式配置注入 AuthenticationManager

项目中存在循环依赖(这是本次升级改造最难解决的问题)

看下方循环依赖问题解决方案

spring:

main:

allow-circular-references:true #允许循环引用

@Lazy // 使用懒加载