Upgrade io.rest-assured family 4.5.1 -> 5.5.2 (no source changes)

[devin-ai-integration]

Summary

Upgrades the io.rest-assured test-scope artifact family from 4.5.1 to 5.5.2 (highest stable 5.x; published 2025-05-14). Zero source changes were needed — the io.restassured.* package and API surface used by this repo (RestAssuredMockMvc, its static given()) is unchanged between 4.5 and 5.x.

The only behavioural delta is transitive: rest-assured 5.x moved from Groovy 3 (org.codehaus.groovy) to Groovy 4 (org.apache.groovy). Because Groovy 4 ships under a different Maven group, the Spring Boot 2.6.3 BOM's groovy.version (which manages org.codehaus.groovy:*) does not apply to it, so no ext['groovy.version'] override or explicit test-scope pin is required — and there is no classpath split, since org.codehaus.groovy disappears from testRuntimeClasspath entirely once 4.5.1 is gone.

Stays inside the fixed ceiling: rest-assured 5.5.2 is Java 8 bytecode (major 52) and spring-mock-mvc 5.5.2 still compiles against Spring 5.1 / javax.servlet 3.1, so it is compatible with Spring Boot 2.6.3 + Java 11. Spring Boot, the dependency-management plugin, DGS, and every other dependency are untouched.

Coordinate diff

-    testImplementation 'io.rest-assured:rest-assured:4.5.1'
-    testImplementation 'io.rest-assured:json-path:4.5.1'
-    testImplementation 'io.rest-assured:xml-path:4.5.1'
-    testImplementation 'io.rest-assured:spring-mock-mvc:4.5.1'
+    testImplementation 'io.rest-assured:rest-assured:5.5.2'
+    testImplementation 'io.rest-assured:json-path:5.5.2'
+    testImplementation 'io.rest-assured:xml-path:5.5.2'
+    testImplementation 'io.rest-assured:spring-mock-mvc:5.5.2'

Also updates the stale 4.5.1 baseline row in .agents/skills/java-engineering-excellence/SKILL.md so the skill's dependency table matches reality.

BOM / ext overrides

None needed. Checked explicitly:

• io.rest-assured:* is not managed by the Boot 2.6.3 BOM; the literal versions in build.gradle win.
• The DGS platform (graphql-dgs-platform-dependencies:4.3.1) requests {prefer 3.3.0} for the rest-assured artifacts — prefer yields to the declared 5.5.2, confirmed below.
• Groovy 4 arrives as org.apache.groovy:*, a group the Boot 2.6 BOM does not manage.

dependencyInsight evidence (testRuntimeClasspath)

$ ./gradlew dependencyInsight --configuration testRuntimeClasspath --dependency io.rest-assured
io.rest-assured:rest-assured:5.5.2
io.rest-assured:rest-assured:{prefer 3.3.0} -> 5.5.2
  \--- com.netflix.graphql.dgs:graphql-dgs-platform-dependencies:4.3.1
io.rest-assured:json-path:5.5.2
io.rest-assured:xml-path:5.5.2
io.rest-assured:spring-mock-mvc:5.5.2
io.rest-assured:spring-commons:5.5.2
io.rest-assured:rest-assured-common:5.5.2

$ ./gradlew dependencyInsight --configuration testRuntimeClasspath --dependency org.apache.groovy
org.apache.groovy:groovy:4.0.22 (by constraint)
   variant "groovyRuntimeElements" [ org.gradle.jvm.version = 8 (compatible with: 11) ]
org.apache.groovy:groovy-xml:4.0.22
org.apache.groovy:groovy-json:4.0.22

$ ./gradlew dependencies --configuration testRuntimeClasspath | grep -c codehaus.groovy
0

No conflict-resolution downgrade, one version per artifact, and exactly one Groovy on the classpath.

API migration

None. grep -rn "io.restassured" src/ returns only:

import io.restassured.module.mockmvc.RestAssuredMockMvc;
import static io.restassured.module.mockmvc.RestAssuredMockMvc.given;

Both are unchanged in 5.x. No test assertions, @Disabled annotations, or coverage/format thresholds were modified.

Gate

$ JAVA_HOME=/usr/lib/jvm/java-11-openjdk-amd64 ./gradlew clean test spotlessCheck -x jacocoTestCoverageVerification
BUILD SUCCESSFUL in 17s

	baseline (clean main)	this branch
tests	68	68
failures	0	0
errors	0	0
skipped	0	0
spotlessCheck	green	green

Both runs performed first-hand on JDK 11 (the JDK CI uses, matching sourceCompatibility = 11). Test count is identical — no tests silently stopped being discovered.

Pre-existing on base, not addressed here

• jacocoTestCoverageVerification fails on main at ~0.33 instruction coverage against the 0.80 rule in build.gradle. CI excludes it (./gradlew clean test -x jacocoTestCoverageVerification), so this run excludes it too. The threshold was not lowered and no tests were added to raise coverage — out of scope for a dependency bump.
• Gradle emits pre-existing spotlessJava implicit-dependency and Gradle-8 deprecation warnings on both main and this branch; unrelated to this change.

Link to Devin session: https://partner-workshops.devinenterprise.com/sessions/a0cb9f9040164a358821ab1c334e7755
Requested by: @mbatchelor81

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment, CI, and merge conflict monitoring