evo-spring-boot-jakarta-migration

evo-spring-boot-jakarta-migration is a skill for Claude Code, Codex from OpenLAIR/OpenSkill. It costs 63 tokens per session (757 once invoked), scanned A, original, Apache-2.0.

A migration guide and code helper for moving a Java 8 and Spring Boot 2.7 application to Java 21 and Spring Boot 3.2. It covers framework APIs, security, database mapping, JSON web tokens, and HTTP clients.

In plain words
What is it for?
It is for upgrading Spring Boot services, including security configuration, Hibernate mappings, token handling, and calls to other HTTP services.
Why use it?
It removes much of the searching and manual updating involved in a major framework upgrade. It addresses namespace changes and APIs that no longer work in the newer versions.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit It is for upgrading Spring Boot services, including security configuration, Hibernate mappings, token handling, and calls to other HTTP services.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/openlair/openskill/evo-spring-boot-jakarta-migration
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add OpenLAIR/OpenSkill --skill evo-spring-boot-jakarta-migration
Clone the repo
git clone --depth 1 https://github.com/OpenLAIR/OpenSkill

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for evo-spring-boot-jakarta-migration

README.md
[![agentmods](https://agentmods.dev/badge/skills/openlair/openskill/evo-spring-boot-jakarta-migration/github.svg)](https://agentmods.dev/skills/openlair/openskill/evo-spring-boot-jakarta-migration)
Your own site
<a href="https://agentmods.dev/skills/openlair/openskill/evo-spring-boot-jakarta-migration"><img src="https://agentmods.dev/badge/skills/openlair/openskill/evo-spring-boot-jakarta-migration/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for evo-spring-boot-jakarta-migration

Your own site · 80×15
<a href="https://agentmods.dev/skills/openlair/openskill/evo-spring-boot-jakarta-migration"><img src="https://agentmods.dev/badge/skills/openlair/openskill/evo-spring-boot-jakarta-migration.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 63 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 757 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00063 $0.00757
Opus 5 $0.00032 $0.00378
Sonnet 5 $0.00013 $0.00151
Haiku 4.5 $0.00006 $0.00076

Measured yesterday against content hash d698427adb01, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade A, and why

evo-spring-boot-jakarta-migration scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

The scan reads SKILL.md. This mod also ships 3 executable files (scripts/file_utils.py, scripts/namespace_migrator.py, scripts/pom_migrator.py), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

tasks-evolved/spring-boot-jakarta-migration/environment/skills/evo-spring-boot-jakarta-migration/SKILL.md · 45 lines

How it starts

The opening of the file, as written. The whole thing — 45 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Spring Boot 2.7 → 3.2 Jakarta Migration Skill

Purpose

Migrate a Java 8/Spring Boot 2.7 user management microservice to Java 21/Spring Boot 3.2, covering all layers of the application stack.

Key Migration Areas

  1. pom.xml: Update parent to 3.2.x, java.version to 21, maven-compiler-plugin with -parameters, replace jjwt 0.9.x with modular 0.12.x, remove jaxb-api
  2. Jakarta namespace: Replace javax.persistence → jakarta.persistence, javax.validation → jakarta.validation, javax.servlet → jakarta.servlet. Preserve javax.crypto, javax.sql, javax.net (Java SE packages)
  3. Spring Security 6: Remove WebSecurityConfigurerAdapter, use SecurityFilterChain bean, Lambda DSL, authorizeHttpRequests + requestMatchers, @EnableMethodSecurity
  4. JJWT 0.12.x API: Migrate from Jwts.parser().setSigningKey() to Jwts.parser().verifyWith().build().parseSignedClaims(), from Jwts.builder().signWith(SignatureAlgorithm.HS512, key) to Jwts.builder().signWith(key)
  5. Hibernate 6: Remove versioned dialect references, use GenerationType.IDENTITY explicitly, update H2Dialect to unversioned form
  6. RestTemplate → RestClient: Migrate to fluent RestClient API
  7. Application properties: Update hibernate dialect class names, remove deprecated properties

Usage

import sys
sys.path.insert(0, '/app/environment/skills/evo-spring-boot-jakarta-migration/scripts')
from migrate import run_migration
run_migration('/workspace')

Scripts

  • scripts/migrate.py — Main entry point orchestrating all migration steps
  • scripts/pom_migrator.py — POM XML transformation (parent, java version, dependencies)
  • scripts/namespace_migrator.py — javax → jakarta import replacement across all .java files
  • scripts/security_migrator.py — Spring Security 6 config and JWT filter migration
  • scripts/jwt_migrator.py — JJWT 0.9.x → 0.12.x API call migration
  • scripts/hibernate_migrator.py — Hibernate 6 compatibility (dialects, ID generation)
  • scripts/restclient_migrator.py — RestTemplate → RestClient migration
  • scripts/properties_migrator.py — application.properties updates
  • scripts/file_utils.py — Shared file I/O and scanning utilities

Read the full file on GitHub · 45 lines

Files

What ships with it

3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 45 lines · 63 tokens per session scan A d698427adb01

Subscribe to this mod's changes

evo-spring-boot-jakarta-migration is a skill published in the GitHub repository OpenLAIR/OpenSkill (90 stars, last pushed 2d ago), licensed Apache-2.0. It adds 63 tokens to every session and 757 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-11.

Related

Other skills, from other repositories

Cursor rules for Java development with Springboot and JPA integration

Skill "Cursor rules for Java development with Springboot and JPA integration" from AmariahAK/atlarix-skills, covering when to use this skill and source.

AmariahAK/atlarix-skills · 12 tokens

Java Patterns

Use this skill when working on Java services/libs and you want clean layering, safe null handling, predictable build structure (Maven/Gradle), and testable code.

AmariahAK/atlarix-skills · 2 tokens

azure-communication-callautomation-java

Build call automation workflows with Azure Communication Services Call Automation Java SDK. Use when implementing IVR systems, call routing, call recording, DTMF recognition, text-to-speech, or AI-powered call flows.

microsoft/skills · 49 tokens

azure-communication-chat-java

Build real-time chat applications with Azure Communication Services Chat Java SDK. Use when implementing chat threads, messaging, participants, read receipts, typing notifications, or real-time chat features.

microsoft/skills · 41 tokens

azure-communication-common-java

Azure Communication Services common utilities for Java. Use when working with CommunicationTokenCredential, user identifiers, token refresh, or shared authentication across ACS services.

microsoft/skills · 35 tokens

azure-communication-sms-java

Send SMS messages with Azure Communication Services SMS Java SDK. Use when implementing SMS notifications, alerts, OTP delivery, bulk messaging, or delivery reports.

microsoft/skills · 36 tokens