From 2d306df89898afaae8e2ea093052ec1a1378a93b Mon Sep 17 00:00:00 2001
From: Ivan Hargreaves <ivanh@uk.ibm.com>
Date: Tue, 4 Aug 2026 15:29:05 +0100
Subject: [PATCH] Agents.md validation: SB 3.5.16, remove duplicate
 maven.compiler.release, add Troubleshooting section

---
 README.md                                           | 13 ++++++++++---
 .../build.gradle                                    |  2 +-
 pom.xml                                             |  3 +--
 3 files changed, 12 insertions(+), 6 deletions(-)

diff --git a/README.md b/README.md
index c1ef005..86ac095 100644
--- a/README.md
+++ b/README.md
@@ -22,9 +22,10 @@ The application uses Jakarta EE form authentication, validating user credentials
 5. [Building the Sample](#building-the-sample)
 6. [Deploying to a CICS Liberty JVM server](#deploying-to-a-cics-liberty-jvm-server)
 7. [Running the Sample](#running-the-sample)
-8. [License](#license)
-9. [Additional Resources](#additional-resources)
-10. [Contributing](#contributing)
+8. [Troubleshooting](#troubleshooting)
+9. [License](#license)
+10. [Additional Resources](#additional-resources)
+11. [Contributing](#contributing)
 
 ## Prerequisites
 
@@ -147,6 +148,12 @@ Alternatively, use Liberty SAF authorization with EJBROLE profiles to grant user
 
 3. You should see the application home page, confirming that authentication and authorization succeeded.
 
+## Troubleshooting
+
+- **`403 Forbidden` after login** — the authenticated user ID has not been granted the `cicsAllAuthenticated` role. Check that the SAF user registry and EJBROLE profiles (or the `<application-bnd>` in `server.xml`) grant the user access to the role.
+- **`CWWKS9104A` in `messages.log`** — the SAF registry is not configured. Ensure `cicsts:security-1.0` is enabled and a SAF registry (`<safRegistry>`) is configured in `server.xml`.
+- **Login page not displayed** — check for `CWWKT0016I` in `messages.log` to confirm the application started; if absent, review `messages.log` for bundle or WAR deployment errors.
+
 ## License
 
 This project is licensed under the [Eclipse Public License - v 2.0](LICENSE).
diff --git a/cics-java-liberty-springboot-security-app/build.gradle b/cics-java-liberty-springboot-security-app/build.gradle
index 40410f1..12a49e6 100644
--- a/cics-java-liberty-springboot-security-app/build.gradle
+++ b/cics-java-liberty-springboot-security-app/build.gradle
@@ -1,6 +1,6 @@
 plugins
 {
-	id 'org.springframework.boot' version '3.5.14'
+	id 'org.springframework.boot' version '3.5.16'
 	id 'io.spring.dependency-management' version '1.1.7'
 	id 'java'
 	id 'eclipse'
diff --git a/pom.xml b/pom.xml
index 8fe8bda..0315943 100644
--- a/pom.xml
+++ b/pom.xml
@@ -7,7 +7,7 @@
   <parent>
     <groupId>org.springframework.boot</groupId>
     <artifactId>spring-boot-starter-parent</artifactId>
-    <version>3.5.14</version>
+    <version>3.5.16</version>
     <relativePath/>
   </parent>
 
@@ -23,7 +23,6 @@
   <properties>
     <java.version>17</java.version>
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-    <maven.compiler.release>${java.version}</maven.compiler.release>
     <cics.jvmserver>DFHWLP</cics.jvmserver>
     <!-- CICS TS BOM version — canonical property referenced by both modules -->
     <cics.bom.version>6.1-20250812133513-PH63856</cics.bom.version>