Skip to content

Bump the all-deps-minor-and-patch group with 11 updates#46

Merged
dependabot[bot] merged 2 commits intomasterfrom
dependabot/gradle/all-deps-minor-and-patch-a08542a7fa
Jun 3, 2025
Merged

Bump the all-deps-minor-and-patch group with 11 updates#46
dependabot[bot] merged 2 commits intomasterfrom
dependabot/gradle/all-deps-minor-and-patch-a08542a7fa

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 1, 2025 •
edited
Loading

Bumps the all-deps-minor-and-patch group with 11 updates:

Package From To
org.apache.tomcat:tomcat-catalina 10.1.40 10.1.41
org.springframework:spring-webmvc 6.2.6 6.2.7
org.springframework:spring-tx 6.2.6 6.2.7
org.springframework.boot:spring-boot-starter-security 3.4.5 3.5.0
org.springframework.boot:spring-boot-starter-amqp 3.4.5 3.5.0
org.springframework.boot:spring-boot-configuration-processor 3.4.5 3.5.0
org.springframework.boot:spring-boot-starter-actuator 3.4.5 3.5.0
org.springframework.boot:spring-boot-autoconfigure 3.4.5 3.5.0
org.springframework.boot:spring-boot-starter-validation 3.4.5 3.5.0
org.springframework.boot:spring-boot-starter-web 3.4.5 3.5.0
org.springframework.boot:spring-boot-starter-test 3.4.5 3.5.0

Updates org.apache.tomcat:tomcat-catalina from 10.1.40 to 10.1.41

Updates org.springframework:spring-webmvc from 6.2.6 to 6.2.7

Release notes

Sourced from org.springframework:spring-webmvc's releases.

v6.2.7

⭐ New Features

  • Forward more methods to underlying InputStream in NonClosingInputStream #34893
  • Introduce Spring property for the default property placeholder escape character #34865
  • Close ApplicationContext once AOT processing has completed #34841
  • Fix AbstractJackson2HttpMessageConverter#getObjectMappersForType nullness #34811
  • Add option for case-insensitive match to PatternMatchUtils #34801
  • RestClient @RequestBody parameters lose generic type information when creating HTTP service beans #34793
  • Adds option to set Principal in MockServerWebExchange #34789

🐞 Bug Fixes

  • Beans created by FactoryBean are not considered as autowiring candidates if another thread holds a singletonLock #34902
  • PropertySourcesPlaceholderConfigurer placeholder resolution fails in several scenarios #34861
  • HttpComponentsClientHttpRequestFactory setConnectionRequestTimeout not working with httpclient 5.3.1 #34851
  • Fragment.create() requires mutable map - which is unusable when used with Kotlin #34848
  • Duplicate BeanOverrideHandler discovered in @Nested test case with superclass from different class or in interface implemented multiple times #34844
  • Accidental ClassLoader defineClass enforcement after #34677 #34824
  • HttpEntity.EMPTY headers should not be possible to mutate via HttpHeaders constructor #34812
  • AbstractFileResolvingResource.exists incorrectly reports result for resources inside of spring-boot executable jar #34796
  • Correctly expand query param with same name from URI variables array #34783
  • R2DBC NamedParameterUtils only expands reused collection parameter once #34768
  • PathMatchingResourcePatternResolver wrongly assumes that target/classes always exists #34764

📔 Documentation

  • Clarify CompositePropertySource behavior for EnumerablePropertySource contract #34886
  • Javadoc and @Nullable annotation for servletContext parameter of ConfigurableWebEnvironment.initPropertySources are contradictory #34845
  • Spring MVC: @EnableAsync needs to be redeclared for each ApplicationContext #34843
  • Provide a working example instead of unclear placeholders #34828

🔨 Dependency Upgrades

  • Upgrade to Micrometer 1.14.7 #34889
  • Upgrade to Reactor 2024.0.6 #34898

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Artur-, @​blake-bauman, @​iifawzi, @​kilink, @​quaff, @​whlit, and @​zzoe2346

Commits
  • ba590ac Release v6.2.7
  • ee62701 Make use of PatternMatchUtils ignoreCase option
  • fa168ca Revise FactoryBean locking behavior for strict/lenient consistency
  • 3c228a5 Add missing @​since tags in PatternMatchUtils
  • 9bf6b8c Upgrade to Reactor 2024.0.6
  • 37ecdd1 Forward more methods to underlying InputStream in NonClosingInputStream
  • 73f1c5a Polishing
  • 4d296fb Upgrade to Micrometer 1.14.7
  • 6a94444 Clarify CompositePropertySource behavior for EnumerablePropertySource contract
  • 03ae97b Introduce Spring property for default escape character for placeholders
  • Additional commits viewable in compare view

Updates org.springframework:spring-tx from 6.2.6 to 6.2.7

Release notes

Sourced from org.springframework:spring-tx's releases.

v6.2.7

⭐ New Features

  • Forward more methods to underlying InputStream in NonClosingInputStream #34893
  • Introduce Spring property for the default property placeholder escape character #34865
  • Close ApplicationContext once AOT processing has completed #34841
  • Fix AbstractJackson2HttpMessageConverter#getObjectMappersForType nullness #34811
  • Add option for case-insensitive match to PatternMatchUtils #34801
  • RestClient @RequestBody parameters lose generic type information when creating HTTP service beans #34793
  • Adds option to set Principal in MockServerWebExchange #34789

🐞 Bug Fixes

  • Beans created by FactoryBean are not considered as autowiring candidates if another thread holds a singletonLock #34902
  • PropertySourcesPlaceholderConfigurer placeholder resolution fails in several scenarios #34861
  • HttpComponentsClientHttpRequestFactory setConnectionRequestTimeout not working with httpclient 5.3.1 #34851
  • Fragment.create() requires mutable map - which is unusable when used with Kotlin #34848
  • Duplicate BeanOverrideHandler discovered in @Nested test case with superclass from different class or in interface implemented multiple times #34844
  • Accidental ClassLoader defineClass enforcement after #34677 #34824
  • HttpEntity.EMPTY headers should not be possible to mutate via HttpHeaders constructor #34812
  • AbstractFileResolvingResource.exists incorrectly reports result for resources inside of spring-boot executable jar #34796
  • Correctly expand query param with same name from URI variables array #34783
  • R2DBC NamedParameterUtils only expands reused collection parameter once #34768
  • PathMatchingResourcePatternResolver wrongly assumes that target/classes always exists #34764

📔 Documentation

  • Clarify CompositePropertySource behavior for EnumerablePropertySource contract #34886
  • Javadoc and @Nullable annotation for servletContext parameter of ConfigurableWebEnvironment.initPropertySources are contradictory #34845
  • Spring MVC: @EnableAsync needs to be redeclared for each ApplicationContext #34843
  • Provide a working example instead of unclear placeholders #34828

🔨 Dependency Upgrades

  • Upgrade to Micrometer 1.14.7 #34889
  • Upgrade to Reactor 2024.0.6 #34898

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Artur-, @​blake-bauman, @​iifawzi, @​kilink, @​quaff, @​whlit, and @​zzoe2346

Commits
  • ba590ac Release v6.2.7
  • ee62701 Make use of PatternMatchUtils ignoreCase option
  • fa168ca Revise FactoryBean locking behavior for strict/lenient consistency
  • 3c228a5 Add missing @​since tags in PatternMatchUtils
  • 9bf6b8c Upgrade to Reactor 2024.0.6
  • 37ecdd1 Forward more methods to underlying InputStream in NonClosingInputStream
  • 73f1c5a Polishing
  • 4d296fb Upgrade to Micrometer 1.14.7
  • 6a94444 Clarify CompositePropertySource behavior for EnumerablePropertySource contract
  • 03ae97b Introduce Spring property for default escape character for placeholders
  • Additional commits viewable in compare view

Updates org.springframework:spring-tx from 6.2.6 to 6.2.7

Release notes

Sourced from org.springframework:spring-tx's releases.

v6.2.7

⭐ New Features

  • Forward more methods to underlying InputStream in NonClosingInputStream #34893
  • Introduce Spring property for the default property placeholder escape character #34865
  • Close ApplicationContext once AOT processing has completed #34841
  • Fix AbstractJackson2HttpMessageConverter#getObjectMappersForType nullness #34811
  • Add option for case-insensitive match to PatternMatchUtils #34801
  • RestClient @RequestBody parameters lose generic type information when creating HTTP service beans #34793
  • Adds option to set Principal in MockServerWebExchange #34789

🐞 Bug Fixes

  • Beans created by FactoryBean are not considered as autowiring candidates if another thread holds a singletonLock #34902
  • PropertySourcesPlaceholderConfigurer placeholder resolution fails in several scenarios #34861
  • HttpComponentsClientHttpRequestFactory setConnectionRequestTimeout not working with httpclient 5.3.1 #34851
  • Fragment.create() requires mutable map - which is unusable when used with Kotlin #34848
  • Duplicate BeanOverrideHandler discovered in @Nested test case with superclass from different class or in interface implemented multiple times #34844
  • Accidental ClassLoader defineClass enforcement after #34677 #34824
  • HttpEntity.EMPTY headers should not be possible to mutate via HttpHeaders constructor #34812
  • AbstractFileResolvingResource.exists incorrectly reports result for resources inside of spring-boot executable jar #34796
  • Correctly expand query param with same name from URI variables array #34783
  • R2DBC NamedParameterUtils only expands reused collection parameter once #34768
  • PathMatchingResourcePatternResolver wrongly assumes that target/classes always exists #34764

📔 Documentation

  • Clarify CompositePropertySource behavior for EnumerablePropertySource contract #34886
  • Javadoc and @Nullable annotation for servletContext parameter of ConfigurableWebEnvironment.initPropertySources are contradictory #34845
  • Spring MVC: @EnableAsync needs to be redeclared for each ApplicationContext #34843
  • Provide a working example instead of unclear placeholders #34828

🔨 Dependency Upgrades

  • Upgrade to Micrometer 1.14.7 #34889
  • Upgrade to Reactor 2024.0.6 #34898

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Artur-, @​blake-bauman, @​iifawzi, @​kilink, @​quaff, @​whlit, and @​zzoe2346

Commits
  • ba590ac Release v6.2.7
  • ee62701 Make use of PatternMatchUtils ignoreCase option
  • fa168ca Revise FactoryBean locking behavior for strict/lenient consistency
  • 3c228a5 Add missing @​since tags in PatternMatchUtils
  • 9bf6b8c Upgrade to Reactor 2024.0.6
  • 37ecdd1 Forward more methods to underlying InputStream in NonClosingInputStream
  • 73f1c5a Polishing
  • 4d296fb Upgrade to Micrometer 1.14.7
  • 6a94444 Clarify CompositePropertySource behavior for EnumerablePropertySource contract
  • 03ae97b Introduce Spring property for default escape character for placeholders
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-security from 3.4.5 to 3.5.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-security's releases.

v3.5.0

Full release notes for Spring Boot 3.5 are available on the wiki.

⭐ New Features

  • Make heapdump endpoint restricted by default #45624
  • Remove SSL status tag from metrics #45602
  • Remove 'spring.http.client' deprecation and change 'spring.http.reactiveclient.settings' to 'spring.http.reactiveclient' #45507

🐞 Bug Fixes

  • Unable to override/set nested ConfigurationProperties by passing as a system property #45639
  • ValidationAutoConfiguration triggers early initialization of properties binding #45618
  • Micrometer "enable" annotations property does not cover observed aspect #45617
  • spring.graphql.sse.timeout is no longer exposed #45613
  • SpringApplication.setEnvironmentPrefix is ignored when reading SPRING_PROFILES_ACTIVE #45549
  • IllegalStateException when extracting using layers a module with no code of its own #45449
  • Removed spring.batch.initialize-schema property is still considered #45380
  • ReactorHttpClientBuilder does not offer a factory method to create the HttpClient #45378
  • Suggested values for spring.jpa.hibernate.ddl-auto are not aligned with Hibernate #45351
  • Custom default units declared on a field are ignored when binding properties in a native image #45347
  • DockerRegistryConfigAuthentication uses the wrong serverUrl as a fallback for the Credentials helper #45345
  • Various spring.datasource properties are mistakenly marked as ignored #45342
  • JerseyWebApplicationInitializer always gets loaded, setting a ServletContext initParameter #45297
  • DockerRegistryConfigAuthentication does not align with Docker CLI #45292
  • Unlike the Docker CLI, "\x00" characters are not trimmed from a decoded Docker Registry password #45290
  • CloudFoundry security matcher logs a warning due to use of the 'ignoring()' method #32622

📔 Documentation

  • Document the java info contribution #45634
  • Document the process info contribution #45632
  • Document the os info contribution #45630
  • Document typical spring.application.group and name use #45628
  • Document that bean methods should be static when annotated with @ConfigurationPropertiesBinding #45626
  • Document the way that primary Kotlin constructors are used when binding #45553
  • Improve "profile" reference documentation with additional admonitions #45551
  • Improve setEnvironmentPrefix(...) reference documentation #45376
  • Document all the available Testcontainers integrations #45367
  • Document when a spring.config.import value is relative and when it is fixed #45363
  • Update org.cyclonedx.bom version in docs to 2.3.0 #45320
  • Update link to "Parameter Name Retention" section of Spring Framework's release notes #45299

🔨 Dependency Upgrades

  • Prevent upgrade to Prometheus Client 1.3.7 #45541
  • Upgrade to Couchbase Client 3.8.1 #45539
  • Upgrade to Elasticsearch 8.18.1 #45447
  • Upgrade to GraphQL Java 24.0 #45588
  • Upgrade to Hibernate 6.6.15.Final #45540

... (truncated)

Commits
  • 8c2d645 Release v3.5.0
  • 0b49e78 Merge branch '3.4.x'
  • c684fa4 Switch make-default for publish-to-sdkman to 3.5.x
  • 5695192 Ensure descendants are always recalculated on cache refresh
  • 31f549e Merge branch '3.4.x'
  • 68df6f5 Next development version (v3.4.7-SNAPSHOT)
  • 9f46877 Merge branch '3.4.x'
  • 404a0df Merge branch '3.3.x' into 3.4.x
  • e331846 Next development version (v3.3.13-SNAPSHOT)
  • b142798 Merge branch '3.4.x'
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-amqp from 3.4.5 to 3.5.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-amqp's releases.

v3.5.0

Full release notes for Spring Boot 3.5 are available on the wiki.

⭐ New Features

  • Make heapdump endpoint restricted by default #45624
  • Remove SSL status tag from metrics #45602
  • Remove 'spring.http.client' deprecation and change 'spring.http.reactiveclient.settings' to 'spring.http.reactiveclient' #45507

🐞 Bug Fixes

  • Unable to override/set nested ConfigurationProperties by passing as a system property #45639
  • ValidationAutoConfiguration triggers early initialization of properties binding #45618
  • Micrometer "enable" annotations property does not cover observed aspect #45617
  • spring.graphql.sse.timeout is no longer exposed #45613
  • SpringApplication.setEnvironmentPrefix is ignored when reading SPRING_PROFILES_ACTIVE #45549
  • IllegalStateException when extracting using layers a module with no code of its own #45449
  • Removed spring.batch.initialize-schema property is still considered #45380
  • ReactorHttpClientBuilder does not offer a factory method to create the HttpClient #45378
  • Suggested values for spring.jpa.hibernate.ddl-auto are not aligned with Hibernate #45351
  • Custom default units declared on a field are ignored when binding properties in a native image #45347
  • DockerRegistryConfigAuthentication uses the wrong serverUrl as a fallback for the Credentials helper #45345
  • Various spring.datasource properties are mistakenly marked as ignored #45342
  • JerseyWebApplicationInitializer always gets loaded, setting a ServletContext initParameter #45297
  • DockerRegistryConfigAuthentication does not align with Docker CLI #45292
  • Unlike the Docker CLI, "\x00" characters are not trimmed from a decoded Docker Registry password #45290
  • CloudFoundry security matcher logs a warning due to use of the 'ignoring()' method #32622

📔 Documentation

  • Document the java info contribution #45634
  • Document the process info contribution #45632
  • Document the os info contribution #45630
  • Document typical spring.application.group and name use #45628
  • Document that bean methods should be static when annotated with @ConfigurationPropertiesBinding #45626
  • Document the way that primary Kotlin constructors are used when binding #45553
  • Improve "profile" reference documentation with additional admonitions #45551
  • Improve setEnvironmentPrefix(...) reference documentation #45376
  • Document all the available Testcontainers integrations #45367
  • Document when a spring.config.import value is relative and when it is fixed #45363
  • Update org.cyclonedx.bom version in docs to 2.3.0 #45320
  • Update link to "Parameter Name Retention" section of Spring Framework's release notes #45299

🔨 Dependency Upgrades

  • Prevent upgrade to Prometheus Client 1.3.7 #45541
  • Upgrade to Couchbase Client 3.8.1 #45539
  • Upgrade to Elasticsearch 8.18.1 #45447
  • Upgrade to GraphQL Java 24.0 #45588
  • Upgrade to Hibernate 6.6.15.Final #45540

... (truncated)

Commits
  • 8c2d645 Release v3.5.0
  • 0b49e78 Merge branch '3.4.x'
  • c684fa4 Switch make-default for publish-to-sdkman to 3.5.x
  • 5695192 Ensure descendants are always recalculated on cache refresh
  • 31f549e Merge branch '3.4.x'
  • 68df6f5 Next development version (v3.4.7-SNAPSHOT)
  • 9f46877 Merge branch '3.4.x'
  • 404a0df Merge branch '3.3.x' into 3.4.x
  • e331846 Next development version (v3.3.13-SNAPSHOT)
  • b142798 Merge branch '3.4.x'
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-configuration-processor from 3.4.5 to 3.5.0

Release notes

Sourced from org.springframework.boot:spring-boot-configuration-processor's releases.

v3.5.0

Full release notes for Spring Boot 3.5 are available on the wiki.

⭐ New Features

  • Make heapdump endpoint restricted by default #45624
  • Remove SSL status tag from metrics #45602
  • Remove 'spring.http.client' deprecation and change 'spring.http.reactiveclient.settings' to 'spring.http.reactiveclient' #45507

🐞 Bug Fixes

  • Unable to override/set nested ConfigurationProperties by passing as a system property #45639
  • ValidationAutoConfiguration triggers early initialization of properties binding #45618
  • Micrometer "enable" annotations property does not cover observed aspect #45617
  • spring.graphql.sse.timeout is no longer exposed #45613
  • SpringApplication.setEnvironmentPrefix is ignored when reading SPRING_PROFILES_ACTIVE #45549
  • IllegalStateException when extracting using layers a module with no code of its own #45449
  • Removed spring.batch.initialize-schema property is still considered #45380
  • ReactorHttpClientBuilder does not offer a factory method to create the HttpClient #45378
  • Suggested values for spring.jpa.hibernate.ddl-auto are not aligned with Hibernate #45351
  • Custom default units declared on a field are ignored when binding properties in a native image #45347
  • DockerRegistryConfigAuthentication uses the wrong serverUrl as a fallback for the Credentials helper #45345
  • Various spring.datasource properties are mistakenly marked as ignored #45342
  • JerseyWebApplicationInitializer always gets loaded, setting a ServletContext initParameter #45297
  • DockerRegistryConfigAuthentication does not align with Docker CLI #45292
  • Unlike the Docker CLI, "\x00" characters are not trimmed from a decoded Docker Registry password #45290
  • CloudFoundry security matcher logs a warning due to use of the 'ignoring()' method #32622

📔 Documentation

  • Document the java info contribution #45634
  • Document the process info contribution #45632
  • Document the os info contribution #45630
  • Document typical spring.application.group and name use #45628
  • Document that bean methods should be static when annotated with @ConfigurationPropertiesBinding #45626
  • Document the way that primary Kotlin constructors are used when binding #45553
  • Improve "profile" reference documentation with additional admonitions #45551
  • Improve setEnvironmentPrefix(...) reference documentation #45376
  • Document all the available Testcontainers integrations #45367
  • Document when a spring.config.import value is relative and when it is fixed #45363
  • Update org.cyclonedx.bom version in docs to 2.3.0 #45320
  • Update link to "Parameter Name Retention" section of Spring Framework's release notes #45299

🔨 Dependency Upgrades

  • Prevent upgrade to Prometheus Client 1.3.7 #45541
  • Upgrade to Couchbase Client 3.8.1 #45539
  • Upgrade to Elasticsearch 8.18.1 #45447
  • Upgrade to GraphQL Java 24.0 #45588
  • Upgrade to Hibernate 6.6.15.Final #45540

... (truncated)

Commits
  • 8c2d645 Release v3.5.0
  • 0b49e78 Merge branch '3.4.x'
  • c684fa4 Switch make-default for publish-to-sdkman to 3.5.x
  • 5695192 Ensure descendants are always recalculated on cache refresh
  • 31f549e Merge branch '3.4.x'
  • 68df6f5 Next development version (v3.4.7-SNAPSHOT)
  • 9f46877 Merge branch '3.4.x'
  • 404a0df Merge branch '3.3.x' into 3.4.x
  • e331846 Next development version (v3.3.13-SNAPSHOT)
  • b142798 Merge branch '3.4.x'
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-actuator from 3.4.5 to 3.5.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-actuator's releases.

v3.5.0

Full release notes for Spring Boot 3.5 are available on the wiki.

⭐ New Features

  • Make heapdump endpoint restricted by default #45624
  • Remove SSL status tag from metrics #45602
  • Remove 'spring.http.client' deprecation and change 'spring.http.reactiveclient.settings' to 'spring.http.reactiveclient' #45507

🐞 Bug Fixes

  • Unable to override/set nested ConfigurationProperties by passing as a system property #45639
  • ValidationAutoConfiguration triggers early initialization of properties binding #45618
  • Micrometer "enable" annotations property does not cover observed aspect #45617
  • spring.graphql.sse.timeout is no longer exposed #45613
  • SpringApplication.setEnvironmentPrefix is ignored when reading SPRING_PROFILES_ACTIVE #45549
  • IllegalStateException when extracting using layers a module with no code of its own #45449
  • Removed spring.batch.initialize-schema property is still considered #45380
  • ReactorHttpClientBuilder does not offer a factory method to create the HttpClient #45378
  • Suggested values for spring.jpa.hibernate.ddl-auto are not aligned with Hibernate #45351
  • Custom default units declared on a field are ignored when binding properties in a native image #45347
  • DockerRegistryConfigAuthentication uses the wrong serverUrl as a fallback for the Credentials helper #45345
  • Various spring.datasource properties are mistakenly marked as ignored #45342
  • JerseyWebApplicationInitializer always gets loaded, setting a ServletContext initParameter #45297
  • DockerRegistryConfigAuthentication does not align with Docker CLI #45292
  • Unlike the Docker CLI, "\x00" characters are not trimmed from a decoded Docker Registry password #45290
  • CloudFoundry security matcher logs a warning due to use of the 'ignoring()' method #32622

📔 Documentation

  • Document the java info contribution #45634
  • Document the process info contribution #45632
  • Document the os info contribution #45630
  • Document typical spring.application.group and name use #45628
  • Document that bean methods should be static when annotated with @ConfigurationPropertiesBinding #45626
  • Document the way that primary Kotlin constructors are used when binding #45553
  • Improve "profile" reference documentation with additional admonitions #45551
  • Improve setEnvironmentPrefix(...) reference documentation #45376
  • Document all the available Testcontainers integrations #45367
  • Document when a spring.config.import value is relative and when it is fixed #45363
  • Update org.cyclonedx.bom version in docs to 2.3.0 #45320
  • Update link to "Parameter Name Retention" section of Spring Framework's release notes #45299

🔨 Dependency Upgrades

  • Prevent upgrade to Prometheus Client 1.3.7 #45541
  • Upgrade to Couchbase Client 3.8.1 #45539
  • Upgrade to Elasticsearch 8.18.1 #45447
  • Upgrade to GraphQL Java 24.0 #45588
  • Upgrade to Hibernate 6.6.15.Final #45540

... (truncated)

Commits
  • 8c2d645 Release v3.5.0
  • 0b49e78 Merge branch '3.4.x'
  • c684fa4 Switch make-default for publish-to-sdkman to 3.5.x
  • 5695192 Ensure descendants are always recalculated on cache refresh
  • 31f549e Merge branch '3.4.x'
  • 68df6f5 Next development version (v3.4.7-SNAPSHOT)
  • 9f46877 Merge branch '3.4.x'
  • 404a0df Merge branch '3.3.x' into 3.4.x
  • e331846 Next development version (v3.3.13-SNAPSHOT)
  • b142798 Merge branch '3.4.x'
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-autoconfigure from 3.4.5 to 3.5.0

Release notes

Sourced from org.springframework.boot:spring-boot-autoconfigure's releases.

v3.5.0

Full release notes for Spring Boot 3.5 are available on the wiki.

⭐ New Features

  • Make heapdump endpoint restricted by default #45624
  • Remove SSL status tag from metrics #45602
  • Remove 'spring.http.client' deprecation and change 'spring.http.reactiveclient.settings' to 'spring.http.reactiveclient' #45507

🐞 Bug Fixes

  • Unable to override/set nested ConfigurationProperties by passing as a system property #45639
  • ValidationAutoConfiguration triggers early initialization of properties binding #45618
  • Micrometer "enable" annotations property does not cover observed aspect #45617
  • spring.graphql.sse.timeout is no longer exposed #45613
  • SpringApplication.setEnvironmentPrefix is ignored when reading SPRING_PROFILES_ACTIVE #45549
  • IllegalStateException when extracting using layers a module with no code of its own #45449
  • Removed spring.batch.initialize-schema property is still considered #45380
  • ReactorHttpClientBuilder does not offer a factory method to create the HttpClient #45378
  • Suggested values for spring.jpa.hibernate.ddl-auto are not aligned with Hibernate #45351
  • Custom default units declared on a field are ignored when binding properties in a native image #45347
  • DockerRegistryConfigAuthentication uses the wrong serverUrl as a fallback for the Credentials helper #45345
  • Various spring.datasource properties are mistakenly marked as ignored #45342
  • JerseyWebApplicationInitializer always gets loaded, setting a ServletContext initParameter #45297
  • DockerRegistryConfigAuthentication does not align with Docker CLI #45292
  • Unlike the Docker CLI, "\x00" characters are not trimmed from a decoded Docker Registry password #45290
  • CloudFoundry security matcher logs a warning due to use of the 'ignoring()' method #32622

📔 Documentation

  • Document the java info contribution #45634
  • Document the process info contribution #45632
  • Document the os info contribution #45630
  • Document typical spring.application.group and name use #45628
  • Document that bean methods should be static when annotated with @ConfigurationPropertiesBinding #45626
  • Document the way that primary Kotlin constructors are used when binding #45553
  • Improve "profile" reference documentation with additional admonitions #45551
  • Improve setEnvironmentPrefix(...) reference documentation #45376
  • Document all the available Testcontainers integrations #45367
  • Document when a spring.config.import value is relative and when it ...

    Description has been truncated

@dependabot
Bump the all-deps-minor-and-patch group with 11 updates
047221b 
Bumps the all-deps-minor-and-patch group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| org.apache.tomcat:tomcat-catalina | `10.1.40` | `10.1.41` |
| [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) | `6.2.6` | `6.2.7` |
| [org.springframework:spring-tx](https://github.com/spring-projects/spring-framework) | `6.2.6` | `6.2.7` |
| [org.springframework.boot:spring-boot-starter-security](https://github.com/spring-projects/spring-boot) | `3.4.5` | `3.5.0` |
| [org.springframework.boot:spring-boot-starter-amqp](https://github.com/spring-projects/spring-boot) | `3.4.5` | `3.5.0` |
| [org.springframework.boot:spring-boot-configuration-processor](https://github.com/spring-projects/spring-boot) | `3.4.5` | `3.5.0` |
| [org.springframework.boot:spring-boot-starter-actuator](https://github.com/spring-projects/spring-boot) | `3.4.5` | `3.5.0` |
| [org.springframework.boot:spring-boot-autoconfigure](https://github.com/spring-projects/spring-boot) | `3.4.5` | `3.5.0` |
| [org.springframework.boot:spring-boot-starter-validation](https://github.com/spring-projects/spring-boot) | `3.4.5` | `3.5.0` |
| [org.springframework.boot:spring-boot-starter-web](https://github.com/spring-projects/spring-boot) | `3.4.5` | `3.5.0` |
| [org.springframework.boot:spring-boot-starter-test](https://github.com/spring-projects/spring-boot) | `3.4.5` | `3.5.0` |


Updates `org.apache.tomcat:tomcat-catalina` from 10.1.40 to 10.1.41

Updates `org.springframework:spring-webmvc` from 6.2.6 to 6.2.7
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.6...v6.2.7)

Updates `org.springframework:spring-tx` from 6.2.6 to 6.2.7
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.6...v6.2.7)

Updates `org.springframework:spring-tx` from 6.2.6 to 6.2.7
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.6...v6.2.7)

Updates `org.springframework.boot:spring-boot-starter-security` from 3.4.5 to 3.5.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.5...v3.5.0)

Updates `org.springframework.boot:spring-boot-starter-amqp` from 3.4.5 to 3.5.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.5...v3.5.0)

Updates `org.springframework.boot:spring-boot-configuration-processor` from 3.4.5 to 3.5.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.5...v3.5.0)

Updates `org.springframework.boot:spring-boot-starter-actuator` from 3.4.5 to 3.5.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.5...v3.5.0)

Updates `org.springframework.boot:spring-boot-autoconfigure` from 3.4.5 to 3.5.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.5...v3.5.0)

Updates `org.springframework.boot:spring-boot-starter-validation` from 3.4.5 to 3.5.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.5...v3.5.0)

Updates `org.springframework.boot:spring-boot-starter-web` from 3.4.5 to 3.5.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.5...v3.5.0)

Updates `org.springframework.boot:spring-boot-starter-test` from 3.4.5 to 3.5.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.5...v3.5.0)

Updates `org.springframework.boot:spring-boot-starter-amqp` from 3.4.5 to 3.5.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.5...v3.5.0)

Updates `org.springframework.boot:spring-boot-configuration-processor` from 3.4.5 to 3.5.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.5...v3.5.0)

Updates `org.springframework.boot:spring-boot-starter-actuator` from 3.4.5 to 3.5.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.5...v3.5.0)

Updates `org.springframework.boot:spring-boot-autoconfigure` from 3.4.5 to 3.5.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.5...v3.5.0)

Updates `org.springframework.boot:spring-boot-starter-validation` from 3.4.5 to 3.5.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.5...v3.5.0)

Updates `org.springframework.boot:spring-boot-starter-web` from 3.4.5 to 3.5.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.5...v3.5.0)

Updates `org.springframework.boot:spring-boot-starter-test` from 3.4.5 to 3.5.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.5...v3.5.0)

---
updated-dependencies:
- dependency-name: org.apache.tomcat:tomcat-catalina
  dependency-version: 10.1.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework:spring-webmvc
  dependency-version: 6.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework:spring-tx
  dependency-version: 6.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework:spring-tx
  dependency-version: 6.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-security
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-amqp
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-configuration-processor
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-actuator
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-autoconfigure
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-validation
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-web
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-test
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-amqp
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-configuration-processor
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-actuator
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-autoconfigure
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-validation
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-web
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-test
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 1, 2025

The reviewers field in the dependabot.yml file will be removed soon. Please use the code owners file to specify reviewers for Dependabot PRs. For more information, see this blog post.

@dependabot dependabot bot requested review from Jorich, pr11t and rammrain June 1, 2025 22:28
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jun 1, 2025
@sonarqubecloud
Copy link

sonarqubecloud bot commented Jun 2, 2025

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

rammrain
rammrain approved these changes Jun 3, 2025
View reviewed changes
Copy link
Member

@rammrain rammrain left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dependabot merge

@dependabot dependabot bot merged commit d35695b into master Jun 3, 2025
7 of 8 checks passed
@dependabot dependabot bot deleted the dependabot/gradle/all-deps-minor-and-patch-a08542a7fa branch June 3, 2025 05:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@rammrain rammrain rammrain approved these changes

@Jorich Jorich Awaiting requested review from Jorich

@pr11t pr11t Awaiting requested review from pr11t

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rammrain