Skip to content

Bump the all-deps-minor-and-patch group with 13 updates#45

Merged
dependabot[bot] merged 1 commit intomasterfrom
dependabot/gradle/all-deps-minor-and-patch-e320cffde5
May 2, 2025
Merged

Bump the all-deps-minor-and-patch group with 13 updates#45
dependabot[bot] merged 1 commit intomasterfrom
dependabot/gradle/all-deps-minor-and-patch-e320cffde5

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 1, 2025

Bumps the all-deps-minor-and-patch group with 13 updates:

Package From To
org.apache.tomcat:tomcat-catalina 10.1.39 10.1.40
org.springframework:spring-webmvc 6.2.5 6.2.6
org.springframework:spring-tx 6.2.5 6.2.6
org.springframework.boot:spring-boot-starter-security 3.4.4 3.4.5
org.springframework.boot:spring-boot-starter-amqp 3.4.4 3.4.5
org.springframework.boot:spring-boot-configuration-processor 3.4.4 3.4.5
org.springframework.boot:spring-boot-starter-actuator 3.4.4 3.4.5
org.springframework.boot:spring-boot-autoconfigure 3.4.4 3.4.5
org.springframework.boot:spring-boot-starter-validation 3.4.4 3.4.5
org.springframework.boot:spring-boot-starter-web 3.4.4 3.4.5
org.springframework.boot:spring-boot-starter-test 3.4.4 3.4.5
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.18.3 2.19.0
org.owasp.dependencycheck 12.1.0 12.1.1

Updates org.apache.tomcat:tomcat-catalina from 10.1.39 to 10.1.40

Updates org.springframework:spring-webmvc from 6.2.5 to 6.2.6

Release notes

Sourced from org.springframework:spring-webmvc's releases.

v6.2.6

⭐ New Features

  • An option for SimpleAsyncTaskExecutor to throw an exception when limit is reached #34727
  • Provide first-class support for Bean Overrides with @ContextHierarchy #34723
  • Micro performance optimizations #34717
  • Suppress "Unable to rollback against JDBC Connection" in case of timeout (connection closed) #34714
  • Avoid early FactoryBean instantiation for type-based retrieval with includeNonSingletons=false and allowEagerInit=true #34710
  • ReactiveCachingHandler still not using error handler on sync cache. #34708
  • Add an exchangeForRequiredValue variant to RestClient #34692
  • Recursively boxing Kotlin nested value classes in CoroutinesUtils #34682
  • ServletServerHttpRequest does not use charset parameter of application/x-www-form-urlencoded #34675
  • LifecycleGroup concurrent start and start timeout #34634
  • HibernateJpaDialect exception translation misses concrete exceptions wrapped in Hibernate's ExecutionException #34633

🐞 Bug Fixes

  • Inconsistency in SseEmitter.onCompletion() behavior between Spring 6.2.3 and 6.2.5 #34762
  • Deadlock while creating Spring beans with parallel bootstrap threads on IBM Liberty #34729
  • PropertyBatchUpdateException: causes of nested PropertyAccessExceptions not shown in output #34691
  • IllegalAccessError for package-private member of AzureStorageConfiguration on WebSphere #34684
  • Change in Jar usecache behavior with Spring 6.1.x causing java.lang.IllegalStateException: zip file closed #34678
  • Startup performance regression due to CGLIB class load attempts in Spring 6.1.x #34677
  • An infinite wait on a parallel context.getBean() #34672
  • InvalidObservationException: Invalid start: Observation 'http.client.requests' has already been started #34671
  • @Configuration classes can no longer be abstract without @Bean methods #34663
  • Generated-code for LinkedHashMap is missing static keyword #34659
  • Detect late-set primary markers for autowiring shortcut algorithm #34658
  • @MockitoBean with custom @Qualifier is not injected into @Configuration class #34646
  • Qualifier Resolution Issue in Parent-Child Context Hierarchies #34644
  • Enforced container-level acknowledge call for custom acknowledgement mode #34635
  • UriComponentsBuilder does not treat a URN as opaque if it contains a slash #34588
  • Migrating from Spring 6.1.x to 6.2.x leads to exceptions in a Pekko setup #34303

📔 Documentation

  • Update Javadoc for ignoreDependencyInterface() in AbstractAutowireCapableBeanFactory #34747
  • Update Javadoc to stop mentioning 5.3.x as the status quo #34740
  • Fix broken link for Server-Sent Events #34705
  • Fix typo in Bean Validation section of reference manual #34686
  • Remove unnecessary closing curly brackets in Javadoc #34679
  • Add javadoc notes on potential exception suppression in ListableBeanFactory#getBeansOfType #34629
  • Remove remaining references to Forwarded headers in MvcUriComponentsBuilder #34625

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​acktsap, @​dmitrysulman, @​iggzq, @​izeye, @​ngocnhan-tran1996, @​obourgain, and @​tobias-haenel

Commits
  • 90f9c09 Release v6.2.6
  • f40d986 Revise configuration for javadoc Gradle tasks
  • 9c13c6b Revert "Use optimistic locking where possible in ResponseBodyEmitter"
  • b49924b Revert "Fix handling of timeout in SseEmitter"
  • 7b8c104 Upgrade to github-changelog-generator 0.0.12
  • 8f62a8f Suppress recently introduced warning
  • d0966df Revise contribution
  • bb45a3a Update AbstractAutowireCapableBeanFactory.ignoreDependencyInterface() Javadoc
  • 7095f4c Use proper casing for parameter and variable names
  • a22d204 Remove duplicate words in Java source code
  • Additional commits viewable in compare view

Updates org.springframework:spring-tx from 6.2.5 to 6.2.6

Release notes

Sourced from org.springframework:spring-tx's releases.

v6.2.6

⭐ New Features

  • An option for SimpleAsyncTaskExecutor to throw an exception when limit is reached #34727
  • Provide first-class support for Bean Overrides with @ContextHierarchy #34723
  • Micro performance optimizations #34717
  • Suppress "Unable to rollback against JDBC Connection" in case of timeout (connection closed) #34714
  • Avoid early FactoryBean instantiation for type-based retrieval with includeNonSingletons=false and allowEagerInit=true #34710
  • ReactiveCachingHandler still not using error handler on sync cache. #34708
  • Add an exchangeForRequiredValue variant to RestClient #34692
  • Recursively boxing Kotlin nested value classes in CoroutinesUtils #34682
  • ServletServerHttpRequest does not use charset parameter of application/x-www-form-urlencoded #34675
  • LifecycleGroup concurrent start and start timeout #34634
  • HibernateJpaDialect exception translation misses concrete exceptions wrapped in Hibernate's ExecutionException #34633

🐞 Bug Fixes

  • Inconsistency in SseEmitter.onCompletion() behavior between Spring 6.2.3 and 6.2.5 #34762
  • Deadlock while creating Spring beans with parallel bootstrap threads on IBM Liberty #34729
  • PropertyBatchUpdateException: causes of nested PropertyAccessExceptions not shown in output #34691
  • IllegalAccessError for package-private member of AzureStorageConfiguration on WebSphere #34684
  • Change in Jar usecache behavior with Spring 6.1.x causing java.lang.IllegalStateException: zip file closed #34678
  • Startup performance regression due to CGLIB class load attempts in Spring 6.1.x #34677
  • An infinite wait on a parallel context.getBean() #34672
  • InvalidObservationException: Invalid start: Observation 'http.client.requests' has already been started #34671
  • @Configuration classes can no longer be abstract without @Bean methods #34663
  • Generated-code for LinkedHashMap is missing static keyword #34659
  • Detect late-set primary markers for autowiring shortcut algorithm #34658
  • @MockitoBean with custom @Qualifier is not injected into @Configuration class #34646
  • Qualifier Resolution Issue in Parent-Child Context Hierarchies #34644
  • Enforced container-level acknowledge call for custom acknowledgement mode #34635
  • UriComponentsBuilder does not treat a URN as opaque if it contains a slash #34588
  • Migrating from Spring 6.1.x to 6.2.x leads to exceptions in a Pekko setup #34303

📔 Documentation

  • Update Javadoc for ignoreDependencyInterface() in AbstractAutowireCapableBeanFactory #34747
  • Update Javadoc to stop mentioning 5.3.x as the status quo #34740
  • Fix broken link for Server-Sent Events #34705
  • Fix typo in Bean Validation section of reference manual #34686
  • Remove unnecessary closing curly brackets in Javadoc #34679
  • Add javadoc notes on potential exception suppression in ListableBeanFactory#getBeansOfType #34629
  • Remove remaining references to Forwarded headers in MvcUriComponentsBuilder #34625

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​acktsap, @​dmitrysulman, @​iggzq, @​izeye, @​ngocnhan-tran1996, @​obourgain, and @​tobias-haenel

Commits
  • 90f9c09 Release v6.2.6
  • f40d986 Revise configuration for javadoc Gradle tasks
  • 9c13c6b Revert "Use optimistic locking where possible in ResponseBodyEmitter"
  • b49924b Revert "Fix handling of timeout in SseEmitter"
  • 7b8c104 Upgrade to github-changelog-generator 0.0.12
  • 8f62a8f Suppress recently introduced warning
  • d0966df Revise contribution
  • bb45a3a Update AbstractAutowireCapableBeanFactory.ignoreDependencyInterface() Javadoc
  • 7095f4c Use proper casing for parameter and variable names
  • a22d204 Remove duplicate words in Java source code
  • Additional commits viewable in compare view

Updates org.springframework:spring-tx from 6.2.5 to 6.2.6

Release notes

Sourced from org.springframework:spring-tx's releases.

v6.2.6

⭐ New Features

  • An option for SimpleAsyncTaskExecutor to throw an exception when limit is reached #34727
  • Provide first-class support for Bean Overrides with @ContextHierarchy #34723
  • Micro performance optimizations #34717
  • Suppress "Unable to rollback against JDBC Connection" in case of timeout (connection closed) #34714
  • Avoid early FactoryBean instantiation for type-based retrieval with includeNonSingletons=false and allowEagerInit=true #34710
  • ReactiveCachingHandler still not using error handler on sync cache. #34708
  • Add an exchangeForRequiredValue variant to RestClient #34692
  • Recursively boxing Kotlin nested value classes in CoroutinesUtils #34682
  • ServletServerHttpRequest does not use charset parameter of application/x-www-form-urlencoded #34675
  • LifecycleGroup concurrent start and start timeout #34634
  • HibernateJpaDialect exception translation misses concrete exceptions wrapped in Hibernate's ExecutionException #34633

🐞 Bug Fixes

  • Inconsistency in SseEmitter.onCompletion() behavior between Spring 6.2.3 and 6.2.5 #34762
  • Deadlock while creating Spring beans with parallel bootstrap threads on IBM Liberty #34729
  • PropertyBatchUpdateException: causes of nested PropertyAccessExceptions not shown in output #34691
  • IllegalAccessError for package-private member of AzureStorageConfiguration on WebSphere #34684
  • Change in Jar usecache behavior with Spring 6.1.x causing java.lang.IllegalStateException: zip file closed #34678
  • Startup performance regression due to CGLIB class load attempts in Spring 6.1.x #34677
  • An infinite wait on a parallel context.getBean() #34672
  • InvalidObservationException: Invalid start: Observation 'http.client.requests' has already been started #34671
  • @Configuration classes can no longer be abstract without @Bean methods #34663
  • Generated-code for LinkedHashMap is missing static keyword #34659
  • Detect late-set primary markers for autowiring shortcut algorithm #34658
  • @MockitoBean with custom @Qualifier is not injected into @Configuration class #34646
  • Qualifier Resolution Issue in Parent-Child Context Hierarchies #34644
  • Enforced container-level acknowledge call for custom acknowledgement mode #34635
  • UriComponentsBuilder does not treat a URN as opaque if it contains a slash #34588
  • Migrating from Spring 6.1.x to 6.2.x leads to exceptions in a Pekko setup #34303

📔 Documentation

  • Update Javadoc for ignoreDependencyInterface() in AbstractAutowireCapableBeanFactory #34747
  • Update Javadoc to stop mentioning 5.3.x as the status quo #34740
  • Fix broken link for Server-Sent Events #34705
  • Fix typo in Bean Validation section of reference manual #34686
  • Remove unnecessary closing curly brackets in Javadoc #34679
  • Add javadoc notes on potential exception suppression in ListableBeanFactory#getBeansOfType #34629
  • Remove remaining references to Forwarded headers in MvcUriComponentsBuilder #34625

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​acktsap, @​dmitrysulman, @​iggzq, @​izeye, @​ngocnhan-tran1996, @​obourgain, and @​tobias-haenel

Commits
  • 90f9c09 Release v6.2.6
  • f40d986 Revise configuration for javadoc Gradle tasks
  • 9c13c6b Revert "Use optimistic locking where possible in ResponseBodyEmitter"
  • b49924b Revert "Fix handling of timeout in SseEmitter"
  • 7b8c104 Upgrade to github-changelog-generator 0.0.12
  • 8f62a8f Suppress recently introduced warning
  • d0966df Revise contribution
  • bb45a3a Update AbstractAutowireCapableBeanFactory.ignoreDependencyInterface() Javadoc
  • 7095f4c Use proper casing for parameter and variable names
  • a22d204 Remove duplicate words in Java source code
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-security from 3.4.4 to 3.4.5

Release notes

Sourced from org.springframework.boot:spring-boot-starter-security's releases.

v3.4.5

🐞 Bug Fixes

  • Spring Boot with native image container image build fails on podman due to directory permissions #45256
  • Neo4jReactiveDataAutoConfiguration assumes that certain beans are available #45235
  • Wrong jOOQ exception translator with empty db name #45219
  • MessageSourceMessageInterpolator does not replace a parameter when the message matches its code #45213
  • IntegrationMbeanExporter is not eligible for getting processed by all BeanPostProcessors warnings are shown when using JMX #45194
  • OAuth2AuthorizationServerJwtAutoConfiguration uses @ConditionalOnClass incorrectly #45178
  • MongoDB's dependency management is missing Kotlin coroutine driver modules #45159
  • ImagePlatform can cause "OS must not be empty" IllegalArgumentException #45153
  • TypeUtils does not handle generics with identical names in different positions #45039
  • HttpClient5 5.4.3 breaks local Docker transport #45028
  • spring.datasource.hikari.data-source-class-name cannot be used as a driver class name is always required and Hikari does not accept both #45002
  • Post-processing to apply custom JdbcConnectionDetails triggers an NPE in Hikari if the JDBC URL is for an unknown driver #44998
  • DataSourceBuilder triggers an NPE in Hikari when trying to build a DataSource with a JDBC URL for an unknown driver #44995
  • SSL config does not watch for symlink file changes #44887
  • EmbeddedLdapAutoConfiguration should not rely on PreDestroy #44874
  • DataSourceTransactionManagerAutoConfiguration should run after DataSourceAutoConfiguration #44819
  • JsonValueWriter can throw StackOverflowError on deeply nested items #44627
  • In a reactive web app, SslBundle can no longer open store file locations without using a 'file:' prefix #44535
  • Logging a Path object using structured logging throws StackOverflowError #44507

📔 Documentation

  • Make @Component a javadoc link #45258
  • Fix documentation links to buildpacks.io #45241
  • Clarify the use of multiple profile expressions with "spring.config.activate.on-profile" #45224
  • Show the use of token properties in authorization server clients configuration example #45176
  • Add details of the purpose of the metrics endpoint #45047
  • Escape the asterisk in spring-application.adoc #45033
  • Add reference to Styra (OPA) Spring Boot SDK #44976
  • Update CDS documentation to cover AOTCache #44970
  • WebFlux security documentation incorrectly links to servlet classes #44966
  • Replace mentions of deprecated MockBean annotation #44947
  • TaskExecution documentation should describe what happens when multiple Executor beans are present #44908
  • Documentation lists coordinates for some dependencies that are not actually managed #44879
  • Polish javadoc of SpringProfileAction #44826

🔨 Dependency Upgrades

  • Upgrade to AspectJ 1.9.24 #45184
  • Upgrade to Couchbase Client 3.7.9 #45072
  • Upgrade to Hibernate 6.6.13.Final #45073
  • Upgrade to HttpClient5 5.4.3 #45074
  • Upgrade to HttpCore5 5.3.4 #45075
  • Upgrade to Jaybird 5.0.7.java11 #45076
  • Upgrade to Jetty 12.0.19 #45077
  • Upgrade to jOOQ 3.19.22 #45078
  • Upgrade to Lombok 1.18.38 #45079

... (truncated)

Commits
  • b882c29 Release v3.4.5
  • 918066f Merge branch '3.3.x' into 3.4.x
  • ab0c332 Next development version (v3.3.12-SNAPSHOT)
  • 71acf93 Merge branch '3.3.x' into 3.4.x
  • d2eaac6 Revert "Upgrade to Netty 4.1.120.Final"
  • d24a38f Merge branch '3.3.x' into 3.4.x
  • 933572a Upgrade to Netty 4.1.120.Final
  • 016b3de Upgrade to Netty 4.1.120.Final
  • 46a709a Merge branch '3.3.x' into 3.4.x
  • 55f67c9 Fix potential null problem in actuator
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-amqp from 3.4.4 to 3.4.5

Release notes

Sourced from org.springframework.boot:spring-boot-starter-amqp's releases.

v3.4.5

🐞 Bug Fixes

  • Spring Boot with native image container image build fails on podman due to directory permissions #45256
  • Neo4jReactiveDataAutoConfiguration assumes that certain beans are available #45235
  • Wrong jOOQ exception translator with empty db name #45219
  • MessageSourceMessageInterpolator does not replace a parameter when the message matches its code #45213
  • IntegrationMbeanExporter is not eligible for getting processed by all BeanPostProcessors warnings are shown when using JMX #45194
  • OAuth2AuthorizationServerJwtAutoConfiguration uses @ConditionalOnClass incorrectly #45178
  • MongoDB's dependency management is missing Kotlin coroutine driver modules #45159
  • ImagePlatform can cause "OS must not be empty" IllegalArgumentException #45153
  • TypeUtils does not handle generics with identical names in different positions #45039
  • HttpClient5 5.4.3 breaks local Docker transport #45028
  • spring.datasource.hikari.data-source-class-name cannot be used as a driver class name is always required and Hikari does not accept both #45002
  • Post-processing to apply custom JdbcConnectionDetails triggers an NPE in Hikari if the JDBC URL is for an unknown driver #44998
  • DataSourceBuilder triggers an NPE in Hikari when trying to build a DataSource with a JDBC URL for an unknown driver #44995
  • SSL config does not watch for symlink file changes #44887
  • EmbeddedLdapAutoConfiguration should not rely on PreDestroy #44874
  • DataSourceTransactionManagerAutoConfiguration should run after DataSourceAutoConfiguration #44819
  • JsonValueWriter can throw StackOverflowError on deeply nested items #44627
  • In a reactive web app, SslBundle can no longer open store file locations without using a 'file:' prefix #44535
  • Logging a Path object using structured logging throws StackOverflowError #44507

📔 Documentation

  • Make @Component a javadoc link #45258
  • Fix documentation links to buildpacks.io #45241
  • Clarify the use of multiple profile expressions with "spring.config.activate.on-profile" #45224
  • Show the use of token properties in authorization server clients configuration example #45176
  • Add details of the purpose of the metrics endpoint #45047
  • Escape the asterisk in spring-application.adoc #45033
  • Add reference to Styra (OPA) Spring Boot SDK #44976
  • Update CDS documentation to cover AOTCache #44970
  • WebFlux security documentation incorrectly links to servlet classes #44966
  • Replace mentions of deprecated MockBean annotation #44947
  • TaskExecution documentation should describe what happens when multiple Executor beans are present #44908
  • Documentation lists coordinates for some dependencies that are not actually managed #44879
  • Polish javadoc of SpringProfileAction #44826

🔨 Dependency Upgrades

  • Upgrade to AspectJ 1.9.24 #45184
  • Upgrade to Couchbase Client 3.7.9 #45072
  • Upgrade to Hibernate 6.6.13.Final #45073
  • Upgrade to HttpClient5 5.4.3 #45074
  • Upgrade to HttpCore5 5.3.4 #45075
  • Upgrade to Jaybird 5.0.7.java11 #45076
  • Upgrade to Jetty 12.0.19 #45077
  • Upgrade to jOOQ 3.19.22 #45078
  • Upgrade to Lombok 1.18.38 #45079

... (truncated)

Commits
  • b882c29 Release v3.4.5
  • 918066f Merge branch '3.3.x' into 3.4.x
  • ab0c332 Next development version (v3.3.12-SNAPSHOT)
  • 71acf93 Merge branch '3.3.x' into 3.4.x
  • d2eaac6 Revert "Upgrade to Netty 4.1.120.Final"
  • d24a38f Merge branch '3.3.x' into 3.4.x
  • 933572a Upgrade to Netty 4.1.120.Final
  • 016b3de Upgrade to Netty 4.1.120.Final
  • 46a709a Merge branch '3.3.x' into 3.4.x
  • 55f67c9 Fix potential null problem in actuator
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-configuration-processor from 3.4.4 to 3.4.5

Release notes

Sourced from org.springframework.boot:spring-boot-configuration-processor's releases.

v3.4.5

🐞 Bug Fixes

  • Spring Boot with native image container image build fails on podman due to directory permissions #45256
  • Neo4jReactiveDataAutoConfiguration assumes that certain beans are available #45235
  • Wrong jOOQ exception translator with empty db name #45219
  • MessageSourceMessageInterpolator does not replace a parameter when the message matches its code #45213
  • IntegrationMbeanExporter is not eligible for getting processed by all BeanPostProcessors warnings are shown when using JMX #45194
  • OAuth2AuthorizationServerJwtAutoConfiguration uses @ConditionalOnClass incorrectly #45178
  • MongoDB's dependency management is missing Kotlin coroutine driver modules #45159
  • ImagePlatform can cause "OS must not be empty" IllegalArgumentException #45153
  • TypeUtils does not handle generics with identical names in different positions #45039
  • HttpClient5 5.4.3 breaks local Docker transport #45028
  • spring.datasource.hikari.data-source-class-name cannot be used as a driver class name is always required and Hikari does not accept both #45002
  • Post-processing to apply custom JdbcConnectionDetails triggers an NPE in Hikari if the JDBC URL is for an unknown driver #44998
  • DataSourceBuilder triggers an NPE in Hikari when trying to build a DataSource with a JDBC URL for an unknown driver #44995
  • SSL config does not watch for symlink file changes #44887
  • EmbeddedLdapAutoConfiguration should not rely on PreDestroy #44874
  • DataSourceTransactionManagerAutoConfiguration should run after DataSourceAutoConfiguration #44819
  • JsonValueWriter can throw StackOverflowError on deeply nested items #44627
  • In a reactive web app, SslBundle can no longer open store file locations without using a 'file:' prefix #44535
  • Logging a Path object using structured logging throws StackOverflowError #44507

📔 Documentation

  • Make @Component a javadoc link #45258
  • Fix documentation links to buildpacks.io #45241
  • Clarify the use of multiple profile expressions with "spring.config.activate.on-profile" #45224
  • Show the use of token properties in authorization server clients configuration example #45176
  • Add details of the purpose of the metrics endpoint #45047
  • Escape the asterisk in spring-application.adoc #45033
  • Add reference to Styra (OPA) Spring Boot SDK #44976
  • Update CDS documentation to cover AOTCache #44970
  • WebFlux security documentation incorrectly links to servlet classes #44966
  • Replace mentions of deprecated MockBean annotation #44947
  • TaskExecution documentation should describe what happens when multiple Executor beans are present #44908
  • Documentation lists coordinates for some dependencies that are not actually managed #44879
  • Polish javadoc of SpringProfileAction #44826

🔨 Dependency Upgrades

  • Upgrade to AspectJ 1.9.24 #45184
  • Upgrade to Couchbase Client 3.7.9 #45072
  • Upgrade to Hibernate 6.6.13.Final #45073
  • Upgrade to HttpClient5 5.4.3 #45074
  • Upgrade to HttpCore5 5.3.4 #45075
  • Upgrade to Jaybird 5.0.7.java11 #45076
  • Upgrade to Jetty 12.0.19 #45077
  • Upgrade to jOOQ 3.19.22 #45078
  • Upgrade to Lombok 1.18.38 #45079

... (truncated)

Commits
  • b882c29 Release v3.4.5
  • 918066f Merge branch '3.3.x' into 3.4.x
  • ab0c332 Next development version (v3.3.12-SNAPSHOT)
  • 71acf93 Merge branch '3.3.x' into 3.4.x
  • d2eaac6 Revert "Upgrade to Netty 4.1.120.Final"
  • d24a38f Merge branch '3.3.x' into 3.4.x
  • 933572a Upgrade to Netty 4.1.120.Final
  • 016b3de Upgrade to Netty 4.1.120.Final
  • 46a709a Merge branch '3.3.x' into 3.4.x
  • 55f67c9 Fix potential null problem in actuator
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-actuator from 3.4.4 to 3.4.5

Release notes

Sourced from org.springframework.boot:spring-boot-starter-actuator's releases.

v3.4.5

🐞 Bug Fixes

  • Spring Boot with native image container image build fails on podman due to directory permissions #45256
  • Neo4jReactiveDataAutoConfiguration assumes that certain beans are available #45235
  • Wrong jOOQ exception translator with empty db name #45219
  • MessageSourceMessageInterpolator does not replace a parameter when the message matches its code #45213
  • IntegrationMbeanExporter is not eligible for getting processed by all BeanPostProcessors warnings are shown when using JMX #45194
  • OAuth2AuthorizationServerJwtAutoConfiguration uses @ConditionalOnClass incorrectly #45178
  • MongoDB's dependency management is missing Kotlin coroutine driver modules #45159
  • ImagePlatform can cause "OS must not be empty" IllegalArgumentException #45153
  • TypeUtils does not handle generics with identical names in different positions #45039
  • HttpClient5 5.4.3 breaks local Docker transport #45028
  • spring.datasource.hikari.data-source-class-name cannot be used as a driver class name is always required and Hikari does not accept both #45002
  • Post-processing to apply custom JdbcConnectionDetails triggers an NPE in Hikari if the JDBC URL is for an unknown driver #44998
  • DataSourceBuilder triggers an NPE in Hikari when trying to build a DataSource with a JDBC URL for an unknown driver #44995
  • SSL config does not watch for symlink file changes #44887
  • EmbeddedLdapAutoConfiguration should not rely on PreDestroy #44874
  • DataSourceTransactionManagerAutoConfiguration should run after DataSourceAutoConfiguration #44819
  • JsonValueWriter can throw StackOverflowError on deeply nested items #44627
  • In a reactive web app, SslBundle can no longer open store file locations without using a 'file:' prefix #44535
  • Logging a Path object using structured logging throws StackOverflowError #44507

📔 Documentation

  • Make @Component a javadoc link #45258
  • Fix documentation links to buildpacks.io #45241
  • Clarify the use of multiple profile expressions with "spring.config.activate.on-profile" #45224
  • Show the use of token properties in authorization server clients configuration example #45176
  • Add details of the purpose of the metrics endpoint #45047
  • Escape the asterisk in spring-application.adoc #45033
  • Add reference to Styra (OPA) Spring Boot SDK #44976
  • Update CDS documentation to cover AOTCache #44970
  • WebFlux security documentation incorrectly links to servlet classes #44966
  • Replace mentions of deprecated MockBean annotation #44947
  • TaskExecution documentation should describe what happens when multiple Executor beans are present #44908
  • Documentation lists coordinates for some dependencies that are not actually managed #44879
  • Polish javadoc of SpringProfileAction #44826

🔨 Dependency Upgrades

  • Upgrade to AspectJ 1.9.24 #45184
  • Upgrade to Couchbase Client 3.7.9 #45072
  • Upgrade to Hibernate 6.6.13.Final #45073
  • Upgrade to HttpClient5 5.4.3 #45074
  • Upgrade to HttpCore5 5.3.4 #45075
  • Upgrade to Jaybird 5.0.7.java11 #45076
  • Upgrade to Jetty 12.0.19 #45077
  • Upgrade to jOOQ 3.19.22 #45078
  • Upgrade to Lombok 1.18.38 #45079

... (truncated)

Commits

@dependabot
Bump the all-deps-minor-and-patch group with 13 updates
b79aca3 
Bumps the all-deps-minor-and-patch group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| org.apache.tomcat:tomcat-catalina | `10.1.39` | `10.1.40` |
| [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) | `6.2.5` | `6.2.6` |
| [org.springframework:spring-tx](https://github.com/spring-projects/spring-framework) | `6.2.5` | `6.2.6` |
| [org.springframework.boot:spring-boot-starter-security](https://github.com/spring-projects/spring-boot) | `3.4.4` | `3.4.5` |
| [org.springframework.boot:spring-boot-starter-amqp](https://github.com/spring-projects/spring-boot) | `3.4.4` | `3.4.5` |
| [org.springframework.boot:spring-boot-configuration-processor](https://github.com/spring-projects/spring-boot) | `3.4.4` | `3.4.5` |
| [org.springframework.boot:spring-boot-starter-actuator](https://github.com/spring-projects/spring-boot) | `3.4.4` | `3.4.5` |
| [org.springframework.boot:spring-boot-autoconfigure](https://github.com/spring-projects/spring-boot) | `3.4.4` | `3.4.5` |
| [org.springframework.boot:spring-boot-starter-validation](https://github.com/spring-projects/spring-boot) | `3.4.4` | `3.4.5` |
| [org.springframework.boot:spring-boot-starter-web](https://github.com/spring-projects/spring-boot) | `3.4.4` | `3.4.5` |
| [org.springframework.boot:spring-boot-starter-test](https://github.com/spring-projects/spring-boot) | `3.4.4` | `3.4.5` |
| com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.18.3` | `2.19.0` |
| org.owasp.dependencycheck | `12.1.0` | `12.1.1` |


Updates `org.apache.tomcat:tomcat-catalina` from 10.1.39 to 10.1.40

Updates `org.springframework:spring-webmvc` from 6.2.5 to 6.2.6
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.5...v6.2.6)

Updates `org.springframework:spring-tx` from 6.2.5 to 6.2.6
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.5...v6.2.6)

Updates `org.springframework:spring-tx` from 6.2.5 to 6.2.6
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.5...v6.2.6)

Updates `org.springframework.boot:spring-boot-starter-security` from 3.4.4 to 3.4.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.4...v3.4.5)

Updates `org.springframework.boot:spring-boot-starter-amqp` from 3.4.4 to 3.4.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.4...v3.4.5)

Updates `org.springframework.boot:spring-boot-configuration-processor` from 3.4.4 to 3.4.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.4...v3.4.5)

Updates `org.springframework.boot:spring-boot-starter-actuator` from 3.4.4 to 3.4.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.4...v3.4.5)

Updates `org.springframework.boot:spring-boot-autoconfigure` from 3.4.4 to 3.4.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.4...v3.4.5)

Updates `org.springframework.boot:spring-boot-starter-validation` from 3.4.4 to 3.4.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.4...v3.4.5)

Updates `org.springframework.boot:spring-boot-starter-web` from 3.4.4 to 3.4.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.4...v3.4.5)

Updates `org.springframework.boot:spring-boot-starter-test` from 3.4.4 to 3.4.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.4...v3.4.5)

Updates `org.springframework.boot:spring-boot-starter-amqp` from 3.4.4 to 3.4.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.4...v3.4.5)

Updates `org.springframework.boot:spring-boot-configuration-processor` from 3.4.4 to 3.4.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.4...v3.4.5)

Updates `org.springframework.boot:spring-boot-starter-actuator` from 3.4.4 to 3.4.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.4...v3.4.5)

Updates `org.springframework.boot:spring-boot-autoconfigure` from 3.4.4 to 3.4.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.4...v3.4.5)

Updates `org.springframework.boot:spring-boot-starter-validation` from 3.4.4 to 3.4.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.4...v3.4.5)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.18.3 to 2.19.0

Updates `org.springframework.boot:spring-boot-starter-web` from 3.4.4 to 3.4.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.4...v3.4.5)

Updates `org.springframework.boot:spring-boot-starter-test` from 3.4.4 to 3.4.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.4...v3.4.5)

Updates `org.owasp.dependencycheck` from 12.1.0 to 12.1.1

---
updated-dependencies:
- dependency-name: org.apache.tomcat:tomcat-catalina
  dependency-version: 10.1.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework:spring-webmvc
  dependency-version: 6.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework:spring-tx
  dependency-version: 6.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework:spring-tx
  dependency-version: 6.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-security
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-amqp
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-configuration-processor
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-actuator
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-autoconfigure
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-validation
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-web
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-test
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-amqp
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-configuration-processor
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-actuator
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-autoconfigure
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-validation
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-web
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework.boot:spring-boot-starter-test
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.owasp.dependencycheck
  dependency-version: 12.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested review from Jorich, pr11t and rammrain May 1, 2025 22:21
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels May 1, 2025
@sonarqubecloud
Copy link

sonarqubecloud bot commented May 1, 2025

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

rammrain
rammrain approved these changes May 2, 2025
View reviewed changes
Copy link
Member

@rammrain rammrain left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dependabot merge

@dependabot dependabot bot merged commit bca9c28 into master May 2, 2025
5 checks passed
@dependabot dependabot bot deleted the dependabot/gradle/all-deps-minor-and-patch-e320cffde5 branch May 2, 2025 06:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@rammrain rammrain rammrain approved these changes

@Jorich Jorich Awaiting requested review from Jorich

@pr11t pr11t Awaiting requested review from pr11t

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rammrain