chore(deps): bump spring-boot-starter-web from 2.6.2 to 2.6.6 in /point-of-sale-app #111

dependabot · 2022-05-05T00:37:53Z

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps spring-boot-starter-web from 2.6.2 to 2.6.6.

Release notes

Sourced from spring-boot-starter-web's releases.

v2.6.6

🐞 Bug Fixes

MustacheAutoConfiguration in a Servlet web application fails with a ClassNotFoundException when Spring MVC is not on the classpath #30475

📔 Documentation

Javadoc of org.springframework.boot.gradle.plugin.ResolveMainClassName.setClasspath(Object) is inaccurate #30469

Document that @DefaultValue can be used on a record component #30465

Remove redundant Javadoc #30446

🔨 Dependency Upgrades

Upgrade to Jackson Bom 2.13.2.20220328 #30478

Upgrade to Spring Framework 5.3.18 #30492

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

@quaff

@vikeychen

@eddumelendez

@candrews

v2.6.5

📣 Noteworthy

This release upgrades to Kafka 3.0.1 which enables idempotence by default. See the updated Spring Boot 2.6 release notes for further details.

⭐ New Features

Add EIGHTEEN to JavaVersion enum #30132

🐞 Bug Fixes

ConfigurationPropertyName#equals is not symmetric when adapt has removed trailing characters from an element #30392

Thymeleaf auto-configuration in a reactive application can fail due to duplicate templateEngine beans #30385

server.tomcat.keep-alive-timeout is not applied to HTTP/2 #30321

Setting spring.mustache.enabled to false has no effect #30256

bootWar is configured eagerly #30213

Actuator @ReadOperation on Flux cancels request after first element emitted #30161

Unnecessary allocations in Prometheus scraping endpoint #30125

No metrics are bound for R2DBC ConnectionPools that have been wrapped #30100

Condition evaluation report entry for a @ConditionalOnSingleCandidate that does not match due to multiple primary beans isn't as clear as it could be #30098

Generated password are logged without an "unsuitable for production use" note #30070

Dependency management for Netty tcNative is incomplete leading to possible version conflicts #30038

Files in META-INF are not found when deploying a Gradle-built executable war to a servlet container #30036

Dependency management for Apache Kafka is incomplete #30031

spring-boot-configuration-processor fails compilation due to @DefaultValue with a long value and generates invalid metadata for byte and short properties with out-of-range default values #30022

... (truncated)

Commits

25c233f Release v2.6.6
546a7e5 Merge branch '2.5.x' into 2.6.x
17936b8 Polish
57f1169 Merge branch '2.5.x' into 2.6.x
7ccbdda Upgrade to Spring Framework 5.3.18
94c40c7 Upgrade to Spring Framework 5.3.18
be716d8 Merge branch '2.5.x' into 2.6.x
8409c2f Upgrade CI to Docker 20.10.14
a99fcec Upgrade Java 18 version in CI image
2e90fd2 Upgrade CI to Docker 20.10.14
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [spring-boot-starter-web](https://github.com/spring-projects/spring-boot) from 2.6.2 to 2.6.6. - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v2.6.2...v2.6.6) --- updated-dependencies: - dependency-name: org.springframework.boot:spring-boot-starter-web dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2022-05-12T16:23:41Z