Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump spring.version from 5.3.27 to 6.1.1 #220

Merged
merged 4 commits into from
Dec 5, 2023

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 23, 2023

Bumps spring.version from 5.3.27 to 6.1.1.
Updates org.springframework:spring-core from 5.3.27 to 6.1.1

Release notes

Sourced from org.springframework:spring-core's releases.

v6.1.1

⭐ New Features

  • Skip buffer allocation in StreamUtils.copy(String) #31621
  • Caching and Event Listening support do not reuse internal delegates for their evaluation contexts #31617
  • Java 17: resource.isReadable() with concurrency leaks large amounts of non-heap memory #30955

🐞 Bug Fixes

  • Spring MVC: Unexpected bytes added to the HTTP response for kotlin.Unit return type in controller methods #31648
  • Spring Data Redis Cache implementation is not compatible with Cache.retrieve(key) semantics #31637
  • GeneratedFiles#addSourceFile should not allow to add a source in the default package #31628
  • <jee:local-slsb> no longer works with a business-interface attribute #31627
  • Non-blocking @Cacheable method does not support condition with #result #31626
  • PathResourceResolver.getResource() does not log warning if Resource#getURL() throws exception #31623
  • Jackson encoder releases resources in wrong order #30493
  • WebSocketMessageBrokerStats has null stats for stompSubProtocolHandler since 5.3.2 #26536

📔 Documentation

  • Fix links related to Spring WebFlux #31632
  • Extract recurring asciidoc links to attributes #31619
  • Improve STOMP WebSocket documentation for input message buffer size #31616
  • Document support for AppCDS #31497

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​7fantasy7, @​Star-ho, and @​quaff

v6.1.0

⭐ New Features

  • When using Oracle, JdbcClient.update(KeyHolder) does not work without explicit key column names #31607
  • Introduce way to convert ClientHttpResponse to desired type #31597
  • Property-driven onRefresh exit for AppCDS purpose #31595
  • No Micrometer traceId in JMS listener container errorHandler #31559
  • Register Hibernate @EmbeddableInstantiators registered on JPA embeddables for reflection #31534
  • Improve method validation support for errors on elements within a container #31530
  • Support pattern matching for method names in ControlFlowPointcut #31435
  • Review reachability metadata contributions after GraalVM changes #31213
  • handleEmptyBody of RequestBodyAdvice should apply also when content-type is not set #30522

🐞 Bug Fixes

  • Regression with @EnableJpaAuditing using Spring Boot 3.2-RC2 in native image #31575
  • Retrieving the response body as a List of POJOs fails with RestClient but passes with WebTestClient #31574
  • ExecutorLifecycleDelegate should call ExecutorService.isTerminated() in ?.isRunning() #31549
  • RestTemplate POST to endpoint using Digest Auth no longer works in 6.1 #31516

... (truncated)

Commits
  • 379e1f2 Release v6.1.1
  • d50b51e Fix ordering of releasing resources in JSON Encoder
  • 03b9edc Update STOMP WebSocket transport reference docs
  • 824bc09 Actual caching of null values in retrieve(key, valueLoader)
  • 441e210 Treat kotlin.Unit as void in web controllers
  • c329ed8 Polish InvocableHandlerMethodKotlinTests
  • 48f3c08 Test for mixed order across bean factory hierarchy
  • c609264 Polishing
  • e64b81e Revised handling of allowNullValues for asynchronous retrieval
  • 5a3ad6b Late key generation for consistent evaluation of unless expressions
  • Additional commits viewable in compare view

Updates org.springframework:spring-context from 5.3.27 to 6.1.1

Release notes

Sourced from org.springframework:spring-context's releases.

v6.1.1

⭐ New Features

  • Skip buffer allocation in StreamUtils.copy(String) #31621
  • Caching and Event Listening support do not reuse internal delegates for their evaluation contexts #31617
  • Java 17: resource.isReadable() with concurrency leaks large amounts of non-heap memory #30955

🐞 Bug Fixes

  • Spring MVC: Unexpected bytes added to the HTTP response for kotlin.Unit return type in controller methods #31648
  • Spring Data Redis Cache implementation is not compatible with Cache.retrieve(key) semantics #31637
  • GeneratedFiles#addSourceFile should not allow to add a source in the default package #31628
  • <jee:local-slsb> no longer works with a business-interface attribute #31627
  • Non-blocking @Cacheable method does not support condition with #result #31626
  • PathResourceResolver.getResource() does not log warning if Resource#getURL() throws exception #31623
  • Jackson encoder releases resources in wrong order #30493
  • WebSocketMessageBrokerStats has null stats for stompSubProtocolHandler since 5.3.2 #26536

📔 Documentation

  • Fix links related to Spring WebFlux #31632
  • Extract recurring asciidoc links to attributes #31619
  • Improve STOMP WebSocket documentation for input message buffer size #31616
  • Document support for AppCDS #31497

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​7fantasy7, @​Star-ho, and @​quaff

v6.1.0

⭐ New Features

  • When using Oracle, JdbcClient.update(KeyHolder) does not work without explicit key column names #31607
  • Introduce way to convert ClientHttpResponse to desired type #31597
  • Property-driven onRefresh exit for AppCDS purpose #31595
  • No Micrometer traceId in JMS listener container errorHandler #31559
  • Register Hibernate @EmbeddableInstantiators registered on JPA embeddables for reflection #31534
  • Improve method validation support for errors on elements within a container #31530
  • Support pattern matching for method names in ControlFlowPointcut #31435
  • Review reachability metadata contributions after GraalVM changes #31213
  • handleEmptyBody of RequestBodyAdvice should apply also when content-type is not set #30522

🐞 Bug Fixes

  • Regression with @EnableJpaAuditing using Spring Boot 3.2-RC2 in native image #31575
  • Retrieving the response body as a List of POJOs fails with RestClient but passes with WebTestClient #31574
  • ExecutorLifecycleDelegate should call ExecutorService.isTerminated() in ?.isRunning() #31549
  • RestTemplate POST to endpoint using Digest Auth no longer works in 6.1 #31516

... (truncated)

Commits
  • 379e1f2 Release v6.1.1
  • d50b51e Fix ordering of releasing resources in JSON Encoder
  • 03b9edc Update STOMP WebSocket transport reference docs
  • 824bc09 Actual caching of null values in retrieve(key, valueLoader)
  • 441e210 Treat kotlin.Unit as void in web controllers
  • c329ed8 Polish InvocableHandlerMethodKotlinTests
  • 48f3c08 Test for mixed order across bean factory hierarchy
  • c609264 Polishing
  • e64b81e Revised handling of allowNullValues for asynchronous retrieval
  • 5a3ad6b Late key generation for consistent evaluation of unless expressions
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 23, 2023
@ElardoR
Copy link
Contributor

ElardoR commented Dec 5, 2023

image
Seems that a version mismatch is happening (see line 1475). According to this post version 6.X of spring requires at minimum java 17. This project is currently at java 11. How would you like to deal with this @hakandilek?

This PR contains everything to upgrade to java 17 I think.

@hakandilek
Copy link
Member

version 6.X of spring requires at minimum java 17. This project is currently at java 11. How would you like to deal with this @hakandilek?

Since the new release already has breaking changes, we can drop java 11 support. Java 11 has been around for more than 5 years now and it'll make sense to support > java 17.

This PR contains everything to upgrade to java 17 I think.

Thanks a lot for that. This looks great. I'll switch the build pipeline from java 20 to 21 since this is the new LTS version.

@hakandilek hakandilek force-pushed the dependabot/maven/spring.version-6.1.1 branch from 23ccefb to ceb314b Compare December 5, 2023 20:57
dependabot bot and others added 4 commits December 5, 2023 21:59
Bumps `spring.version` from 5.3.27 to 6.1.1.

Updates `org.springframework:spring-core` from 5.3.27 to 6.1.1
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v5.3.27...v6.1.1)

Updates `org.springframework:spring-context` from 5.3.27 to 6.1.1
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v5.3.27...v6.1.1)

---
updated-dependencies:
- dependency-name: org.springframework:spring-core
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.springframework:spring-context
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@hakandilek hakandilek force-pushed the dependabot/maven/spring.version-6.1.1 branch from ceb314b to 0605584 Compare December 5, 2023 21:00
Copy link

codeclimate bot commented Dec 5, 2023

Code Climate has analyzed commit 0605584 and detected 0 issues on this pull request.

View more on Code Climate.

@hakandilek hakandilek merged commit 85c8ce7 into master Dec 5, 2023
7 checks passed
@dependabot dependabot bot deleted the dependabot/maven/spring.version-6.1.1 branch December 5, 2023 21:11
@ElardoR
Copy link
Contributor

ElardoR commented Dec 6, 2023

@hakandilek No problem at all. Anything else that needs to be done for the v6 release?

@hakandilek
Copy link
Member

@hakandilek No problem at all. Anything else that needs to be done for the v6 release?

I've also bumped up the logback version due to a security patch with #227 and it looks ok to me.

I'd be great if you can test out the SNAPSHOT version on your side and drop me a line to confirm. I'll prepare and roll out the release some time this week.

@ElardoR
Copy link
Contributor

ElardoR commented Dec 7, 2023

I don't think I'll have the time for that. I hope you have a project that you can easily test it in.

@ElardoR
Copy link
Contributor

ElardoR commented Dec 8, 2023

I did a quick check, but I'm afraid I don't have a project I can easily test it with.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants