Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 14, 2021

Bumps spring-webmvc from 5.3.7 to 5.3.11.

Release notes

Sourced from spring-webmvc's releases.

v5.3.11

⭐ New Features

  • Enhance DefaultResponseErrorHandler to allow logging complete error response body #27552
  • Include correct keyword in CookieAssertions failure messages #27550
  • Use Arrays.hashCode() in ByteArrayResource.hashCode() #27544
  • Allow default CacheAwareContextLoaderDelegate configuration via a system property #27540
  • Invoke bean-derived (Auto)Closeable.close() method directly #27504
  • Defensive reference to JNDI API for JDK 9+ (optional java.naming module) #27483
  • DefaultMessageListenerContainer does not log an error/warning when consumer tasks have been rejected #27451
  • Provide accessor on externallyManaged RootBeanDefinition attributes #27449
  • Allow to avoid class validation in CglibAopProxy via ProxyFactory #27439
  • Add support for non-public record declarations #27437
  • Emit WebClientResponseException for malformed HTTP response #27262
  • DatabasePopulatorUtils.execute should commit if the current Connection has auto-commit set to false #27008

🐞 Bug Fixes

  • CronTrigger uses new Date() instead of context's Clock #27546
  • Performance impact of con.getContentLengthLong() in AbstractFileResolvingResource.isReadable() downloading huge jars to check component length #27541
  • Performance impact of ResourceUrlEncodingFilter on HttpServletResponse#encodeURL #27538
  • UriTemplateRequestEntity doesn't override hashCode() and equals() #27531
  • DataBufferUtils.write loses context #27517
  • Avoid duplicate JCacheOperationSource bean registration in #27499
  • Proxy generation with Java 17 fails with "Cannot invoke "Object.getClass()" because "cause" is null" #27490
  • MediaType.sortBySpecificityAndQuality throws java.lang.IllegalArgumentException: Comparison method violates its general contract #27488
  • Leading whitespaces are removed while reading SSE response #27473
  • Non-escaped closing curly brace in RegEx results in initialization error on Android #27467
  • ConcurrentReferenceHashMap's entrySet violates the Map contract #27454
  • Avoid early ConversionService determination in StandardBeanExpressionResolver #27446
  • Spring Framework >= 5.3.8 ASM ClassReader fails to parse class file due to InputStream optimization #27429
  • StringUtils.collectionToDelimitedString(?) fails with NullPointerException when the collection contains null #27419
  • Spring HATEOAS results in 406 with Kotlin Coroutine and ResponseEntity in WebFlux #27292

📔 Documentation

  • Remove remark about missing caching API. #27501

🔨 Dependency Upgrades

  • Upgrade to JUnit 5.8.1 #27450
  • Upgrade to Reactor 2020.0.12 #27527
  • Upgrade to SmallRye Mutiny 1.1.1 #27555

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

... (truncated)

Commits
  • c9a55a3 Release v5.3.11
  • 0705454 Fix typo in Javadoc
  • a178bbe DefaultResponseErrorHandler shows full error details
  • fcf4315 Indent with tabs instead of spaces
  • 89c7797 Commit in DatabasePopulatorUtils if Connection has auto-commit=false
  • 4dac833 Filter non-existing static resource locations
  • 0436dd0 Correctly handle coroutine with ResponseEntity
  • 1e3996e Upgrade SmallRye Mutiny to 1.1.1
  • 50b9211 Include correct keyword in CookieAssertions failure messages
  • b1c7f7d Polishing
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [spring-webmvc](https://github.com/spring-projects/spring-framework) from 5.3.7 to 5.3.11.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v5.3.7...v5.3.11)

---
updated-dependencies:
- dependency-name: org.springframework:spring-webmvc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 14, 2021
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2021

Superseded by #129.

@dependabot dependabot bot closed this Oct 21, 2021
@dependabot dependabot bot deleted the dependabot/maven/example/org.springframework-spring-webmvc-5.3.11 branch October 21, 2021 19:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant