Update spring core to v6.1.8

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
org.springframework:spring-context	6.1.5 -> 6.1.8
org.springframework:spring-web	6.1.5 -> 6.1.8

---

Release Notes

spring-projects/spring-framework (org.springframework:spring-context)

v6.1.8

⭐ New Features

• Avoid creation of SAXParserFactory for every read operation in Jaxb2Marshaller and co #​32851
• Suppress deprecation warning for AOT-generated code that refers to a deprecated bean type #​32850

🐞 Bug Fixes

• Overridden aspect method runs twice #​32865
• @DateTimeFormat(iso = DateTimeFormat.ISO.DATE\_TIME) cannot convert UTC without milliseconds to java.util.Date #​32856
• Spring AOP fails against registered @Configurable aspect #​32838
• MockHttpServletRequest should not use a shared reader when no content is available #​32820

📔 Documentation

• Modernize Antora Build #​32864
• Modernize Antora Build #​32863
• Refine CDS documentation #​32843
• Revisit validation documentation to better explain when method validation is invoked #​32807

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​rwinch

v6.1.7

⭐ New Features

• ResponseEntity is not reliably closed with InputStreamResource #​32802
• Accept ajc-compiled @Aspect classes for Spring AOP proxy usage #​32793
• Failure to process a bean definition ahead-of-time with an instance supplier should provide more contextual information #​32775
• Provide methods to unambiguously send form data with MockMvc #​32757
• Introduce NoOp implementation for ResponseErrorHandler #​32750
• Support varargs invocations in SpEL for varargs array subtype #​32704
• StreamUtils.copyRange overreads source stream in some cases #​32695
• Modify error message when timeout is less than TIMEOUT_DEFAULT #​32635
• Jetty HttpConnections not closed with SSE on Jetty 12.0.7+ when clients close the connection #​32629
• Prevent duplicate subscription ID's in destinationCache of DefaultSubscriptionRegistry #​32625
• When retrieval of a LoadTimeWeaverAware bean fails the resulting exception message may not indicate why it was being created #​32470

🐞 Bug Fixes

• Do not send Cookie header in reactive JdkClientHttpRequest if no cookies added #​32799
• Inconsistent use of cleaned URLs in PathMatchingResourcePatternResolver #​32828
• DeferredQueryInvocationHandler fails to unwrap QuerySqmImpl class outside of transaction #​32766
• BindingReflectionHintsRegistrar#registerReflectionHints can be invoked with a null type #​32753
• AnnotationConfigWebApplicationContext should propagate ApplicationStartup to BeanFactory #​32747
• Ignore non-String keys in PropertiesPropertySource.getPropertyNames() #​32742
• MergedAnnotations search does not find container for repeatable annotation #​32731
• "multiple subscribers not supported" when using WebClient exchange #​32727
• ConfigurationClassEnhancer should consistently trigger FastClass creation at build-time #​32682
• HttpComponentsClientHttpRequestFactory does not set Content-Length: 0 #​32678
• Wrong proxy generation order during AOT for classes with ScopedProxyMode.TARGET\_CLASS and advisors #​32669
• Unhandled JMS listener exceptions are not propagated #​32666
• beanFactory#getBean with arguments ignore them if an Instance supplier is defined #​32657
• Incorrect AsyncRequestTimeoutException handling in ResponseEntityExceptionHandler #​32644
• Include actual cause's message in various parsing exception messages #​32636
• Configuration class with Bean factory method on an interface generates wrong target with AOT #​32609
• RestClient observations are stopped before ResponseSpec calls #​32575
• MvcUriComponentsBuilder.fromMethodName does not pick the annotated method transparently #​32553
• Deadlock/Stall in ConcurrentWebSocketSessionDecorator with Undertow 2.3.10 #​32445
• RSocket setup payload can cause Netty ByteBuf leak #​32424
• WebFlux temporary file not always deleted with parallel uploads. #​31217

📔 Documentation

• Replace RFC 7807 by RFC 9457 in documentation #​32806
• Links to Framework and Servlet Javadoc from Framework's Kotlin API documentation are broken #​32797
• Fix incorrect class reference syntax in Kotlin code sample #​32733
• Improve documentation advising against use of HandlerInterceptor for security #​32729
• Inconsistent behaviour on transactional async method #​32709
• Document that getBean with arguments is not recommended with AOT #​32690
• Provide an example of custom request URL with RestClient in the reference guide #​32685
• Correct documentation on streaming with MockMvcWebTestClient #​32687
• Document limitations of CGLIB proxy class generation in JPMS module setups #​32671
• Update links to HttpOnly documentation at OWASP in ResponseCookie #​32663
• Document that RestTemplate may not return a body for certain exceptions #​32641
• Document that DataIntegrityViolationException can also be thrown on read-only queries #​32631
• Update documentation to explain streaming vs collecting and error handling with Flux<T> return values #​32630
• Revise "The IoC Container" section to be more relevant for modern Spring applications #​32429
• XML bean definition with factory-method does not always determine correct target type #​32091
• Document @Order behavior on types, bean methods, and config classes #​30177
• Clarify recommendation on self-injection for legitimate use cases (e.g. @Transactional re-entrant calls) #​28299

🔨 Dependency Upgrades

• Upgrade to Micrometer 1.12.6 #​32810
• Upgrade to Reactor 2023.0.6 #​32786

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​LeMikaelF, @​Seungpang, @​izeye, @​m4tt30c91, @​remeio, and @​yhao3

v6.1.6

⭐ New Features

• Log column type for limited support message in JdbcUtils.getResultSetValue #​32601
• Consistent support for generic FactoryBean type matching when using getBeanProvider #​32590
• @RequestParam binding does not support params with an empty array "[]" suffix #​32577
• Maximum Request Size handling support for Undertow in StandardMultipartHttpServletRequest #​32549
• Introduce common support for is-null-safe checks in SpEL nodes #​32516
• Avoid additional unnecessary Annotation array cloning in TypeDescriptor #​32476
• Avoid cloning empty Annotation array in TypeDescriptor #​32405

🐞 Bug Fixes

• Refine scheme, userinfo, host and port parsing in UriComponentsBuilder #​32616
• "GET must not have a request body" exception with OkhttpClient and BufferingClientHttpRequestFactory #​32612
• JMSTemplate.sendAndReceive does not propagate tracer over the wire #​32606
• Calling Kotlin suspend functions in non-reactive application crashes due to unresolvable class #​32599
• MethodIntrospector.selectMethods() fails to detect bridge methods across ApplicationContexts #​32586
• Fix handling value class with private constructor on proxy #​32536
• ReactorNettyClientResponse should not dispose connection #​32528
• CompoundExpression omits null-safe syntax in AST string representation of null-safe selection/projection in SpEL #​32515
• Generic Kotlin controllers got broken in 6.1.5 #​32510
• WebFlux Blocking controller runs on non-blocking thread when request input data present #​32502
• Generic interface on FactoryBean class not autowired in case of targetType mismatch #​32489
• HeaderContentNegotiationStrategy.resolveMediaTypes() throws unexpected InvalidMimeTypeException #​32483
• JmsUtils.commitIfNecessary catches and ignores JMS IllegalStateException, losing message with ActiveMQ Artemis #​32473
• Missing bean class in native image with a Kotlin nested class #​32472
• Spring MVC re-creates form data from request params and re-encoding can change the content-length #​32471
• Unhandled JMS exceptions are not always recorded as observation errors #​32458
• Consistently apply TaskDecorator to ManagedExecutorService as well #​32455

📔 Documentation

• SimpleAsyncTaskScheduler: Returned ScheduledFuture does not track provided task execution #​32589
• Remove link to unrelated method in javadoc of AnnotatedBeanDefinitionReader #​32560
• Fix typos and improve wording in reference documentation #​32557
• Document that active profiles are set at build time with AOT #​32543
• Fix broken link to vavr in the reference guide #​32494
• Document AOT limitations related to Kotlin identifiers with backticks #​32487
• Add Javadoc since to AbstractClientHttpRequestFactoryWrapper.getDelegate() #​32474
• Default strategy for ProblemDetail error codes wrongly document how "detail" is supported #​32446

🔨 Dependency Upgrades

• Upgrade to Micrometer 1.12.5 #​32596
• Upgrade to Reactor 2023.0.5 #​32592

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Banuelorigni, @​LinorDolev, @​T45K, @​izeye, @​kilink, @​quaff, and @​qww1552

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.