Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump org.springframework:spring-framework-bom from 5.3.29 to 5.3.30 #13908

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 29, 2023

Bumps org.springframework:spring-framework-bom from 5.3.29 to 5.3.30.

Release notes

Sourced from org.springframework:spring-framework-bom's releases.

v5.3.30

⭐ New Features

  • Optimize ClassUtils#getMostSpecificMethod #31100
  • Optimize whitespace checks in StringUtils #31069
  • Align validation metadata handling in PayloadMethodArgumentResolver #31056
  • Register an override for an existing adapter in ReactiveAdapterRegistry #31048
  • Make bean initialization deterministic for multiple @Autowired methods on same bean class #30994
  • Performance bottlenecks while creating scoped bean instances #30892

🐞 Bug Fixes

  • Possible classloader leak through incomplete clearing of annotation caches #31176
  • Spring LogFactory implementation deviates from original Apache LogFactory in terms of abstract method declarations #31167
  • Bean injection fails due to nullSafeConciseToString() invoking isEmpty() on a Map/Collection proxy #31156
  • SpelExpressionParser throws IllegalStateException instead of ParseException for invalid expression #31099
  • @DynamicPropertySource in @Nested test class cannot override dynamic properties from enclosing class #31085
  • TransactionalApplicationListenerMethodAdapter should find @TransactionalEventListener on target class method #31037
  • ScheduledAnnotationBeanPostProcessor: graceful shutdown should not interrupt currently running jobs #31020
  • Permgen memory leak due to ClassInfo caching in java.beans.Introspector on JDK 11/17 #31005
  • MethodIntrospector.selectMethods(?) fails to find methods in case of special bridge method arrangement #30907

📔 Documentation

  • Fix documentation: Passing in Lists of Values for IN Clause does not work with JdbcTemplate #31229
  • Refine CORS documentation for wildcard processing #31168
  • Propagation REQUIRES_NEW may cause connection pool deadlock #31040
  • Clarify R2DBC ConnectionAccessor and DatabasePopulator exception declarations #30933
  • Doc: Avoid deadlock in @PostConstruct through SmartInitializingSingleton or ContextRefreshedEvent #30889
Commits
  • e5d99ec Release v5.3.30
  • f7bf243 Clarify IN clause resolution with List/Iterable parameter
  • 40678bb Refine CORS documentation for wildcard processing
  • 75faf69 Refine CORS documentation for wildcard processing
  • 39c225c AnnotationUtils.clearCache() includes all annotation caches
  • 0c3d8d7 Align abstract method signatures with original Commons Logging API
  • ddcae04 Do not invoke [Map|Collection].isEmpty() in nullSafeConciseToString()
  • 994bbec Polishing
  • afb378a Consistently throw ParseException instead of IllegalStateException
  • a4fc7d3 Optimize ClassUtils#getMostSpecificMethod
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 5.3.29 to 5.3.30.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v5.3.29...v5.3.30)

---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the type: dependency-upgrade A dependency upgrade label Sep 29, 2023
@dependabot dependabot bot added this to the 5.8.x milestone Sep 29, 2023
@marcusdacoregio marcusdacoregio self-assigned this Oct 2, 2023
@marcusdacoregio marcusdacoregio modified the milestones: 5.8.x, 5.8.8 Oct 2, 2023
@marcusdacoregio marcusdacoregio merged commit 0108241 into 5.8.x Oct 2, 2023
10 of 15 checks passed
@dependabot dependabot bot deleted the dependabot/gradle/5.8.x/org.springframework-spring-framework-bom-5.3.30 branch October 2, 2023 18:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type: dependency-upgrade A dependency upgrade
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant