Skip to content

Commit b2ddb88

Browse files
dependabot[bot]dependabot[bot]
authored
Bump the all-deps-minor-and-patch group across 1 directory with 18 updates (#119)
Bumps the all-deps-minor-and-patch group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) | `7.0.8` | `7.0.9` | | [org.springframework.boot:spring-boot-starter-security](https://github.com/spring-projects/spring-boot) | `4.1.0` | `4.1.1` | | com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.22.0` | `2.22.2` | | [tools.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) | `3.1.4` | `3.2.2` | | [com.squareup.okhttp3:logging-interceptor](https://github.com/lysine-dev/okhttp) | `5.3.2` | `5.5.0` | | org.mock-server:mockserver-netty | `7.2.0` | `7.6.0` | | [gradle-wrapper](https://github.com/gradle/gradle) | `9.5.1` | `9.7.1` | Updates `org.springframework:spring-webmvc` from 7.0.8 to 7.0.9 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-framework/releases">org.springframework:spring-webmvc's releases</a>.</em></p> <blockquote> <h2>v7.0.9</h2> <h2>:warning: Attention Required</h2> <ul> <li>In Spring Framework 7.0.9, <code>ForwardedHeaderFilter</code> (Spring MVC) and <code>ForwardedHeaderTransformer</code> (WebFlux) each provide a boolean constructor argument whether to use the standard &quot;Forwarded&quot; header or the &quot;X-Forwarded&quot; alternative headers. A separate property turns on and off use of &quot;X-Forwarded-Prefix&quot;. While the default constructor preserves the existing behavior, we recommend to use the new constructor to explicitly specify which forwarded headers to use to make the processing more deterministic and aligned with what is expected from the proxy. Please, see the updated <a href="https://docs.spring.io/spring-framework/reference/7.0.9-SNAPSHOT/web/webmvc/filters.html#filters-forwarded-headers-security">Security Considerations</a> section for details. In 7.1 with <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37072">#37072</a> the default constructor is deprecated and marked for removal. <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37090">#37090</a></li> <li>In Spring Framework 7.0.9, <code>SimpleEvaluationContext</code> no longer supports expression compilation by default, regardless of the compiler mode configured via <code>SpelParserConfiguration</code> or the <code>spring.expression.compiler.mode</code> system property or Spring property. Applications that intentionally use <code>SimpleEvaluationContext</code> with trusted expressions and require compilation for performance reasons can opt in by calling <code>withCompilationSupported()</code> on the <code>SimpleEvaluationContext</code> builder. Care should be taken when opting in to compilation, as doing so removes the safety guards applied during interpreted evaluation. <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37035">#37035</a></li> </ul> <h2>:star: New Features</h2> <ul> <li>Ignore an empty port value in URI parsing <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37117">#37117</a></li> <li>Avoid retaining class files in annotation metadata <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37112">#37112</a></li> <li>Add <code>@Nullable</code> annotations when treating <code>Map.remove()</code> as returning <code>@Nullable</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37067">#37067</a></li> <li>Revisit SSE view fragments handling <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37061">#37061</a></li> <li>Check list index after auto-grow in <code>AbstractNestablePropertyAccessor</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37036">#37036</a></li> <li>Disable SpEL expression compilation by default in <code>SimpleEvaluationContext</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37035">#37035</a></li> <li>Limit result size of <code>BigDecimal</code>/<code>BigInteger</code> power operations in SpEL <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37034">#37034</a></li> <li>Refactor redirect handling in UrlHandlerFilter <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37030">#37030</a></li> <li>Revise stylesheet source handling in XsltView <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37029">#37029</a></li> <li>Revise view name handling in UrlFilenameViewController <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37027">#37027</a></li> <li>Handle pre-flight requests in functional endpoint setup without DispatcherHandler <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37024">#37024</a></li> <li>Improve WebSocket handshake error logging <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37023">#37023</a></li> <li>Fix missing nullability in JdbcTemplate.batchUpdate <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37012">#37012</a></li> <li>Timeout property in RetryPolicy does not have a default constant <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36983">#36983</a></li> <li>Write native configuration files as UTF-8 <a href="https://redirect.github.com/spring-projects/spring-framework/pull/36972">#36972</a></li> <li>DefaultServerRequest.ServletParametersMap.entrySet() does not retain HttpServletRequest.getParameterMap() order <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36966">#36966</a></li> <li>Perform nextKey within synchronization for SQLite as well <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36959">#36959</a></li> <li>Add support for custom ObjectInputFilter on DefaultDeserializer <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36958">#36958</a></li> <li>Revise resource bundle caching for common locales <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36957">#36957</a></li> <li>Improve nullability for <code>getSession(*)</code> in <code>MockHttpServletRequest</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36926">#36926</a></li> <li>Improve fallback logic in ParameterContentNegotiationStrategy and ParameterContentTypeResolver <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36925">#36925</a></li> <li>Improve ambiguous match check on preflight request <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36903">#36903</a></li> <li>Improve Groovy markup template loading <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36902">#36902</a></li> <li>Improve request path handling on a Reactor Netty server <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36893">#36893</a></li> <li>Improve JettyWebSocketSession error handling <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36891">#36891</a></li> </ul> <h2>:lady_beetle: Bug Fixes</h2> <ul> <li>EclipseLinkJpaDialect singleton lock in EclipseLinkConnectionHandle.getConnection() serializes all JDBC connection acquisitions under load <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37085">#37085</a></li> <li>MetadataReader fails to read byte[] array from annotation <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37083">#37083</a></li> <li>Ensure parsing/tostring symmetry in ContentDisposition <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37064">#37064</a></li> <li>Character outside of permitted range in Content Disposition <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37062">#37062</a></li> <li>Release Jackson BufferRecycler to its pool in encoders <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37059">#37059</a></li> <li>Ensure consistent error escaping <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37055">#37055</a></li> <li>Refine template name processing <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37054">#37054</a></li> <li>Reset TwoByteMatcher partial match on mismatching byte <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37053">#37053</a></li> <li>Refactor async XML parsing limit checks <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37031">#37031</a></li> <li>Fix part constraint checks in PartEventHttpMessageReader <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37028">#37028</a></li> <li>Fix buffer leak in RSocket SETUP frame handling <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37026">#37026</a></li> <li>Ensure correct Jetty core response cookie handling <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37025">#37025</a></li> <li>Align <code>domainToAscii</code> with current WhatWG spec <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37018">#37018</a></li> <li>Ensure consistent <code>ButtonTag</code> value attribute processing <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37017">#37017</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-framework/commit/82a6b40b9366ec181ededdad282b307ee5381a52"><code>82a6b40</code></a> Release Spring Framework 7.0.9</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/a7b1b59cbd79175ed79b0f4aa967be70288bb2ee"><code>a7b1b59</code></a> Upgrade to Reactor 2025.0.7</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/996e3d3f18dbb13d92a2eaf988abfe77b06928d4"><code>996e3d3</code></a> Upgrade to Micrometer 1.16.7</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/73f5ddddcd4278580c9c879b2effdac29aa3bff5"><code>73f5ddd</code></a> Refactor maxInMemory limit handling for async XML parsing</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/675f25de72e7ac31db1ffe0dc324381d7cc1a308"><code>675f25d</code></a> Leading slash handling in UrlHandlerFilter</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/692dbc9160de3b5de50ccedeee014716d0cedb7b"><code>692dbc9</code></a> Apply ResourceHandlerUtils checks in XsltView</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/8647e90bc7b2da9b299566296f2b253a6fd9c128"><code>8647e90</code></a> Consistent maxPartSize check in PartEventHttpMessageReader</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/b9379e33d52b491e227715776a072d07bcccddab"><code>b9379e3</code></a> Check viewName for special prefixes in UrlFilenameViewController</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/a784dbe286beaa70e5a88638b6af7f58f458c07e"><code>a784dbe</code></a> Ensure Payload release on early error in createHeaders</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/3b492f3908df3fe0adc639b7da98f737d1ff7a02"><code>3b492f3</code></a> Return sameSite cookie value in Jetty response</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-framework/compare/v7.0.8...v7.0.9">compare view</a></li> </ul> </details> <br /> Updates `org.springframework:spring-tx` from 7.0.8 to 7.0.9 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-framework/releases">org.springframework:spring-tx's releases</a>.</em></p> <blockquote> <h2>v7.0.9</h2> <h2>:warning: Attention Required</h2> <ul> <li>In Spring Framework 7.0.9, <code>ForwardedHeaderFilter</code> (Spring MVC) and <code>ForwardedHeaderTransformer</code> (WebFlux) each provide a boolean constructor argument whether to use the standard &quot;Forwarded&quot; header or the &quot;X-Forwarded&quot; alternative headers. A separate property turns on and off use of &quot;X-Forwarded-Prefix&quot;. While the default constructor preserves the existing behavior, we recommend to use the new constructor to explicitly specify which forwarded headers to use to make the processing more deterministic and aligned with what is expected from the proxy. Please, see the updated <a href="https://docs.spring.io/spring-framework/reference/7.0.9-SNAPSHOT/web/webmvc/filters.html#filters-forwarded-headers-security">Security Considerations</a> section for details. In 7.1 with <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37072">#37072</a> the default constructor is deprecated and marked for removal. <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37090">#37090</a></li> <li>In Spring Framework 7.0.9, <code>SimpleEvaluationContext</code> no longer supports expression compilation by default, regardless of the compiler mode configured via <code>SpelParserConfiguration</code> or the <code>spring.expression.compiler.mode</code> system property or Spring property. Applications that intentionally use <code>SimpleEvaluationContext</code> with trusted expressions and require compilation for performance reasons can opt in by calling <code>withCompilationSupported()</code> on the <code>SimpleEvaluationContext</code> builder. Care should be taken when opting in to compilation, as doing so removes the safety guards applied during interpreted evaluation. <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37035">#37035</a></li> </ul> <h2>:star: New Features</h2> <ul> <li>Ignore an empty port value in URI parsing <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37117">#37117</a></li> <li>Avoid retaining class files in annotation metadata <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37112">#37112</a></li> <li>Add <code>@Nullable</code> annotations when treating <code>Map.remove()</code> as returning <code>@Nullable</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37067">#37067</a></li> <li>Revisit SSE view fragments handling <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37061">#37061</a></li> <li>Check list index after auto-grow in <code>AbstractNestablePropertyAccessor</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37036">#37036</a></li> <li>Disable SpEL expression compilation by default in <code>SimpleEvaluationContext</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37035">#37035</a></li> <li>Limit result size of <code>BigDecimal</code>/<code>BigInteger</code> power operations in SpEL <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37034">#37034</a></li> <li>Refactor redirect handling in UrlHandlerFilter <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37030">#37030</a></li> <li>Revise stylesheet source handling in XsltView <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37029">#37029</a></li> <li>Revise view name handling in UrlFilenameViewController <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37027">#37027</a></li> <li>Handle pre-flight requests in functional endpoint setup without DispatcherHandler <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37024">#37024</a></li> <li>Improve WebSocket handshake error logging <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37023">#37023</a></li> <li>Fix missing nullability in JdbcTemplate.batchUpdate <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37012">#37012</a></li> <li>Timeout property in RetryPolicy does not have a default constant <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36983">#36983</a></li> <li>Write native configuration files as UTF-8 <a href="https://redirect.github.com/spring-projects/spring-framework/pull/36972">#36972</a></li> <li>DefaultServerRequest.ServletParametersMap.entrySet() does not retain HttpServletRequest.getParameterMap() order <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36966">#36966</a></li> <li>Perform nextKey within synchronization for SQLite as well <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36959">#36959</a></li> <li>Add support for custom ObjectInputFilter on DefaultDeserializer <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36958">#36958</a></li> <li>Revise resource bundle caching for common locales <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36957">#36957</a></li> <li>Improve nullability for <code>getSession(*)</code> in <code>MockHttpServletRequest</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36926">#36926</a></li> <li>Improve fallback logic in ParameterContentNegotiationStrategy and ParameterContentTypeResolver <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36925">#36925</a></li> <li>Improve ambiguous match check on preflight request <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36903">#36903</a></li> <li>Improve Groovy markup template loading <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36902">#36902</a></li> <li>Improve request path handling on a Reactor Netty server <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36893">#36893</a></li> <li>Improve JettyWebSocketSession error handling <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36891">#36891</a></li> </ul> <h2>:lady_beetle: Bug Fixes</h2> <ul> <li>EclipseLinkJpaDialect singleton lock in EclipseLinkConnectionHandle.getConnection() serializes all JDBC connection acquisitions under load <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37085">#37085</a></li> <li>MetadataReader fails to read byte[] array from annotation <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37083">#37083</a></li> <li>Ensure parsing/tostring symmetry in ContentDisposition <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37064">#37064</a></li> <li>Character outside of permitted range in Content Disposition <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37062">#37062</a></li> <li>Release Jackson BufferRecycler to its pool in encoders <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37059">#37059</a></li> <li>Ensure consistent error escaping <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37055">#37055</a></li> <li>Refine template name processing <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37054">#37054</a></li> <li>Reset TwoByteMatcher partial match on mismatching byte <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37053">#37053</a></li> <li>Refactor async XML parsing limit checks <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37031">#37031</a></li> <li>Fix part constraint checks in PartEventHttpMessageReader <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37028">#37028</a></li> <li>Fix buffer leak in RSocket SETUP frame handling <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37026">#37026</a></li> <li>Ensure correct Jetty core response cookie handling <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37025">#37025</a></li> <li>Align <code>domainToAscii</code> with current WhatWG spec <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37018">#37018</a></li> <li>Ensure consistent <code>ButtonTag</code> value attribute processing <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37017">#37017</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-framework/commit/82a6b40b9366ec181ededdad282b307ee5381a52"><code>82a6b40</code></a> Release Spring Framework 7.0.9</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/a7b1b59cbd79175ed79b0f4aa967be70288bb2ee"><code>a7b1b59</code></a> Upgrade to Reactor 2025.0.7</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/996e3d3f18dbb13d92a2eaf988abfe77b06928d4"><code>996e3d3</code></a> Upgrade to Micrometer 1.16.7</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/73f5ddddcd4278580c9c879b2effdac29aa3bff5"><code>73f5ddd</code></a> Refactor maxInMemory limit handling for async XML parsing</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/675f25de72e7ac31db1ffe0dc324381d7cc1a308"><code>675f25d</code></a> Leading slash handling in UrlHandlerFilter</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/692dbc9160de3b5de50ccedeee014716d0cedb7b"><code>692dbc9</code></a> Apply ResourceHandlerUtils checks in XsltView</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/8647e90bc7b2da9b299566296f2b253a6fd9c128"><code>8647e90</code></a> Consistent maxPartSize check in PartEventHttpMessageReader</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/b9379e33d52b491e227715776a072d07bcccddab"><code>b9379e3</code></a> Check viewName for special prefixes in UrlFilenameViewController</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/a784dbe286beaa70e5a88638b6af7f58f458c07e"><code>a784dbe</code></a> Ensure Payload release on early error in createHeaders</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/3b492f3908df3fe0adc639b7da98f737d1ff7a02"><code>3b492f3</code></a> Return sameSite cookie value in Jetty response</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-framework/compare/v7.0.8...v7.0.9">compare view</a></li> </ul> </details> <br /> Updates `org.springframework.boot:spring-boot-starter-security` from 4.1.0 to 4.1.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-boot/releases">org.springframework.boot:spring-boot-starter-security's releases</a>.</em></p> <blockquote> <h2>v4.1.1</h2> <h2>:warning: Attention Required</h2> <ul> <li>Spring Boot's Gradle plugin no longer automatically configures gRPC when the Protobuf plugin is applied. This behavior caused problems for those using Protobuf without gRPC. To opt in to the configuration of gRPC, configure the <code>protobuf</code> extension with the <code>grpc</code> plugin using an empty block. The Spring Boot Gradle plugin will then automatically configure the use of <code>protoc-gen-grpc-java</code> as before. <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50822">#50822</a></li> </ul> <h2>:lady_beetle: Bug Fixes</h2> <ul> <li>Kafka consumer-specific security protocol is not taken into account <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51369">#51369</a></li> <li>Structured logging: a failed JSON encode corrupts the next log event written on the same thread <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51156">#51156</a></li> <li>Micrometer registries pin the application context <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51135">#51135</a></li> <li>Temporary file is not deleted when ExportedImageTar construction fails <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51132">#51132</a></li> <li>Metadata annotation processor ignores getter-level <code>@NestedConfigurationProperty</code> for records <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51098">#51098</a></li> <li>spring-boot-h2-console pulls servlet-api as transitive dependency <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51095">#51095</a></li> <li>PropertiesLauncher does not log nested archive paths <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51089">#51089</a></li> <li>Methods that return the result of Map#remove are not declared with a <code>@Nullable</code> return type <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51087">#51087</a></li> <li>NativeImageResourceProvider flattens Flyway migration paths in subdirectories <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50964">#50964</a></li> <li>Fix ordering of Kotlinx Serialization CodecCustomizer <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50961">#50961</a></li> <li>JarFile is not closed when finding main class from archive <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50959">#50959</a></li> <li>Application-managed JUL bridge handler should only be removed if installed <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50950">#50950</a></li> <li>CloudFoundry reactive auto-configuration should not require a WebClient.Builder bean to be defined <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50944">#50944</a></li> <li>Context refresh fails on reactive Cloud Foundry when using Actuator without spring-boot-health <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50942">#50942</a></li> <li>Resources are not cleaned up when resolving an image that is not yet present in the builder <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50941">#50941</a></li> <li>GraphQlWebMvcAutoConfiguration should apply customizers in order <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50914">#50914</a></li> <li>Auto-configured RedisMessageListenerContainer does not use virtual threads when spring.threads.virtual.enabled is true <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50884">#50884</a></li> <li>Context refresh fails when using Actuator on Jersey without spring-boot-health <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50872">#50872</a></li> <li>Context refresh fails on Cloud Foundry when using Actuator without spring-boot-health <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50871">#50871</a></li> <li>IllegalStateException when binding properties to a <code>@Validated</code> class that contains a map whose value type is a wildcard <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50856">#50856</a></li> <li>High number of connections due to Mongo health indicator <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50852">#50852</a></li> <li>Inconsistent handling of empty string values of spring.security.oauth2.resourceserver.jwt issuer-uri and jwk-set-uri <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50849">#50849</a></li> <li>Return type nullability of ApplicationContextAssert's getBean methods does not indicate that bean may be null <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50845">#50845</a></li> <li>PropertiesWebClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50843">#50843</a></li> <li>Exposing gRPC test server port should backoff if gRPC is not present <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50825">#50825</a></li> <li>JpaBaseConfiguration#entityManagerConfiguration can cause a dependency loop on beans declaring AsyncTaskExecutor <a href="https://redirect.github.com/spring-projects/spring-boot/pull/50801">#50801</a></li> <li>spring.grpc.server.health.include-overall-health is not taken into account <a href="https://redirect.github.com/spring-projects/spring-boot/pull/50799">#50799</a></li> <li>Setting 'server.servlet.session.cookie.partitioned' to false still emits the 'Partitioned' cookie attribute <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50790">#50790</a></li> <li>Managed version of Prometheus Client is not aligned with Micrometer's micrometer-registry-prometheus <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50780">#50780</a></li> <li>Map properties bound from empty strings fail with ConverterNotFoundException <a href="https://redirect.github.com/spring-projects/spring-boot/pull/50773">#50773</a></li> <li>Protobuf Common Protos should not be a managed dependency <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50772">#50772</a></li> <li>An application that depends on spring-boot-security-oauth2-resource-server may fail to start with a ClassNotFoundException when Reactor is on the classpath but WebFlux is not <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50764">#50764</a></li> <li>W3CHeaderParser's decoding is not compliant with RFC 3986 <a href="https://redirect.github.com/spring-projects/spring-boot/pull/50650">#50650</a></li> </ul> <h2>:notebook_with_decorative_cover: Documentation</h2> <ul> <li>Description of spring.graphql.websocket.connection-init-timeout does not render correctly in the reference guide <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51348">#51348</a></li> <li>spring.profiles.group should have a 'spring-profile-name' hint provider <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51284">#51284</a></li> <li>Remove reference to removed InfluxDB auto-configuration <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51176">#51176</a></li> <li>Use JacksonJsonSerde in Kafka Streams documentation <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51161">#51161</a></li> <li>Document alternatives to HttpMessageConverters <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51129">#51129</a></li> <li>Fix stale type reference for OTLP logging transport metadata <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51119">#51119</a></li> <li>Metadata for spring.test.mockmvc.htmlunit.url declares the wrong type <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51115">#51115</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-boot/commit/6fdf67ea1552691e932604d4bf67a5e08ff0b0ea"><code>6fdf67e</code></a> Release 4.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/fde599b28b40932e4ea6194399d89245923a01e7"><code>fde599b</code></a> Upgrade to Spring Pulsar 2.0.7</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/9daa58f7d98b82bf16febcb91943ce267c220a50"><code>9daa58f</code></a> Upgrade to Spring HATEOAS 3.1.2</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/353993ebc1d7b1ceccbb981b0439a42ba122a816"><code>353993e</code></a> Upgrade to Spring Data Bom 2026.0.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/24ba596bc4fa000614834016452435c834fdeda2"><code>24ba596</code></a> Upgrade to Spring Session 4.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/5cb5c294d1f4780e78d010a964049e47c074e4d6"><code>5cb5c29</code></a> Upgrade to Spring Security 7.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/4adc8eb130c4e0c688ed85316f385f4e04d47679"><code>4adc8eb</code></a> Upgrade to Spring LDAP 4.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/4d9c19cbc0589f57a7265052b507bf4b961082ac"><code>4d9c19c</code></a> Upgrade to Spring Kafka 4.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/f30f6120c4f6f8f873ac56cba478ae1f011c276c"><code>f30f612</code></a> Upgrade to Spring Integration 7.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/b930283d97e92eb24da1de3721cdd41625266dea"><code>b930283</code></a> Upgrade to Spring gRPC 1.1.1</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-boot/compare/v4.1.0...v4.1.1">compare view</a></li> </ul> </details> <br /> Updates `org.springframework.boot:spring-boot-starter-amqp` from 4.1.0 to 4.1.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-boot/releases">org.springframework.boot:spring-boot-starter-amqp's releases</a>.</em></p> <blockquote> <h2>v4.1.1</h2> <h2>:warning: Attention Required</h2> <ul> <li>Spring Boot's Gradle plugin no longer automatically configures gRPC when the Protobuf plugin is applied. This behavior caused problems for those using Protobuf without gRPC. To opt in to the configuration of gRPC, configure the <code>protobuf</code> extension with the <code>grpc</code> plugin using an empty block. The Spring Boot Gradle plugin will then automatically configure the use of <code>protoc-gen-grpc-java</code> as before. <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50822">#50822</a></li> </ul> <h2>:lady_beetle: Bug Fixes</h2> <ul> <li>Kafka consumer-specific security protocol is not taken into account <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51369">#51369</a></li> <li>Structured logging: a failed JSON encode corrupts the next log event written on the same thread <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51156">#51156</a></li> <li>Micrometer registries pin the application context <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51135">#51135</a></li> <li>Temporary file is not deleted when ExportedImageTar construction fails <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51132">#51132</a></li> <li>Metadata annotation processor ignores getter-level <code>@NestedConfigurationProperty</code> for records <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51098">#51098</a></li> <li>spring-boot-h2-console pulls servlet-api as transitive dependency <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51095">#51095</a></li> <li>PropertiesLauncher does not log nested archive paths <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51089">#51089</a></li> <li>Methods that return the result of Map#remove are not declared with a <code>@Nullable</code> return type <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51087">#51087</a></li> <li>NativeImageResourceProvider flattens Flyway migration paths in subdirectories <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50964">#50964</a></li> <li>Fix ordering of Kotlinx Serialization CodecCustomizer <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50961">#50961</a></li> <li>JarFile is not closed when finding main class from archive <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50959">#50959</a></li> <li>Application-managed JUL bridge handler should only be removed if installed <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50950">#50950</a></li> <li>CloudFoundry reactive auto-configuration should not require a WebClient.Builder bean to be defined <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50944">#50944</a></li> <li>Context refresh fails on reactive Cloud Foundry when using Actuator without spring-boot-health <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50942">#50942</a></li> <li>Resources are not cleaned up when resolving an image that is not yet present in the builder <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50941">#50941</a></li> <li>GraphQlWebMvcAutoConfiguration should apply customizers in order <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50914">#50914</a></li> <li>Auto-configured RedisMessageListenerContainer does not use virtual threads when spring.threads.virtual.enabled is true <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50884">#50884</a></li> <li>Context refresh fails when using Actuator on Jersey without spring-boot-health <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50872">#50872</a></li> <li>Context refresh fails on Cloud Foundry when using Actuator without spring-boot-health <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50871">#50871</a></li> <li>IllegalStateException when binding properties to a <code>@Validated</code> class that contains a map whose value type is a wildcard <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50856">#50856</a></li> <li>High number of connections due to Mongo health indicator <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50852">#50852</a></li> <li>Inconsistent handling of empty string values of spring.security.oauth2.resourceserver.jwt issuer-uri and jwk-set-uri <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50849">#50849</a></li> <li>Return type nullability of ApplicationContextAssert's getBean methods does not indicate that bean may be null <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50845">#50845</a></li> <li>PropertiesWebClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50843">#50843</a></li> <li>Exposing gRPC test server port should backoff if gRPC is not present <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50825">#50825</a></li> <li>JpaBaseConfiguration#entityManagerConfiguration can cause a dependency loop on beans declaring AsyncTaskExecutor <a href="https://redirect.github.com/spring-projects/spring-boot/pull/50801">#50801</a></li> <li>spring.grpc.server.health.include-overall-health is not taken into account <a href="https://redirect.github.com/spring-projects/spring-boot/pull/50799">#50799</a></li> <li>Setting 'server.servlet.session.cookie.partitioned' to false still emits the 'Partitioned' cookie attribute <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50790">#50790</a></li> <li>Managed version of Prometheus Client is not aligned with Micrometer's micrometer-registry-prometheus <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50780">#50780</a></li> <li>Map properties bound from empty strings fail with ConverterNotFoundException <a href="https://redirect.github.com/spring-projects/spring-boot/pull/50773">#50773</a></li> <li>Protobuf Common Protos should not be a managed dependency <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50772">#50772</a></li> <li>An application that depends on spring-boot-security-oauth2-resource-server may fail to start with a ClassNotFoundException when Reactor is on the classpath but WebFlux is not <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50764">#50764</a></li> <li>W3CHeaderParser's decoding is not compliant with RFC 3986 <a href="https://redirect.github.com/spring-projects/spring-boot/pull/50650">#50650</a></li> </ul> <h2>:notebook_with_decorative_cover: Documentation</h2> <ul> <li>Description of spring.graphql.websocket.connection-init-timeout does not render correctly in the reference guide <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51348">#51348</a></li> <li>spring.profiles.group should have a 'spring-profile-name' hint provider <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51284">#51284</a></li> <li>Remove reference to removed InfluxDB auto-configuration <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51176">#51176</a></li> <li>Use JacksonJsonSerde in Kafka Streams documentation <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51161">#51161</a></li> <li>Document alternatives to HttpMessageConverters <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51129">#51129</a></li> <li>Fix stale type reference for OTLP logging transport metadata <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51119">#51119</a></li> <li>Metadata for spring.test.mockmvc.htmlunit.url declares the wrong type <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51115">#51115</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-boot/commit/6fdf67ea1552691e932604d4bf67a5e08ff0b0ea"><code>6fdf67e</code></a> Release 4.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/fde599b28b40932e4ea6194399d89245923a01e7"><code>fde599b</code></a> Upgrade to Spring Pulsar 2.0.7</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/9daa58f7d98b82bf16febcb91943ce267c220a50"><code>9daa58f</code></a> Upgrade to Spring HATEOAS 3.1.2</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/353993ebc1d7b1ceccbb981b0439a42ba122a816"><code>353993e</code></a> Upgrade to Spring Data Bom 2026.0.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/24ba596bc4fa000614834016452435c834fdeda2"><code>24ba596</code></a> Upgrade to Spring Session 4.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/5cb5c294d1f4780e78d010a964049e47c074e4d6"><code>5cb5c29</code></a> Upgrade to Spring Security 7.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/4adc8eb130c4e0c688ed85316f385f4e04d47679"><code>4adc8eb</code></a> Upgrade to Spring LDAP 4.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/4d9c19cbc0589f57a7265052b507bf4b961082ac"><code>4d9c19c</code></a> Upgrade to Spring Kafka 4.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/f30f6120c4f6f8f873ac56cba478ae1f011c276c"><code>f30f612</code></a> Upgrade to Spring Integration 7.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/b930283d97e92eb24da1de3721cdd41625266dea"><code>b930283</code></a> Upgrade to Spring gRPC 1.1.1</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-boot/compare/v4.1.0...v4.1.1">compare view</a></li> </ul> </details> <br /> Updates `org.springframework.boot:spring-boot-configuration-processor` from 4.1.0 to 4.1.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-boot/releases">org.springframework.boot:spring-boot-configuration-processor's releases</a>.</em></p> <blockquote> <h2>v4.1.1</h2> <h2>:warning: Attention Required</h2> <ul> <li>Spring Boot's Gradle plugin no longer automatically configures gRPC when the Protobuf plugin is applied. This behavior caused problems for those using Protobuf without gRPC. To opt in to the configuration of gRPC, configure the <code>protobuf</code> extension with the <code>grpc</code> plugin using an empty block. The Spring Boot Gradle plugin will then automatically configure the use of <code>protoc-gen-grpc-java</code> as before. <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50822">#50822</a></li> </ul> <h2>:lady_beetle: Bug Fixes</h2> <ul> <li>Kafka consumer-specific security protocol is not taken into account <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51369">#51369</a></li> <li>Structured logging: a failed JSON encode corrupts the next log event written on the same thread <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51156">#51156</a></li> <li>Micrometer registries pin the application context <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51135">#51135</a></li> <li>Temporary file is not deleted when ExportedImageTar construction fails <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51132">#51132</a></li> <li>Metadata annotation processor ignores getter-level <code>@NestedConfigurationProperty</code> for records <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51098">#51098</a></li> <li>spring-boot-h2-console pulls servlet-api as transitive dependency <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51095">#51095</a></li> <li>PropertiesLauncher does not log nested archive paths <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51089">#51089</a></li> <li>Methods that return the result of Map#remove are not declared with a <code>@Nullable</code> return type <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51087">#51087</a></li> <li>NativeImageResourceProvider flattens Flyway migration paths in subdirectories <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50964">#50964</a></li> <li>Fix ordering of Kotlinx Serialization CodecCustomizer <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50961">#50961</a></li> <li>JarFile is not closed when finding main class from archive <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50959">#50959</a></li> <li>Application-managed JUL bridge handler should only be removed if installed <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50950">#50950</a></li> <li>CloudFoundry reactive auto-configuration should not require a WebClient.Builder bean to be defined <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50944">#50944</a></li> <li>Context refresh fails on reactive Cloud Foundry when using Actuator without spring-boot-health <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50942">#50942</a></li> <li>Resources are not cleaned up when resolving an image that is not yet present in the builder <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50941">#50941</a></li> <li>GraphQlWebMvcAutoConfiguration should apply customizers in order <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50914">#50914</a></li> <li>Auto-configured RedisMessageListenerContainer does not use virtual threads when spring.threads.virtual.enabled is true <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50884">#50884</a></li> <li>Context refresh fails when using Actuator on Jersey without spring-boot-health <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50872">#50872</a></li> <li>Context refresh fails on Cloud Foundry when using Actuator without spring-boot-health <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50871">#50871</a></li> <li>IllegalStateException when binding properties to a <code>@Validated</code> class that contains a map whose value type is a wildcard <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50856">#50856</a></li> <li>High number of connections due to Mongo health indicator <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50852">#50852</a></li> <li>Inconsistent handling of empty string values of spring.security.oauth2.resourceserver.jwt issuer-uri and jwk-set-uri <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50849">#50849</a></li> <li>Return type nullability of ApplicationContextAssert's getBean methods does not indicate that bean may be null <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50845">#50845</a></li> <li>PropertiesWebClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50843">#50843</a></li> <li>Exposing gRPC test server port should backoff if gRPC is not present <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50825">#50825</a></li> <li>JpaBaseConfiguration#entityManagerConfiguration can cause a dependency loop on beans declaring AsyncTaskExecutor <a href="https://redirect.github.com/spring-projects/spring-boot/pull/50801">#50801</a></li> <li>spring.grpc.server.health.include-overall-health is not taken into account <a href="https://redirect.github.com/spring-projects/spring-boot/pull/50799">#50799</a></li> <li>Setting 'server.servlet.session.cookie.partitioned' to false still emits the 'Partitioned' cookie attribute <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50790">#50790</a></li> <li>Managed version of Prometheus Client is not aligned with Micrometer's micrometer-registry-prometheus <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50780">#50780</a></li> <li>Map properties bound from empty strings fail with ConverterNotFoundException <a href="https://redirect.github.com/spring-projects/spring-boot/pull/50773">#50773</a></li> <li>Protobuf Common Protos should not be a managed dependency <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50772">#50772</a></li> <li>An application that depends on spring-boot-security-oauth2-resource-server may fail to start with a ClassNotFoundException when Reactor is on the classpath but WebFlux is not <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50764">#50764</a></li> <li>W3CHeaderParser's decoding is not compliant with RFC 3986 <a href="https://redirect.github.com/spring-projects/spring-boot/pull/50650">#50650</a></li> </ul> <h2>:notebook_with_decorative_cover: Documentation</h2> <ul> <li>Description of spring.graphql.websocket.connection-init-timeout does not render correctly in the reference guide <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51348">#51348</a></li> <li>spring.profiles.group should have a 'spring-profile-name' hint provider <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51284">#51284</a></li> <li>Remove reference to removed InfluxDB auto-configuration <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51176">#51176</a></li> <li>Use JacksonJsonSerde in Kafka Streams documentation <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51161">#51161</a></li> <li>Document alternatives to HttpMessageConverters <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51129">#51129</a></li> <li>Fix stale type reference for OTLP logging transport metadata <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51119">#51119</a></li> <li>Metadata for spring.test.mockmvc.htmlunit.url declares the wrong type <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51115">#51115</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-boot/commit/6fdf67ea1552691e932604d4bf67a5e08ff0b0ea"><code>6fdf67e</code></a> Release 4.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/fde599b28b40932e4ea6194399d89245923a01e7"><code>fde599b</code></a> Upgrade to Spring Pulsar 2.0.7</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/9daa58f7d98b82bf16febcb91943ce267c220a50"><code>9daa58f</code></a> Upgrade to Spring HATEOAS 3.1.2</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/353993ebc1d7b1ceccbb981b0439a42ba122a816"><code>353993e</code></a> Upgrade to Spring Data Bom 2026.0.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/24ba596bc4fa000614834016452435c834fdeda2"><code>24ba596</code></a> Upgrade to Spring Session 4.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/5cb5c294d1f4780e78d010a964049e47c074e4d6"><code>5cb5c29</code></a> Upgrade to Spring Security 7.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/4adc8eb130c4e0c688ed85316f385f4e04d47679"><code>4adc8eb</code></a> Upgrade to Spring LDAP 4.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/4d9c19cbc0589f57a7265052b507bf4b961082ac"><code>4d9c19c</code></a> Upgrade to Spring Kafka 4.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/f30f6120c4f6f8f873ac56cba478ae1f011c276c"><code>f30f612</code></a> Upgrade to Spring Integration 7.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/b930283d97e92eb24da1de3721cdd41625266dea"><code>b930283</code></a> Upgrade to Spring gRPC 1.1.1</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-boot/compare/v4.1.0...v4.1.1">compare view</a></li> </ul> </details> <br /> Updates `org.springframework.boot:spring-boot-starter-actuator` from 4.1.0 to 4.1.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-boot/releases">org.springframework.boot:spring-boot-starter-actuator's releases</a>.</em></p> <blockquote> <h2>v4.1.1</h2> <h2>:warning: Attention Required</h2> <ul> <li>Spring Boot's Gradle plugin no longer automatically configures gRPC when the Protobuf plugin is applied. This behavior caused problems for those using Protobuf without gRPC. To opt in to the configuration of gRPC, configure the <code>protobuf</code> extension with the <code>grpc</code> plugin using an empty block. The Spring Boot Gradle plugin will then automatically configure the use of <code>protoc-gen-grpc-java</code> as before. <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50822">#50822</a></li> </ul> <h2>:lady_beetle: Bug Fixes</h2> <ul> <li>Kafka consumer-specific security protocol is not taken into account <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51369">#51369</a></li> <li>Structured logging: a failed JSON encode corrupts the next log event written on the same thread <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51156">#51156</a></li> <li>Micrometer registries pin the application context <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51135">#51135</a></li> <li>Temporary file is not deleted when ExportedImageTar construction fails <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51132">#51132</a></li> <li>Metadata annotation processor ignores getter-level <code>@NestedConfigurationProperty</code> for records <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51098">#51098</a></li> <li>spring-boot-h2-console pulls servlet-api as transitive dependency <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51095">#51095</a></li> <li>PropertiesLauncher does not log nested archive paths <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51089">#51089</a></li> <li>Methods that return the result of Map#remove are not declared with a <code>@Nullable</code> return type <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51087">#51087</a></li> <li>NativeImageResourceProvider flattens Flyway migration paths in subdirectories <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50964">#50964</a></li> <li>Fix ordering of Kotlinx Serialization CodecCustomizer <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50961">#50961</a></li> <li>JarFile is not closed when finding main class from archive <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50959">#50959</a></li> <li>Application-managed JUL bridge handler should only be removed if installed <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50950">#50950</a></li> <li>CloudFoundry reactive auto-configuration should not require a WebClient.Builder bean to be defined <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50944">#50944</a></li> <li>Context refresh fails on reactive Cloud Foundry when using Actuator without spring-boot-health <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50942">#50942</a></li> <li>Resources are not cleaned up when resolving an image that is not yet present in the builder <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50941">#50941</a></li> <li>GraphQlWebMvcAutoConfiguration should apply customizers in order <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50914">#50914</a></li> <li>Auto-configured RedisMessageListenerContainer does not use virtual threads when spring.threads.virtual.enabled is true <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50884">#50884</a></li> <li>Context refresh fails when using Actuator on Jersey without spring-boot-health <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50872">#50872</a></li> <li>Context refresh fails on Cloud Foundry when using Actuator without spring-boot-health <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50871">#50871</a></li> <li>IllegalStateException when binding properties to a <code>@Validated</code> class that contains a map whose value type is a wildcard <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50856">#50856</a></li> <li>High number of connections due to Mongo health indicator <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50852">#50852</a></li> <li>Inconsistent handling of empty string values of spring.security.oauth2.resourceserver.jwt issuer-uri and jwk-set-uri <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50849">#50849</a></li> <li>Return type nullability of ApplicationContextAssert's getBean methods does not indicate that bean may be null <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50845">#50845</a></li> <li>PropertiesWebClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50843">#50843</a></li> <li>Exposing gRPC test server port should backoff if gRPC is not present <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50825">#50825</a></li> <li>JpaBaseConfiguration#entityManagerConfiguration can cause a dependency loop on beans declaring AsyncTaskExecutor <a href="https://redirect.github.com/spring-projects/spring-boot/pull/50801">#50801</a></li> <li>spring.grpc.server.health.include-overall-health is not taken into account <a href="https://redirect.github.com/spring-projects/spring-boot/pull/50799">#50799</a></li> <li>Setting 'server.servlet.session.cookie.partitioned' to false still emits the 'Partitioned' cookie attribute <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50790">#50790</a></li> <li>Managed version of Prometheus Client is not aligned with Micrometer's micrometer-registry-prometheus <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50780">#50780</a></li> <li>Map properties bound from empty strings fail with ConverterNotFoundException <a href="https://redirect.github.com/spring-projects/spring-boot/pull/50773">#50773</a></li> <li>Protobuf Common Protos should not be a managed dependency <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50772">#50772</a></li> <li>An application that depends on spring-boot-security-oauth2-resource-server may fail to start with a ClassNotFoundException when Reactor is on the classpath but WebFlux is not <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50764">#50764</a></li> <li>W3CHeaderParser's decoding is not compliant with RFC 3986 <a href="https://redirect.github.com/spring-projects/spring-boot/pull/50650">#50650</a></li> </ul> <h2>:notebook_with_decorative_cover: Documentation</h2> <ul> <li>Description of spring.graphql.websocket.connection-init-timeout does not render correctly in the reference guide <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51348">#51348</a></li> <li>spring.profiles.group should have a 'spring-profile-name' hint provider <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51284">#51284</a></li> <li>Remove reference to removed InfluxDB auto-configuration <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51176">#51176</a></li> <li>Use JacksonJsonSerde in Kafka Streams documentation <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51161">#51161</a></li> <li>Document alternatives to HttpMessageConverters <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51129">#51129</a></li> <li>Fix stale type reference for OTLP logging transport metadata <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51119">#51119</a></li> <li>Metadata for spring.test.mockmvc.htmlunit.url declares the wrong type <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51115">#51115</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-boot/commit/6fdf67ea1552691e932604d4bf67a5e08ff0b0ea"><code>6fdf67e</code></a> Release 4.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/fde599b28b40932e4ea6194399d89245923a01e7"><code>fde599b</code></a> Upgrade to Spring Pulsar 2.0.7</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/9daa58f7d98b82bf16febcb91943ce267c220a50"><code>9daa58f</code></a> Upgrade to Spring HATEOAS 3.1.2</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/353993ebc1d7b1ceccbb981b0439a42ba122a816"><code>353993e</code></a> Upgrade to Spring Data Bom 2026.0.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/24ba596bc4fa000614834016452435c834fdeda2"><code>24ba596</code></a> Upgrade to Spring Session 4.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/5cb5c294d1f4780e78d010a964049e47c074e4d6"><code>5cb5c29</code></a> Upgrade to Spring Security 7.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/4adc8eb130c4e0c688ed85316f385f4e04d47679"><code>4adc8eb</code></a> Upgrade to Spring LDAP 4.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/4d9c19cbc0589f57a7265052b507bf4b961082ac"><code>4d9c19c</code></a> Upgrade to Spring Kafka 4.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/f30f6120c4f6f8f873ac56cba478ae1f011c276c"><code>f30f612</code></a> Upgrade to Spring Integration 7.1.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/b930283d97e92eb24da1de3721cdd41625266dea"><code>b930283</code></a> Upgrade to Spring gRPC 1.1.1</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-boot/compare/v4.1.0...v4.1.1">compare view</a></li> </ul> </details> <br /> Updates `org.springframework.boot:spring-boot-health` from 4.1.0 to 4.1.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-boot/releases">org.springframework.boot:spring-boot-health's releases</a>.</em></p> <blockquote> <h2>v4.1.1</h2> <h2>:warning: Attention Required</h2> <ul> <li>Spring Boot's Gradle plugin no longer automatically configures gRPC when the Protobuf plugin is applied. This behavior caused problems for those using Protobuf without gRPC. To opt in to the configuration of gRPC, configure the <code>protobuf</code> extension with the <code>grpc</code> plugin using an empty block. The Spring Boot Gradle plugin will then automatically configure the use of <code>protoc-gen-grpc-java</code> as before. <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50822">#50822</a></li> </ul> <h2>:lady_beetle: Bug Fixes</h2> <ul> <li>Kafka consumer-specific security protocol is not taken into account <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51369">#51369</a></li> <li>Structured logging: a failed JSON encode corrupts the next log event written on the same thread <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51156">#51156</a></li> <li>Micrometer registries pin the application context <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51135">#51135</a></li> <li>Temporary file is not deleted when ExportedImageTar construction fails <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51132">#51132</a></li> <li>Metadata annota…
1 parent 1b1ea8f commit b2ddb88

5 files changed

Lines changed: 24 additions & 24 deletions

File tree

‎build.gradle‎

Lines changed: 19 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -27,40 +27,40 @@ dependencies {
2727
compileOnly 'org.apache.tomcat:tomcat-catalina:11.0.21'
2828

2929
// https://mvnrepository.com/artifact/org.springframework/spring-webmvc
30-
compileOnly 'org.springframework:spring-webmvc:7.0.8'
30+
compileOnly 'org.springframework:spring-webmvc:7.0.9'
3131

3232
// https://mvnrepository.com/artifact/org.springframework/spring-tx
33-
compileOnly 'org.springframework:spring-tx:7.0.8'
33+
compileOnly 'org.springframework:spring-tx:7.0.9'
3434

3535
// https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-security
36-
compileOnly 'org.springframework.boot:spring-boot-starter-security:4.1.0'
36+
compileOnly 'org.springframework.boot:spring-boot-starter-security:4.1.1'
3737

3838
// https://mvnrepository.com/artifact/org.springframework.amqp/spring-amqp
39-
compileOnly 'org.springframework.boot:spring-boot-starter-amqp:4.1.0'
39+
compileOnly 'org.springframework.boot:spring-boot-starter-amqp:4.1.1'
4040

4141
// https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-configuration-processor
42-
annotationProcessor 'org.springframework.boot:spring-boot-configuration-processor:4.1.0'
42+
annotationProcessor 'org.springframework.boot:spring-boot-configuration-processor:4.1.1'
4343

4444
// https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-actuator
45-
compileOnly 'org.springframework.boot:spring-boot-starter-actuator:4.1.0'
45+
compileOnly 'org.springframework.boot:spring-boot-starter-actuator:4.1.1'
4646

4747
// https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-health (new in Spring Boot 4)
48-
compileOnly 'org.springframework.boot:spring-boot-health:4.1.0'
48+
compileOnly 'org.springframework.boot:spring-boot-health:4.1.1'
4949

5050
// https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-autoconfigure
51-
compileOnly 'org.springframework.boot:spring-boot-autoconfigure:4.1.0'
51+
compileOnly 'org.springframework.boot:spring-boot-autoconfigure:4.1.1'
5252

5353
// https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-validation
54-
compileOnly 'org.springframework.boot:spring-boot-starter-validation:4.1.0'
54+
compileOnly 'org.springframework.boot:spring-boot-starter-validation:4.1.1'
5555

5656
// Jackson 2.x - required for Retrofit converter-jackson (Retrofit doesn't support Jackson 3 yet)
57-
compileOnly 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.22.0'
57+
compileOnly 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.22.2'
5858

5959
// Jackson 3.x - required for Spring Boot 4 (ObjectMapper, ControllerAdvisor, Audit module)
60-
compileOnly 'tools.jackson.core:jackson-databind:3.1.4'
60+
compileOnly 'tools.jackson.core:jackson-databind:3.2.2'
6161

6262
// Spring Boot Jackson - provides JsonMapperBuilderCustomizer
63-
compileOnly 'org.springframework.boot:spring-boot-jackson:4.1.0'
63+
compileOnly 'org.springframework.boot:spring-boot-jackson:4.1.1'
6464

6565
// https://mvnrepository.com/artifact/jakarta.validation/jakarta.validation-api
6666
compileOnly 'jakarta.validation:jakarta.validation-api:3.1.1'
@@ -72,25 +72,25 @@ dependencies {
7272
compileOnly 'com.squareup.retrofit2:converter-jackson:3.0.0'
7373

7474
// https://mvnrepository.com/artifact/com.squareup.okhttp3/logging-interceptor
75-
compileOnly 'com.squareup.okhttp3:logging-interceptor:5.3.2'
75+
compileOnly 'com.squareup.okhttp3:logging-interceptor:5.5.0'
7676

7777
// https://mvnrepository.com/artifact/de.siegmar/logback-gelf
7878
compileOnly 'de.siegmar:logback-gelf:6.1.2'
7979

8080
// https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-web
81-
testImplementation 'org.springframework.boot:spring-boot-starter-web:4.1.0'
81+
testImplementation 'org.springframework.boot:spring-boot-starter-web:4.1.1'
8282

8383
// https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-test
84-
testImplementation 'org.springframework.boot:spring-boot-starter-test:4.1.0'
84+
testImplementation 'org.springframework.boot:spring-boot-starter-test:4.1.1'
8585

8686
// https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-webmvc-test (new in Spring Boot 4 for MockMvc testing)
87-
testImplementation 'org.springframework.boot:spring-boot-webmvc-test:4.1.0'
87+
testImplementation 'org.springframework.boot:spring-boot-webmvc-test:4.1.1'
8888

8989
// https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-security
90-
testImplementation 'org.springframework.boot:spring-boot-starter-security:4.1.0'
90+
testImplementation 'org.springframework.boot:spring-boot-starter-security:4.1.1'
9191

9292
// https://mvnrepository.com/artifact/org.springframework.amqp/spring-amqp
93-
testImplementation 'org.springframework.boot:spring-boot-starter-amqp:4.1.0'
93+
testImplementation 'org.springframework.boot:spring-boot-starter-amqp:4.1.1'
9494

9595
// https://mvnrepository.com/artifact/org.json/json
9696
testImplementation 'org.json:json:20260522'
@@ -105,7 +105,7 @@ dependencies {
105105
testImplementation 'org.mockito:mockito-junit-jupiter:5.23.0'
106106

107107
// https://mvnrepository.com/artifact/org.mock-server/mockserver-netty
108-
testImplementation('org.mock-server:mockserver-netty:7.2.0') {
108+
testImplementation('org.mock-server:mockserver-netty:7.6.0') {
109109
exclude group: 'junit', module: 'junit'
110110
}
111111

‎gradle/wrapper/gradle-wrapper.jar‎

-957 Bytes
Binary file not shown.

‎gradle/wrapper/gradle-wrapper.properties‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
distributionBase=GRADLE_USER_HOME
22
distributionPath=wrapper/dists
3-
distributionUrl=https\://services.gradle.org/distributions/gradle-9.5.1-bin.zip
3+
distributionUrl=https\://services.gradle.org/distributions/gradle-9.7.1-bin.zip
44
networkTimeout=10000
55
retries=0
66
retryBackOffMs=500

‎gradlew‎

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎gradlew.bat‎

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)