Sourced from org.springframework:spring-webmvc's releases.

v6.2.7

:star: New Features

• Forward more methods to underlying InputStream in NonClosingInputStream #34893
• Introduce Spring property for the default property placeholder escape character #34865
• Close ApplicationContext once AOT processing has completed #34841
• Fix AbstractJackson2HttpMessageConverter#getObjectMappersForType nullness #34811
• Add option for case-insensitive match to PatternMatchUtils #34801
• RestClient @RequestBody parameters lose generic type information when creating HTTP service beans #34793
• Adds option to set Principal in MockServerWebExchange #34789

:lady_beetle: Bug Fixes

• Beans created by FactoryBean are not considered as autowiring candidates if another thread holds a singletonLock #34902
• PropertySourcesPlaceholderConfigurer placeholder resolution fails in several scenarios #34861
• HttpComponentsClientHttpRequestFactory setConnectionRequestTimeout not working with httpclient 5.3.1 #34851
• Fragment.create() requires mutable map - which is unusable when used with Kotlin #34848
• Duplicate BeanOverrideHandler discovered in @Nested test case with superclass from different class or in interface implemented multiple times #34844
• Accidental ClassLoader defineClass enforcement after #34677 #34824
• HttpEntity.EMPTY headers should not be possible to mutate via HttpHeaders constructor #34812
• AbstractFileResolvingResource.exists incorrectly reports result for resources inside of spring-boot executable jar #34796
• Correctly expand query param with same name from URI variables array #34783
• R2DBC NamedParameterUtils only expands reused collection parameter once #34768
• PathMatchingResourcePatternResolver wrongly assumes that target/classes always exists #34764

:notebook_with_decorative_cover: Documentation

• Clarify CompositePropertySource behavior for EnumerablePropertySource contract #34886
• Javadoc and @Nullable annotation for servletContext parameter of ConfigurableWebEnvironment.initPropertySources are contradictory #34845
• Spring MVC: @EnableAsync needs to be redeclared for each ApplicationContext #34843
• Provide a working example instead of unclear placeholders #34828

:hammer: Dependency Upgrades

• Upgrade to Micrometer 1.14.7 #34889
• Upgrade to Reactor 2024.0.6 #34898

:heart: Contributors

Thank you to all the contributors who worked on this release:

@​Artur-, @​blake-bauman, @​iifawzi, @​kilink, @​quaff, @​whlit, and @​zzoe2346

• ba590ac Release v6.2.7
• ee62701 Make use of PatternMatchUtils ignoreCase option
• fa168ca Revise FactoryBean locking behavior for strict/lenient consistency
• 3c228a5 Add missing @​since tags in PatternMatchUtils
• 9bf6b8c Upgrade to Reactor 2024.0.6
• 37ecdd1 Forward more methods to underlying InputStream in NonClosingInputStream
• 73f1c5a Polishing
• 4d296fb Upgrade to Micrometer 1.14.7
• 6a94444 Clarify CompositePropertySource behavior for EnumerablePropertySource contract
• 03ae97b Introduce Spring property for default escape character for placeholders
• Additional commits viewable in compare view

Sourced from org.springframework:spring-tx's releases.

v6.2.7

:star: New Features

• Forward more methods to underlying InputStream in NonClosingInputStream #34893
• Introduce Spring property for the default property placeholder escape character #34865
• Close ApplicationContext once AOT processing has completed #34841
• Fix AbstractJackson2HttpMessageConverter#getObjectMappersForType nullness #34811
• Add option for case-insensitive match to PatternMatchUtils #34801
• RestClient @RequestBody parameters lose generic type information when creating HTTP service beans #34793
• Adds option to set Principal in MockServerWebExchange #34789

:lady_beetle: Bug Fixes

• Beans created by FactoryBean are not considered as autowiring candidates if another thread holds a singletonLock #34902
• PropertySourcesPlaceholderConfigurer placeholder resolution fails in several scenarios #34861
• HttpComponentsClientHttpRequestFactory setConnectionRequestTimeout not working with httpclient 5.3.1 #34851
• Fragment.create() requires mutable map - which is unusable when used with Kotlin #34848
• Duplicate BeanOverrideHandler discovered in @Nested test case with superclass from different class or in interface implemented multiple times #34844
• Accidental ClassLoader defineClass enforcement after #34677 #34824
• HttpEntity.EMPTY headers should not be possible to mutate via HttpHeaders constructor #34812
• AbstractFileResolvingResource.exists incorrectly reports result for resources inside of spring-boot executable jar #34796
• Correctly expand query param with same name from URI variables array #34783
• R2DBC NamedParameterUtils only expands reused collection parameter once #34768
• PathMatchingResourcePatternResolver wrongly assumes that target/classes always exists #34764

:notebook_with_decorative_cover: Documentation

• Clarify CompositePropertySource behavior for EnumerablePropertySource contract #34886
• Javadoc and @Nullable annotation for servletContext parameter of ConfigurableWebEnvironment.initPropertySources are contradictory #34845
• Spring MVC: @EnableAsync needs to be redeclared for each ApplicationContext #34843
• Provide a working example instead of unclear placeholders #34828

:hammer: Dependency Upgrades

• Upgrade to Micrometer 1.14.7 #34889
• Upgrade to Reactor 2024.0.6 #34898

:heart: Contributors

Thank you to all the contributors who worked on this release:

@​Artur-, @​blake-bauman, @​iifawzi, @​kilink, @​quaff, @​whlit, and @​zzoe2346

• ba590ac Release v6.2.7
• ee62701 Make use of PatternMatchUtils ignoreCase option
• fa168ca Revise FactoryBean locking behavior for strict/lenient consistency
• 3c228a5 Add missing @​since tags in PatternMatchUtils
• 9bf6b8c Upgrade to Reactor 2024.0.6
• 37ecdd1 Forward more methods to underlying InputStream in NonClosingInputStream
• 73f1c5a Polishing
• 4d296fb Upgrade to Micrometer 1.14.7
• 6a94444 Clarify CompositePropertySource behavior for EnumerablePropertySource contract
• 03ae97b Introduce Spring property for default escape character for placeholders
• Additional commits viewable in compare view

Sourced from org.springframework:spring-tx's releases.

v6.2.7

:star: New Features

• Forward more methods to underlying InputStream in NonClosingInputStream #34893
• Introduce Spring property for the default property placeholder escape character #34865
• Close ApplicationContext once AOT processing has completed #34841
• Fix AbstractJackson2HttpMessageConverter#getObjectMappersForType nullness #34811
• Add option for case-insensitive match to PatternMatchUtils #34801
• RestClient @RequestBody parameters lose generic type information when creating HTTP service beans #34793
• Adds option to set Principal in MockServerWebExchange #34789

:lady_beetle: Bug Fixes

• Beans created by FactoryBean are not considered as autowiring candidates if another thread holds a singletonLock #34902
• PropertySourcesPlaceholderConfigurer placeholder resolution fails in several scenarios #34861
• HttpComponentsClientHttpRequestFactory setConnectionRequestTimeout not working with httpclient 5.3.1 #34851
• Fragment.create() requires mutable map - which is unusable when used with Kotlin #34848
• Duplicate BeanOverrideHandler discovered in @Nested test case with superclass from different class or in interface implemented multiple times #34844
• Accidental ClassLoader defineClass enforcement after #34677 #34824
• HttpEntity.EMPTY headers should not be possible to mutate via HttpHeaders constructor #34812
• AbstractFileResolvingResource.exists incorrectly reports result for resources inside of spring-boot executable jar #34796
• Correctly expand query param with same name from URI variables array #34783
• R2DBC NamedParameterUtils only expands reused collection parameter once #34768
• PathMatchingResourcePatternResolver wrongly assumes that target/classes always exists #34764

:notebook_with_decorative_cover: Documentation

• Clarify CompositePropertySource behavior for EnumerablePropertySource contract #34886
• Javadoc and @Nullable annotation for servletContext parameter of ConfigurableWebEnvironment.initPropertySources are contradictory #34845
• Spring MVC: @EnableAsync needs to be redeclared for each ApplicationContext #34843
• Provide a working example instead of unclear placeholders #34828

:hammer: Dependency Upgrades

• Upgrade to Micrometer 1.14.7 #34889
• Upgrade to Reactor 2024.0.6 #34898

:heart: Contributors

Thank you to all the contributors who worked on this release:

@​Artur-, @​blake-bauman, @​iifawzi, @​kilink, @​quaff, @​whlit, and @​zzoe2346

• ba590ac Release v6.2.7
• ee62701 Make use of PatternMatchUtils ignoreCase option
• fa168ca Revise FactoryBean locking behavior for strict/lenient consistency
• 3c228a5 Add missing @​since tags in PatternMatchUtils
• 9bf6b8c Upgrade to Reactor 2024.0.6
• 37ecdd1 Forward more methods to underlying InputStream in NonClosingInputStream
• 73f1c5a Polishing
• 4d296fb Upgrade to Micrometer 1.14.7
• 6a94444 Clarify CompositePropertySource behavior for EnumerablePropertySource contract
• 03ae97b Introduce Spring property for default escape character for placeholders
• Additional commits viewable in compare view

Sourced from org.springframework.boot:spring-boot-starter-security's releases.

v3.5.0

Full release notes for Spring Boot 3.5 are available on the wiki.

:star: New Features

• Make heapdump endpoint restricted by default #45624
• Remove SSL status tag from metrics #45602
• Remove 'spring.http.client' deprecation and change 'spring.http.reactiveclient.settings' to 'spring.http.reactiveclient' #45507

:lady_beetle: Bug Fixes

• Unable to override/set nested ConfigurationProperties by passing as a system property #45639
• ValidationAutoConfiguration triggers early initialization of properties binding #45618
• Micrometer "enable" annotations property does not cover observed aspect #45617
• spring.graphql.sse.timeout is no longer exposed #45613
• SpringApplication.setEnvironmentPrefix is ignored when reading SPRING_PROFILES_ACTIVE #45549
• IllegalStateException when extracting using layers a module with no code of its own #45449
• Removed spring.batch.initialize-schema property is still considered #45380
• ReactorHttpClientBuilder does not offer a factory method to create the HttpClient #45378
• Suggested values for spring.jpa.hibernate.ddl-auto are not aligned with Hibernate #45351
• Custom default units declared on a field are ignored when binding properties in a native image #45347
• DockerRegistryConfigAuthentication uses the wrong serverUrl as a fallback for the Credentials helper #45345
• Various spring.datasource properties are mistakenly marked as ignored #45342
• JerseyWebApplicationInitializer always gets loaded, setting a ServletContext initParameter #45297
• DockerRegistryConfigAuthentication does not align with Docker CLI #45292
• Unlike the Docker CLI, "\x00" characters are not trimmed from a decoded Docker Registry password #45290
• CloudFoundry security matcher logs a warning due to use of the 'ignoring()' method #32622

:notebook_with_decorative_cover: Documentation

• Document the java info contribution #45634
• Document the process info contribution #45632
• Document the os info contribution #45630
• Document typical spring.application.group and name use #45628
• Document that bean methods should be static when annotated with @ConfigurationPropertiesBinding #45626
• Document the way that primary Kotlin constructors are used when binding #45553
• Improve "profile" reference documentation with additional admonitions #45551
• Improve setEnvironmentPrefix(...) reference documentation #45376
• Document all the available Testcontainers integrations #45367
• Document when a spring.config.import value is relative and when it is fixed #45363
• Update org.cyclonedx.bom version in docs to 2.3.0 #45320
• Update link to "Parameter Name Retention" section of Spring Framework's release notes #45299

:hammer: Dependency Upgrades

• Prevent upgrade to Prometheus Client 1.3.7 #45541
• Upgrade to Couchbase Client 3.8.1 #45539
• Upgrade to Elasticsearch 8.18.1 #45447
• Upgrade to GraphQL Java 24.0 #45588
• Upgrade to Hibernate 6.6.15.Final #45540

... (truncated)

• 8c2d645 Release v3.5.0
• 0b49e78 Merge branch '3.4.x'
• c684fa4 Switch make-default for publish-to-sdkman to 3.5.x
• 5695192 Ensure descendants are always recalculated on cache refresh
• 31f549e Merge branch '3.4.x'
• 68df6f5 Next development version (v3.4.7-SNAPSHOT)
• 9f46877 Merge branch '3.4.x'
• 404a0df Merge branch '3.3.x' into 3.4.x
• e331846 Next development version (v3.3.13-SNAPSHOT)
• b142798 Merge branch '3.4.x'
• Additional commits viewable in compare view

Sourced from org.springframework.boot:spring-boot-starter-amqp's releases.

v3.5.0

Full release notes for Spring Boot 3.5 are available on the wiki.

:star: New Features

• Make heapdump endpoint restricted by default #45624
• Remove SSL status tag from metrics #45602
• Remove 'spring.http.client' deprecation and change 'spring.http.reactiveclient.settings' to 'spring.http.reactiveclient' #45507

:lady_beetle: Bug Fixes

• Unable to override/set nested ConfigurationProperties by passing as a system property #45639
• ValidationAutoConfiguration triggers early initialization of properties binding #45618
• Micrometer "enable" annotations property does not cover observed aspect #45617
• spring.graphql.sse.timeout is no longer exposed #45613
• SpringApplication.setEnvironmentPrefix is ignored when reading SPRING_PROFILES_ACTIVE #45549
• IllegalStateException when extracting using layers a module with no code of its own #45449
• Removed spring.batch.initialize-schema property is still considered #45380
• ReactorHttpClientBuilder does not offer a factory method to create the HttpClient #45378
• Suggested values for spring.jpa.hibernate.ddl-auto are not aligned with Hibernate #45351
• Custom default units declared on a field are ignored when binding properties in a native image #45347
• DockerRegistryConfigAuthentication uses the wrong serverUrl as a fallback for the Credentials helper #45345
• Various spring.datasource properties are mistakenly marked as ignored #45342
• JerseyWebApplicationInitializer always gets loaded, setting a ServletContext initParameter #45297
• DockerRegistryConfigAuthentication does not align with Docker CLI #45292
• Unlike the Docker CLI, "\x00" characters are not trimmed from a decoded Docker Registry password #45290
• CloudFoundry security matcher logs a warning due to use of the 'ignoring()' method #32622

:notebook_with_decorative_cover: Documentation

• Document the java info contribution #45634
• Document the process info contribution #45632
• Document the os info contribution #45630
• Document typical spring.application.group and name use #45628
• Document that bean methods should be static when annotated with @ConfigurationPropertiesBinding #45626
• Document the way that primary Kotlin constructors are used when binding #45553
• Improve "profile" reference documentation with additional admonitions #45551
• Improve setEnvironmentPrefix(...) reference documentation #45376
• Document all the available Testcontainers integrations #45367
• Document when a spring.config.import value is relative and when it is fixed #45363
• Update org.cyclonedx.bom version in docs to 2.3.0 #45320
• Update link to "Parameter Name Retention" section of Spring Framework's release notes #45299

:hammer: Dependency Upgrades

• Prevent upgrade to Prometheus Client 1.3.7 #45541
• Upgrade to Couchbase Client 3.8.1 #45539
• Upgrade to Elasticsearch 8.18.1 #45447
• Upgrade to GraphQL Java 24.0 #45588
• Upgrade to Hibernate 6.6.15.Final #45540

... (truncated)

• 8c2d645 Release v3.5.0
• 0b49e78 Merge branch '3.4.x'
• c684fa4 Switch make-default for publish-to-sdkman to 3.5.x
• 5695192 Ensure descendants are always recalculated on cache refresh
• 31f549e Merge branch '3.4.x'
• 68df6f5 Next development version (v3.4.7-SNAPSHOT)
• 9f46877 Merge branch '3.4.x'
• 404a0df Merge branch '3.3.x' into 3.4.x
• e331846 Next development version (v3.3.13-SNAPSHOT)
• b142798 Merge branch '3.4.x'
• Additional commits viewable in compare view

Sourced from org.springframework.boot:spring-boot-configuration-processor's releases.

v3.5.0

Full release notes for Spring Boot 3.5 are available on the wiki.

:star: New Features

• Make heapdump endpoint restricted by default #45624
• Remove SSL status tag from metrics #45602
• Remove 'spring.http.client' deprecation and change 'spring.http.reactiveclient.settings' to 'spring.http.reactiveclient' #45507

:lady_beetle: Bug Fixes

• Unable to override/set nested ConfigurationProperties by passing as a system property #45639
• ValidationAutoConfiguration triggers early initialization of properties binding #45618
• Micrometer "enable" annotations property does not cover observed aspect #45617
• spring.graphql.sse.timeout is no longer exposed #45613
• SpringApplication.setEnvironmentPrefix is ignored when reading SPRING_PROFILES_ACTIVE #45549
• IllegalStateException when extracting using layers a module with no code of its own #45449
• Removed spring.batch.initialize-schema property is still considered #45380
• ReactorHttpClientBuilder does not offer a factory method to create the HttpClient #45378
• Suggested values for spring.jpa.hibernate.ddl-auto are not aligned with Hibernate #45351
• Custom default units declared on a field are ignored when binding properties in a native image #45347
• DockerRegistryConfigAuthentication uses the wrong serverUrl as a fallback for the Credentials helper #45345
• Various spring.datasource properties are mistakenly marked as ignored #45342
• JerseyWebApplicationInitializer always gets loaded, setting a ServletContext initParameter #45297
• DockerRegistryConfigAuthentication does not align with Docker CLI #45292
• Unlike the Docker CLI, "\x00" characters are not trimmed from a decoded Docker Registry password #45290
• CloudFoundry security matcher logs a warning due to use of the 'ignoring()' method #32622

:notebook_with_decorative_cover: Documentation

• Document the java info contribution #45634
• Document the process info contribution #45632
• Document the os info contribution #45630
• Document typical spring.application.group and name use #45628
• Document that bean methods should be static when annotated with @ConfigurationPropertiesBinding #45626
• Document the way that primary Kotlin constructors are used when binding #45553
• Improve "profile" reference documentation with additional admonitions #45551
• Improve setEnvironmentPrefix(...) reference documentation #45376
• Document all the available Testcontainers integrations #45367
• Document when a spring.config.import value is relative and when it is fixed #45363
• Update org.cyclonedx.bom version in docs to 2.3.0 #45320
• Update link to "Parameter Name Retention" section of Spring Framework's release notes #45299

:hammer: Dependency Upgrades

• Prevent upgrade to Prometheus Client 1.3.7 #45541
• Upgrade to Couchbase Client 3.8.1 #45539
• Upgrade to Elasticsearch 8.18.1 #45447
• Upgrade to GraphQL Java 24.0 #45588
• Upgrade to Hibernate 6.6.15.Final #45540

... (truncated)

• 8c2d645 Release v3.5.0
• 0b49e78 Merge branch '3.4.x'
• c684fa4 Switch make-default for publish-to-sdkman to 3.5.x
• 5695192 Ensure descendants are always recalculated on cache refresh
• 31f549e Merge branch '3.4.x'
• 68df6f5 Next development version (v3.4.7-SNAPSHOT)
• 9f46877 Merge branch '3.4.x'
• 404a0df Merge branch '3.3.x' into 3.4.x
• e331846 Next development version (v3.3.13-SNAPSHOT)
• b142798 Merge branch '3.4.x'
• Additional commits viewable in compare view

Sourced from org.springframework.boot:spring-boot-starter-actuator's releases.

v3.5.0

Full release notes for Spring Boot 3.5 are available on the wiki.

:star: New Features

• Make heapdump endpoint restricted by default #45624
• Remove SSL status tag from metrics #45602
• Remove 'spring.http.client' deprecation and change 'spring.http.reactiveclient.settings' to 'spring.http.reactiveclient' #45507

:lady_beetle: Bug Fixes

• Unable to override/set nested ConfigurationProperties by passing as a system property #45639
• ValidationAutoConfiguration triggers early initialization of properties binding #45618
• Micrometer "enable" annotations property does not cover observed aspect #45617
• spring.graphql.sse.timeout is no longer exposed #45613
• SpringApplication.setEnvironmentPrefix is ignored when reading SPRING_PROFILES_ACTIVE #45549
• IllegalStateException when extracting using layers a module with no code of its own #45449
• Removed spring.batch.initialize-schema property is still considered #45380
• ReactorHttpClientBuilder does not offer a factory method to create the HttpClient #45378
• Suggested values for spring.jpa.hibernate.ddl-auto are not aligned with Hibernate #45351
• Custom default units declared on a field are ignored when binding properties in a native image #45347
• DockerRegistryConfigAuthentication uses the wrong serverUrl as a fallback for the Credentials helper #45345
• Various spring.datasource properties are mistakenly marked as ignored #45342
• JerseyWebApplicationInitializer always gets loaded, setting a ServletContext initParameter #45297
• DockerRegistryConfigAuthentication does not align with Docker CLI #45292
• Unlike the Docker CLI, "\x00" characters are not trimmed from a decoded Docker Registry password #45290
• CloudFoundry security matcher logs a warning due to use of the 'ignoring()' method #32622

:notebook_with_decorative_cover: Documentation

• Document the java info contribution #45634
• Document the process info contribution #45632
• Document the os info contribution #45630
• Document typical spring.application.group and name use #45628
• Document that bean methods should be static when annotated with @ConfigurationPropertiesBinding #45626
• Document the way that primary Kotlin constructors are used when binding #45553
• Improve "profile" reference documentation with additional admonitions #45551
• Improve setEnvironmentPrefix(...) reference documentation #45376
• Document all the available Testcontainers integrations #45367
• Document when a spring.config.import value is relative and when it is fixed #45363
• Update org.cyclonedx.bom version in docs to 2.3.0 #45320
• Update link to "Parameter Name Retention" section of Spring Framework's release notes #45299

:hammer: Dependency Upgrades

• Prevent upgrade to Prometheus Client 1.3.7 #45541
• Upgrade to Couchbase Client 3.8.1 #45539
• Upgrade to Elasticsearch 8.18.1 #45447
• Upgrade to GraphQL Java 24.0 #45588
• Upgrade to Hibernate 6.6.15.Final #45540

... (truncated)

• 8c2d645 Release v3.5.0
• 0b49e78 Merge branch '3.4.x'
• c684fa4 Switch make-default for publish-to-sdkman to 3.5.x
• 5695192 Ensure descendants are always recalculated on cache refresh
• 31f549e Merge branch '3.4.x'
• 68df6f5 Next development version (v3.4.7-SNAPSHOT)
• 9f46877 Merge branch '3.4.x'
• 404a0df Merge branch '3.3.x' into 3.4.x
• e331846 Next development version (v3.3.13-SNAPSHOT)
• b142798 Merge branch '3.4.x'
• Additional commits viewable in compare view

Sourced from org.springframework.boot:spring-boot-autoconfigure's releases.

v3.5.0

Full release notes for Spring Boot 3.5 are available on the wiki.

:star: New Features

• Make heapdump endpoint restricted by default #45624
• Remove SSL status tag from metrics #45602
• Remove 'spring.http.client' deprecation and change 'spring.http.reactiveclient.settings' to 'spring.http.reactiveclient' #45507

:lady_beetle: Bug Fixes

• Unable to override/set nested ConfigurationProperties by passing as a system property #45639
• ValidationAutoConfiguration triggers early initialization of properties binding #45618
• Micrometer "enable" annotations property does not cover observed aspect #45617
• spring.graphql.sse.timeout is no longer exposed #45613
• SpringApplication.setEnvironmentPrefix is ignored when reading SPRING_PROFILES_ACTIVE #45549
• IllegalStateException when extracting using layers a module with no code of its own #45449
• Removed spring.batch.initialize-schema property is still considered #45380
• ReactorHttpClientBuilder does not offer a factory method to create the HttpClient #45378
• Suggested values for spring.jpa.hibernate.ddl-auto are not aligned with Hibernate #45351
• Custom default units declared on a field are ignored when binding properties in a native image #45347
• DockerRegistryConfigAuthentication uses the wrong serverUrl as a fallback for the Credentials helper #45345
• Various spring.datasource properties are mistakenly marked as ignored #45342
• JerseyWebApplicationInitializer always gets loaded, setting a ServletContext initParameter #45297
• DockerRegistryConfigAuthentication does not align with Docker CLI #45292
• Unlike the Docker CLI, "\x00" characters are not trimmed from a decoded Docker Registry password #45290
• CloudFoundry security matcher logs a warning due to use of the 'ignoring()' method #32622

:notebook_with_decorative_cover: Documentation

• Document the java info contribution #45634
• Document the process info contribution #45632
• Document the os info contribution #45630
• Document typical spring.application.group and name use #45628
• Document that bean methods should be static when annotated with @ConfigurationPropertiesBinding #45626
• Document the way that primary Kotlin constructors are used when binding #45553
• Improve "profile" reference documentation with additional admonitions #45551
• Improve setEnvironmentPrefix(...) reference documentation #45376
• Document all the available Testcontainers integrations #45367
• Document when a spring.config.import value is relative and when it ...

  Description has been truncated