build(deps): Bump org.springframework:spring-web from 6.2.11 to 7.0.0
Open
Number: #3116
Type: Pull Request
State: Open
Type: Pull Request
State: Open
Author:
dependabot[bot]
Association: Unknown
Comments: 1
Association: Unknown
Comments: 1
Created:
November 14, 2025 at 05:02 AM UTC
(7 months ago)
(7 months ago)
Updated:
November 21, 2025 at 05:03 AM UTC
(6 months ago)
(6 months ago)
Labels:
dependencies java
dependencies java
Description:
Bumps org.springframework:spring-web from 6.2.11 to 7.0.0.
Release notes
Sourced from org.springframework:spring-web's releases.
v7.0.0
:star: New Features
- Make SessionHolder publicly accessible for external resource management #35799
- RouterFunctions Builders do not support ServerResponse subtypes #35791
- Configure Jackson CBOR codecs by default if present #35787
- Rename
maxAttemptstomaxRetriesin@RetryableandRetryPolicy#35772- Prevent Kotlin Serialization side effects #35761
- Add default API version to the list of supported versions #35755
- Improve user check in TransportHandlingSockJsService #35753
- Update ApiVersionDeprecationHandler to provide access to handler #35750
- Use dedicated classes for ApiVersionResolver implementations #35747
- Provide AOT support for
@Nestedclasses in a@ParameterizedClass#35744- AssertJ support for WebTestClient #35737
- Reject attempt to use
@MockitoSpyBeanwith a scoped proxy #35722- Provide a way to supply the client builder for an HttpServiceGroup #35707
- Review HttpMessageConverters.Builder to improve readability of code using the API #35704
- Configure custom Kotlin Serialization converter on HttpMessageConverters #35733
:lady_beetle: Bug Fixes
- Missing support for UnprocessableContent in WebClientResponseException.create(HttpStatusCode, ..) methods #35802
- Relax media type checks in HttpMessageConverters #35801
- Fix
HttpHeadersandWebSocketHttpHeadersinterop issues #35792@ConcurrencyLimitweird behavior when combined with@Asyncand@Transactional#35788- buildSrc:test failing on JDKs before JDK 25 #35777
- Add jar validation and fix multi-release jar #35768
- Upgrade to JUnit 6.0.1 and prevent AOT test scanning failure for JUnit 4 tests #35740
- Fix port handling in
HtmlUnitRequestBuilder#35709- RestTestClient.mutate() should not have side effects #35698
:notebook_with_decorative_cover: Documentation
- Document workaround for
@PersistenceContextand@PersistenceUnitin test classes in AOT #31442:hammer: Dependency Upgrades
- Upgrade to Jetty 12.1.4 #35805
- Upgrade to Micrometer 1.16.0 #35811
- Upgrade to Reactor 2025.0.0 #35779
:heart: Contributors
Thank you to all the contributors who worked on this release:
@Sineaggiand@UpStreamThomasv7.0.0-RC3
:star: New Features
... (truncated)
Commits
fe00848Release v7.0.0333031eMerge branch '6.2.x'ed444ebNext development version (v6.2.14-SNAPSHOT)888d0f9Upgrade to Micrometer 1.16.008798e0Merge branch '6.2.x'da31750Upgrade to Micrometer 1.14.13b853203Upgrade to Reactor 2024.0.1289e0273Fix UnprocessableContent support in WebClientResponseException8c4b30aMerge branch '6.2.x'2b04df0Upgrade to Jetty 12.0.30- Additional commits viewable in compare view
Most Recent Ignore Conditions Applied to This Pull Request
| Dependency Name | Ignore Conditions |
|---|---|
| org.springframework:spring-web | [>= 5.a, < 6] |
| org.springframework:spring-web | [>= 6.a, < 7] |
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Note: Dependabot was ignoring updates to this dependency, but since you've updated it yourself we've started tracking it for you again. 🤖
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Package Dependencies
Package:
org.springframework:spring-web
Ecosystem:
maven
maven
Version Change:
6.2.11 → 7.0.0
Update Type:
Major
Major
Technical Details
| ID: | 11237977 |
| UUID: | 3623903238 |
| Node ID: | PR_kwDOAKeSas6zXk0R |
| Host: | GitHub |
| Repository: | OpenFeign/feign |