Sourced from org.springframework:spring-framework-bom's releases.

v6.2.11

:star: New Features

• Missing @Nullable on JsonPathAssertions.isEqualTo #35445
• Graceful fallback for non-default NIO.2 FileSystems #35443
• Avoid thread pinning in SseEmitter, ResponseBodyEmitter #35423
• Detect Informix error codes as DuplicateKeyException #35400
• Inconsistent nullability for String value arguments in ResponseCookie from*() factory methods #35377
• Revisit taskTerminationTimeout semantics on SimpleAsyncTaskExecutor/Scheduler #35372
• StandardEvaluationContext.setBeanResolver should allow @Nullable BeanResolver #35371

:lady_beetle: Bug Fixes

• "mainThreadPrefix = null " Causing multiple background bean locks to be blocked #35409
• Annotation not found on parameter in overridden method unless method is public #35349
• Annotations on overridden methods not found in type hierarchy with unresolved generics #35342
• Performance degradation when using singleton beans with Provider #35330
• JettyClientHttpConnector buffer leak in Spring Framework 6.2 #35319
• Spring application hangs on shutdown with @Scheduled(cron=…) when custom ScheduledExecutorService bean is defined (Java 19+) #35316

:notebook_with_decorative_cover: Documentation

• Document potential need to use Mockito.doXxx() to stub a @MockitoSpyBean #35410
• Fix links to Reactive Libraries and RestTemplate #35392
• Fix broken link in WebDriver docs #35374
• Document Web DataBinder support for RouterFunction #35367
• Improve documentation for ApplicationEvents to clarify recommended usage #35335
• Document terms and units in DataSize.parse() #35298
• Refine @Contract Javadoc #35285
• Correct the default value of nestedTransactionAllowed in JpaTransactionManager javadoc #35212

:hammer: Dependency Upgrades

• Upgrade to Micrometer 1.14.11 #35455
• Upgrade to Reactor 2024.0.10 #35454

:heart: Contributors

Thank you to all the contributors who worked on this release:

@​Dockerel, @​Kehrlann, @​acktsap, @​khj68, @​ngocnhan-tran1996, @​scordio, and @​sgflt

v6.2.10

:star: New Features

• Optimize NIO path resolution in PathEditor #35304
• Make type in ProblemDetail nullable #35294
• Refine UriUtils#decode and StringUtils#uriDecode implementation and documentation #35253
• Provide configurable useCaches option for URLConnection usage in UrlResource (avoiding jar file leak) #35218

... (truncated)

• 4c13425 Release v6.2.11
• d17601e Upgrade to Undertow 2.3.19, RxJava 3.1.11, Aalto 1.3.3
• 5b38761 Clarify intended nestedTransactionAllowed default in JpaTransactionManager
• 0e3e34b Find annotations on parameters in overridden non-public methods
• 4745c7c Name local variables consistently
• 275fb52 Upgrade to Reactor 2024.0.10 and Micrometer 1.14.11
• 7f9aa39 Polishing
• c788554 Avoid thread pinning in SseEmitter, ResponseBodyEmitter
• 9e8c640 Make JsonPathAssertions#isEqualTo parameter nullable
• ebb8e34 Upgrade to Jetty 12.0.26, Jetty Reactive HttpClient 4.0.11, Netty 4.1.127, Ht...
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)