Bump org.springframework:spring-framework-bom from 7.0.3 to 7.0.5
Open
Number: #242
Type: Pull Request
State: Open
Type: Pull Request
State: Open
Author:
dependabot[bot]
Association: Unknown
Comments: 1
Association: Unknown
Comments: 1
Created:
February 19, 2026 at 01:33 AM UTC
(4 months ago)
(4 months ago)
Updated:
February 19, 2026 at 01:34 AM UTC
(4 months ago)
(4 months ago)
Labels:
dependencies java
dependencies java
Description:
Bumps org.springframework:spring-framework-bom from 7.0.3 to 7.0.5.
Release notes
Sourced from org.springframework:spring-framework-bom's releases.
v7.0.5
:warning: Attention Required
- Optimize request and response header handling in Spring MVC #36334
:star: New Features
- Consistent adaptation of HTTP headers on Servlet responses #36343
- Copy methodAnnotations in MethodParameter copy constructor #36342
- Improve performance of validation groups determination in WebFlux #36336
- Reuse
AnnotatedMethodannotation cache in derived instances #36322- Optimize the addition of a charset to the MediaType in AbstractHttpMessageConverter #36320
- Optimize
MediaType(MediaType, Charset)constructor #36318- Detect all common size exceptions from Tomcat and Commons FileUpload 2.x #36317
- Consistently support
@Autowiredas a meta-annotation #36315- Avoid duplicate
requiredattribute lookup for@Autowiredannotations #36314- Cache
@ResponseBodypresence per controller class inRequestResponseBodyMethodProcessor#36311:lady_beetle: Bug Fixes
- ResolvableType#getGenerics() breaks serialization #36346
- DefaultHttpMessageConverters not adding provided configurer #36332
- Restore early MessageConsumer creation for temporary queue #36321
- Multipart upload leak on client abort (ByteBuf.release() not called) #36262
:notebook_with_decorative_cover: Documentation
- Document that SpEL expressions using
Optionalwith null-safe and Elvis operators are not compilable #36331- Improve documentation of baseline API version to emphasize version must be supported #36316
- Stop referring to obsolete
ListenableFuturein documentation #36313- Stop referring to standard Java features as "Java 8" features in documentation #36310
:heart: Contributors
Thank you to all the contributors who worked on this release:
@Niraviland@TAKETODAYv7.0.4
:star: New Features
- Cache method annotations in
MethodParameterandAnnotatedMethod#36307- Consistently support
@Lazyas a meta-annotation at arbitrary depths #36306- Consistently support
@Validatedas a meta-annotation at arbitrary depths #36305- Let developers disable default registrations in HttpMessageConverters #36303
- Log which HandlerInterceptor threw the exception #36281
- Improve performance of hashcode calculations for request mappings #36279
- Improve performance of HandlerMethod bean lookup #36278
- Improve performance of version mapping #36276
- Improve performance of single pattern request mappings #36275
... (truncated)
Commits
16ecbfcRelease v7.0.585c18caUpdate docs on supported versions with baseline notation22bd8bdSkip serialization of potentially non-serializable cached state9b10bb5Polishing727ccd0Avoid setCharacterEncoding(Charset) call with null valuea9f447eConsistent adaptation of HTTP headers on Servlet responses0841e79Copy methodAnnotations in MethodParameter copy constructora1868d3fix TransactionAspectSupport#currentTransactionStatus javadoce5aac66ServletResponseHeadersAdapter checks contentType property8bf85d2Polishing- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Package Dependencies
Ecosystem:
maven
maven
Version Change:
7.0.3 → 7.0.5
Update Type:
Patch
Patch
Technical Details
| ID: | 13936644 |
| UUID: | 3960537757 |
| Node ID: | PR_kwDOIAFE2M7Ewaih |
| Host: | GitHub |
| Repository: | microsphere-projects/microsphere-java |