Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.5.0

Full release notes for Spring Boot 3.5 are available on the wiki.

:star: New Features

• Make heapdump endpoint restricted by default #45624
• Remove SSL status tag from metrics #45602
• Remove 'spring.http.client' deprecation and change 'spring.http.reactiveclient.settings' to 'spring.http.reactiveclient' #45507

:lady_beetle: Bug Fixes

• Unable to override/set nested ConfigurationProperties by passing as a system property #45639
• ValidationAutoConfiguration triggers early initialization of properties binding #45618
• Micrometer "enable" annotations property does not cover observed aspect #45617
• spring.graphql.sse.timeout is no longer exposed #45613
• SpringApplication.setEnvironmentPrefix is ignored when reading SPRING_PROFILES_ACTIVE #45549
• IllegalStateException when extracting using layers a module with no code of its own #45449
• Removed spring.batch.initialize-schema property is still considered #45380
• ReactorHttpClientBuilder does not offer a factory method to create the HttpClient #45378
• Suggested values for spring.jpa.hibernate.ddl-auto are not aligned with Hibernate #45351
• Custom default units declared on a field are ignored when binding properties in a native image #45347
• DockerRegistryConfigAuthentication uses the wrong serverUrl as a fallback for the Credentials helper #45345
• Various spring.datasource properties are mistakenly marked as ignored #45342
• JerseyWebApplicationInitializer always gets loaded, setting a ServletContext initParameter #45297
• DockerRegistryConfigAuthentication does not align with Docker CLI #45292
• Unlike the Docker CLI, "\x00" characters are not trimmed from a decoded Docker Registry password #45290
• CloudFoundry security matcher logs a warning due to use of the 'ignoring()' method #32622

:notebook_with_decorative_cover: Documentation

• Document the java info contribution #45634
• Document the process info contribution #45632
• Document the os info contribution #45630
• Document typical spring.application.group and name use #45628
• Document that bean methods should be static when annotated with @ConfigurationPropertiesBinding #45626
• Document the way that primary Kotlin constructors are used when binding #45553
• Improve "profile" reference documentation with additional admonitions #45551
• Improve setEnvironmentPrefix(...) reference documentation #45376
• Document all the available Testcontainers integrations #45367
• Document when a spring.config.import value is relative and when it is fixed #45363
• Update org.cyclonedx.bom version in docs to 2.3.0 #45320
• Update link to "Parameter Name Retention" section of Spring Framework's release notes #45299

:hammer: Dependency Upgrades

• Prevent upgrade to Prometheus Client 1.3.7 #45541
• Upgrade to Couchbase Client 3.8.1 #45539
• Upgrade to Elasticsearch 8.18.1 #45447
• Upgrade to GraphQL Java 24.0 #45588
• Upgrade to Hibernate 6.6.15.Final #45540

... (truncated)

• 8c2d645 Release v3.5.0
• 0b49e78 Merge branch '3.4.x'
• c684fa4 Switch make-default for publish-to-sdkman to 3.5.x
• 5695192 Ensure descendants are always recalculated on cache refresh
• 31f549e Merge branch '3.4.x'
• 68df6f5 Next development version (v3.4.7-SNAPSHOT)
• 9f46877 Merge branch '3.4.x'
• 404a0df Merge branch '3.3.x' into 3.4.x
• e331846 Next development version (v3.3.13-SNAPSHOT)
• b142798 Merge branch '3.4.x'
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)