spring/spring-boot
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-boot.git synced 2026-09-17 12:09:16 +00:00
Code Issues Projects Releases Wiki Activity
51,303 Commits 24 Branches 394 Tags
3.3.x
Commit Graph
51303 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andy Wilkinson c63eba32f9 Revert "Publish releases using Central Portal" 
This reverts commit 8681b9445b.

See gh-46012
 2025-06-19 07:27:29 +01:00
Phillip Webb 206785f838 Only cache JarFile URL keys that are cheap to lookup 
Update `JarFileUrlKey` so that only URLs that have a cheap `equals()`
method call are cached. This should prevent expensive DNS lookups from
being performed.

Fixes gh-46015
 2025-06-18 13:46:31 -07:00
Andy Wilkinson 8681b9445b Publish releases using Central Portal 
Closes gh-46012
 2025-06-18 17:46:24 +01:00
Andy Wilkinson 13d265c282 Merge pull request #46016 from davidlj95 
* gh-46016:
  Fix Docker security options broken link in OCI images packaging docs

Closes gh-46016
 2025-06-18 17:38:41 +01:00
David LJ f4e04227f7 Fix Docker security options broken link in OCI images packaging docs 
See gh-46016

Signed-off-by: David LJ <mail@davidlj95.com>
 2025-06-18 17:36:55 +01:00
Andy Wilkinson bab9071539 Revert "Work around Spring Framework cache pollution bug" 
This reverts commit 4af0ee20d1.

Closes gh-45984
 2025-06-18 16:10:05 +01:00
Stéphane Nicoll f6c88840e0 Upgrade to Spring Integration 6.3.11 
Closes gh-45756
 2025-06-18 14:16:04 +02:00
Moritz Halbritter 6ef1830bc8 Document that /error is secured by default 
Closes gh-45663
 2025-06-18 13:33:38 +02:00
Andy Wilkinson d9e4b66eee Add properties for new max part count and max part header size 
To address CVE-2025-48976 and CVE-2025-48988, Tomcat 10.1.42 has
introduced two new configuration settings – maxPartCount and
maxPartHeaderSize. The default values for these configuration
settings have proven hard to get right and some applications have
had to increase the default limits. To ease their configuration in
Spring Boot, this commit introduces configuration properties for
the new settings:

-  server.tomcat.max-part-count (maxPartCount)
-  server.tomcat.max-part-header-size (maxPartHeaderSize)

The defaults are aligned with those of Tomcat 10.1.42
(10 and 512 bytes respectively).

Closes gh-45869
 2025-06-18 09:46:09 +01:00
Moritz Halbritter 0f77dcb402 Use system properties to detect OpenJ9 JVMs when doing heapdumps 
Closes gh-45973
 2025-06-18 10:16:25 +02:00
Andy Wilkinson c13dc92286 Test against Gradle 7.6.5 
Closes gh-45998
 2025-06-17 20:05:03 +01:00
Stéphane Nicoll c96d674ffb Upgrade to Spring WS 4.0.15 
Closes gh-45762
 2025-06-17 20:31:46 +02:00
Stéphane Nicoll 0d9fc6d069 Upgrade to Spring Kafka 3.2.10 
Closes gh-45757
 2025-06-17 20:31:46 +02:00
Stéphane Nicoll cf5a3b9bab Upgrade to Spring Authorization Server 1.3.7 
Closes gh-45753
 2025-06-17 20:31:46 +02:00
Andy Wilkinson a6ac444aba Use fixed timestamp so included snippets match accompanying text 
Closes gh-45995
 2025-06-17 19:06:41 +01:00
Stéphane Nicoll e914539804 Merge pull request #45976 from chanbinme 
* pr/45976:
  Polish "Avoid NPE in SimpleDataSourceProperties when driver is null"
  Avoid NPE in SimpleDataSourceProperties when driver is null

Closes gh-45976
 2025-06-17 14:57:24 +02:00
Stéphane Nicoll 1f031f5fa6 Polish "Avoid NPE in SimpleDataSourceProperties when driver is null" 
See gh-45976
 2025-06-17 14:53:57 +02:00
chanbinme 1cf0d4e7fe Avoid NPE in SimpleDataSourceProperties when driver is null 
See gh-45976

Signed-off-by: chanbinme <gksmfcksqls@gmail.com>
 2025-06-17 14:38:50 +02:00
Stéphane Nicoll 5a2a6dbe00 Merge pull request #45975 from nicolasgarea 
* pr/45975:
  Remove double comma in Checkstyle configuration

Closes gh-45975
 2025-06-17 14:20:43 +02:00
Nicolas Garea 120aab0693 Remove double comma in Checkstyle configuration 
See gh-45975

Signed-off-by: Nicolas Garea <nicogareacidre@gmail.com>
 2025-06-17 14:19:22 +02:00
Stéphane Nicoll 1666577e5f Merge pull request #45977 from dependabot[bot] 
* pr/45977:
  Polish "Bump gradle/actions from 4.4.0 to 4.4.1"
  Bump gradle/actions from 4.4.0 to 4.4.1

Closes gh-45977
 2025-06-17 14:15:42 +02:00
Stéphane Nicoll b727309ff8 Polish "Bump gradle/actions from 4.4.0 to 4.4.1" 
See gh-45977
 2025-06-17 14:15:14 +02:00
dependabot[bot] eaecdcbdd2 Bump gradle/actions from 4.4.0 to 4.4.1 
Bumps [gradle/actions](https://github.com/gradle/actions) from 4.4.0 to 4.4.1.
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](https://github.com/gradle/actions/compare/8379f6a1328ee0e06e2bb424dadb7b159856a326...ac638b010cf58a27ee6c972d7336334ccaf61c96)

---
updated-dependencies:
- dependency-name: gradle/actions
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

See gh-45977

Signed-off-by: dependabot[bot] <support@github.com>
 2025-06-17 14:14:53 +02:00
Stéphane Nicoll 691a42ff1b Upgrade to Spring Security 6.3.10 
Closes gh-45761
 2025-06-17 11:09:15 +02:00
Stéphane Nicoll 988fbb90f8 Upgrade to Spring RESTDocs 3.0.4 
Closes gh-45760
 2025-06-17 11:09:15 +02:00
Stéphane Nicoll faef2ce6c0 Upgrade to Spring Pulsar 1.1.13 
Closes gh-45759
 2025-06-17 11:09:15 +02:00
Stéphane Nicoll acd7aee309 Upgrade to Spring AMQP 3.1.12 
Closes gh-45752
 2025-06-17 11:09:14 +02:00
Stéphane Nicoll 91ff768035 Upgrade to Spring Data Bom 2024.0.13 
Closes gh-45754
 2025-06-13 16:47:49 +02:00
Stéphane Nicoll 0656190cb0 Use Jackson bom in buildSrc 
Closes gh-45959
 2025-06-13 16:43:32 +02:00
Andy Wilkinson fdbddcf606 Work around unwanted side-effect of getCredentials() 
Previously, we called getCredentials() to determine whether or not a
repository requires authentication. Unfortunately, the method has the
unwanted side-effect of assigning empty username and password
credentials to a repository that previously did not require
authentication and did not, therefore, have any credentials. These
empty credentials can then cause subsequent failures because
"Username must not be null!".

There's no side-effect-free public API for accessing a repository's
credentials. Instead, we're using some internal API on
AuthenticationSupportedInternal. If this causes problems when
upgrading to a new version of Gradle a different approach will be
required. For example, we could pass in the repositories in two
separate collections: those that require authentication and those
that don't.

Closes gh-45950
 2025-06-13 09:34:25 +01:00
Stéphane Nicoll 5bbc0755ef Upgrade to Spring LDAP 3.2.13 
Closes gh-45758
 2025-06-12 21:31:07 +02:00
Stéphane Nicoll 9e48eed0ee Upgrade to Spring Framework 6.1.21 
Closes gh-45755
 2025-06-12 21:31:07 +02:00
Stéphane Nicoll cc21ec3b27 Upgrade to Postgresql 42.7.7 
Closes gh-45941
 2025-06-12 21:31:07 +02:00
Stéphane Nicoll ea7c750909 Upgrade to jOOQ 3.19.24 
Closes gh-45940
 2025-06-12 21:31:02 +02:00
Moritz Halbritter f62b26eff9 Merge pull request #45855 from wonyongg 
* pr/45855:
  Remove constants from CloudFoundryVcapEnvironmentPostProcessor

Closes gh-45855
 2025-06-12 12:00:03 +02:00
wonyongg a300d2c9f0 Remove constants from CloudFoundryVcapEnvironmentPostProcessor 
This commit removes the VCAP_APPLICATION and VCAP_SERVICES constants
from the CloudFoundryVcapEnvironmentPostProcessor class, replacing them
with string literals.

See gh-45855

Signed-off-by: wonyongg <111210881+wonyongg@users.noreply.github.com>
 2025-06-12 11:46:48 +02:00
Moritz Halbritter b868cdf9fe Merge pull request #45882 from quaff 
* pr/45882:
  Inner class 'SpringBootWebFluxSecurityConfiguration' should be static

Closes gh-45882
 2025-06-12 11:43:13 +02:00
Yanming Zhou 0ebe00a1d6 Inner class 'SpringBootWebFluxSecurityConfiguration' should be static 
See gh-45882

Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>
 2025-06-12 11:32:06 +02:00
Andy Wilkinson ca21600fae Use Framework's StreamUtils instead of Commons Compress's IOUtils 
Closes gh-45911
 2025-06-12 10:00:30 +01:00
Andy Wilkinson aa7e2fc0a3 Polish 2025-06-12 09:26:25 +01:00
Stéphane Nicoll aff4dcc2c0 Upgrade to Tomcat 10.1.42 
Closes gh-45869
 2025-06-10 17:12:53 +02:00
Stéphane Nicoll d9d8dfbac6 Upgrade to Reactor Bom 2023.0.19 
Closes gh-45751
 2025-06-10 17:12:49 +02:00
Stéphane Nicoll aa2a547602 Upgrade to Micrometer Tracing 1.3.13 
Closes gh-45750
 2025-06-10 07:04:35 +02:00
Stéphane Nicoll c2528b1bfd Upgrade to Micrometer 1.13.15 
Closes gh-45749
 2025-06-10 07:04:35 +02:00
Phillip Webb f12d96886a Test SpringIterableConfigurationPropertySource support lower case names 
Add a test to ensure that `SpringIterableConfigurationPropertySource`
can support lower case names.

See gh-45741
 2025-06-09 17:44:05 +01:00
Andy Wilkinson 8fa7843d71 Remove dependency management for Micrometer Context Propagation 
It's now managed as part of Micrometer's bom so we no longer need to
manage it separately (and our separate management was being overriden
by Micrometer's bom anyway).

Closes gh-45852
 2025-06-09 16:25:20 +01:00
Stéphane Nicoll 6106bdd969 Upgrade to Postgresql 42.7.6 
Closes gh-45811
 2025-06-06 13:11:04 +02:00
Stéphane Nicoll ccbac59416 Upgrade to Netty 4.1.122.Final 
Closes gh-45810
 2025-06-06 13:11:04 +02:00
Stéphane Nicoll 8b13830106 Upgrade to Jetty 12.0.22 
Closes gh-45809
 2025-06-06 13:11:04 +02:00
Stéphane Nicoll b163e6dbea Upgrade to Jetty Reactive HTTPClient 4.0.10 
Closes gh-45808
 2025-06-06 13:11:04 +02:00