spring/spring-boot
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-boot.git synced 2026-09-17 20:19:06 +00:00
Code Issues Projects Releases Wiki Activity
57,004 Commits 24 Branches 394 Tags
3.5.x
Commit Graph
677 Commits
Author SHA1 Message Date
Stéphane Nicoll bd9794a7e5 Polish "Fix typo in test method" 
See gh-50492
 2026-05-25 17:06:24 +02:00
Andy Wilkinson e96ca4af56 Update headers to use quotes consistently 
Closes gh-50397
 2026-05-14 14:59:43 +01:00
Andy Wilkinson 001171f8eb Harden deserialization in HttpRestartServer 
While remote code execution is a feature of remote DevTools,
hardening of the deserialization of ClassLoaderFiles is not without
benefit. Not least, it should prevent false-positive reports from
AI-based security scanners that look at the code in isolation without
understanding the full context of the feature.

It should be noted that this hardening in no way protects against
remote code execution and the use of remote DevTools remains an
opt-in feature that should only be enabled in a trusted setting and
secured with a sufficiently complex secret. It remains the case that
an attacker who compromises the secret and has network access to the
remote application can achieve RCE by uploading a serialized
ClassLoaderFiles payload that adds malicious code and/or resources
to the application.

Closes gh-50272
 2026-05-01 11:25:19 +01:00
Andy Wilkinson 4b0862cc00 Use constant-time comparison for remote DevTools secret 
Closes gh-50169
 2026-04-23 08:44:55 +01:00
Andy Wilkinson aa5089e3f6 Improve handling of malformed LiveReload request header 
Closes gh-50142
 2026-04-22 20:50:44 +01:00
Stéphane Nicoll 4527245ebc Polish javadoc 2026-03-26 16:06:01 +01:00
Stéphane Nicoll 328267249f Make DevTools tests more tolerant to wrapped DataSource 
Closes gh-49745
 2026-03-25 07:31:46 +01:00
Stéphane Nicoll 1ce1b7ee35 Merge branch '3.4.x' into 3.5.x 
Closes gh-48105
 2025-11-13 10:27:51 +01:00
Stéphane NicollandCatiaCorreia catia.correia97@gmail.com 9e656c1554 Remove unnecessary field initialization 
Closes gh-45168

Co-authored-by: CatiaCorreia catia.correia97@gmail.com
 2025-11-13 10:21:05 +01:00
Stéphane Nicoll 9ab77c75cf Polish contribution 
See gh-47987
 2025-11-09 12:11:54 +01:00
Dmytro Nosan bf0152e67c Allow Devtools Restarter to work with a parameterless main method 
See gh-47987

Signed-off-by: Dmytro Nosan <dimanosan@gmail.com>
 2025-11-09 12:10:26 +01:00
Phillip Webb 61c2d0766b Merge branch '3.4.x' into 3.5.x 
See gh-46066
 2025-06-20 17:21:58 -07:00
Phillip Webb 3aeb18d618 Add license header to gradle files 
See gh-46065
 2025-06-20 17:20:50 -07:00
Phillip Webb a37c84b7c5 Merge branch '3.4.x' into 3.5.x 
See gh-46066
 2025-06-20 17:14:59 -07:00
Phillip Webb d66b28fcba Update end copyright year to 'present' 
See gh-46065
 2025-06-20 17:12:38 -07:00
Phillip Webb 4bbbc0d687 Merge branch '3.4.x' 
Closes gh-45193
 2025-04-14 16:18:50 -07:00
Phillip Webb b80bdbb182 Merge branch '3.3.x' into 3.4.x 
Closes gh-45192
 2025-04-14 16:18:41 -07:00
Johnny Lim 08c67cc353 Replace deprecated Project.task() 
See gh-45009

Signed-off-by: Johnny Lim <izeye@naver.com>
 2025-04-14 16:17:53 -07:00
Tran Ngoc Nhan 106e9f54ab Migrate from AntPathRequestMatcher to PathPatternRequestMatcher 
See gh-45163

Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
 2025-04-11 17:23:51 -07:00
Phillip Webb 75824bb9c7 Merge branch '3.4.x' 2025-04-11 09:42:20 -07:00
Phillip Webb 35dc8e6f88 Merge branch '3.3.x' into 3.4.x 2025-04-11 09:42:13 -07:00
Phillip Webb 2143d702f2 Polish boolean members that can use the default false value 2025-04-11 09:32:35 -07:00
Phillip Webb c263c85de8 Start building against Spring Security 6.5.0-RC1 snapshots 
See gh-45147
 2025-04-10 15:09:41 -07:00
Phillip Webb bc91c35644 Merge branch '3.4.x' 
Closes gh-44993
 2025-04-03 18:05:13 -07:00
Andy Wilkinson 95d5e35ff2 Provide @ConditionalOn… annotations for all concrete conditions 
Closes gh-41044
 2025-03-20 14:29:59 +00:00
Andy Wilkinson b61578d183 Merge branch '3.4.x' 
Closes gh-44695
 2025-03-12 12:54:27 +00:00
Andy Wilkinson 08b358e829 Merge branch '3.3.x' into 3.4.x 
Closes gh-44694
 2025-03-12 12:50:18 +00:00
Andy Wilkinson 3a6e4e9e58 Add checks for factories files 
META-INF/spring.factories and META-INF/spring/aot.factories in the
main source set are now checked. The checks verify that:

- Each class listed in the values exists in the source set's output
- The classes are listed alphabetically
- Nested classes are identified using their binary name

Closes gh-44676
 2025-03-12 12:44:18 +00:00
Phillip Webb 651a39b3f6 Merge branch '3.4.x' 2025-02-18 15:12:07 -08:00
Johnny Lim c9320de559 Use consistent exception messages in Assert calls 
See gh-44044

Signed-off-by: Johnny Lim <izeye@naver.com>
 2025-02-03 13:58:59 +01:00
Phillip Webb 8ec61b9870 Polish 'Refactor @ConfigurationProperties that only use prefix' 
See gh-43917
 2025-01-24 14:59:32 -08:00
Yanming Zhou c1d97ffe16 Refactor @ConfigurationProperties that only use prefix 
See gh-43917

Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>
 2025-01-24 14:58:36 -08:00
Andy Wilkinson 766c17fcdd Polish "Replace @ConditionalOnProperty with …BooleanProperty where feasible" 
See gh-43868
 2025-01-21 15:13:44 +00:00
Yanming Zhou 960c8825e0 Replace @ConditionalOnProperty with …BooleanProperty where feasible 
See gh-43868

Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>
 2025-01-21 15:08:26 +00:00
Phillip Webb a49719d73e Use consistent exception messages in Assert calls 
Update `Assert` calls to consistently use messages of the form
"'item' must [not] ...".

Closes gh-43780
 2025-01-11 21:18:47 -08:00
Phillip Webb f08188d5cf Change relevant Assert calls to throw IllegalStateException 
Change certain Assert class from `assert...` to `assertState`
so that a more appropriate `IllegalStateException` is thrown.

Fixes gh-43779
 2025-01-11 21:16:36 -08:00
Phillip Webb 86b6171edc Introduce dedicated annotations to deal with boolean properties 
Add `@ConditionalOnBooleanProperty` annotation to deal with
boolean properties and primarily for features that users toggle
using `.enabled` properties.

Closes gh-43704
 2025-01-08 13:26:11 -08:00
Phillip Webb 170ff4eb23 Update copyright year of changed files 2025-01-06 17:40:24 -08:00
Phillip Webb a8f3afc6b7 Fix incorrect imports 
Fix accidentally committed imports.

See gh-43703
 2025-01-06 14:42:28 -08:00
Phillip Webb 4c307d6fda Switch away from using @ConditionalOnProperty prefix 
Merge `prefix` into `name` attribute and simplify annotations
where possible.

Closes gh-43703
 2025-01-06 14:37:18 -08:00
arefbehboudi dbc1fc26e6 Polish 
See gh-43560
 2024-12-18 10:51:49 -08:00
Andy Wilkinson 32433e84f3 Merge branch '3.3.x' 
Closes gh-43270
 2024-11-22 15:46:38 +00:00
Andy Wilkinson bb3651b7d1 Reduce warnings reported by Eclipse 
Closes gh-43269
 2024-11-22 15:39:35 +00:00
Phillip Webb 2f5f224559 Merge branch '3.3.x' 2024-10-18 10:49:15 -07:00
Phillip Webb 223886ff37 Merge branch '3.2.x' into 3.3.x 2024-10-18 10:48:51 -07:00
Phillip Webb 3481107ff7 Update copyright year of changed files 2024-10-18 10:48:29 -07:00
Moritz Halbritter ba1a780147 Merge branch '3.3.x' 
Closes gh-42774
 2024-10-17 18:06:43 +02:00
Moritz Halbritter 73150b799a Merge branch '3.2.x' into 3.3.x 
Closes gh-42772
 2024-10-17 17:58:11 +02:00
Moritz Halbritter ce106eb43c Remove calls to deprecated Project.getBuildDir() in Gradle files 
Closes gh-42739
 2024-10-17 17:46:17 +02:00
Moritz Halbritter c018c43886 Merge branch '3.3.x' 
Closes gh-42736
 2024-10-17 13:44:25 +02:00