Commit Graph
62675 Commits
Author SHA1 Message Date
ohchanKyu afc3178f33 Fix typo in deprecated Pushgateway base-url property metadata
The deprecation entry for
management.prometheus.metrics.export.pushgateway.base-url was declared
as "management.promethus", so the deprecation was never reported.

Signed-off-by: ohchanKyu <okc0202@naver.com>

See gh-51627
2026-09-08 16:54:18 +01:00
Andy Wilkinson 7ba781c705 Merge branch '4.1.x'
Closes gh-51631
2026-09-08 16:52:12 +01:00
Andy Wilkinson e158494508 Merge branch '4.0.x' into 4.1.x
Closes gh-51630
2026-09-08 16:51:49 +01:00
Andy Wilkinson bfc2935ad4 Merge pull request #51619 from yyuneu
Closes gh-51619

* gh-51619:
  Honor authorities-claim-delimiter when set on its own
2026-09-08 16:43:39 +01:00
JaeHyunAn 537c80dbb9 Honor authorities-claim-delimiter when set on its own
See gh-51619

Signed-off-by: JaeHyunAn <98042706+yyuneu@users.noreply.github.com>
2026-09-08 16:39:54 +01:00
Stéphane Nicoll 03d367bb07 Merge branch '4.1.x'
Closes gh-51629
2026-09-08 17:29:34 +02:00
Stéphane Nicoll 18292d400c Merge branch '4.0.x' into 4.1.x
Closes gh-51628
2026-09-08 16:57:00 +02:00
Stéphane Nicoll b1e91c942e Add support for creating a container from a TestImage value
This commit improves TestImage so that an explicit image can trigger
the creation of the container, with optional additional setup. This
removes the need of creating additional container types for images that
have multiple flavors, and to please the static method that can only
create a container based on a single match.

Closes gh-51082
2026-09-08 16:46:48 +02:00
Andy Wilkinson dc80919a96 Merge branch '4.1.x'
Closes gh-51624
2026-09-08 13:57:22 +01:00
Andy Wilkinson e7a324357f Merge branch '4.0.x' into 4.1.x
Closes gh-51623
2026-09-08 13:57:12 +01:00
Andy Wilkinson f956f588d5 Configure attributes on dev-only configurations
Closes gh-51492
2026-09-08 13:56:26 +01:00
Andy Wilkinson 5893438a3a Merge branch '4.1.x'
Closes gh-51621
2026-09-08 11:23:45 +01:00
Andy Wilkinson a87fd2c9ba Merge branch '4.0.x' into 4.1.x
Closes gh-51620
2026-09-08 11:23:31 +01:00
Andy Wilkinson bb1ad4ce36 Manage TomlJ's version in spring-boot-internal-dependencies
Closes gh-51618
2026-09-08 09:25:56 +01:00
Andy Wilkinson bd99f6c6aa Merge branch '4.1.x'
Closes gh-51617
2026-09-08 09:20:15 +01:00
Andy Wilkinson 60dc60c5f6 Merge branch '4.0.x' into 4.1.x
Closes gh-51616
2026-09-08 09:19:33 +01:00
Andy Wilkinson ad8f14e785 Merge pull request #51549 from aashikantkumar
Closes gh-51549

* gh-51549:
  Polish "Preserve firewall in reactive CF security auto-configuration"
  Preserve firewall in reactive CF security auto-configuration
2026-09-08 09:19:27 +01:00
Andy Wilkinson 23275d826b Polish "Preserve firewall in reactive CF security auto-configuration"
See gh-51549

Signed-off-by: Andy Wilkinson <andy.wilkinson@broadcom.com>
2026-09-08 09:18:26 +01:00
Andy Wilkinson ca1cec34cb Merge branch '4.1.x'
Closes gh-51615
2026-09-08 09:16:20 +01:00
Andy Wilkinson c1900d0bc9 Merge branch '4.0.x' into 4.1.x
Closes gh-51614
2026-09-08 09:15:55 +01:00
aashikantkumar 4f3d0349f3 Preserve firewall in reactive CF security auto-configuration
Prior to this commit, CloudFoundryReactiveActuatorAutoConfiguration
registered a BeanPostProcessor replaced the WebFilterChainProxy bean
with one that handled CF security and delegated to the existing
chain.

Constructing a new WebFilterChainProxy resulted in the loss of any
firewall customization on the existing chain as Spring Security does
not provide an API to retreive the firewall from the existing chain
and apply it to the new chain.

This commit changes the approach and aligns it with its Servlet
counterpart. Instead of post-processing the filter chain proxy, a new
SecurityWebFilterChain that handles cloudfoundryapplication/**
is defined. This chain becomes part of the existing
WebFilterChainProxy, preserving any firewall customization.

Signed-off-by: aashikantkumar <aashikantkumar2@gmail.com>

See gh-51549
2026-09-08 08:56:38 +01:00
Andy Wilkinson 1d79f56ad7 Return 503 for missing application ID or cloud controller URL
Previously, the CloudFoundryAuthorizationExceptions thrown for a
missing application ID or cloud controller URL were not routed
through the error handling that turned them into a SecurityResponse
with a 503 status code. As a result, they were processed by the
general exception handling which resulted in a 500 response.

This commit updates the reactive SecurityInterceptor so that the
exceptions are processed through
SecurityInterceptor::getErrorResponse. This aligns the behavior of
the Cloud Foundry security intergration in a reactive application
more closely with that of a Servlet application.

Fixes gh-51613
2026-09-08 08:51:58 +01:00
Andy Wilkinson 27933b0b3c Merge branch '4.1.x'
Closes gh-51611
2026-09-07 15:09:24 +01:00
Andy Wilkinson c6ed90e28c Set ignore_optional_problems on all proto-generated source
Closes gh-51604
2026-09-07 14:56:54 +01:00
Andy Wilkinson 31cf0820a6 Merge branch '4.1.x'
Closes gh-51609
2026-09-07 12:38:23 +01:00
Andy Wilkinson 8dac80a6ea Merge branch '4.0.x' into 4.1.x
Closes gh-51608
2026-09-07 12:38:11 +01:00
Andy Wilkinson 159bdeb76e Merge pull request #51598 from noojung
Closes gh-51598

* gh-51598:
  Avoid using Project objects as dependency notation
2026-09-07 12:38:00 +01:00
Hyunwoo Jung ceefb553c4 Avoid using Project objects as dependency notation
Gradle 9.6 deprecates passing a Project instance as dependency notation,
which currently causes the build to emit deprecation warnings and will
become an error in Gradle 10.

This commit updates AggregatorPlugin to use
DependencyFactory#createProjectDependency instead.

Signed-off-by: Hyunwoo Jung <hyunwoojung@kakao.com>

See gh-51598
2026-09-07 12:37:25 +01:00
Andy Wilkinson 85535ce81f Merge branch '4.1.x'
Closes gh-51607
2026-09-07 12:20:42 +01:00
Andy Wilkinson 50350d0c83 Merge branch '4.0.x' into 4.1.x
Closes gh-51606
2026-09-07 12:20:30 +01:00
Andy Wilkinson 03cf0c49ce Merge pull request #51590 from noojung
Closes gh-51590

* gh-51590:
  Fix typos
2026-09-07 12:19:32 +01:00
Hyunwoo Jung 528c8bd1ea Fix typos
Signed-off-by: Hyunwoo Jung <hyunwoojung@kakao.com>

See gh-51590
2026-09-07 11:53:30 +01:00
Andy Wilkinson f50c8311b9 Move Servlet-specific Tomcat properties to server.tomcat.servlet
Closes gh-51603
2026-09-07 09:58:08 +01:00
Andy Wilkinson d265e67685 Merge pull request #51173 from basteez
Closes gh-51173

* gh-51173:
  Polish "Default use-relative-redirects to true"
  Default use-relative-redirects to true
2026-09-07 09:18:50 +01:00
Andy Wilkinson 8924f1691c Polish "Default use-relative-redirects to true"
See gh-51173

Signed-off-by: Andy Wilkinson <andy.wilkinson@broadcom.com>
2026-09-07 08:55:46 +01:00
Tiziano Basile f119e58767 Default use-relative-redirects to true
Spring Boot unconditionally set useRelativeRedirects on the Tomcat
Context, defaulting it to false. That overrode Tomcat's own default and
forced absolute Location headers on every sendRedirect.

Keep server.tomcat.use-relative-redirects a simple boolean, but default
it to true so that relative Location headers are used out of the box.
The property can still be set to false to opt back into absolute
redirects.

Smoke tests that asserted a port-qualified absolute Location are updated
to the relative form, and the proxy tip in the reference documentation is
qualified since the context root redirect no longer carries a scheme.

Signed-off-by: Tiziano Basile <tiz.basile@gmail.com>

See gh-51173
2026-09-07 08:50:09 +01:00
Andy Wilkinson a07c43466b Merge branch '4.1.x'
Closes gh-51602
2026-09-07 08:43:59 +01:00
Andy Wilkinson 61275b0c64 Merge branch '4.0.x' into 4.1.x
Closes gh-51601
2026-09-07 08:43:48 +01:00
Andy Wilkinson 2a30bbc70a Merge pull request #51593 from fabio-grassi
Closes gh-51593

* gh-51593:
  Switch to Java 17 variants of Oracle JDBC dependencies
2026-09-07 08:43:37 +01:00
Fabio Grassi b49f9e2c32 Switch to Java 17 variants of Oracle JDBC dependencies
Signed-off-by: Fabio Grassi <40345396+fabio-grassi@users.noreply.github.com>

See gh-51593
2026-09-07 08:31:23 +01:00
Andy Wilkinson 57b44b0594 Merge branch '4.1.x'
Closes gh-51600
2026-09-07 08:27:14 +01:00
Andy Wilkinson ea613dc511 Merge branch '4.0.x' into 4.1.x
Closes gh-51599
2026-09-07 08:26:42 +01:00
Andy Wilkinson 4396a31e23 Merge pull request #51591 from msridhar
Closes gh-51591

* gh-51591:
  Remove unnecessary NullAway suppressions
2026-09-07 08:25:30 +01:00
Manu Sridharan 25a3f8feb9 Remove unnecessary NullAway suppressions
Signed-off-by: Manu Sridharan <msridhar@gmail.com>

See gh-51591
2026-09-07 08:18:11 +01:00
Phillip Webb 222783aee4 Merge branch '4.1.x' 2026-09-05 16:56:14 -07:00
Phillip Webb 58c321c8b8 Merge branch '4.0.x' into 4.1.x 2026-09-05 16:56:08 -07:00
Phillip Webb d94755304a Polish 2026-09-05 16:55:48 -07:00
Phillip Webb 93b23c40c2 Merge branch '4.1.x' 2026-09-04 13:50:52 -07:00
Phillip Webb c8a9ade251 Use module DSL for gRPC Antora attributes
Replace custom attributes and processing logic with the module
links DSL.

See gh-51498
2026-09-04 13:50:32 -07:00
Phillip Webb 96d2a52885 Merge branch '4.1.x' 2026-09-04 13:29:46 -07:00