spring/spring-boot
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-boot.git synced 2026-09-23 01:39:02 +00:00
Code Issues Projects Releases Wiki Activity
56,909 Commits 28 Branches 394 Tags
4e1c7aaa2fc0bd2ce91458d98de2fcd180bb141b
Commit Graph
3903 Commits
Author SHA1 Message Date
Moritz Halbritter db1ebf59ba Polish "Handle root output directory when extracting layers" 
See gh-50501
 2026-05-27 10:33:19 +02:00
Dongliang Xie f7343398d4 Handle root output directory when extracting layers 
Use canonical Path containment checks so layer directories under the
filesystem root are accepted while entries and layer names that escape
the output directory remain rejected.

See gh-50501

Signed-off-by: Dongliang Xie <dragonfsky@gmail.com>
 2026-05-27 10:31:32 +02:00
Andy Wilkinson cfd6164277 Rename LICENCE.txt to align with US English spelling 
Closes gh-50395
 2026-05-14 15:07:10 +01:00
Andy Wilkinson e96ca4af56 Update headers to use quotes consistently 
Closes gh-50397
 2026-05-14 14:59:43 +01:00
Andy Wilkinson ef9c60620e Correct line endings in NestedRecord and NestedPropertiesRecord 
Closes gh-50403
 2026-05-14 11:26:55 +01:00
Sebastien Tardif f318c93133 Add size validation for long-to-int casts in buildpack module 
Add explicit size checks before casting long values to int in
Content.of(File) and LogUpdateEvent.read() to prevent silent data
corruption or NegativeArraySizeException when processing large files
or malformed Docker stream data.

See gh-50382

Signed-off-by: Sebastien Tardif <sebtardif@ncf.ca>
 2026-05-12 11:46:09 -07:00
Phillip Webb 6c09b36202 Detect signed jars using .RSA and .EC files in addition to .DSA 
Update `ZipContent` signed jar detection logic to consider `.RSA` and
`.EC` files in addition to the previously supported `.DSA` files.

Fixes gh-50292
 2026-05-05 11:15:12 -07:00
Sebastien Tardif eb90d0de63 Align DocumentBuilderFactory configuration 
Align configuration used for `DocumentBuilderFactory` instances
across the codebase.

See gh-50282

Signed-off-by: Sebastien Tardif <SebTardif@ncf.ca>
 2026-05-04 13:36:12 -07:00
Andy Wilkinson efeb44a400 Test the Gradle plugin against Gradle 9.5.0 
Closes gh-50238
 2026-04-28 16:05:30 +01:00
Phillip Webb 2c2ffe51c4 Fix Windows test failure 
See gh-50141
 2026-04-22 18:43:33 -07:00
Phillip Webb 0046a442f9 Protect against corrupt buildpack archives 
Update zip and tar handling in buildpack code to ensure that archive
entries cannot be written outside of the expected destination.

Although we consider buildpacks to be trusted, this update will help
protect against corrupt archives.

Closes gh-50141
 2026-04-22 17:39:41 -07:00
Andy Wilkinson 700c978bfb Normalize layer directory locations 
Closes gh-50130
 2026-04-20 10:03:37 +01:00
dependabot[bot] cda4fb8dc6 Bump org.bouncycastle:bcprov-jdk18on 
Bumps [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) from 1.78.1 to 1.84.
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

---
updated-dependencies:
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-version: '1.84'
  dependency-type: direct:production
...

See gh-50102

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-18 09:33:19 +02:00
dependabot[bot] a3a0c975cf Bump org.bouncycastle:bcprov-jdk18on 
Bumps [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) from 1.78.1 to 1.84.
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

---
updated-dependencies:
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-version: '1.84'
  dependency-type: direct:production
...

See gh-50101

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-18 09:22:42 +02:00
Andy Wilkinson 662fef2c83 Normalize filename for single file downloads 
Closes gh-50087
 2026-04-16 11:20:34 +01:00
Moritz Halbritter bcb0007f9a Add support for apache/artemis 
Closes gh-49865
 2026-04-02 10:59:55 +02:00
Moritz Halbritter 4e3f5f0578 Add support for apache/activemq 
Closes gh-49863
 2026-04-02 10:01:17 +02:00
Yanming Zhou 9520eb9622 Do not use String#replaceAll() with a non-regex pattern 
See gh-49816

Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>
 2026-03-27 11:40:28 +01:00
Phillip Webb d44683180d Support constructor binding method-level @NestedConfigurationProperty 
Update `spring-boot-configuration-processor` to support method-level
`@NestedConfigurationProperty` annotations when constructor binding
is being used.

Fixes gh-49734
 2026-03-24 18:05:02 -07:00
Lee Jiwon add1f9763e Fix minor Javadoc wording errors 
Signed-off-by: Lee Jiwon <dlwldnjs1009@gmail.com>

See gh-49735
 2026-03-24 17:36:19 -07:00
Lee Jiwon 5a836da339 Fix incorrect indefinite articles in Javadoc 
See gh-49723

Signed-off-by: Lee Jiwon <dlwldnjs1009@gmail.com>
 2026-03-24 10:25:46 +01:00
Phillip Webb 8b70ee9dbc Escape format characters when writing changelog 2026-03-19 20:15:45 -07:00
Andy Wilkinson 4cd1b02696 Test Gradle plugin against Gradle 9.4.1 
Closes gh-49667
 2026-03-19 18:06:12 +00:00
Stéphane Nicoll ab7d6a9d29 Adapt assertion to different error message 2026-03-16 15:44:15 +01:00
Andy Wilkinson 57e768a654 Trim trailing slashes from tcp:// Docker hosts 
Fixes gh-49055
 2026-03-13 16:04:41 +00:00
Moritz Halbritter 2eb2f8594a Use mavenVersion Gradle property in the spring-boot-maven-plugin tests 
Closes gh-49508
 2026-03-09 09:47:27 +01:00
Andy Wilkinson 7d21d7234d Test Gradle plugin against 9.4.0 
Closes gh-49467
 2026-03-06 15:10:05 +00:00
Andy Wilkinson 66554ec811 Make snapshot deps available to Maven Plugin integration tests 
See gh-49396
 2026-03-05 20:51:11 +00:00
Andy Wilkinson bb65863891 Fail if using @DisabledIfDockerUnavailable without Testcontainers 
Closes gh-49425
 2026-03-05 10:50:26 +00:00
Andy Wilkinson 48cf7ebe6d Speed up Maven plugin integration tests 
Closes gh-49396
 2026-03-04 12:13:45 +00:00
Andy Wilkinson 5a764167ab Document applying AOT plugin directly for AOT on the JVM 
Closes gh-49307
 2026-02-25 09:53:37 +00:00
Yanming Zhou 147d3d763b Members declared in final classes should not be protected 
See gh-49031

Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>
 2026-02-23 16:28:44 +01:00
Andy Wilkinson 4bc47d0919 Remove stale mention of Groovy 
Closes gh-49297
 2026-02-23 15:23:22 +00:00
Stéphane Nicoll 12e5cd4b45 Consistently enable parameters generation with AOT 
This commit updates the Maven Plugin to retain parameters information
in AOT-generated code. This aligns with the Gradle Plugin and allows
to consistently use parameter names resolution in generated code.

Closes gh-49268
 2026-02-23 12:44:54 +01:00
Tran Ngoc Nhan 55ef2df143 Update JDK requirement for CLI 
See gh-49290

Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
 2026-02-23 12:16:21 +01:00
Andy Wilkinson 5bc773b735 Test Gradle Plugin against 9.3.1 
Closes gh-49188
 2026-02-11 12:06:39 +00:00
Phillip Webb 998a0f1b82 Polish 'Fix whitespace handling in multi-line javadoc' 
See gh-49039
 2026-02-04 16:24:56 -08:00
Stefan Reuter ba5066f832 Fix whitespace handling in multi-line javadoc 
Update spring-boot-configuration-processor to deal with multi-line
javadoc comments that do not include their own whitespace after the
new line.

See gh-49039

Signed-off-by: Stefan Reuter <stefan.reuter@reucon.com>
 2026-02-04 16:23:41 -08:00
Dmytro Nosan a4ed09e5d2 Ensure Windows Docker credential helper resolves correctly 
Before this commit, "cmd /c" was never added to the final command,
which meant the Docker credential helper was not executed correctly.

See gh-48965

Signed-off-by: Dmytro Nosan <dimanosan@gmail.com>
 2026-01-27 08:17:47 +01:00
Phillip Webb 54d7f79501 Fix timestamps set on jars created by the extract command 
Update `ExtractCommand` so that both the generated jar and the
contained manifest entry have timestamps copied from the original.

Fixes gh-48664
 2026-01-05 14:11:54 -08:00
Phillip Webb 5b48eb30cc Polish 2026-01-05 14:11:51 -08:00
Stéphane Nicoll 54603fee87 Revisit condition to skip AOT processing of tests 
This commit stop skipping AOT processing of tests when tests execution
is skipped. With this commit, only the presence of maven.test.skip makes
the processing to skip.

This harmonize the behavior with other standard plugins that do react
to the property. For instance, the compiler plugin will not compile the
tests if that property is set, but would do so if skipTests was
provided.

Closes gh-48661
 2026-01-02 14:22:22 +01:00
Stéphane Nicoll eedc47a15b Remove unused code 2026-01-02 10:34:59 +01:00
Stéphane Nicoll c5a50cb7f6 Polish "Fix zero-length byte buffer in InspectedContent" 
See gh-48649
 2025-12-31 10:45:17 +01:00
高春晖 ba94cc48f2 Fix zero-length byte buffer in InspectedContent 
See gh-48649

Signed-off-by: 高春晖 <18220699480@163.com>
 2025-12-31 10:39:38 +01:00
高春晖 2075a2cfdb Fix method naming to follow Java conventions 
See gh-48640

Signed-off-by: 高春晖 <18220699480@163.com>
 2025-12-30 10:40:27 +01:00
Johnny Lim 9e7988131f Polish 
See gh-48620

Signed-off-by: Johnny Lim <izeye@naver.com>
 2025-12-26 08:52:47 +01:00
Phillip Webb 502a58af9c Merge branch '3.4.x' into 3.5.x 
Closes gh-48477
 2025-12-09 08:36:35 -08:00
Phillip Webb 448acaa5be Remove Apache header from spring-boot-gradle-plugin examples 
Closes gh-48474
 2025-12-09 08:35:00 -08:00
Stéphane Nicoll 8881d38202 Merge branch '3.4.x' into 3.5.x 
Closes gh-48305
 2025-11-26 16:00:19 +01:00