Commit Graph
60665 Commits
Author SHA1 Message Date
dependabot[bot] 5aa43b705f Bump Homebrew/actions/setup-homebrew from 2026.08.24.1 to 2026.08.31.1
Bumps [Homebrew/actions/setup-homebrew](https://github.com/homebrew/actions) from 2026.08.24.1 to 2026.08.31.1.
- [Release notes](https://github.com/homebrew/actions/releases)
- [Changelog](https://github.com/Homebrew/actions/blob/main/release.test.mts)
- [Commits](https://github.com/homebrew/actions/compare/a657b8b0cd35d0f65cce41fce9b24cf054b49869...3cdb78d0f62ad29dd32de765782654f4eedea607)

---
updated-dependencies:
- dependency-name: Homebrew/actions/setup-homebrew
  dependency-version: 2026.08.31.1
  dependency-type: direct:production
...

See gh-51525

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-02 08:12:45 +02:00
Stéphane Nicoll 03d2265ded Merge pull request #51524 from dependabot[bot]
Closes gh-51524

* dependabot/github_actions/spring-io/github-actions/dot-github/workflows/codeql-analysis.yml-035e701d99b48da41f409014e1bfd937425c4477:
  Bump spring-io/github-actions/.github/workflows/codeql-analysis.yml
2026-09-02 08:09:57 +02:00
dependabot[bot] 79458c012d Bump spring-io/github-actions/.github/workflows/codeql-analysis.yml
Bumps [spring-io/github-actions/.github/workflows/codeql-analysis.yml](https://github.com/spring-io/github-actions) from 7dc305df87410aa851b873d2f1fd33ccbb7d0aa8 to 035e701d99b48da41f409014e1bfd937425c4477.
- [Commits](https://github.com/spring-io/github-actions/compare/7dc305df87410aa851b873d2f1fd33ccbb7d0aa8...035e701d99b48da41f409014e1bfd937425c4477)

---
updated-dependencies:
- dependency-name: spring-io/github-actions/.github/workflows/codeql-analysis.yml
  dependency-version: 035e701d99b48da41f409014e1bfd937425c4477
  dependency-type: direct:production
...

See gh-51524

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-02 08:07:52 +02:00
Stéphane Nicoll 921c03273a Merge pull request #51523 from dependabot[bot]
Closes gh-51523

* dependabot/github_actions/actions/setup-java-6:
  Polish "Bump actions/setup-java from 5 to 6"
  Bump actions/setup-java from 5 to 6
2026-09-02 08:06:31 +02:00
Stéphane Nicoll 7860f005c0 Polish "Bump actions/setup-java from 5 to 6"
See gh-51523
2026-09-02 08:05:44 +02:00
dependabot[bot] cdab9e36af Bump actions/setup-java from 5 to 6
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 5 to 6.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

See gh-51523

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-02 08:05:29 +02:00
Phillip Webb eaaa8334bc Drop LibraryVersion and introduce LinkedVersion
Remove `LibraryVersion` in favor of working directly with
`DependencyVersion` for most tasks. As of commit 510c7815
`LibraryVersion` is only being used as a wrapper for the link
factory function. Introducing a dedicated `LinkedVersion` for
that purpose simplifies a lot of code.

See gh-51498
2026-09-01 14:49:26 -07:00
Andy Wilkinson 837f44f764 Return correct total when read(ByteBuffer) cannot fill buffer
Fixes gh-51515
2026-09-01 16:03:12 +01:00
Phillip Webb 2e1502e5d7 Refactor BOM link DSL
Update link DSL with a new `Links` type and an enum for the type
rather than a name. This update also fixes Hibernate links which were
broken.

See gh-51498
2026-08-31 21:22:46 -07:00
Stéphane Nicoll f0e7cd9c5e Merge pull request #51509 from kdomo
Closes gh-51509

* fix-http-client-assert:
  Polish "Fix null customizer checks in HTTP client builders"
  Fix null customizer checks in HTTP client builders
2026-08-30 20:27:41 +02:00
Stéphane Nicoll 60445a5069 Polish "Fix null customizer checks in HTTP client builders"
See gh-51509
2026-08-30 20:21:43 +02:00
kdomo 93a24eabb1 Fix null customizer checks in HTTP client builders
AbstractClientHttpRequestFactoryBuilder.mergedCustomizers and its
reactive counterpart asserted on the customizers field rather than
the customizer parameter. The field is never null since the
constructor defaults it to an empty list, so the assertion always
passed and a null customizer was not rejected.

See gh-51509

Signed-off-by: kdomo <dongho5088@naver.com>
2026-08-30 20:16:15 +02:00
Stéphane Nicoll fea4844b1a Merge pull request #51466 from scottfrederick
Closes gh-51466

* gh-51146-tomcat-customization-init:
  Polish contribution
  Retain SSL host config customizations during Tomcat initialization
2026-08-30 20:01:08 +02:00
Stéphane Nicoll b1b145de21 Polish contribution
See gh-51466
2026-08-30 19:59:11 +02:00
Scott Frederick 4ca8304959 Retain SSL host config customizations during Tomcat initialization
Applying an SSL bundle to a Tomcat server replaced any `SSLHostConfig`
already registered on the connector for a host name, so an
`SSLHostConfig` could not be configured before Spring Boot applied a
bundle to it.

Reuse any existing `SSLHostConfig` during initial configuration, so an
`SSLHostConfig` registered on the connector before the bundle is
applied retains settings such as `trustManagerClassName`,
`truststoreProvider`, or `truststoreAlgorithm`.

Client authentication settings are only applied when creating a new
`SSLHostConfig`, so the `certificateVerification` of an existing
`SSLHostConfig` is retained rather than being overwritten with the
value derived from the `server.ssl.client-auth` property.

See gh-51466

Signed-off-by: Scott Frederick <scottyfred@gmail.com>
2026-08-30 19:54:00 +02:00
Phillip Webb 83ed4b5487 Add javdoc and sources variants to spring-graphql dependencies
Closes gh-51499
2026-08-28 22:27:02 -07:00
Phillip Webb aefb3a4398 Add javdoc and sources variants to spring-framework dependencies
Closes gh-51494
2026-08-28 15:43:29 -07:00
Andy Wilkinson fb4896741c Merge pull request #51467 from 2heunxun
Closes gh-51467

* gh-51467:
  Honor existing 'encrypt' JDBC parameter for SQL Server Docker Compose
2026-08-27 14:41:51 +01:00
2heunxun 9847c9613e Honor existing 'encrypt' JDBC parameter for SQL Server Docker Compose
Signed-off-by: 2heunxun <seapeon@naver.com>

See gh-51467
2026-08-27 14:32:40 +01:00
Andy Wilkinson 71a51a0277 Merge pull request #51453 from dependabot[bot]
Closes gh-51453

* gh-51453:
  Bump Homebrew/actions/setup-homebrew from 2026.08.14.1 to 2026.08.24.1
2026-08-27 14:29:29 +01:00
dependabot[bot] 0452f6d110 Bump Homebrew/actions/setup-homebrew from 2026.08.14.1 to 2026.08.24.1
Bumps [Homebrew/actions/setup-homebrew](https://github.com/homebrew/actions) from 2026.08.14.1 to 2026.08.24.1.
- [Release notes](https://github.com/homebrew/actions/releases)
- [Changelog](https://github.com/Homebrew/actions/blob/main/release.test.mts)
- [Commits](https://github.com/homebrew/actions/compare/8f3d1ec8a696b3b9d9a6c3696b6c73033cab69e4...a657b8b0cd35d0f65cce41fce9b24cf054b49869)

---
updated-dependencies:
- dependency-name: Homebrew/actions/setup-homebrew
  dependency-version: 2026.08.24.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

See gh-51453
2026-08-27 14:26:37 +01:00
Andy Wilkinson 31f7eeda68 Upgrade to Nullability Plugin 0.0.15
Closes gh-51475
2026-08-27 13:57:08 +01:00
Phillip Webb 9c8bf507d4 Simplify documentation dependencies 2026-08-26 14:03:44 -07:00
Phillip Webb fd0f76304c Sort implementation dependencies in spring-boot-docs 2026-08-26 11:03:23 -07:00
Phillip Webb a1cc95e8a6 Polish gradle dependency declarations
Remove 'path:' prefix when possible.
2026-08-26 10:39:28 -07:00
Phillip Webb b41cff1ab5 Merge pull request #51290 from scottfrederick
Closes gh-51290

* pr/51290:
  Polish "Retain SSL host config customizations when reloading SSL bundles"
  Retain SSL host config customizations when reloading SSL bundles
2026-08-25 18:53:55 -07:00
Phillip Webb fa163d4f2d Polish "Retain SSL host config customizations when reloading SSL bundles"
See gh-51290
2026-08-25 18:53:05 -07:00
Scott Frederick cbbe588d1f Retain SSL host config customizations when reloading SSL bundles
Tomcat's SSL configuration is applied to an `SSLHostConfig` for each
host name. When an SSL bundle was updated, a new `SSLHostConfig` was
created and used to replace the existing one for that host name,
discarding any customizations that had been applied to it (for example
by a `TomcatConnectorCustomizer`).

Reuse the existing `SSLHostConfig` for the host name when one is
present, applying the updated bundle to it rather than replacing it. The
existing `SSLHostConfigCertificate` is also reused, as adding a second
certificate with an undefined type to an `SSLHostConfig` is rejected by
Tomcat.

See gh-51290

Signed-off-by: Scott Frederick <scottyfred@gmail.com>
2026-08-25 18:52:34 -07:00
Phillip Webb 5a21e0d698 Upgrade to spring-javaformat 0.0.48
Closes gh-51452
2026-08-25 13:58:58 -07:00
Phillip Webb 53c04499b4 Create properties despite used-defined ClientRegistrationRepository
Update `OAuth2ClientConfigurations` so that properties are created
regardless of a user-defined `ClientRegistrationRepository` bean.

Fixes gh-51447
2026-08-25 12:41:23 -07:00
Phillip Webb 64267798cb Merge pull request #51409 from msridhar
Closes gh-51409

* pr/51409:
  Fix warning from NullAway 0.14.0 related to override
2026-08-25 12:39:36 -07:00
Manu Sridharan 23fc7dd183 Fix warning from NullAway 0.14.0 related to override
See gh-51409

Signed-off-by: Manu Sridharan <msridhar@gmail.com>
2026-08-25 12:29:02 -07:00
Phillip Webb 45b520f6c2 Merge pull request #51431 from CHISANW
Closes gh-51431

* pr/51431:
  Fix typos in service connection documentation
2026-08-25 12:08:49 -07:00
chisanw 857d1b7a8a Fix typos in service connection documentation
See gh-51431

Signed-off-by: chisanw <keuye06380618@gmail.com>
2026-08-25 12:07:13 -07:00
Phillip Webb a5e2fb3148 Merge pull request #51438 from MacAlsandair
Closes gh-51438

* pr/51438:
  Remove duplicate adoc generation in DocumentAutoConfigurationClasses
2026-08-25 11:59:56 -07:00
Alexander Makarov f76e3b6886 Remove duplicate adoc generation in DocumentAutoConfigurationClasses
The task loaded the auto-configuration metadata twice and wrote every
module's adoc file twice. When `load()` and `writeNavAdoc()` were
introduced, the pre-existing loop that read each metadata file and
called `writeModuleAdoc()` was left in place, so each file was
generated once from `load()` and then again, identically, by the loop.

Remove the redundant loop. The generated output is unchanged.

See gh-51438

Signed-off-by: Alexander Makarov <alexander.makarov@nightsong.li>
2026-08-25 11:58:25 -07:00
Moritz Halbritter 831b46ccf8 Merge pull request #51421 from MacAlsandair
Closes gh-51421

* pr/51421:
  Document SAML2 back-off in WebFlux security documentation
2026-08-25 09:19:50 +02:00
Alexander Makarov 768308ec74 Document SAML2 back-off in WebFlux security documentation
See gh-51421

Signed-off-by: Alexander Makarov <alexander.makarov@nightsong.li>
2026-08-25 09:16:39 +02:00
Moritz Halbritter a39ed772d6 Merge pull request #51412 from 2heunxun
Closes gh-51412

* pr/51412:
  Fix watchdog thread leak in JmsHealthIndicator on start failure
2026-08-25 09:13:47 +02:00
2heunxun d00566ae5d Fix watchdog thread leak in JmsHealthIndicator on start failure
See gh-51412

Signed-off-by: 2heunxun <seapeon@naver.com>
2026-08-25 09:07:25 +02:00
Phillip Webb 068bb037bf Change code to make Eclipse compiler happy
Extract a local variable to fix compiler error that only seems to
happen in Eclipse.
2026-08-24 19:07:53 -07:00
Andy Wilkinson 6dbc7e9a51 Use method on String to identify Java 27
At the time of writing, https://javaalmanac.io lists
EnumSet.spliterator as being new in Java 27, but that's not the case.

This commit switches to using String.encodedLength(Charset) instead.
This method is new in Java 27 and also aligns with the existing
TWENTY_SIX value that already uses a method on String for version
identification.

See gh-51422
2026-08-24 15:47:34 +01:00
Andy Wilkinson 6e58a6ff8b Polish
See gh-51422
2026-08-24 15:31:30 +01:00
Andy Wilkinson ee059ae3ca Add CI for Java 27
Closes gh-51423
2026-08-24 14:52:36 +01:00
Andy Wilkinson ff153f21d8 Add TWENTY_SEVEN to JavaVersion
Closes gh-51422
2026-08-24 14:51:52 +01:00
Stéphane Nicoll 43d3cf57eb Close reader in GsonTester
This harmonizes how JSON marshaller testers operate on a stream. Also
added tests that checks the source is closed as expected for all
implementations.

Closes gh-51417
2026-08-24 08:21:51 +02:00
Stéphane Nicoll d3547de07b Merge pull request #51398 from dlwldn30
Closes gh-51398

* close-aot-file-content-stream:
  Polish "Release file handle when comparing AOT file content"
  Release file handle when comparing AOT file content
2026-08-24 08:07:49 +02:00
Stéphane Nicoll 5402f5b43f Polish "Release file handle when comparing AOT file content"
See gh-51398
2026-08-24 08:05:45 +02:00
dlwldn30 4a1abb9617 Release file handle when comparing AOT file content
RequireNewOrMatchingContentFileHandler reads the already generated file
through content.getInputStream().readAllBytes(). That method does not
close the stream, and the stream is never assigned, so it cannot
be closed at all.

During AOT processing the content is a FileSystemResource, so each
comparison leaks a file handle. FileSystemGeneratedFiles already uses
try-with-resources when it consumes an InputStreamSource.

Read the existing content inside a try-with-resources block.

See gh-51398

Signed-off-by: dlwldn30 <dlwldn30@naver.com>
2026-08-24 08:05:38 +02:00
Stéphane Nicoll 01267a3c6f Merge pull request #51411 from MacAlsandair
Closes gh-51411

* docs-remove-springbootwebsecurityconfiguration-reference-4.0.x:
  Polish
  Remove reference to SpringBootWebSecurityConfiguration
2026-08-24 08:03:12 +02:00