Commit Graph
1160 Commits
Author SHA1 Message Date
Andy Wilkinson 4c2b5942e3 Merge branch '4.0.x'
Closes gh-50872
2026-06-27 12:55:30 +01:00
Lee JiWon 9cfa980a4d Avoid loading health classes in Jersey config
Move the Jersey additional health endpoint paths registrar into a
health-specific configuration so Jersey management endpoint support can
refresh when spring-boot-health is absent.

See gh-50858

Signed-off-by: Lee JiWon <dlwldnjs1009@gmail.com>
2026-06-27 12:53:18 +01:00
Andy Wilkinson 94c455b27a Merge branch '4.0.x'
Closes gh-50871
2026-06-27 12:51:56 +01:00
Lee JiWon 48054ea77b Avoid loading health classes in Cloud Foundry
Move the Cloud Foundry health endpoint extension bean into a
health-specific configuration. This lets the actuator configuration
refresh when spring-boot-health is absent.

See gh-50857

Signed-off-by: Lee JiWon <dlwldnjs1009@gmail.com>
2026-06-27 12:48:47 +01:00
Dmytro Nosan 16445de3ab Align W3CHeaderParser decoding with RFC 3986
Replace `URLDecoder.decode` with `StringUtils.uriDecode` to ensure
RFC 3986-compliant decoding. Unlike `URLDecoder`, URI decoding does
not treat `+` as a space and only decodes percent-encoded sequences.

See gh-50650

Signed-off-by: Dmytro Nosan <dimanosan@gmail.com>
2026-06-24 20:15:18 +01:00
Andy Wilkinson 1c1be40372 Merge branch '4.0.x'
Closes gh-50852
2026-06-24 19:43:09 +01:00
seonwoo_jung 019ea06a6a Run a single hello command in MongoDB health indicators
The MongoDB health indicators ran the `hello` command against every
database returned by `listDatabaseNames()`. For the reactive
indicator these commands were issued in parallel via `flatMap`, so a
deployment with many databases per connection could open a connection
per database on each health check, dramatically increasing connection
usage (a regression from the Spring Data based implementation used
previously).

Since `hello` is a server-level command whose result is independent
of the target database, run it only once, against the `admin`
database if available or the first returned database otherwise. The
`databases` and `maxWireVersion` details are preserved.

See gh-50734

Signed-off-by: seonwoo_jung <79202163+seonwooj0810@users.noreply.github.com>
2026-06-24 19:31:03 +01:00
Andy Wilkinson 7a45ee8767 Merge branch '4.0.x'
Closes gh-50851
2026-06-24 19:12:35 +01:00
Yanming Zhou 9d5c98b7e9 Replace isAssignableFrom() with isInstance() where feasible
Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>

See gh-50750
2026-06-24 19:11:59 +01:00
Andy Wilkinson 185b446005 Merge branch '4.0.x'
Closes gh-50849
2026-06-24 17:54:30 +01:00
Andy Wilkinson a49549203b Polish "Treat empty JWK Set URI as absent"
See gh-50755

Signed-off-by: Andy Wilkinson <andy.wilkinson@broadcom.com>
2026-06-24 17:48:11 +01:00
Vinod Kumar 8eb3b032a4 Treat empty JWK Set URI as absent
Signed-off-by: Vinod Kumar <codingkiddo@gmail.com>

See gh-50755
2026-06-24 17:34:15 +01:00
Doehyun Baek f7c2c0b2a6 Align documentation with changes made during 4.1's development
Signed-off-by: Doehyun Baek <doehyunbaek@gmail.com>

See gh-50800
2026-06-24 15:44:05 +01:00
Andy Wilkinson 6719b46793 Merge branch '4.0.x'
Closes gh-50843
2026-06-24 12:17:35 +01:00
Lee JiWon 28b995ad98 Allow other configurers to run before PropertiesWebClientHttpServiceGroupConfigurer
Apply the same fix as 72eaeecd5c to the WebClient sibling so that a
WebClientHttpServiceGroupConfigurer can be ordered ahead of the
properties configurer to supply an initial WebClient.Builder.

Signed-off-by: Lee JiWon <dlwldnjs1009@gmail.com>

See gh-50737
2026-06-24 12:15:19 +01:00
Moritz Halbritter e16c5d0141 Merge branch '4.0.x'
Closes gh-50807
2026-06-22 09:04:17 +02:00
yamamoto-ehhMH 57dec87e28 Fix typo in DataSourceBuilderTests
See gh-50804

Signed-off-by: yamamoto-ehhMH <yamamoto@reskill.jp>
2026-06-22 08:56:58 +02:00
Brian Clozel f71e797761 Merge branch '4.0.x'
Closes gh-50790
2026-06-18 17:01:29 +02:00
Lee JiWon 4b542efc0c Only set Partitioned cookie attribute when true
The session cookie's Partitioned attribute was set to "" for any
non-null value, so an explicit `partitioned=false` was rendered the
same as `true`. PropertyMapper.to() only filters null, so
Boolean.FALSE reached the consumer and the attribute was always set.

Use whenTrue() so the attribute is set only when partitioned is true,
leaving false and unset to fall through to the container default.

Closes gh-50781

Signed-off-by: Lee JiWon <dlwldnjs1009@gmail.com>
2026-06-18 16:52:55 +02:00
Andy Wilkinson a7f5c796c9 Stop auto-config of SpringReactiveOpaqueTokenIntrospector w/o WebFlux
SpringReactiveOpaqueTokenIntrospector uses WebClient in its
implementation so the auto-configuration of it must back off when
spring-webflux is not on the classpath. Failing to do so results in
a ClassNotFoundException for WebFlux's BodyInserters if the
auto-configuration's other conditions are met.

Fixes gh-50764
2026-06-13 21:26:02 +01:00
Andy Wilkinson 198af995dc Merge branch '4.0.x'
Closes gh-50747
2026-06-10 15:53:25 +01:00
Andy Wilkinson bb247bb42f Merge branch '3.5.x' into 4.0.x
Closes gh-50746
2026-06-10 15:53:08 +01:00
Andy Wilkinson adcfbf7829 Merge branch '4.0.x'
Closes gh-50745
2026-06-10 15:49:38 +01:00
Andy Wilkinson 339ce3db43 Merge branch '3.5.x' into 4.0.x
Closes gh-50744
2026-06-10 15:46:51 +01:00
leestana01 af2f956c7d Embedded LDAP SSL should not be enabled when its bundle is empty
See gh-50700

Signed-off-by: leestana01 <leestana01@naver.com>
2026-06-09 16:07:40 +02:00
Andy Wilkinson 0dbfb17a7d Merge branch '4.0.x'
Closes gh-50666
2026-06-04 09:03:02 +01:00
Andy Wilkinson 15406bed75 Reapply "Upgrade to Netty 4.2.15.Final"
This reverts commit 490614fe7e.

Closes gh-50692
2026-06-04 09:00:27 +01:00
Phillip Webb 5c88b4453d Upgrade to Oracle Database 23.26.2.0.0
Closes gh-50667
2026-06-02 14:48:00 -07:00
Dependabot Standalone 739daa7ba8 Filter special purpose IPs (RFC 6890) in externalAddresses()
Update `InetAddressFilter.externalAddresses()` to filter special purpose
IP addresses as defined by RFC 6890. As a byproduct of this commit to
additional factory methods (`specialPurpose()` and `multicast()`) have
also been introduced.

Closes gh-50668
2026-06-02 09:52:02 -07:00
Stéphane Nicoll 451c873a8a Merge branch '4.0.x'
Closes gh-50645
2026-05-31 16:34:25 +02:00
Lee JiWon 9446bd7420 Fall back to default SSL provider for unmapped SNI
The RSocket WebSocket transport's HttpServerSslCustomizer kept its own
copy of the SNI provider lookup that returned null for server names
without a mapped SSL bundle. This commit adapts the copy to fall back
to the default provider, as it is done in gh-50301.

See gh-50640

Signed-off-by: Lee JiWon <dlwldnjs1009@gmail.com>
2026-05-31 16:31:58 +02:00
Stéphane Nicoll 894c2bf2cb Merge branch '4.0.x'
Closes gh-50635
2026-05-30 16:27:04 +02:00
Stéphane Nicoll 4aac37cdf1 Merge branch '3.5.x' into 4.0.x
Closes gh-50634
2026-05-30 16:26:48 +02:00
Stéphane Nicoll 7fe52b8ea0 Merge branch '4.0.x'
Closes gh-50633
2026-05-30 15:48:35 +02:00
Dmytro Nosan 7c23813752 Restore Spring Security integration with HtmlUnitDriver
Prior to this commit, securityDelegateMockMvcHtmlUnitDriverCustomizer
did not have an @Bean annotation and therefore
was not registered as a bean in SecurityMockMvcAutoConfiguration.

See gh-50602

Signed-off-by: Dmytro Nosan <dimanosan@gmail.com>
2026-05-30 15:45:22 +02:00
Stéphane Nicoll 85e1ef83d0 Merge branch '4.0.x'
Closes gh-50632
2026-05-30 14:48:00 +02:00
Stéphane Nicoll f6f1d57c6a Merge pull request #50375 from Kimgyuilli
* fix-stale-configuration-metadata-source-types:
  Fix stale type references in configuration metadata

Closes gh-50375
2026-05-30 14:45:14 +02:00
Kimgyuilli ed6c375d19 Fix stale type references in configuration metadata
See gh-50375

Signed-off-by: Kimgyuilli <rlarbdlf222@naver.com>
2026-05-30 14:42:13 +02:00
Stéphane Nicoll 5bf2a32b11 Merge branch '4.0.x' 2026-05-30 14:39:57 +02:00
Stéphane Nicoll 23829221ef Remove sourceType from deprecated properties with error level
See gh-50375
2026-05-30 14:29:04 +02:00
Stéphane Nicoll 98084aab2b Reformat additional-spring-configuration-metadata.json files 2026-05-30 14:28:53 +02:00
Stéphane Nicoll f3cbe60e08 Merge branch '4.0.x' 2026-05-30 13:09:44 +02:00
Stéphane Nicoll 1a092b779f Handle Gson explicitly in CodecsAutoConfigurationTests
The change in gh-50447 added gson on the runtime classpath, which broke
a test that looks for "any" JSON support, but only filtered Jackson and
Jackson 2.

This commit adds an explicit optional dependency to gson and adapt the
test accordingly.

See gh-50447
2026-05-30 12:59:18 +02:00
Stéphane Nicoll 3638852fae Merge branch '4.0.x'
Closes gh-50612
2026-05-29 11:36:01 +02:00
Stéphane Nicoll 170c52f206 Merge branch '3.5.x' into 4.0.x
Closes gh-50611
2026-05-29 11:32:24 +02:00
Stéphane Nicoll f281ff4dd5 Merge branch '4.0.x'
Closes gh-50610
2026-05-29 11:13:56 +02:00
Stéphane Nicoll e51e8215d7 Merge branch '3.5.x' into 4.0.x
Closes gh-50609
2026-05-29 11:13:43 +02:00
Andy Wilkinson d6a23b72b8 Deprecate SpringJtaPlatform
This deprecation should have happened as part of c54d05c for #48969.

Closes gh-50592
2026-05-27 14:35:08 +01:00
Andy Wilkinson a573e121fb fixup! Upgrade to Hibernate 7.4.0.Final 2026-05-27 14:12:09 +01:00
Andy Wilkinson 41dbadeb6b Upgrade to Hibernate 7.4.0.Final
Closes gh-50578
2026-05-27 14:12:06 +01:00