spring/spring-boot
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-boot.git synced 2026-09-17 12:09:16 +00:00
Code Issues Projects Releases Wiki Activity
56,826 Commits 24 Branches 394 Tags
73a7b7727d7fd661670cbf5e789e4e2c6163f64c
Commit Graph
56826 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Stéphane Nicoll 73a7b7727d Polish "Reject unknown JWS algorithms configured on NimbusJwtDecoder" 
See gh-50118
 2026-04-27 10:19:00 +02:00
Hieu Bui Vinh 3f32906b05 Reject unknown JWS algorithms configured on NimbusJwtDecoder 
See gh-50118

Signed-off-by: Hieu Bui Vinh <buivinhhieu217@gmail.com>
 2026-04-27 10:18:33 +02:00
Stéphane Nicoll eceb603342 Merge pull request #50210 from henriquejsza 
* gh-35236-testcontainers-lifecycle-docs:
  Polish "Document Testcontainers lifecycle caveat"
  Document Testcontainers lifecycle caveat

Closes gh-50210
 2026-04-25 11:47:02 +02:00
Stéphane Nicoll 2df7f83ceb Polish "Document Testcontainers lifecycle caveat" 
See gh-50210
 2026-04-25 11:46:42 +02:00
henriquejsza 69ddf5856f Document Testcontainers lifecycle caveat 
Document how Testcontainers-managed static containers can be stopped
before Spring's cached application context is closed or reused.

See gh-50210

Signed-off-by: henriquejsza <henriquejsza@gmail.com>
 2026-04-25 11:46:38 +02:00
Stéphane Nicoll 6d4a3e7592 Fix reference to Jetty classes 2026-04-25 11:23:55 +02:00
Stéphane Nicoll 2dfcbd795c Merge pull request #17144 from zxuhan7 
* gh-17144-document-jetty-multiple-connectors:
  Polish "Document configuring multiple connectors with Jetty"
  Document configuring multiple connectors with Jetty

Closes gh-17144
 2026-04-25 11:14:35 +02:00
Stéphane Nicoll 796ac7870d Polish "Document configuring multiple connectors with Jetty" 
See gh-17144
 2026-04-25 11:09:57 +02:00
zxuhan7 f9c0c65622 Document configuring multiple connectors with Jetty 
See gh-17144

Signed-off-by: zxuhan7 <zxuhan7@gmail.com>
 2026-04-25 10:52:45 +02:00
Stéphane Nicoll 466e11ba06 Merge pull request #50205 from kwondh5217 
* fix/whitelabel-timestamp-html-escaping:
  Polish contribution
  Apply HTML escaping to timestamp attribute in Whitelabel error page

Closes gh-50205
 2026-04-25 10:33:38 +02:00
Stéphane Nicoll b1ffa65f95 Polish contribution 
See gh-50205
 2026-04-25 10:25:56 +02:00
Daeho Kwon f273f5ec35 Apply HTML escaping to timestamp attribute in Whitelabel error page 
See gh-50205

Signed-off-by: Daeho Kwon <trewq231@naver.com>
 2026-04-25 10:10:56 +02:00
Andy Wilkinson f280d12729 Polish InvalidConfigurationPropertyValueException javadoc 
Closes gh-50212
 2026-04-25 07:47:20 +01:00
Stéphane Nicoll 054bbae2d1 Merge pull request #50193 from johnnypwong 
* fix-typo-doc-spring-security-provider:
  Fix typo in OAuth2 client registration documentation

Closes gh-50193
 2026-04-24 08:40:24 +02:00
Johnny Wong fc627d4bd4 Fix typo in OAuth2 client registration documentation 
See gh-50193

Signed-off-by: Johnny Wong <37771832+johnnypwong@users.noreply.github.com>
 2026-04-24 08:39:12 +02:00
Stéphane Nicoll 33c7a013bb Merge pull request #50167 from dependabot[bot] 
* dependabot/npm_and_yarn/antora/fast-xml-parser-5.7.1:
  Bump fast-xml-parser from 5.5.11 to 5.7.1 in /antora

Closes gh-50167
 2026-04-24 08:37:48 +02:00
dependabot[bot] debaca0fb7 Bump fast-xml-parser from 5.5.11 to 5.7.1 in /antora 
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.5.11 to 5.7.1.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.5.11...v5.7.1)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.7.1
  dependency-type: indirect
...

See gh-50167

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-24 08:36:11 +02:00
Andy Wilkinson 20bb11c398 Next development version (v3.5.15-SNAPSHOT) 2026-04-23 13:54:21 +01:00
Andy Wilkinson 9dc5aa2863 Polish 
See gh-50170
 2026-04-23 11:33:08 +01:00
Andy Wilkinson f533a4549c Do not follow symlinks when writing PID file 
Closes gh-50173
 2026-04-23 08:53:34 +01:00
Andy Wilkinson f3b8eb0f2c Use SecureRandom in RandomValuePropertySource 
Closes gh-50172
 2026-04-23 08:51:14 +01:00
Andy Wilkinson e22083a568 Enable hostname verification for SSL connections to Cassandra 
Closes gh-50171
 2026-04-23 08:48:54 +01:00
Andy Wilkinson 5ceb1a2289 Improve ApplicationTemp's temporary directory creation 
Closes gh-50170
 2026-04-23 08:46:54 +01:00
Andy Wilkinson 4b0862cc00 Use constant-time comparison for remote DevTools secret 
Closes gh-50169
 2026-04-23 08:44:55 +01:00
Andy Wilkinson e4febe2015 Apply verify-hostname consistently 
Closes gh-50168
 2026-04-23 08:42:51 +01:00
Phillip Webb 2c2ffe51c4 Fix Windows test failure 
See gh-50141
 2026-04-22 18:43:33 -07:00
Phillip Webb 0046a442f9 Protect against corrupt buildpack archives 
Update zip and tar handling in buildpack code to ensure that archive
entries cannot be written outside of the expected destination.

Although we consider buildpacks to be trusted, this update will help
protect against corrupt archives.

Closes gh-50141
 2026-04-22 17:39:41 -07:00
Andy Wilkinson aa5089e3f6 Improve handling of malformed LiveReload request header 
Closes gh-50142
 2026-04-22 20:50:44 +01:00
Stéphane Nicoll 3dbfa22d17 Upgrade to Spring Session 3.5.6 
Closes gh-49971
 2026-04-22 20:38:28 +02:00
Stéphane Nicoll 8b89892910 Upgrade to MySQL 9.7.0 
Closes gh-50161
 2026-04-22 19:04:32 +02:00
Stéphane Nicoll b77e019b6b Upgrade to Thymeleaf Extras SpringSecurity 3.1.5.RELEASE 
Closes gh-50151
 2026-04-22 07:22:06 +02:00
Stéphane Nicoll f93ebbf442 Upgrade to Thymeleaf 3.1.5.RELEASE 
Closes gh-50149
 2026-04-22 07:22:01 +02:00
Stéphane Nicoll 4d0d706a94 Upgrade to Lombok 1.18.46 
Closes gh-50148
 2026-04-22 07:21:55 +02:00
Phillip Webb fc4e52ec1a Provide a link for learning java fundamentals 
Update docs to encourage Java fundamentals for beginners that prefer
to learn that way.

Closes gh-49895
 2026-04-21 20:31:04 -07:00
Stéphane Nicoll a4ded49c3e Upgrade to Spring Security 6.5.10 
Closes gh-49970
 2026-04-21 06:04:27 +02:00
Stéphane Nicoll 3c89d46942 Upgrade to Spring Authorization Server 1.5.7 
Closes gh-49965
 2026-04-21 06:04:27 +02:00
Stéphane Nicoll 9f940f448c Upgrade to Spring Pulsar 1.2.17 
Closes gh-49969
 2026-04-20 20:38:33 +02:00
Stéphane Nicoll b8b4aea40a Upgrade to Spring Kafka 3.3.15 
Closes gh-50129
 2026-04-20 20:38:33 +02:00
Stéphane Nicoll 17972ff0ac Upgrade to Spring AMQP 3.2.10 
Closes gh-49964
 2026-04-20 20:38:33 +02:00
Stéphane Nicoll 4294105292 Upgrade to Hibernate 6.6.49.Final 
Closes gh-50140
 2026-04-20 20:38:33 +02:00
Andy Wilkinson 700c978bfb Normalize layer directory locations 
Closes gh-50130
 2026-04-20 10:03:37 +01:00
Stéphane Nicoll d0644a6725 Start building against Spring Kafka 3.3.15 snapshots 
See gh-50129
 2026-04-20 08:25:29 +02:00
Stéphane Nicoll cd3c05c183 Merge pull request #50102 from dependabot[bot] 
* dependabot/maven/build-plugin/spring-boot-maven-plugin/src/intTest/projects/jar-signed/org.bouncycastle-bcprov-jdk18on-1.84:
  Bump org.bouncycastle:bcprov-jdk18on

Closes gh-50102
 2026-04-18 09:40:04 +02:00
dependabot[bot] cda4fb8dc6 Bump org.bouncycastle:bcprov-jdk18on 
Bumps [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) from 1.78.1 to 1.84.
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

---
updated-dependencies:
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-version: '1.84'
  dependency-type: direct:production
...

See gh-50102

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-18 09:33:19 +02:00
Stéphane Nicoll 6264410f46 Merge pull request #50101 from dependabot[bot] 
* dependabot/maven/build-plugin/spring-boot-maven-plugin/src/intTest/projects/war-signed/org.bouncycastle-bcprov-jdk18on-1.84:
  Bump org.bouncycastle:bcprov-jdk18on

Closes gh-50101
 2026-04-18 09:31:06 +02:00
dependabot[bot] a3a0c975cf Bump org.bouncycastle:bcprov-jdk18on 
Bumps [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) from 1.78.1 to 1.84.
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

---
updated-dependencies:
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-version: '1.84'
  dependency-type: direct:production
...

See gh-50101

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-18 09:22:42 +02:00
Stéphane Nicoll bd831dd38e Upgrade to Spring LDAP 3.3.7 
Closes gh-49968
 2026-04-18 08:18:41 +02:00
Stéphane Nicoll 667dbb1d93 Upgrade to Spring Framework 6.2.18 
Closes gh-49967
 2026-04-18 08:18:41 +02:00
Stéphane Nicoll 939e553020 Upgrade to Spring Data Bom 2025.0.11 
Closes gh-49966
 2026-04-18 08:18:40 +02:00
Stéphane Nicoll 30a86f763f Upgrade to jOOQ 3.19.32 
Closes gh-50110
 2026-04-18 08:18:40 +02:00