Commit Graph
59877 Commits
Author SHA1 Message Date
Andy Wilkinson 9fdb2db07c Merge branch '3.5.x' into 4.0.x
Closes gh-50012
2026-04-10 09:56:33 +01:00
Andy Wilkinson e68440d419 Consider enclosing classes when finding imports on test classes
Fixes gh-49860
2026-04-09 16:05:17 +01:00
Stéphane Nicoll 55a8587b04 Merge branch '3.5.x' into 4.0.x 2026-04-09 10:23:46 +02:00
Stéphane Nicoll 52689aa464 Upgrade to Elasticsearch Client 9.2.7
Closes gh-49989
2026-04-09 10:15:29 +02:00
Stéphane Nicoll 5a2f7ff4dc Start building against Spring Session 4.0.3 snapshots
See gh-49983
2026-04-09 10:08:05 +02:00
Stéphane Nicoll da5db863fa Start building against Spring Security 7.0.5 snapshots
See gh-49982
2026-04-09 10:08:05 +02:00
Stéphane Nicoll 499cd72c7d Start building against Spring Pulsar 2.0.5 snapshots
See gh-49981
2026-04-09 10:08:05 +02:00
Stéphane Nicoll b0f66020bd Start building against Spring LDAP 4.0.3 snapshots
See gh-49980
2026-04-09 10:08:05 +02:00
Stéphane Nicoll 6235e2de29 Start building against Spring Kafka 4.0.5 snapshots
See gh-49979
2026-04-09 10:08:04 +02:00
Stéphane Nicoll 405b25b94b Start building against Spring GraphQL 2.0.3 snapshots
See gh-49978
2026-04-09 10:08:04 +02:00
Stéphane Nicoll 083fb1f475 Start building against Spring Framework 7.0.7 snapshots
See gh-49977
2026-04-09 10:08:04 +02:00
Stéphane Nicoll 0664556e0f Start building against Spring Data Bom 2025.1.5 snapshots
See gh-49976
2026-04-09 10:08:04 +02:00
Stéphane Nicoll a1a3477aa2 Start building against Spring AMQP 4.0.3 snapshots
See gh-49975
2026-04-09 10:08:04 +02:00
Stéphane Nicoll 07b9bec17f Start building against Reactor Bom 2025.0.5 snapshots
See gh-49974
2026-04-09 10:08:04 +02:00
Stéphane Nicoll 6d68f95ef3 Start building against Micrometer Tracing 1.6.5-SNAPSHOT snapshots
See gh-49973
2026-04-09 10:08:03 +02:00
Stéphane Nicoll 1ce7f3f3e6 Start building against Micrometer 1.16.5 snapshots
See gh-49972
2026-04-09 10:07:36 +02:00
Stéphane Nicoll fbe3fb6969 Upgrade to Neo4j Java Driver 5.28.11
Closes gh-49984
2026-04-09 09:57:49 +02:00
Stéphane Nicoll 1b0cbb1d05 Start building against Spring Session 3.5.6 snapshots
See gh-49971
2026-04-09 09:57:49 +02:00
Stéphane Nicoll 72a2b78f37 Start building against Spring Security 6.5.10 snapshots
See gh-49970
2026-04-09 09:57:49 +02:00
Stéphane Nicoll 833f50de70 Start building against Spring Pulsar 1.2.17 snapshots
See gh-49969
2026-04-09 09:57:48 +02:00
Stéphane Nicoll 2221f4c2ac Start building against Spring LDAP 3.3.7 snapshots
See gh-49968
2026-04-09 09:57:48 +02:00
Stéphane Nicoll 520ecf7fb5 Start building against Spring Framework 6.2.18 snapshots
See gh-49967
2026-04-09 09:57:48 +02:00
Stéphane Nicoll 5932649254 Start building against Spring Data Bom 2025.0.11 snapshots
See gh-49966
2026-04-09 09:57:48 +02:00
Stéphane Nicoll a665ed9cce Start building against Spring Authorization Server 1.5.7 snapshots
See gh-49965
2026-04-09 09:57:48 +02:00
Stéphane Nicoll 95043e8974 Start building against Spring AMQP 3.2.10 snapshots
See gh-49964
2026-04-09 09:57:48 +02:00
Stéphane Nicoll 417668e100 Start building against Reactor Bom 2024.0.17 snapshots
See gh-49963
2026-04-09 09:57:48 +02:00
Stéphane Nicoll 480237178a Start building against Micrometer Tracing 1.5.11-SNAPSHOT snapshots
See gh-49962
2026-04-09 09:57:48 +02:00
Stéphane Nicoll a716dd9314 Start building against Micrometer 1.15.11 snapshots
See gh-49961
2026-04-09 09:57:48 +02:00
Andy Wilkinson 64969bfea8 Ensure that mock infra is defined before Security auto-config
We need to ensure that MockMvcAutoConfiguration has defined its
DispatcherServletPath bean before the condition that checks for it in
ServletWebSecurityAutoConfiguration is evaluated.

Ideally, ServletWebSecurityAutoConfiguration in spring-boot-security
would not know about test-specific code but there's no easy way to
establish the required ordering without this link. One alternative
option is an auto-configuration class in spring-boot-security-test
that's purely for ordering purposes. This was rejected as it would
introduce new public API (as we enforce that all auto-configurations
are public).

Fixes gh-49854
2026-04-09 08:42:36 +01:00
Andy Wilkinson efe0ecf6cd Merge branch '3.5.x' into 4.0.x
Closes gh-49986
2026-04-09 08:29:55 +01:00
Andy Wilkinson 70f610517e Update Antora dependencies
Closes gh-49985
2026-04-09 08:27:49 +01:00
Stéphane Nicoll 96c0b1e13c Fx transitive dependencies of spring-boot-starter-data-mongodb-reactive
This commit stops including the MongoDB starter in the Data MongDB
reactive starter as the former has already an opinion on the MongoDB
driver to use.

This makes sure the reactive starter no longer brings the synchronous
MongoDB driver.

Closes gh-49945
2026-04-08 11:09:07 +02:00
Andy Wilkinson edcc937add Align FAIL_ON_UNKNOWN_PROPERTIES with Spring Boot 3.x
In Spring Boot 3.x, Jackson2ObjectMapperBuilder disabled
FAIL_ON_UNKNOWN_PROPERTIES. This commit aligns the behavior of
use-jackson2-defaults with this.

This commit also ensures that DEFAULT_VIEW_INCLUSION is disabled. It
was enabled by default in Jackson 2 and then disabled by
Jackson2ObjectMapperBuilder. At the time of writing, Jackson 3's
configureForJackson2() method does not enable DEFAULT_VIEW_INCLUSION.
Should that ever be corrected/changed in Jackson 3, this additional
change in this commit ensures that the Boot will continue to have the
desired default.

Fixes gh-49951
2026-04-08 08:38:32 +01:00
Stéphane Nicoll 308c4317e0 Merge branch '3.5.x' into 4.0.x 2026-04-08 07:31:30 +02:00
Stéphane Nicoll 822f1b9db6 Avoid logging invalid pattern
See gh-49942
2026-04-08 07:31:04 +02:00
Stéphane Nicoll d7a475fcd9 Merge branch '3.5.x' into 4.0.x
Closes gh-49946
2026-04-07 17:33:38 +02:00
Stéphane Nicoll a35de55979 Merge pull request #49942 from dlwldnjs1009
* fix/env-endpoint-invalid-pattern:
  Polish "Handle invalid regex pattern in EnvironmentEndpoint"
  Handle invalid regex pattern in EnvironmentEndpoint

Closes gh-49942
2026-04-07 17:33:25 +02:00
Stéphane Nicoll 2181ce095c Polish "Handle invalid regex pattern in EnvironmentEndpoint"
See gh-49942
2026-04-07 17:28:34 +02:00
Lee JiWon e27c72eeb9 Handle invalid regex pattern in EnvironmentEndpoint
See gh-49942

Signed-off-by: Lee JiWon <dlwldnjs1009@gmail.com>
2026-04-07 17:14:35 +02:00
Brian Clozel 5c506b148f Merge branch '3.5.x' into 4.0.x
Closes gh-49943
2026-04-07 17:05:52 +02:00
Lee JiWon b36edad27d Preserve HttpMethod in EndpointRequest exclusions
EndpointRequest.withHttpMethod(...) restrictions are lost when
excluding(Class<?>...), excluding(String...), or excludingLinks()
are chained because each exclusion creates a new matcher without
the configured method.

Preserve the configured HttpMethod in both servlet and reactive
matchers and add regression tests for exclusion chaining.

See gh-49885

Signed-off-by: Lee JiWon <dlwldnjs1009@gmail.com>
2026-04-07 16:56:53 +02:00
Stéphane Nicoll d93a3f21e9 Polish 2026-04-07 14:50:30 +02:00
Stéphane Nicoll 1e376ea57d Merge branch '3.5.x' into 4.0.x
Closes gh-49940
2026-04-07 12:40:06 +02:00
Stéphane Nicoll bf39f6b5fc Merge pull request #49904 from dependabot[bot]
* dependabot/npm_and_yarn/antora/lodash-4.18.1:
  Bump lodash from 4.17.23 to 4.18.1 in /antora

Closes gh-49904
2026-04-07 12:39:57 +02:00
dependabot[bot] 3be0c434b5 Bump lodash from 4.17.23 to 4.18.1 in /antora
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: indirect
...

See gh-49904

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-07 12:39:33 +02:00
Andy Wilkinson 5287ad0b17 Merge branch '3.5.x' into 4.0.x
Closes gh-49938
2026-04-07 11:03:40 +01:00
Andy Wilkinson a988d65f5d Merge branch 'detekt-task-relocatability' into 3.5.x
Closes gh-49937
2026-04-07 10:47:15 +01:00
Andy Wilkinson cf16beca40 Polish "Improve Detekt task relocatability by relativizing basePath"
See gh-49937
2026-04-07 10:46:21 +01:00
Eric Haag c6d66dc6ed Improve Detekt task relocatability by relativizing basePath
Configures the `basePath` on Detekt tasks to use a relative path from
the root project. This prevents absolute paths from being used during
analysis, avoiding cross-machine build cache misses and ensuring the
task is fully relocatable.

See: https://github.com/detekt/detekt/issues/7170

Signed-off-by: Eric Haag <ehaag@gradle.com>

See gh-49937
2026-04-07 10:32:48 +01:00
Stéphane Nicoll c406d8d032 Merge branch '3.5.x' into 4.0.x 2026-04-07 07:13:08 +02:00