spring/spring-boot
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-boot.git synced 2026-09-17 12:09:16 +00:00
Code Issues Projects Releases Wiki Activity
60,107 Commits 24 Branches 394 Tags
aad49518e0aeb6d8efec5c8a5b957de2ffc0d50d
Commit Graph
60107 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andy Wilkinson aad49518e0 Upgrade to jOOQ 3.19.33 
Closes gh-50330
 2026-05-07 12:01:11 +01:00
Andy Wilkinson 92c01c7d7a Prohibit upgrades to Jetty 12.1.9 
Closes gh-50329
 2026-05-07 12:01:10 +01:00
Andy Wilkinson 2decd3dce8 Upgrade to Jakarta XML Bind 4.0.5 
Closes gh-50328
 2026-05-07 10:40:36 +01:00
Andy Wilkinson 0d8775e354 Upgrade to Jackson Bom 3.1.3 
Closes gh-50327
 2026-05-07 10:40:32 +01:00
Andy Wilkinson e4ef099eac Upgrade to Jackson 2 Bom 2.21.3 
Closes gh-50326
 2026-05-07 10:40:27 +01:00
Andy Wilkinson 11b702264f Upgrade to Hibernate 7.2.13.Final 
Closes gh-50325
 2026-05-07 10:40:22 +01:00
Andy Wilkinson f6625511a4 Upgrade to Groovy 5.0.6 
Closes gh-50324
 2026-05-07 10:40:18 +01:00
Andy Wilkinson 3e1b6f2a88 Upgrade to Glassfish JAXB 4.0.8 
Closes gh-50323
 2026-05-07 10:40:13 +01:00
Andy Wilkinson f47c0fa672 Upgrade to Caffeine 3.2.4 
Closes gh-50322
 2026-05-07 10:40:08 +01:00
Andy Wilkinson 823cc167d6 Merge branch '3.5.x' into 4.0.x 2026-05-07 10:35:04 +01:00
Andy Wilkinson 8be269a6b7 Upgrade to SAAJ Impl 3.0.5 
Closes gh-50320
 2026-05-07 09:55:59 +01:00
Andy Wilkinson 7660cd4443 Upgrade to R2DBC MySQL 1.4.2 
Closes gh-50319
 2026-05-07 09:55:59 +01:00
Andy Wilkinson 41925f4df1 Upgrade to Pulsar 4.0.10 
Closes gh-50318
 2026-05-07 09:55:59 +01:00
Andy Wilkinson 5ab2d4531b Upgrade to Postgresql 42.7.11 
Closes gh-50317
 2026-05-07 09:55:59 +01:00
Andy Wilkinson 0eee8d10e7 Upgrade to Netty 4.1.133.Final 
Closes gh-50316
 2026-05-07 09:55:59 +01:00
Andy Wilkinson c02b9702f8 Upgrade to jOOQ 3.19.33 
Closes gh-50315
 2026-05-07 09:55:58 +01:00
Andy Wilkinson d204445ec5 Upgrade to Jetty 12.0.35 
Closes gh-50314
 2026-05-07 09:55:58 +01:00
Andy Wilkinson 3e0c2abf11 Upgrade to Jakarta XML Bind 4.0.5 
Closes gh-50313
 2026-05-07 09:55:58 +01:00
Andy Wilkinson ce7b0e4242 Upgrade to Jackson Bom 2.21.3 
Closes gh-50312
 2026-05-07 09:55:58 +01:00
Andy Wilkinson 0946382489 Upgrade to Hibernate 6.6.50.Final 
Closes gh-50311
 2026-05-07 09:55:58 +01:00
Andy Wilkinson 87bb468d37 Upgrade to Groovy 4.0.32 
Closes gh-50310
 2026-05-07 09:55:57 +01:00
Andy Wilkinson fabab67b69 Upgrade to Glassfish JAXB 4.0.8 
Closes gh-50309
 2026-05-07 09:55:57 +01:00
Andy Wilkinson 91687be897 Upgrade to Caffeine 3.2.4 
Closes gh-50308
 2026-05-07 09:54:14 +01:00
Andy Wilkinson 9e8ed12688 Merge branch '3.5.x' into 4.0.x 
Closes gh-50299
 2026-05-06 09:15:45 +01:00
Andy Wilkinson cf2ca419ea Pin Antora's Node version to 24.14.1 
24.15.0 regularly crashes during Windows CI builds. The suspected
cause is nodejs/node#62991.

Closes gh-50295
 2026-05-06 09:13:17 +01:00
Phillip Webb 67959c1309 Fix spring-boot-loader-tests-signed-jar-rsa forward merge issue 
See gh-50292
 2026-05-05 12:10:31 -07:00
Phillip Webb 031cf98084 Merge branch '3.5.x' into 4.0.x 
Closes gh-50297
 2026-05-05 11:21:40 -07:00
Phillip Webb 6c09b36202 Detect signed jars using .RSA and .EC files in addition to .DSA 
Update `ZipContent` signed jar detection logic to consider `.RSA` and
`.EC` files in addition to the previously supported `.DSA` files.

Fixes gh-50292
 2026-05-05 11:15:12 -07:00
Phillip Webb a6895e3da2 Merge branch '3.5.x' into 4.0.x 
Closes gh-50289
 2026-05-04 14:03:03 -07:00
Phillip Webb fd1b5c7749 Merge pull request #50282 from SebTardif 
Closes gh-50282

* pr/50282:
  Polish "Align DocumentBuilderFactory configuration"
  Align DocumentBuilderFactory configuration
 2026-05-04 14:02:54 -07:00
Phillip Webb f8ecad5155 Polish "Align DocumentBuilderFactory configuration" 
See gh-50282
 2026-05-04 14:02:22 -07:00
Sebastien Tardif eb90d0de63 Align DocumentBuilderFactory configuration 
Align configuration used for `DocumentBuilderFactory` instances
across the codebase.

See gh-50282

Signed-off-by: Sebastien Tardif <SebTardif@ncf.ca>
 2026-05-04 13:36:12 -07:00
Stéphane Nicoll 2c18012577 Merge branch '3.5.x' into 4.0.x 
Closes gh-50286
 2026-05-04 08:22:07 +02:00
Stéphane Nicoll f5203cf9b2 Merge pull request #50235 from kwondh5217 
* fix/remove-meter-registry-from-global-on-context-close:
  Remove MeterRegistry from global registry on context close

Closes gh-50235
 2026-05-04 08:21:55 +02:00
Daeho Kwon 9d7b21a65e Remove MeterRegistry from global registry on context close 
See gh-50235

Signed-off-by: Daeho Kwon <trewq231@naver.com>
 2026-05-04 08:12:01 +02:00
Stéphane Nicoll 1ec303982e Merge pull request #50281 from mmoayyed 
* patch-1:
  Polish "Add links for Java CAS Client Spring Boot Starter"
  Add links for Java CAS Client Spring Boot Starter

Closes gh-50281
 2026-05-03 17:05:12 +02:00
Stéphane Nicoll cce0142dbe Polish "Add links for Java CAS Client Spring Boot Starter" 
See gh-50281
 2026-05-03 17:04:15 +02:00
Misagh Moayyed 64ab149b20 Add links for Java CAS Client Spring Boot Starter 
See gh-50281

Signed-off-by: Misagh Moayyed <mm1844@gmail.com>
 2026-05-03 17:03:24 +02:00
Andy Wilkinson ee6f1e6256 Merge branch '3.5.x' into 4.0.x 
See gh-50278
 2026-05-02 07:11:37 +01:00
Andy Wilkinson 46330c283f Make the environment available to Ivy as env.* properties 
See gh-50277
 2026-05-02 07:10:24 +01:00
Phillip Webb 0bf9d6b481 Merge branch '3.5.x' into 4.0.x 
Closes gh-50278
 2026-05-01 17:48:05 -07:00
Phillip Webb a5a4e218d9 Fix transformed ivysettings.xml 
Fix the environment variable reference to be correctly escaped.

Closes gh-50277
 2026-05-01 17:47:05 -07:00
Andy Wilkinson 5628644848 Merge branch '3.5.x' into 4.0.x 
Closes gh-50274
 2026-05-01 11:41:12 +01:00
Andy Wilkinson 001171f8eb Harden deserialization in HttpRestartServer 
While remote code execution is a feature of remote DevTools,
hardening of the deserialization of ClassLoaderFiles is not without
benefit. Not least, it should prevent false-positive reports from
AI-based security scanners that look at the code in isolation without
understanding the full context of the feature.

It should be noted that this hardening in no way protects against
remote code execution and the use of remote DevTools remains an
opt-in feature that should only be enabled in a trusted setting and
secured with a sufficiently complex secret. It remains the case that
an attacker who compromises the secret and has network access to the
remote application can achieve RCE by uploading a serialized
ClassLoaderFiles payload that adds malicious code and/or resources
to the application.

Closes gh-50272
 2026-05-01 11:25:19 +01:00
Andy Wilkinson 065c463cef Improve nullability of TestPropertyValues 
Closes gh-50269
 2026-05-01 08:39:18 +01:00
Phillip Webb da2a62f32f Merge pull request #50265 from msridhar 
* pr/50265:
  Align @Nullable in returned Map with actual implementation

Closes gh-50265
 2026-04-30 14:36:41 -07:00
Manu Sridharan 55a6b4525c Align @Nullable in returned Map with actual implementation 
See gh-50265

Signed-off-by: Manu Sridharan <msridhar@gmail.com>

Closes gh-50265
 2026-04-30 14:35:43 -07:00
Andy Wilkinson fc67e24820 Merge branch '3.5.x' into 4.0.x 
Closes gh-50260
 2026-04-30 13:44:06 +01:00
Andy Wilkinson 03eb75fbad Merge pull request #50095 from dlwldnjs1009 
* gh-50095:
  Always match the links endpoint with GET

Closes gh-50095
 2026-04-30 13:43:20 +01:00
Lee JiWon 2d3273e078 Always match the links endpoint with GET 
The links endpoint only supports GET, so its matcher is now hardcoded
to GET. withHttpMethod(...) continues to apply only to endpoint paths
and the behaviour is documented on its javadoc.

Signed-off-by: Lee JiWon <dlwldnjs1009@gmail.com>

See gh-50095
 2026-04-30 13:34:11 +01:00