spring/spring-boot
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-boot.git synced 2026-09-23 17:59:03 +00:00
Code Issues Projects Releases Wiki Activity
60,619 Commits 28 Branches 394 Tags
d3547de07bfcc9fecd1759ea61d7d9ae03fbfb6f
Commit Graph
60619 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Stéphane Nicoll d3547de07b Merge pull request #51398 from dlwldn30 
Closes gh-51398

* close-aot-file-content-stream:
  Polish "Release file handle when comparing AOT file content"
  Release file handle when comparing AOT file content
 2026-08-24 08:07:49 +02:00
Stéphane Nicoll 5402f5b43f Polish "Release file handle when comparing AOT file content" 
See gh-51398
 2026-08-24 08:05:45 +02:00
dlwldn30 4a1abb9617 Release file handle when comparing AOT file content 
RequireNewOrMatchingContentFileHandler reads the already generated file
through content.getInputStream().readAllBytes(). That method does not
close the stream, and the stream is never assigned, so it cannot
be closed at all.

During AOT processing the content is a FileSystemResource, so each
comparison leaks a file handle. FileSystemGeneratedFiles already uses
try-with-resources when it consumes an InputStreamSource.

Read the existing content inside a try-with-resources block.

See gh-51398

Signed-off-by: dlwldn30 <dlwldn30@naver.com>
 2026-08-24 08:05:38 +02:00
Stéphane Nicoll 01267a3c6f Merge pull request #51411 from MacAlsandair 
Closes gh-51411

* docs-remove-springbootwebsecurityconfiguration-reference-4.0.x:
  Polish
  Remove reference to SpringBootWebSecurityConfiguration
 2026-08-24 08:03:12 +02:00
Stéphane Nicoll 083b4d3f0e Polish 
See gh-51411
 2026-08-24 08:01:15 +02:00
Alexander Makarov 13389a27e7 Remove reference to SpringBootWebSecurityConfiguration 
Servlet web security moved to ServletWebSecurityAutoConfiguration, but
the MVC Security section still describes SecurityAutoConfiguration
importing SpringBootWebSecurityConfiguration, which no longer exists.

See gh-51411

Signed-off-by: Alexander Makarov <alexander.makarov@nightsong.li>
 2026-08-24 07:57:21 +02:00
Stéphane Nicoll 08b21900c4 Merge pull request #51393 from dependabot[bot] 
Closes gh-51393

* dependabot/npm_and_yarn/antora/antora/cli-3.2.0-rc.3:
  Bump @antora/cli from 3.2.0-rc.2 to 3.2.0-rc.3 in /antora
 2026-08-21 11:01:31 +02:00
dependabot[bot] 19431312b6 Bump @antora/cli from 3.2.0-rc.2 to 3.2.0-rc.3 in /antora 
Bumps [@antora/cli](https://gitlab.com/antora/antora) from 3.2.0-rc.2 to 3.2.0-rc.3.
- [Changelog](https://gitlab.com/antora/antora/blob/main/CHANGELOG.adoc)
- [Commits](https://gitlab.com/antora/antora/compare/v3.2.0-rc.2...v3.2.0-rc.3)

---
updated-dependencies:
- dependency-name: "@antora/cli"
  dependency-version: 3.2.0-rc.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

See gh-51393

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-21 10:58:33 +02:00
Stéphane Nicoll 14989917a3 Merge pull request #51392 from dependabot[bot] 
Closes gh-51392

* dependabot/npm_and_yarn/antora/antora/site-generator-3.2.0-rc.3:
  Bump @antora/site-generator from 3.2.0-rc.2 to 3.2.0-rc.3 in /antora
 2026-08-21 10:54:44 +02:00
dependabot[bot] a4f6585607 Bump @antora/site-generator from 3.2.0-rc.2 to 3.2.0-rc.3 in /antora 
Bumps [@antora/site-generator](https://gitlab.com/antora/antora) from 3.2.0-rc.2 to 3.2.0-rc.3.
- [Changelog](https://gitlab.com/antora/antora/blob/main/CHANGELOG.adoc)
- [Commits](https://gitlab.com/antora/antora/compare/v3.2.0-rc.2...v3.2.0-rc.3)

---
updated-dependencies:
- dependency-name: "@antora/site-generator"
  dependency-version: 3.2.0-rc.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

See gh-51392

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-21 10:54:34 +02:00
Stéphane Nicoll 76073b109f Merge pull request #51391 from dependabot[bot] 
Closes gh-51391

* dependabot/github_actions/Homebrew/actions/setup-homebrew-2026.08.14.1:
  Bump Homebrew/actions/setup-homebrew from 2026.08.10.1 to 2026.08.14.1
 2026-08-21 10:54:04 +02:00
dependabot[bot] 9bff138a78 Bump Homebrew/actions/setup-homebrew from 2026.08.10.1 to 2026.08.14.1 
Bumps [Homebrew/actions/setup-homebrew](https://github.com/homebrew/actions) from 2026.08.10.1 to 2026.08.14.1.
- [Release notes](https://github.com/homebrew/actions/releases)
- [Changelog](https://github.com/Homebrew/actions/blob/main/release.test.mts)
- [Commits](https://github.com/homebrew/actions/compare/c8707045ccae42888fe98e86f2ee8938bc7cc193...8f3d1ec8a696b3b9d9a6c3696b6c73033cab69e4)

---
updated-dependencies:
- dependency-name: Homebrew/actions/setup-homebrew
  dependency-version: 2026.08.14.1
  dependency-type: direct:production
...

See gh-51391

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-21 10:53:50 +02:00
Stéphane Nicoll baa3e5a9ca Merge pull request #51390 from scottfrederick 
Closes gh-51390

* gh-51166-buildpack-stack-id:
  Polish "Warn when builder and run image stack IDs do not match"
  Warn when builder and run image stack IDs do not match
 2026-08-21 10:50:58 +02:00
Stéphane Nicoll 0b0a6c88dc Polish "Warn when builder and run image stack IDs do not match" 
See gh-51390
 2026-08-21 10:49:17 +02:00
Scott Frederick 829fd8bb29 Warn when builder and run image stack IDs do not match 
Spring Boot's Buildpacks integration inspects the stack IDs contained
in labels on the builder image and run image. Prior to this change, it
was a failure condition when the stack IDs did not match. Stack IDs
have been deprecated in the CNB spec, and it is no longer required
that the builder and run images match. The validation of stack IDs
was changed from an error to a warning to match the `pack` reference
implementation.

See gh-51390

Signed-off-by: Scott Frederick <scottyfred@gmail.com>
 2026-08-21 10:49:17 +02:00
Phillip Webb b1ac5f53dd Restore '.github/actions/build' 2026-08-20 15:30:33 -07:00
Phillip Webb 425a96e9f8 Resore '.github' directory 2026-08-20 15:26:21 -07:00
Phillip Webb e3b1cff986 Restore GitHub workflows 2026-08-20 15:19:35 -07:00
Phillip Webb 2e50190739 Next development version (v4.0.9-SNAPSHOT) 2026-08-20 15:19:33 -07:00
Stéphane Nicoll 2c92717f55 Upgrade to Spring Pulsar 2.0.7 
Closes gh-51327
 2026-08-11 18:08:03 +02:00
Stéphane Nicoll 365e687312 Upgrade to Spring HATEOAS 3.0.5 
Closes gh-51356
 2026-08-11 18:08:03 +02:00
Stéphane Nicoll aab9b6b3c7 Upgrade to Spring Data Bom 2025.1.7 
Close gh-51355
 2026-08-11 18:08:03 +02:00
Stéphane Nicoll 3a096d58d4 Upgrade to Spring Session 4.0.5 
Closes gh-51246
 2026-08-11 18:08:03 +02:00
Stéphane Nicoll bb99ddab0c Upgrade to Spring Security 7.0.7 
Closes gh-51245
 2026-08-11 18:08:03 +02:00
Stéphane Nicoll 3f1c4ac2d1 Upgrade to Spring LDAP 4.0.5 
Closes gh-51244
 2026-08-11 18:08:03 +02:00
Stéphane Nicoll 19139ac9b3 Upgrade to Spring Kafka 4.0.7 
Closes gh-51243
 2026-08-11 18:08:02 +02:00
Stéphane Nicoll b70535bc18 Upgrade to Spring Integration 7.0.6 
Closes gh-51242
 2026-08-11 18:08:02 +02:00
Stéphane Nicoll b90a00f717 Upgrade to Spring GraphQL 2.0.5 
Closes gh-51241
 2026-08-11 18:08:02 +02:00
Stéphane Nicoll 117621b0a3 Upgrade to Spring Framework 7.0.9 
Closes gh-51240
 2026-08-11 18:08:02 +02:00
Stéphane Nicoll 7781b19f5f Upgrade to Spring Batch 6.0.5 
Closes gh-51239
 2026-08-11 18:08:02 +02:00
Stéphane Nicoll 555460a0b8 Upgrade to Spring AMQP 4.0.5 
Closes gh-51238
 2026-08-11 18:08:02 +02:00
Stéphane Nicoll 6648344fcc Upgrade to Reactor Bom 2025.0.7 
Closes gh-51237
 2026-08-11 18:08:02 +02:00
Stéphane Nicoll 96954d335e Upgrade to Micrometer Tracing 1.6.7 
Closes gh-51236
 2026-08-11 18:08:02 +02:00
Stéphane Nicoll 90d20347b8 Upgrade to Micrometer 1.16.7 
Closes gh-51235
 2026-08-11 18:08:02 +02:00
Andy Wilkinson 0ce829cbdb Prepare release/4.0.8 branch 2026-08-11 18:08:02 +02:00
Stéphane Nicoll 604fc38eb1 Switch to INTERNAL-SNAPSHOT 2026-08-11 18:07:49 +02:00
Andy Wilkinson 824358b9cb Prepare 4.0.x-internal branch 2026-08-11 18:07:49 +02:00
Stéphane Nicoll ada7ac7c48 Apply consumer-specific security protocol 
Closes gh-51365
 2026-08-11 17:46:39 +02:00
Stéphane Nicoll 99ba99d3b3 Upgrade to Elasticsearch Client 9.2.9 
Closes gh-51366
 2026-08-11 17:25:30 +02:00
Stéphane Nicoll f00511af9c Start building against Spring HATEOAS 3.0.5 snapshots 
See gh-51356
 2026-08-11 11:17:59 +02:00
Stéphane Nicoll f225f28480 Start building against Spring Data Bom 2025.1.7 snapshots 
See gh-51355
 2026-08-11 11:17:55 +02:00
Stéphane Nicoll 7ff5f4d37c Merge pull request #51344 from dependabot[bot] 
Closes gh-51344

* dependabot/github_actions/Homebrew/actions/setup-homebrew-2026.08.10.1:
  Bump Homebrew/actions/setup-homebrew from 2026.08.03.1 to 2026.08.10.1
 2026-08-11 11:16:24 +02:00
dependabot[bot] 1f102f4f7d Bump Homebrew/actions/setup-homebrew from 2026.08.03.1 to 2026.08.10.1 
Bumps [Homebrew/actions/setup-homebrew](https://github.com/homebrew/actions) from 2026.08.03.1 to 2026.08.10.1.
- [Release notes](https://github.com/homebrew/actions/releases)
- [Changelog](https://github.com/Homebrew/actions/blob/main/release.test.mts)
- [Commits](https://github.com/homebrew/actions/compare/5037c6f1012cc5ea0b9f03fedbaf9955ed9e51e0...c8707045ccae42888fe98e86f2ee8938bc7cc193)

---
updated-dependencies:
- dependency-name: Homebrew/actions/setup-homebrew
  dependency-version: 2026.08.10.1
  dependency-type: direct:production
...

See gh-51344

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-11 11:15:37 +02:00
Stéphane Nicoll fbcefd2ea6 Merge pull request #51343 from dependabot[bot] 
Closes gh-51343

* dependabot/github_actions/gradle/actions/setup-gradle-6.3.0:
  Polish "Bump gradle/actions/setup-gradle from 6.2.0 to 6.3.0"
  Bump gradle/actions/setup-gradle from 6.2.0 to 6.3.0
 2026-08-11 11:14:35 +02:00
Stéphane Nicoll 85f11f0fd7 Polish "Bump gradle/actions/setup-gradle from 6.2.0 to 6.3.0" 
See gh-51343
 2026-08-11 11:10:26 +02:00
dependabot[bot] ee357d4b1b Bump gradle/actions/setup-gradle from 6.2.0 to 6.3.0 
Bumps [gradle/actions/setup-gradle](https://github.com/gradle/actions) from 6.2.0 to 6.3.0.
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](https://github.com/gradle/actions/compare/3f131e8634966bd73d06cc69884922b02e6faf92...9c971963bec38e04b3d30dcc455b5382be2fdbfb)

---
updated-dependencies:
- dependency-name: gradle/actions/setup-gradle
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

See gh-51343

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-11 11:09:20 +02:00
Stéphane Nicoll 40ac079e04 Merge pull request #51342 from dependabot[bot] 
Closes gh-51342

* dependabot/npm_and_yarn/antora/springio/antora-extensions-1.14.13:
  Bump @springio/antora-extensions from 1.14.12 to 1.14.13 in /antora
 2026-08-11 11:06:05 +02:00
dependabot[bot] a0d8a29435 Bump @springio/antora-extensions from 1.14.12 to 1.14.13 in /antora 
Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions) from 1.14.12 to 1.14.13.
- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc)
- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.12...v1.14.13)

---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
  dependency-version: 1.14.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

See gh-51342

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-11 11:03:42 +02:00
Stéphane Nicoll 2abe872e37 Fix hostname verification failure in Elasticsearc smoke test 
Regenerate the self-signed test certificate with CN=localhost as the
JDK enforces RFC 6125 wildcard rules and no longer accepts a bare "*" as
a match-any-host pattern. Thus far it worked because HttpClient5 did
not delegate hostname verification to the JDK in some cases.

Closes gh-51345
 2026-08-11 08:05:47 +02:00
Stéphane Nicoll 831ac340f0 Start building against Spring Pulsar 2.0.7 snapshots 
See gh-51327
 2026-08-10 16:52:13 +02:00