spring/spring-boot
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-boot.git synced 2026-09-23 01:39:02 +00:00
Code Issues Projects Releases Wiki Activity
60,294 Commits 28 Branches 394 Tags
d77b64f9357ab93dfe94de49f9cb6d7d635f4e88
Commit Graph
60294 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Stéphane Nicoll fab53cce04 Merge pull request #50118 from vinhhieu21 
* fix-jws-algorithm-null-add:
  Polish "Reject unknown JWS algorithms configured on NimbusJwtDecoder"
  Reject unknown JWS algorithms configured on NimbusJwtDecoder

Closes gh-50118
 2026-04-27 10:55:30 +02:00
Stéphane Nicoll 73a7b7727d Polish "Reject unknown JWS algorithms configured on NimbusJwtDecoder" 
See gh-50118
 2026-04-27 10:19:00 +02:00
Hieu Bui Vinh 3f32906b05 Reject unknown JWS algorithms configured on NimbusJwtDecoder 
See gh-50118

Signed-off-by: Hieu Bui Vinh <buivinhhieu217@gmail.com>
 2026-04-27 10:18:33 +02:00
Stéphane Nicoll 6093fd42cb Merge branch '3.5.x' into 4.0.x 
Closes gh-50219
 2026-04-25 11:47:30 +02:00
Stéphane Nicoll eceb603342 Merge pull request #50210 from henriquejsza 
* gh-35236-testcontainers-lifecycle-docs:
  Polish "Document Testcontainers lifecycle caveat"
  Document Testcontainers lifecycle caveat

Closes gh-50210
 2026-04-25 11:47:02 +02:00
Stéphane Nicoll 2df7f83ceb Polish "Document Testcontainers lifecycle caveat" 
See gh-50210
 2026-04-25 11:46:42 +02:00
henriquejsza 69ddf5856f Document Testcontainers lifecycle caveat 
Document how Testcontainers-managed static containers can be stopped
before Spring's cached application context is closed or reused.

See gh-50210

Signed-off-by: henriquejsza <henriquejsza@gmail.com>
 2026-04-25 11:46:38 +02:00
Stéphane Nicoll 8a720b6bc5 Merge branch '3.5.x' into 4.0.x 2026-04-25 11:25:41 +02:00
Stéphane Nicoll 6d4a3e7592 Fix reference to Jetty classes 2026-04-25 11:23:55 +02:00
Stéphane Nicoll 3283c9264f Merge branch '3.5.x' into 4.0.x 
Closes gh-50217
 2026-04-25 11:21:07 +02:00
Stéphane Nicoll 2dfcbd795c Merge pull request #17144 from zxuhan7 
* gh-17144-document-jetty-multiple-connectors:
  Polish "Document configuring multiple connectors with Jetty"
  Document configuring multiple connectors with Jetty

Closes gh-17144
 2026-04-25 11:14:35 +02:00
Stéphane Nicoll 796ac7870d Polish "Document configuring multiple connectors with Jetty" 
See gh-17144
 2026-04-25 11:09:57 +02:00
zxuhan7 f9c0c65622 Document configuring multiple connectors with Jetty 
See gh-17144

Signed-off-by: zxuhan7 <zxuhan7@gmail.com>
 2026-04-25 10:52:45 +02:00
Stéphane Nicoll dfabb012e8 Merge branch '3.5.x' into 4.0.x 
Closes gh-50215
 2026-04-25 10:37:05 +02:00
Stéphane Nicoll 466e11ba06 Merge pull request #50205 from kwondh5217 
* fix/whitelabel-timestamp-html-escaping:
  Polish contribution
  Apply HTML escaping to timestamp attribute in Whitelabel error page

Closes gh-50205
 2026-04-25 10:33:38 +02:00
Stéphane Nicoll b1ffa65f95 Polish contribution 
See gh-50205
 2026-04-25 10:25:56 +02:00
Daeho Kwon f273f5ec35 Apply HTML escaping to timestamp attribute in Whitelabel error page 
See gh-50205

Signed-off-by: Daeho Kwon <trewq231@naver.com>
 2026-04-25 10:10:56 +02:00
Andy Wilkinson afc61f922c Merge branch '3.5.x' into 4.0.x 
Closes gh-50213
 2026-04-25 07:47:49 +01:00
Andy Wilkinson f280d12729 Polish InvalidConfigurationPropertyValueException javadoc 
Closes gh-50212
 2026-04-25 07:47:20 +01:00
Andy Wilkinson b02f7ddea3 Fix Partitioned session cooke attribute configuration with Tomcat 
Fixes gh-50201
 2026-04-24 15:06:38 +01:00
Stéphane Nicoll 47c591fe6f Merge branch '3.5.x' into 4.0.x 
Closes gh-50198
 2026-04-24 08:40:51 +02:00
Stéphane Nicoll 054bbae2d1 Merge pull request #50193 from johnnypwong 
* fix-typo-doc-spring-security-provider:
  Fix typo in OAuth2 client registration documentation

Closes gh-50193
 2026-04-24 08:40:24 +02:00
Johnny Wong fc627d4bd4 Fix typo in OAuth2 client registration documentation 
See gh-50193

Signed-off-by: Johnny Wong <37771832+johnnypwong@users.noreply.github.com>
 2026-04-24 08:39:12 +02:00
Stéphane Nicoll b1921b4438 Merge branch '3.5.x' into 4.0.x 
Closes gh-50196
 2026-04-24 08:38:01 +02:00
Stéphane Nicoll 33c7a013bb Merge pull request #50167 from dependabot[bot] 
* dependabot/npm_and_yarn/antora/fast-xml-parser-5.7.1:
  Bump fast-xml-parser from 5.5.11 to 5.7.1 in /antora

Closes gh-50167
 2026-04-24 08:37:48 +02:00
dependabot[bot] debaca0fb7 Bump fast-xml-parser from 5.5.11 to 5.7.1 in /antora 
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.5.11 to 5.7.1.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.5.11...v5.7.1)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.7.1
  dependency-type: indirect
...

See gh-50167

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-24 08:36:11 +02:00
Andy Wilkinson 0f6adbcb6f Next development version (v4.0.7-SNAPSHOT) 2026-04-23 13:54:24 +01:00
Andy Wilkinson 9e4048a03f Merge branch '3.5.x' into 4.0.x 2026-04-23 13:54:24 +01:00
Andy Wilkinson 20bb11c398 Next development version (v3.5.15-SNAPSHOT) 2026-04-23 13:54:21 +01:00
Andy Wilkinson 98daa8ea30 Merge branch '3.5.x' into 4.0.x 2026-04-23 11:33:21 +01:00
Andy Wilkinson 9dc5aa2863 Polish 
See gh-50170
 2026-04-23 11:33:08 +01:00
Andy Wilkinson 874f6294b9 Fix default security with actuator but without health 
Closes gh-50188
 2026-04-23 08:57:18 +01:00
Andy Wilkinson e41b3bf731 Enable hostname verification for SSL connections to Elasticsearch 
Closes gh-50187
 2026-04-23 08:56:21 +01:00
Andy Wilkinson ef8527bb0e Merge branch '3.5.x' into 4.0.x 
Closes gh-50185
 2026-04-23 08:55:02 +01:00
Andy Wilkinson f533a4549c Do not follow symlinks when writing PID file 
Closes gh-50173
 2026-04-23 08:53:34 +01:00
Andy Wilkinson 4a7bd332b6 Merge branch '3.5.x' into 4.0.x 
Closes gh-50183
 2026-04-23 08:52:16 +01:00
Andy Wilkinson f3b8eb0f2c Use SecureRandom in RandomValuePropertySource 
Closes gh-50172
 2026-04-23 08:51:14 +01:00
Andy Wilkinson 3a9d836621 Merge branch '3.5.x' into 4.0.x 
Closes gh-50180
 2026-04-23 08:50:07 +01:00
Andy Wilkinson e22083a568 Enable hostname verification for SSL connections to Cassandra 
Closes gh-50171
 2026-04-23 08:48:54 +01:00
Andy Wilkinson 8e013b6f90 Merge branch '3.5.x' into 4.0.x 
Closes gh-50178
 2026-04-23 08:48:16 +01:00
Andy Wilkinson 5ceb1a2289 Improve ApplicationTemp's temporary directory creation 
Closes gh-50170
 2026-04-23 08:46:54 +01:00
Andy Wilkinson fd70564879 Merge branch '3.5.x' into 4.0.x 
Closes gh-50176
 2026-04-23 08:45:56 +01:00
Andy Wilkinson 4b0862cc00 Use constant-time comparison for remote DevTools secret 
Closes gh-50169
 2026-04-23 08:44:55 +01:00
Andy Wilkinson f8bb8162d1 Merge branch '3.5.x' into 4.0.x 
Closes gh-50174
 2026-04-23 08:43:58 +01:00
Andy Wilkinson e4febe2015 Apply verify-hostname consistently 
Closes gh-50168
 2026-04-23 08:42:51 +01:00
Phillip Webb 43617bd1e1 Merge branch '3.5.x' into 4.0.x 2026-04-22 18:43:55 -07:00
Phillip Webb 2c2ffe51c4 Fix Windows test failure 
See gh-50141
 2026-04-22 18:43:33 -07:00
Phillip Webb c38383b8d8 Merge branch '3.5.x' into 4.0.x 
Closes gh-50164
 2026-04-22 18:05:25 -07:00
Phillip Webb 0046a442f9 Protect against corrupt buildpack archives 
Update zip and tar handling in buildpack code to ensure that archive
entries cannot be written outside of the expected destination.

Although we consider buildpacks to be trusted, this update will help
protect against corrupt archives.

Closes gh-50141
 2026-04-22 17:39:41 -07:00
Andy Wilkinson ad25c28b6d Merge branch '3.5.x' into 4.0.x 
Closes gh-50162
 2026-04-22 20:51:26 +01:00