spring/spring-boot
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-boot.git synced 2026-09-27 04:19:03 +00:00
Code Issues Projects Releases Wiki Activity
51,304 Commits 28 Branches 395 Tags
v3.3.13
Commit Graph
26707 Commits
Author SHA1 Message Date
Phillip Webb 206785f838 Only cache JarFile URL keys that are cheap to lookup 
Update `JarFileUrlKey` so that only URLs that have a cheap `equals()`
method call are cached. This should prevent expensive DNS lookups from
being performed.

Fixes gh-46015
 2025-06-18 13:46:31 -07:00
David LJ f4e04227f7 Fix Docker security options broken link in OCI images packaging docs 
See gh-46016

Signed-off-by: David LJ <mail@davidlj95.com>
 2025-06-18 17:36:55 +01:00
Andy Wilkinson bab9071539 Revert "Work around Spring Framework cache pollution bug" 
This reverts commit 4af0ee20d1.

Closes gh-45984
 2025-06-18 16:10:05 +01:00
Stéphane Nicoll f6c88840e0 Upgrade to Spring Integration 6.3.11 
Closes gh-45756
 2025-06-18 14:16:04 +02:00
Moritz Halbritter 6ef1830bc8 Document that /error is secured by default 
Closes gh-45663
 2025-06-18 13:33:38 +02:00
Andy Wilkinson d9e4b66eee Add properties for new max part count and max part header size 
To address CVE-2025-48976 and CVE-2025-48988, Tomcat 10.1.42 has
introduced two new configuration settings – maxPartCount and
maxPartHeaderSize. The default values for these configuration
settings have proven hard to get right and some applications have
had to increase the default limits. To ease their configuration in
Spring Boot, this commit introduces configuration properties for
the new settings:

-  server.tomcat.max-part-count (maxPartCount)
-  server.tomcat.max-part-header-size (maxPartHeaderSize)

The defaults are aligned with those of Tomcat 10.1.42
(10 and 512 bytes respectively).

Closes gh-45869
 2025-06-18 09:46:09 +01:00
Moritz Halbritter 0f77dcb402 Use system properties to detect OpenJ9 JVMs when doing heapdumps 
Closes gh-45973
 2025-06-18 10:16:25 +02:00
Andy Wilkinson c13dc92286 Test against Gradle 7.6.5 
Closes gh-45998
 2025-06-17 20:05:03 +01:00
Stéphane Nicoll c96d674ffb Upgrade to Spring WS 4.0.15 
Closes gh-45762
 2025-06-17 20:31:46 +02:00
Stéphane Nicoll 0d9fc6d069 Upgrade to Spring Kafka 3.2.10 
Closes gh-45757
 2025-06-17 20:31:46 +02:00
Stéphane Nicoll cf5a3b9bab Upgrade to Spring Authorization Server 1.3.7 
Closes gh-45753
 2025-06-17 20:31:46 +02:00
Andy Wilkinson a6ac444aba Use fixed timestamp so included snippets match accompanying text 
Closes gh-45995
 2025-06-17 19:06:41 +01:00
Stéphane Nicoll 1f031f5fa6 Polish "Avoid NPE in SimpleDataSourceProperties when driver is null" 
See gh-45976
 2025-06-17 14:53:57 +02:00
chanbinme 1cf0d4e7fe Avoid NPE in SimpleDataSourceProperties when driver is null 
See gh-45976

Signed-off-by: chanbinme <gksmfcksqls@gmail.com>
 2025-06-17 14:38:50 +02:00
Stéphane Nicoll 691a42ff1b Upgrade to Spring Security 6.3.10 
Closes gh-45761
 2025-06-17 11:09:15 +02:00
Stéphane Nicoll 988fbb90f8 Upgrade to Spring RESTDocs 3.0.4 
Closes gh-45760
 2025-06-17 11:09:15 +02:00
Stéphane Nicoll faef2ce6c0 Upgrade to Spring Pulsar 1.1.13 
Closes gh-45759
 2025-06-17 11:09:15 +02:00
Stéphane Nicoll acd7aee309 Upgrade to Spring AMQP 3.1.12 
Closes gh-45752
 2025-06-17 11:09:14 +02:00
Stéphane Nicoll 91ff768035 Upgrade to Spring Data Bom 2024.0.13 
Closes gh-45754
 2025-06-13 16:47:49 +02:00
Stéphane Nicoll 5bbc0755ef Upgrade to Spring LDAP 3.2.13 
Closes gh-45758
 2025-06-12 21:31:07 +02:00
Stéphane Nicoll cc21ec3b27 Upgrade to Postgresql 42.7.7 
Closes gh-45941
 2025-06-12 21:31:07 +02:00
Stéphane Nicoll ea7c750909 Upgrade to jOOQ 3.19.24 
Closes gh-45940
 2025-06-12 21:31:02 +02:00
wonyongg a300d2c9f0 Remove constants from CloudFoundryVcapEnvironmentPostProcessor 
This commit removes the VCAP_APPLICATION and VCAP_SERVICES constants
from the CloudFoundryVcapEnvironmentPostProcessor class, replacing them
with string literals.

See gh-45855

Signed-off-by: wonyongg <111210881+wonyongg@users.noreply.github.com>
 2025-06-12 11:46:48 +02:00
Yanming Zhou 0ebe00a1d6 Inner class 'SpringBootWebFluxSecurityConfiguration' should be static 
See gh-45882

Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>
 2025-06-12 11:32:06 +02:00
Andy Wilkinson ca21600fae Use Framework's StreamUtils instead of Commons Compress's IOUtils 
Closes gh-45911
 2025-06-12 10:00:30 +01:00
Stéphane Nicoll d9d8dfbac6 Upgrade to Reactor Bom 2023.0.19 
Closes gh-45751
 2025-06-10 17:12:49 +02:00
Stéphane Nicoll aa2a547602 Upgrade to Micrometer Tracing 1.3.13 
Closes gh-45750
 2025-06-10 07:04:35 +02:00
Stéphane Nicoll c2528b1bfd Upgrade to Micrometer 1.13.15 
Closes gh-45749
 2025-06-10 07:04:35 +02:00
Phillip Webb f12d96886a Test SpringIterableConfigurationPropertySource support lower case names 
Add a test to ensure that `SpringIterableConfigurationPropertySource`
can support lower case names.

See gh-45741
 2025-06-09 17:44:05 +01:00
Andy Wilkinson 8fa7843d71 Remove dependency management for Micrometer Context Propagation 
It's now managed as part of Micrometer's bom so we no longer need to
manage it separately (and our separate management was being overriden
by Micrometer's bom anyway).

Closes gh-45852
 2025-06-09 16:25:20 +01:00
Stéphane Nicoll 6106bdd969 Upgrade to Postgresql 42.7.6 
Closes gh-45811
 2025-06-06 13:11:04 +02:00
Stéphane Nicoll ccbac59416 Upgrade to Netty 4.1.122.Final 
Closes gh-45810
 2025-06-06 13:11:04 +02:00
Stéphane Nicoll 8b13830106 Upgrade to Jetty 12.0.22 
Closes gh-45809
 2025-06-06 13:11:04 +02:00
Stéphane Nicoll b163e6dbea Upgrade to Jetty Reactive HTTPClient 4.0.10 
Closes gh-45808
 2025-06-06 13:11:04 +02:00
Stéphane Nicoll f7f1c1315b Upgrade to Jaybird 5.0.8.java11 
Closes gh-45807
 2025-06-06 13:11:03 +02:00
Stéphane Nicoll a32be05751 Upgrade to Infinispan 15.0.15.Final 
Closes gh-45806
 2025-06-06 13:11:03 +02:00
Stéphane Nicoll b8417c8221 Upgrade to Groovy 4.0.27 
Closes gh-45805
 2025-06-06 13:11:03 +02:00
Andy Wilkinson de54d4df89 Improve linking to Testcontainers' javadoc 
Closes gh-45802
 2025-06-06 11:10:01 +01:00
Phillip Webb 77e51fd680 Polish 2025-06-04 15:36:35 -07:00
Phillip Webb 853bb46e93 Polish 2025-06-04 15:14:05 -07:00
Phillip Webb 23496fd36b Polish 2025-06-04 15:12:05 -07:00
Andy Wilkinson 34905267be Start building against Spring WS 4.0.15 snapshots 
See gh-45762
 2025-06-04 10:57:13 +01:00
Andy Wilkinson 451c76e0dc Start building against Spring Security 6.3.10 snapshots 
See gh-45761
 2025-06-04 10:57:09 +01:00
Andy Wilkinson 479b7337cb Start building against Spring RESTDocs 3.0.4 snapshots 
See gh-45760
 2025-06-04 10:57:05 +01:00
Andy Wilkinson cb0b7efc89 Start building against Spring Pulsar 1.1.13 snapshots 
See gh-45759
 2025-06-04 10:57:00 +01:00
Andy Wilkinson 37a6c6dcfb Start building against Spring LDAP 3.2.13 snapshots 
See gh-45758
 2025-06-04 10:56:56 +01:00
Andy Wilkinson a497d953ce Start building against Spring Kafka 3.2.10 snapshots 
See gh-45757
 2025-06-04 10:56:52 +01:00
Andy Wilkinson b045c05ff5 Start building against Spring Integration 6.3.11 snapshots 
See gh-45756
 2025-06-04 10:56:48 +01:00
Andy Wilkinson 2095e83c27 Start building against Spring Data Bom 2024.0.13 snapshots 
See gh-45754
 2025-06-04 10:56:39 +01:00
Andy Wilkinson 7bdd3df7e1 Start building against Spring Authorization Server 1.3.7 snapshots 
See gh-45753
 2025-06-04 10:56:35 +01:00