spring-security
spring-security copied to clipboard
Bump org.springframework:spring-framework-bom from 6.2.14 to 6.2.15
Bumps org.springframework:spring-framework-bom from 6.2.14 to 6.2.15.
Release notes
Sourced from org.springframework:spring-framework-bom's releases.
v6.2.15
:star: New Features
- Avoid package cycle caused by use of UriComponentsBuilder in ServletServerHttpRequest #35954
- DefaultHandshakeHandler should not log client faults on error level #35948
- Use concurrent set behind reactive
TransactionSynchronizationManager#registerSynchronization#35922- Expose Collection on FragmentsRendering to facilitate Unit Tests #35912
- Different ReactorNettyWebSocketSession call getId() may return the same value #35911
- Enhance handleTypeMismatch error message in ResponseEntityExceptionHandler #35878
:lady_beetle: Bug Fixes
- NullPointerException thrown from JdkClientHttpRequestFactory for null request header value #35998
- State inconsistency in LazyConnectionDataSourceProxy when connection settings fail #35981
- SubscriberInputStream#resume misuses parked thread reference #35979
- PathMatchingResourcePatternResolver fails with URI in JAR manifest Class-Path entries #35967
- Strong locking in
ConcurrentReferenceHashMap#computeIfAbsentmay cause context initialisation deadlock #35945- BridgeMethodResolver change in 6.2.13 breaks Spring Data entity introspection #35941
- DefaultMessageListenerContainer does not clear Session and MessageConsumer for paused invokers #35935
- Tighten cacheable decision behind
@Lazyinjection point #35918- Use provided ReactiveAdapterRegistry in BindingContext constructor #35914
- Accidental fallback match for Collection-type beans due to
@Bean-level qualifier annotation #35909- SortedResourcesFactoryBean does not accept non-existent resources anymore #35896
:notebook_with_decorative_cover: Documentation
- Document that annotations are ignored if attributes reference types not present in the classpath #35973
- Fix broken Javadoc links to methods #35904
- Refer to "Spring Tools" instead of "Spring Tools for Eclipse" in reference manual #35902
- Clarify JMS
sessionTransactedflag for local versus global transaction #35898- Reference docs should not use obsolete "junit5" links #35893
- Testing chapter references nonexistent Dependency Management documentation #35891
:hammer: Dependency Upgrades
Commits
cf74ce0Release v6.2.1523625eeDo not send null HTTP header value in JdkClientHttpRequestc89c4acUpgrade to Reactor 2024.0.132155e9fUpgrade to Micrometer 1.14.1424df35cDo not keep target connection after failed settings3b1fa36Polishing contribution221adf1Fix SubscriberInputStream.resume()ad849fbAccept assignable match for covariant return type8041a09Polishing97b9517Handle absolute file URLs in getClassPathManifestEntriesFromJar- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency -
@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)