Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
[Tech] Bump the non-major-dependencies group in /backend with 33 upda…
…tes (#3988) Bumps the non-major-dependencies group in /backend with 33 updates: | Package | From | To | | --- | --- | --- | | [org.springframework.boot:spring-boot-starter-web](https://github.com/spring-projects/spring-boot) | `3.3.5` | `3.4.1` | | [org.springframework.security:spring-security-oauth2-resource-server](https://github.com/spring-projects/spring-security) | `6.4.1` | `6.4.2` | | [org.springframework.security:spring-security-oauth2-jose](https://github.com/spring-projects/spring-security) | `6.4.1` | `6.4.2` | | [org.springframework.boot:spring-boot-starter-actuator](https://github.com/spring-projects/spring-boot) | `3.3.5` | `3.4.1` | | [org.springframework.boot:spring-boot-starter-json](https://github.com/spring-projects/spring-boot) | `3.3.5` | `3.4.1` | | [org.springframework.boot:spring-boot-starter-security](https://github.com/spring-projects/spring-boot) | `3.3.5` | `3.4.1` | | [org.springframework.boot:spring-boot-starter-data-jpa](https://github.com/spring-projects/spring-boot) | `3.3.5` | `3.4.1` | | [org.springframework.boot:spring-boot-configuration-processor](https://github.com/spring-projects/spring-boot) | `3.3.5` | `3.4.1` | | [org.springframework.boot:spring-boot-starter-cache](https://github.com/spring-projects/spring-boot) | `3.3.5` | `3.4.1` | | [org.springframework.boot:spring-boot-starter-log4j2](https://github.com/spring-projects/spring-boot) | `3.3.5` | `3.4.1` | | [org.springframework.boot:spring-boot-devtools](https://github.com/spring-projects/spring-boot) | `3.3.5` | `3.4.1` | | [io.ktor:ktor-client-core-jvm](https://github.com/ktorio/ktor) | `3.0.1` | `3.0.3` | | [io.ktor:ktor-client-java-jvm](https://github.com/ktorio/ktor) | `3.0.1` | `3.0.3` | | [io.ktor:ktor-client-content-negotiation-jvm](https://github.com/ktorio/ktor) | `3.0.1` | `3.0.3` | | [io.ktor:ktor-serialization-kotlinx-json-jvm](https://github.com/ktorio/ktor) | `3.0.1` | `3.0.3` | | [org.hibernate.validator:hibernate-validator](https://github.com/hibernate/hibernate-validator) | `8.0.1.Final` | `8.0.2.Final` | | [org.jetbrains.kotlin:kotlin-reflect](https://github.com/JetBrains/kotlin) | `2.0.21` | `2.1.0` | | [org.jetbrains.kotlin:kotlin-stdlib-jdk8](https://github.com/JetBrains/kotlin) | `2.0.21` | `2.1.0` | | [org.jetbrains.kotlinx:kotlinx-coroutines-core](https://github.com/Kotlin/kotlinx.coroutines) | `1.9.0` | `1.10.1` | | [org.hibernate:hibernate-spatial](https://github.com/hibernate/hibernate-orm) | `6.6.3.Final` | `6.6.4.Final` | | [io.sentry:sentry](https://github.com/getsentry/sentry-java) | `7.18.1` | `7.19.1` | | [io.sentry:sentry-log4j2](https://github.com/getsentry/sentry-java) | `7.18.1` | `7.19.1` | | [org.springframework.cloud:spring-cloud-gateway-mvc](https://github.com/spring-cloud/spring-cloud-gateway) | `4.1.6` | `4.2.0` | | [io.ktor:ktor-client-mock-jvm](https://github.com/ktorio/ktor) | `3.0.1` | `3.0.3` | | [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.26.3` | `3.27.1` | | [org.springframework.boot:spring-boot-starter-test](https://github.com/spring-projects/spring-boot) | `3.3.5` | `3.4.1` | | org.springframework.boot | `3.3.5` | `3.4.1` | | org.jetbrains.kotlin.plugin.spring | `2.0.21` | `2.1.0` | | jvm | `2.0.21` | `2.1.0` | | plugin.noarg | `2.0.21` | `2.1.0` | | plugin.jpa | `2.0.21` | `2.1.0` | | plugin.serialization | `2.0.21` | `2.1.0` | | io.spring.dependency-management | `1.1.6` | `1.1.7` | Updates `org.springframework.boot:spring-boot-starter-web` from 3.3.5 to 3.4.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-boot/releases">org.springframework.boot:spring-boot-starter-web's releases</a>.</em></p> <blockquote> <h2>v3.4.1</h2> <h2>:lady_beetle: Bug Fixes</h2> <ul> <li>KafkaProperties fail to build SSL properties when the bundle name is an empty string <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43563">#43563</a></li> <li>Diagnostics are poor when property resolution throws a ConversionFailedException <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43559">#43559</a></li> <li>SpringApplicationShutdownHandlers do not run in deterministic order <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43536">#43536</a></li> <li>Unable to find a <code>@SpringBootConfiguration</code> results in misleading error message <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43507">#43507</a></li> <li>With multiple ResourceHandlerRegistrationCustomizer beans in the context, only one of them is used <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43497">#43497</a></li> <li>Unable to use Docker Compose support when mixing dedicated and shared services <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43472">#43472</a></li> <li>Kafka dependency management does not include the kafka-server module <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43454">#43454</a></li> <li>Docker API version is incorrectly reported when '/_ping` calls fail and version should be fixed <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43452">#43452</a></li> <li>Methods to build producer / consumer properties from KafkaProperties are inconvienenent to use without an SSL bundle <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43448">#43448</a></li> <li>Failures in -Djarmode=tools do not consistently return a non-zero exit <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43436">#43436</a></li> <li>HttpComponentsClientHttpRequestFactoryBuilder replaces the existing defaultRequestConfigCustomizer rather than adding to it <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43429">#43429</a></li> <li>spring-boot-maven-plugin sets imagePlatform even if it's empty <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43424">#43424</a></li> <li>OnBeanCondition fails to match on annotations when using Scoped Proxies <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43423">#43423</a></li> <li>Failure analysis for InvalidConfigurationPropertyValueException doesn't correctly handle fuzzy matching of environment variables <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43382">#43382</a></li> <li>H2ConsoleAutoConfiguration causes early initialization of DataSource beans <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43359">#43359</a></li> <li>Accept progress on numbers >2GB <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43356">#43356</a></li> <li>Servlet-based UserDetailsServiceAutoConfiguration is active in a reactive app <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43334">#43334</a></li> <li>StructuredLoggingJsonMembersCustomizer implementations declared in spring.factories with a generic type more specific than Object are not called <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43312">#43312</a></li> <li>Overriding log level with an environment variable does not work when using an environment prefix <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43307">#43307</a></li> <li>Management endpoint access and enabled properties are ignored unless the endpoint ID is an exact match <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43302">#43302</a></li> <li>UnsupportedOperationException when starting a Maven shaded application on Java 21 with virtual threads enabled <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43291">#43291</a></li> <li>JmsListener failing with Narayana (pooled ConnectionFactory) since 3.4.0 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43277">#43277</a></li> <li>SslBundle can no longer open store file locations without using a 'file:' prefix <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43274">#43274</a></li> <li>TestRestTemplate does not allow redirects to be customized <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43258">#43258</a></li> <li>Testcontainers start() methods may be started multiple times <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43253">#43253</a></li> </ul> <h2>:notebook_with_decorative_cover: Documentation</h2> <ul> <li>Fix typo in documentation <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43558">#43558</a></li> <li>Document that server.ssl.cipher and server.ssl.enabled-protocols are not fallbacks used with SSL bundles <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43552">#43552</a></li> <li>Use <code><annotationProcessorPaths></code> in Maven examples for configuring an annotation processor <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43544">#43544</a></li> <li>Fix typo <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43519">#43519</a></li> <li>Links to logback javadoc are incorrect <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43456">#43456</a></li> <li>Fix JUnit javadoc links <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43428">#43428</a></li> <li>Reference documentation incorrectly uses 'disabled' rather than 'none' for access restrictions <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43351">#43351</a></li> <li>Restore System property in Logging section of the reference documentation <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43342">#43342</a></li> <li>Fix link to proxyBeanMethods in <code>@AutoConfiguration</code> javadoc <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43325">#43325</a></li> <li>Fix links to Servlet and JPA javadoc <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43324">#43324</a></li> <li>Link to <code>@EnableMethodSecurity</code> instead of the deprecated <code>@EnableGlobalMethodSecurity</code> <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43315">#43315</a></li> <li>Document that StructuredLoggingJsonMembersCustomizer implementations may optionally take constructor parameters <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43314">#43314</a></li> <li>Update javadoc of StructuredLoggingJsonMembersCustomizer to note that implementations can registered through spring.factories <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43313">#43313</a></li> <li>Fix Javadoc link for Hikari <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43311">#43311</a></li> <li>Document how to use structured logging with custom log configuration <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43301">#43301</a></li> <li>Update Javadoc since for OtlpMetricsProperties and OtlpTracingProperties <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43249">#43249</a></li> </ul> <h2>:hammer: Dependency Upgrades</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-boot/commit/183285258d7b5092224eab1600a2cfa8332682d9"><code>1832852</code></a> Release v3.4.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/c9e8174f55f8c3c1fd1b22119bfd8281b61a4e05"><code>c9e8174</code></a> Merge branch '3.3.x'</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/316fe52df4cef90b6fffc850ecf8bd2c9e887846"><code>316fe52</code></a> Next development version (v3.3.8-SNAPSHOT)</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/4300ee978d095a1100a2665476450a3e7266e88c"><code>4300ee9</code></a> Merge branch '3.3.x'</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/da593800be7828391944123dc45a6a705fc42701"><code>da59380</code></a> Upgrade to Spring Batch 5.2.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/a085a0111d1d12d09851bf4c951d03ffe52c6184"><code>a085a01</code></a> Upgrade to Spring Batch 5.1.3</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/fcc569e5c4e381417d707873d6fc07afbd77a48a"><code>fcc569e</code></a> Upgrade to Hibernate 6.6.4.Final</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/1b8fcb60abf954145ea61904ede25bbdd8092afe"><code>1b8fcb6</code></a> Merge pull request <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43560">#43560</a> from arefbehboudi</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/dbc1fc26e6fac03eab894599173a726fe5e098ac"><code>dbc1fc2</code></a> Polish</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/ef431609abeeb5bf6b2e4c9f66f678789beefea2"><code>ef43160</code></a> Merge branch '3.3.x'</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-boot/compare/v3.3.5...v3.4.1">compare view</a></li> </ul> </details> <br /> Updates `org.springframework.security:spring-security-oauth2-resource-server` from 6.4.1 to 6.4.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-security/releases">org.springframework.security:spring-security-oauth2-resource-server's releases</a>.</em></p> <blockquote> <h2>6.4.2</h2> <h2>:star: New Features</h2> <ul> <li>Add 6.4 Sample Serializations for Serializable classes <a href="https://redirect.github.com/spring-projects/spring-security/issues/16274">#16274</a></li> <li>Add <code>@inheritDoc</code> to sessionIdChanged method <a href="https://redirect.github.com/spring-projects/spring-security/pull/16216">#16216</a></li> <li>Fix typo in oauth2 resource server documentation <a href="https://redirect.github.com/spring-projects/spring-security/pull/16053">#16053</a></li> <li>Fixed confusing phrasing in the docs for a better clarity. <a href="https://redirect.github.com/spring-projects/spring-security/pull/16169">#16169</a></li> <li>Improve AuthorizationManager configuration error messages <a href="https://redirect.github.com/spring-projects/spring-security/pull/16194">#16194</a></li> <li>Polish <a href="https://redirect.github.com/spring-projects/spring-security/pull/16148">#16148</a></li> <li>Use Documentation Tags for Maven and Gradle in Getting Started <a href="https://redirect.github.com/spring-projects/spring-security/pull/16234">#16234</a></li> <li>Add WebDriver WebAuthn test <a href="https://redirect.github.com/spring-projects/spring-security/pull/15969">#15969</a></li> </ul> <h2>:beetle: Bug Fixes</h2> <ul> <li>Add Deprecated ObjectPostProcessor constructor <a href="https://redirect.github.com/spring-projects/spring-security/pull/16212">#16212</a></li> <li>Add RuntimeHints for webauthn Javascript resource <a href="https://redirect.github.com/spring-projects/spring-security/pull/16159">#16159</a></li> <li>Always return current ClientRegistration in <code>loadAuthorizedClient</code> <a href="https://redirect.github.com/spring-projects/spring-security/issues/16139">#16139</a></li> <li>Avoid requesting an unnecessary attestation statement when creating a webauthn credential <a href="https://redirect.github.com/spring-projects/spring-security/pull/16252">#16252</a></li> <li>CI is not using the correct secret for Develocity <a href="https://redirect.github.com/spring-projects/spring-security/issues/16263">#16263</a></li> <li>Dark mode rendering issue with images on CSRF and Method Security pages <a href="https://redirect.github.com/spring-projects/spring-security/issues/16176">#16176</a></li> <li>DefaultSaml2AuthenticatedPrincipal should define a serialVersionUID <a href="https://redirect.github.com/spring-projects/spring-security/issues/16163">#16163</a></li> <li>Delay initialization of AuthenticationProvider in Global Authentication <a href="https://redirect.github.com/spring-projects/spring-security/issues/16147">#16147</a></li> <li>Fix Documentation Typos <a href="https://redirect.github.com/spring-projects/spring-security/pull/16054">#16054</a></li> <li>Correct OAuth2ClientHttpRequestInterceptor Usage Documentation <a href="https://redirect.github.com/spring-projects/spring-security/pull/16172">#16172</a></li> <li>Fix Typo in 'What's New' Documentation <a href="https://redirect.github.com/spring-projects/spring-security/pull/16183">#16183</a></li> <li>Fix WebAuthnWebdriverTests <a href="https://redirect.github.com/spring-projects/spring-security/pull/16279">#16279</a></li> <li>Correct OpenSAML 5.x Documentation <a href="https://redirect.github.com/spring-projects/spring-security/pull/16195">#16195</a></li> <li>Issue when using <code>@AuthenticationPrincipal</code> on interfaces <a href="https://redirect.github.com/spring-projects/spring-security/issues/16177">#16177</a></li> <li>Mutate breaks functionality of StrictFirewallHttpHeaders with recently modified HttpHeaders#writabeHttpHeaders <a href="https://redirect.github.com/spring-projects/spring-security/issues/16261">#16261</a></li> <li>Remove duplicate cache in AuthenticationPrincipalArgumentResolverand CurrentSecurityContextArgumentResolver <a href="https://redirect.github.com/spring-projects/spring-security/pull/16202">#16202</a></li> <li>Resolve ObjectPostProcessor collisions between RSocket and WebFlux security configuration <a href="https://redirect.github.com/spring-projects/spring-security/issues/16161">#16161</a></li> <li>Restore <code>@AuthenticationPrincipal</code>/<code>@CurrentSecurityContext</code> Interface Support <a href="https://redirect.github.com/spring-projects/spring-security/pull/16245">#16245</a></li> <li>Restore Servlet 5 Compatiblity for CookieCsrfTokenRepository <a href="https://redirect.github.com/spring-projects/spring-security/issues/16220">#16220</a></li> <li>Spelling error in opensaml.adoc <a href="https://redirect.github.com/spring-projects/spring-security/pull/16146">#16146</a></li> <li>Update document regarding PublicKeyCredentialCreationOptions.attestation value <a href="https://redirect.github.com/spring-projects/spring-security/pull/16264">#16264</a></li> <li>Verification Options Should Return Saved Transports for Credentials <a href="https://redirect.github.com/spring-projects/spring-security/issues/16084">#16084</a></li> </ul> <h2>:hammer: Dependency Upgrades</h2> <ul> <li>Bump com.fasterxml.jackson:jackson-bom from 2.18.1 to 2.18.2 <a href="https://redirect.github.com/spring-projects/spring-security/pull/16184">#16184</a></li> <li>Bump com.webauthn4j:webauthn4j-core from 0.28.2.RELEASE to 0.28.3.RELEASE <a href="https://redirect.github.com/spring-projects/spring-security/pull/16203">#16203</a></li> <li>Bump io.micrometer:micrometer-observation from 1.14.1 to 1.14.2 <a href="https://redirect.github.com/spring-projects/spring-security/pull/16255">#16255</a></li> <li>Bump io.projectreactor:reactor-bom from 2023.0.12 to 2023.0.13 <a href="https://redirect.github.com/spring-projects/spring-security/pull/16256">#16256</a></li> <li>Bump org.gradle.wrapper-upgrade from 0.11.4 to 0.12 <a href="https://redirect.github.com/spring-projects/spring-security/pull/16209">#16209</a></li> <li>Bump org.gretty:gretty from 4.1.5 to 4.1.6 <a href="https://redirect.github.com/spring-projects/spring-security/pull/16247">#16247</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.2.Final to 6.6.3.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/16145">#16145</a></li> <li>Bump org.htmlunit:htmlunit from 4.6.0 to 4.7.0 <a href="https://redirect.github.com/spring-projects/spring-security/pull/16205">#16205</a></li> <li>Bump org.jfrog.buildinfo:build-info-extractor-gradle from 4.33.22 to 4.33.23 <a href="https://redirect.github.com/spring-projects/spring-security/pull/16180">#16180</a></li> <li>Bump org.seleniumhq.selenium:htmlunit3-driver from 4.26.0 to 4.27.0 <a href="https://redirect.github.com/spring-projects/spring-security/pull/16204">#16204</a></li> <li>Bump org.seleniumhq.selenium:selenium-java from 4.26.0 to 4.27.0 <a href="https://redirect.github.com/spring-projects/spring-security/pull/16167">#16167</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-security/commit/5fe6d9259fbee532d402a801527b7aed4d937e98"><code>5fe6d92</code></a> Release 6.4.2</li> <li><a href="https://github.com/spring-projects/spring-security/commit/57a06ead66eb81984a885cfa1597184f0c3778da"><code>57a06ea</code></a> Bump org.springframework.data:spring-data-bom from 2024.1.0 to 2024.1.1</li> <li><a href="https://github.com/spring-projects/spring-security/commit/e4dde52fa4978811d7424d0743813ef8c5fcdde4"><code>e4dde52</code></a> Merge branch '6.3.x' into 6.4.x</li> <li><a href="https://github.com/spring-projects/spring-security/commit/d9e9e3cdeb2569b825cae2dddc1b8fe7e8bd4835"><code>d9e9e3c</code></a> Bump org.springframework.data:spring-data-bom from 2024.0.6 to 2024.0.7</li> <li><a href="https://github.com/spring-projects/spring-security/commit/5ee1586a5ae1858c8657bed241358bef4b0bf330"><code>5ee1586</code></a> Remove Unexposed Inner Classes from Serialization Test</li> <li><a href="https://github.com/spring-projects/spring-security/commit/018e1ae1a4bb78563f7ae4d62bcf651d5e179d5a"><code>018e1ae</code></a> Added Serialization Values</li> <li><a href="https://github.com/spring-projects/spring-security/commit/b9911fd522c197722ebf9d98d1457ab2fe207972"><code>b9911fd</code></a> Add serialVersionUID to Authentication classes</li> <li><a href="https://github.com/spring-projects/spring-security/commit/e3cd4339b2c5cb43f5cde41b7ecbd659a1d8bf59"><code>e3cd433</code></a> Add Serial Version</li> <li><a href="https://github.com/spring-projects/spring-security/commit/fb954063bfc6c299fb70a560d22eb7880b87f9dc"><code>fb95406</code></a> Fix WebAuthnWebdriverTests</li> <li><a href="https://github.com/spring-projects/spring-security/commit/2a76a09552653e0e6935a061d8063e5fba047f2c"><code>2a76a09</code></a> Disable Flaky WebAuthnWebDriverTests</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-security/compare/6.4.1...6.4.2">compare view</a></li> </ul> </details> <br /> Updates `org.springframework.security:spring-security-oauth2-jose` from 6.4.1 to 6.4.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-security/releases">org.springframework.security:spring-security-oauth2-jose's releases</a>.</em></p> <blockquote> <h2>6.4.2</h2> <h2>:star: New Features</h2> <ul> <li>Add 6.4 Sample Serializations for Serializable classes <a href="https://redirect.github.com/spring-projects/spring-security/issues/16274">#16274</a></li> <li>Add <code>@inheritDoc</code> to sessionIdChanged method <a href="https://redirect.github.com/spring-projects/spring-security/pull/16216">#16216</a></li> <li>Fix typo in oauth2 resource server documentation <a href="https://redirect.github.com/spring-projects/spring-security/pull/16053">#16053</a></li> <li>Fixed confusing phrasing in the docs for a better clarity. <a href="https://redirect.github.com/spring-projects/spring-security/pull/16169">#16169</a></li> <li>Improve AuthorizationManager configuration error messages <a href="https://redirect.github.com/spring-projects/spring-security/pull/16194">#16194</a></li> <li>Polish <a href="https://redirect.github.com/spring-projects/spring-security/pull/16148">#16148</a></li> <li>Use Documentation Tags for Maven and Gradle in Getting Started <a href="https://redirect.github.com/spring-projects/spring-security/pull/16234">#16234</a></li> <li>Add WebDriver WebAuthn test <a href="https://redirect.github.com/spring-projects/spring-security/pull/15969">#15969</a></li> </ul> <h2>:beetle: Bug Fixes</h2> <ul> <li>Add Deprecated ObjectPostProcessor constructor <a href="https://redirect.github.com/spring-projects/spring-security/pull/16212">#16212</a></li> <li>Add RuntimeHints for webauthn Javascript resource <a href="https://redirect.github.com/spring-projects/spring-security/pull/16159">#16159</a></li> <li>Always return current ClientRegistration in <code>loadAuthorizedClient</code> <a href="https://redirect.github.com/spring-projects/spring-security/issues/16139">#16139</a></li> <li>Avoid requesting an unnecessary attestation statement when creating a webauthn credential <a href="https://redirect.github.com/spring-projects/spring-security/pull/16252">#16252</a></li> <li>CI is not using the correct secret for Develocity <a href="https://redirect.github.com/spring-projects/spring-security/issues/16263">#16263</a></li> <li>Dark mode rendering issue with images on CSRF and Method Security pages <a href="https://redirect.github.com/spring-projects/spring-security/issues/16176">#16176</a></li> <li>DefaultSaml2AuthenticatedPrincipal should define a serialVersionUID <a href="https://redirect.github.com/spring-projects/spring-security/issues/16163">#16163</a></li> <li>Delay initialization of AuthenticationProvider in Global Authentication <a href="https://redirect.github.com/spring-projects/spring-security/issues/16147">#16147</a></li> <li>Fix Documentation Typos <a href="https://redirect.github.com/spring-projects/spring-security/pull/16054">#16054</a></li> <li>Correct OAuth2ClientHttpRequestInterceptor Usage Documentation <a href="https://redirect.github.com/spring-projects/spring-security/pull/16172">#16172</a></li> <li>Fix Typo in 'What's New' Documentation <a href="https://redirect.github.com/spring-projects/spring-security/pull/16183">#16183</a></li> <li>Fix WebAuthnWebdriverTests <a href="https://redirect.github.com/spring-projects/spring-security/pull/16279">#16279</a></li> <li>Correct OpenSAML 5.x Documentation <a href="https://redirect.github.com/spring-projects/spring-security/pull/16195">#16195</a></li> <li>Issue when using <code>@AuthenticationPrincipal</code> on interfaces <a href="https://redirect.github.com/spring-projects/spring-security/issues/16177">#16177</a></li> <li>Mutate breaks functionality of StrictFirewallHttpHeaders with recently modified HttpHeaders#writabeHttpHeaders <a href="https://redirect.github.com/spring-projects/spring-security/issues/16261">#16261</a></li> <li>Remove duplicate cache in AuthenticationPrincipalArgumentResolverand CurrentSecurityContextArgumentResolver <a href="https://redirect.github.com/spring-projects/spring-security/pull/16202">#16202</a></li> <li>Resolve ObjectPostProcessor collisions between RSocket and WebFlux security configuration <a href="https://redirect.github.com/spring-projects/spring-security/issues/16161">#16161</a></li> <li>Restore <code>@AuthenticationPrincipal</code>/<code>@CurrentSecurityContext</code> Interface Support <a href="https://redirect.github.com/spring-projects/spring-security/pull/16245">#16245</a></li> <li>Restore Servlet 5 Compatiblity for CookieCsrfTokenRepository <a href="https://redirect.github.com/spring-projects/spring-security/issues/16220">#16220</a></li> <li>Spelling error in opensaml.adoc <a href="https://redirect.github.com/spring-projects/spring-security/pull/16146">#16146</a></li> <li>Update document regarding PublicKeyCredentialCreationOptions.attestation value <a href="https://redirect.github.com/spring-projects/spring-security/pull/16264">#16264</a></li> <li>Verification Options Should Return Saved Transports for Credentials <a href="https://redirect.github.com/spring-projects/spring-security/issues/16084">#16084</a></li> </ul> <h2>:hammer: Dependency Upgrades</h2> <ul> <li>Bump com.fasterxml.jackson:jackson-bom from 2.18.1 to 2.18.2 <a href="https://redirect.github.com/spring-projects/spring-security/pull/16184">#16184</a></li> <li>Bump com.webauthn4j:webauthn4j-core from 0.28.2.RELEASE to 0.28.3.RELEASE <a href="https://redirect.github.com/spring-projects/spring-security/pull/16203">#16203</a></li> <li>Bump io.micrometer:micrometer-observation from 1.14.1 to 1.14.2 <a href="https://redirect.github.com/spring-projects/spring-security/pull/16255">#16255</a></li> <li>Bump io.projectreactor:reactor-bom from 2023.0.12 to 2023.0.13 <a href="https://redirect.github.com/spring-projects/spring-security/pull/16256">#16256</a></li> <li>Bump org.gradle.wrapper-upgrade from 0.11.4 to 0.12 <a href="https://redirect.github.com/spring-projects/spring-security/pull/16209">#16209</a></li> <li>Bump org.gretty:gretty from 4.1.5 to 4.1.6 <a href="https://redirect.github.com/spring-projects/spring-security/pull/16247">#16247</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.2.Final to 6.6.3.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/16145">#16145</a></li> <li>Bump org.htmlunit:htmlunit from 4.6.0 to 4.7.0 <a href="https://redirect.github.com/spring-projects/spring-security/pull/16205">#16205</a></li> <li>Bump org.jfrog.buildinfo:build-info-extractor-gradle from 4.33.22 to 4.33.23 <a href="https://redirect.github.com/spring-projects/spring-security/pull/16180">#16180</a></li> <li>Bump org.seleniumhq.selenium:htmlunit3-driver from 4.26.0 to 4.27.0 <a href="https://redirect.github.com/spring-projects/spring-security/pull/16204">#16204</a></li> <li>Bump org.seleniumhq.selenium:selenium-java from 4.26.0 to 4.27.0 <a href="https://redirect.github.com/spring-projects/spring-security/pull/16167">#16167</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-security/commit/5fe6d9259fbee532d402a801527b7aed4d937e98"><code>5fe6d92</code></a> Release 6.4.2</li> <li><a href="https://github.com/spring-projects/spring-security/commit/57a06ead66eb81984a885cfa1597184f0c3778da"><code>57a06ea</code></a> Bump org.springframework.data:spring-data-bom from 2024.1.0 to 2024.1.1</li> <li><a href="https://github.com/spring-projects/spring-security/commit/e4dde52fa4978811d7424d0743813ef8c5fcdde4"><code>e4dde52</code></a> Merge branch '6.3.x' into 6.4.x</li> <li><a href="https://github.com/spring-projects/spring-security/commit/d9e9e3cdeb2569b825cae2dddc1b8fe7e8bd4835"><code>d9e9e3c</code></a> Bump org.springframework.data:spring-data-bom from 2024.0.6 to 2024.0.7</li> <li><a href="https://github.com/spring-projects/spring-security/commit/5ee1586a5ae1858c8657bed241358bef4b0bf330"><code>5ee1586</code></a> Remove Unexposed Inner Classes from Serialization Test</li> <li><a href="https://github.com/spring-projects/spring-security/commit/018e1ae1a4bb78563f7ae4d62bcf651d5e179d5a"><code>018e1ae</code></a> Added Serialization Values</li> <li><a href="https://github.com/spring-projects/spring-security/commit/b9911fd522c197722ebf9d98d1457ab2fe207972"><code>b9911fd</code></a> Add serialVersionUID to Authentication classes</li> <li><a href="https://github.com/spring-projects/spring-security/commit/e3cd4339b2c5cb43f5cde41b7ecbd659a1d8bf59"><code>e3cd433</code></a> Add Serial Version</li> <li><a href="https://github.com/spring-projects/spring-security/commit/fb954063bfc6c299fb70a560d22eb7880b87f9dc"><code>fb95406</code></a> Fix WebAuthnWebdriverTests</li> <li><a href="https://github.com/spring-projects/spring-security/commit/2a76a09552653e0e6935a061d8063e5fba047f2c"><code>2a76a09</code></a> Disable Flaky WebAuthnWebDriverTests</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-security/compare/6.4.1...6.4.2">compare view</a></li> </ul> </details> <br /> Updates `org.springframework.boot:spring-boot-starter-actuator` from 3.3.5 to 3.4.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-boot/releases">org.springframework.boot:spring-boot-starter-actuator's releases</a>.</em></p> <blockquote> <h2>v3.4.1</h2> <h2>:lady_beetle: Bug Fixes</h2> <ul> <li>KafkaProperties fail to build SSL properties when the bundle name is an empty string <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43563">#43563</a></li> <li>Diagnostics are poor when property resolution throws a ConversionFailedException <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43559">#43559</a></li> <li>SpringApplicationShutdownHandlers do not run in deterministic order <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43536">#43536</a></li> <li>Unable to find a <code>@SpringBootConfiguration</code> results in misleading error message <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43507">#43507</a></li> <li>With multiple ResourceHandlerRegistrationCustomizer beans in the context, only one of them is used <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43497">#43497</a></li> <li>Unable to use Docker Compose support when mixing dedicated and shared services <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43472">#43472</a></li> <li>Kafka dependency management does not include the kafka-server module <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43454">#43454</a></li> <li>Docker API version is incorrectly reported when '/_ping` calls fail and version should be fixed <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43452">#43452</a></li> <li>Methods to build producer / consumer properties from KafkaProperties are inconvienenent to use without an SSL bundle <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43448">#43448</a></li> <li>Failures in -Djarmode=tools do not consistently return a non-zero exit <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43436">#43436</a></li> <li>HttpComponentsClientHttpRequestFactoryBuilder replaces the existing defaultRequestConfigCustomizer rather than adding to it <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43429">#43429</a></li> <li>spring-boot-maven-plugin sets imagePlatform even if it's empty <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43424">#43424</a></li> <li>OnBeanCondition fails to match on annotations when using Scoped Proxies <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43423">#43423</a></li> <li>Failure analysis for InvalidConfigurationPropertyValueException doesn't correctly handle fuzzy matching of environment variables <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43382">#43382</a></li> <li>H2ConsoleAutoConfiguration causes early initialization of DataSource beans <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43359">#43359</a></li> <li>Accept progress on numbers >2GB <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43356">#43356</a></li> <li>Servlet-based UserDetailsServiceAutoConfiguration is active in a reactive app <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43334">#43334</a></li> <li>StructuredLoggingJsonMembersCustomizer implementations declared in spring.factories with a generic type more specific than Object are not called <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43312">#43312</a></li> <li>Overriding log level with an environment variable does not work when using an environment prefix <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43307">#43307</a></li> <li>Management endpoint access and enabled properties are ignored unless the endpoint ID is an exact match <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43302">#43302</a></li> <li>UnsupportedOperationException when starting a Maven shaded application on Java 21 with virtual threads enabled <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43291">#43291</a></li> <li>JmsListener failing with Narayana (pooled ConnectionFactory) since 3.4.0 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43277">#43277</a></li> <li>SslBundle can no longer open store file locations without using a 'file:' prefix <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43274">#43274</a></li> <li>TestRestTemplate does not allow redirects to be customized <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43258">#43258</a></li> <li>Testcontainers start() methods may be started multiple times <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43253">#43253</a></li> </ul> <h2>:notebook_with_decorative_cover: Documentation</h2> <ul> <li>Fix typo in documentation <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43558">#43558</a></li> <li>Document that server.ssl.cipher and server.ssl.enabled-protocols are not fallbacks used with SSL bundles <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43552">#43552</a></li> <li>Use <code><annotationProcessorPaths></code> in Maven examples for configuring an annotation processor <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43544">#43544</a></li> <li>Fix typo <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43519">#43519</a></li> <li>Links to logback javadoc are incorrect <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43456">#43456</a></li> <li>Fix JUnit javadoc links <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43428">#43428</a></li> <li>Reference documentation incorrectly uses 'disabled' rather than 'none' for access restrictions <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43351">#43351</a></li> <li>Restore System property in Logging section of the reference documentation <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43342">#43342</a></li> <li>Fix link to proxyBeanMethods in <code>@AutoConfiguration</code> javadoc <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43325">#43325</a></li> <li>Fix links to Servlet and JPA javadoc <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43324">#43324</a></li> <li>Link to <code>@EnableMethodSecurity</code> instead of the deprecated <code>@EnableGlobalMethodSecurity</code> <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43315">#43315</a></li> <li>Document that StructuredLoggingJsonMembersCustomizer implementations may optionally take constructor parameters <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43314">#43314</a></li> <li>Update javadoc of StructuredLoggingJsonMembersCustomizer to note that implementations can registered through spring.factories <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43313">#43313</a></li> <li>Fix Javadoc link for Hikari <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43311">#43311</a></li> <li>Document how to use structured logging with custom log configuration <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43301">#43301</a></li> <li>Update Javadoc since for OtlpMetricsProperties and OtlpTracingProperties <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43249">#43249</a></li> </ul> <h2>:hammer: Dependency Upgrades</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-boot/commit/183285258d7b5092224eab1600a2cfa8332682d9"><code>1832852</code></a> Release v3.4.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/c9e8174f55f8c3c1fd1b22119bfd8281b61a4e05"><code>c9e8174</code></a> Merge branch '3.3.x'</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/316fe52df4cef90b6fffc850ecf8bd2c9e887846"><code>316fe52</code></a> Next development version (v3.3.8-SNAPSHOT)</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/4300ee978d095a1100a2665476450a3e7266e88c"><code>4300ee9</code></a> Merge branch '3.3.x'</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/da593800be7828391944123dc45a6a705fc42701"><code>da59380</code></a> Upgrade to Spring Batch 5.2.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/a085a0111d1d12d09851bf4c951d03ffe52c6184"><code>a085a01</code></a> Upgrade to Spring Batch 5.1.3</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/fcc569e5c4e381417d707873d6fc07afbd77a48a"><code>fcc569e</code></a> Upgrade to Hibernate 6.6.4.Final</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/1b8fcb60abf954145ea61904ede25bbdd8092afe"><code>1b8fcb6</code></a> Merge pull request <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43560">#43560</a> from arefbehboudi</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/dbc1fc26e6fac03eab894599173a726fe5e098ac"><code>dbc1fc2</code></a> Polish</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/ef431609abeeb5bf6b2e4c9f66f678789beefea2"><code>ef43160</code></a> Merge branch '3.3.x'</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-boot/compare/v3.3.5...v3.4.1">compare view</a></li> </ul> </details> <br /> Updates `org.springframework.boot:spring-boot-starter-json` from 3.3.5 to 3.4.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-boot/releases">org.springframework.boot:spring-boot-starter-json's releases</a>.</em></p> <blockquote> <h2>v3.4.1</h2> <h2>:lady_beetle: Bug Fixes</h2> <ul> <li>KafkaProperties fail to build SSL properties when the bundle name is an empty string <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43563">#43563</a></li> <li>Diagnostics are poor when property resolution throws a ConversionFailedException <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43559">#43559</a></li> <li>SpringApplicationShutdownHandlers do not run in deterministic order <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43536">#43536</a></li> <li>Unable to find a <code>@SpringBootConfiguration</code> results in misleading error message <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43507">#43507</a></li> <li>With multiple ResourceHandlerRegistrationCustomizer beans in the context, only one of them is used <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43497">#43497</a></li> <li>Unable to use Docker Compose support when mixing dedicated and shared services <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43472">#43472</a></li> <li>Kafka dependency management does not include the kafka-server module <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43454">#43454</a></li> <li>Docker API version is incorrectly reported when '/_ping` calls fail and version should be fixed <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43452">#43452</a></li> <li>Methods to build producer / consumer properties from KafkaProperties are inconvienenent to use without an SSL bundle <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43448">#43448</a></li> <li>Failures in -Djarmode=tools do not consistently return a non-zero exit <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43436">#43436</a></li> <li>HttpComponentsClientHttpRequestFactoryBuilder replaces the existing defaultRequestConfigCustomizer rather than adding to it <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43429">#43429</a></li> <li>spring-boot-maven-plugin sets imagePlatform even if it's empty <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43424">#43424</a></li> <li>OnBeanCondition fails to match on annotations when using Scoped Proxies <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43423">#43423</a></li> <li>Failure analysis for InvalidConfigurationPropertyValueException doesn't correctly handle fuzzy matching of environment variables <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43382">#43382</a></li> <li>H2ConsoleAutoConfiguration causes early initialization of DataSource beans <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43359">#43359</a></li> <li>Accept progress on numbers >2GB <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43356">#43356</a></li> <li>Servlet-based UserDetailsServiceAutoConfiguration is active in a reactive app <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43334">#43334</a></li> <li>StructuredLoggingJsonMembersCustomizer implementations declared in spring.factories with a generic type more specific than Object are not called <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43312">#43312</a></li> <li>Overriding log level with an environment variable does not work when using an environment prefix <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43307">#43307</a></li> <li>Management endpoint access and enabled properties are ignored unless the endpoint ID is an exact match <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43302">#43302</a></li> <li>UnsupportedOperationException when starting a Maven shaded application on Java 21 with virtual threads enabled <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43291">#43291</a></li> <li>JmsListener failing with Narayana (pooled ConnectionFactory) since 3.4.0 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43277">#43277</a></li> <li>SslBundle can no longer open store file locations without using a 'file:' prefix <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43274">#43274</a></li> <li>TestRestTemplate does not allow redirects to be customized <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43258">#43258</a></li> <li>Testcontainers start() methods may be started multiple times <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43253">#43253</a></li> </ul> <h2>:notebook_with_decorative_cover: Documentation</h2> <ul> <li>Fix typo in documentation <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43558">#43558</a></li> <li>Document that server.ssl.cipher and server.ssl.enabled-protocols are not fallbacks used with SSL bundles <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43552">#43552</a></li> <li>Use <code><annotationProcessorPaths></code> in Maven examples for configuring an annotation processor <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43544">#43544</a></li> <li>Fix typo <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43519">#43519</a></li> <li>Links to logback javadoc are incorrect <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43456">#43456</a></li> <li>Fix JUnit javadoc links <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43428">#43428</a></li> <li>Reference documentation incorrectly uses 'disabled' rather than 'none' for access restrictions <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43351">#43351</a></li> <li>Restore System property in Logging section of the reference documentation <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43342">#43342</a></li> <li>Fix link to proxyBeanMethods in <code>@AutoConfiguration</code> javadoc <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43325">#43325</a></li> <li>Fix links to Servlet and JPA javadoc <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43324">#43324</a></li> <li>Link to <code>@EnableMethodSecurity</code> instead of the deprecated <code>@EnableGlobalMethodSecurity</code> <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43315">#43315</a></li> <li>Document that StructuredLoggingJsonMembersCustomizer implementations may optionally take constructor parameters <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43314">#43314</a></li> <li>Update javadoc of StructuredLoggingJsonMembersCustomizer to note that implementations can registered through spring.factories <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43313">#43313</a></li> <li>Fix Javadoc link for Hikari <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43311">#43311</a></li> <li>Document how to use structured logging with custom log configuration <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43301">#43301</a></li> <li>Update Javadoc since for OtlpMetricsProperties and OtlpTracingProperties <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43249">#43249</a></li> </ul> <h2>:hammer: Dependency Upgrades</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-boot/commit/183285258d7b5092224eab1600a2cfa8332682d9"><code>1832852</code></a> Release v3.4.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/c9e8174f55f8c3c1fd1b22119bfd8281b61a4e05"><code>c9e8174</code></a> Merge branch '3.3.x'</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/316fe52df4cef90b6fffc850ecf8bd2c9e887846"><code>316fe52</code></a> Next development version (v3.3.8-SNAPSHOT)</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/4300ee978d095a1100a2665476450a3e7266e88c"><code>4300ee9</code></a> Merge branch '3.3.x'</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/da593800be7828391944123dc45a6a705fc42701"><code>da59380</code></a> Upgrade to Spring Batch 5.2.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/a085a0111d1d12d09851bf4c951d03ffe52c6184"><code>a085a01</code></a> Upgrade to Spring Batch 5.1.3</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/fcc569e5c4e381417d707873d6fc07afbd77a48a"><code>fcc569e</code></a> Upgrade to Hibernate 6.6.4.Final</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/1b8fcb60abf954145ea61904ede25bbdd8092afe"><code>1b8fcb6</code></a> Merge pull request <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43560">#43560</a> from arefbehboudi</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/dbc1fc26e6fac03eab894599173a726fe5e098ac"><code>dbc1fc2</code></a> Polish</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/ef431609abeeb5bf6b2e4c9f66f678789beefea2"><code>ef43160</code></a> Merge branch '3.3.x'</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-boot/compare/v3.3.5...v3.4.1">compare view</a></li> </ul> </details> <br /> Updates `org.springframework.boot:spring-boot-starter-security` from 3.3.5 to 3.4.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-boot/releases">org.springframework.boot:spring-boot-starter-security's releases</a>.</em></p> <blockquote> <h2>v3.4.1</h2> <h2>:lady_beetle: Bug Fixes</h2> <ul> <li>KafkaProperties fail to build SSL properties when the bundle name is an empty string <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43563">#43563</a></li> <li>Diagnostics are poor when property resolution throws a ConversionFailedException <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43559">#43559</a></li> <li>SpringApplicationShutdownHandlers do not run in deterministic order <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43536">#43536</a></li> <li>Unable to find a <code>@SpringBootConfiguration</code> results in misleading error message <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43507">#43507</a></li> <li>With multiple ResourceHandlerRegistrationCustomizer beans in the context, only one of them is used <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43497">#43497</a></li> <li>Unable to use Docker Compose support when mixing dedicated and shared services <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43472">#43472</a></li> <li>Kafka dependency management does not include the kafka-server module <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43454">#43454</a></li> <li>Docker API version is incorrectly reported when '/_ping` calls fail and version should be fixed <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43452">#43452</a></li> <li>Methods to build producer / consumer properties from KafkaProperties are inconvienenent to use without an SSL bundle <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43448">#43448</a></li> <li>Failures in -Djarmode=tools do not consistently return a non-zero exit <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43436">#43436</a></li> <li>HttpComponentsClientHttpRequestFactoryBuilder replaces the existing defaultRequestConfigCustomizer rather than adding to it <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43429">#43429</a></li> <li>spring-boot-maven-plugin sets imagePlatform even if it's empty <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43424">#43424</a></li> <li>OnBeanCondition fails to match on annotations when using Scoped Proxies <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43423">#43423</a></li> <li>Failure analysis for InvalidConfigurationPropertyValueException doesn't correctly handle fuzzy matching of environment variables <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43382">#43382</a></li> <li>H2ConsoleAutoConfiguration causes early initialization of DataSource beans <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43359">#43359</a></li> <li>Accept progress on numbers >2GB <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43356">#43356</a></li> <li>Servlet-based UserDetailsServiceAutoConfiguration is active in a reactive app <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43334">#43334</a></li> <li>StructuredLoggingJsonMembersCustomizer implementations declared in spring.factories with a generic type more specific than Object are not called <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43312">#43312</a></li> <li>Overriding log level with an environment variable does not work when using an environment prefix <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43307">#43307</a></li> <li>Management endpoint access and enabled properties are ignored unless the endpoint ID is an exact match <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43302">#43302</a></li> <li>UnsupportedOperationException when starting a Maven shaded application on Java 21 with virtual threads enabled <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43291">#43291</a></li> <li>JmsListener failing with Narayana (pooled ConnectionFactory) since 3.4.0 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43277">#43277</a></li> <li>SslBundle can no longer open store file locations without using a 'file:' prefix <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43274">#43274</a></li> <li>TestRestTemplate does not allow redirects to be customized <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43258">#43258</a></li> <li>Testcontainers start() methods may be started multiple times <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43253">#43253</a></li> </ul> <h2>:notebook_with_decorative_cover: Documentation</h2> <ul> <li>Fix typo in documentation <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43558">#43558</a></li> <li>Document that server.ssl.cipher and server.ssl.enabled-protocols are not fallbacks used with SSL bundles <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43552">#43552</a></li> <li>Use <code><annotationProcessorPaths></code> in Maven examples for configuring an annotation processor <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43544">#43544</a></li> <li>Fix typo <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43519">#43519</a></li> <li>Links to logback javadoc are incorrect <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43456">#43456</a></li> <li>Fix JUnit javadoc links <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43428">#43428</a></li> <li>Reference documentation incorrectly uses 'disabled' rather than 'none' for access restrictions <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43351">#43351</a></li> <li>Restore System property in Logging section of the reference documentation <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43342">#43342</a></li> <li>Fix link to proxyBeanMethods in <code>@AutoConfiguration</code> javadoc <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43325">#43325</a></li> <li>Fix links to Servlet and JPA javadoc <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43324">#43324</a></li> <li>Link to <code>@EnableMethodSecurity</code> instead of the deprecated <code>@EnableGlobalMethodSecurity</code> <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43315">#43315</a></li> <li>Document that StructuredLoggingJsonMembersCustomizer implementations may optionally take constructor parameters <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43314">#43314</a></li> <li>Update javadoc of StructuredLoggingJsonMembersCustomizer to note that implementations can registered through spring.factories <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43313">#43313</a></li> <li>Fix Javadoc link for Hikari <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43311">#43311</a></li> <li>Document how to use structured logging with custom log configuration <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43301">#43301</a></li> <li>Update Javadoc since for OtlpMetricsProperties and OtlpTracingProperties <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43249">#43249</a></li> </ul> <h2>:hammer: Dependency Upgrades</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-boot/commit/183285258d7b5092224eab1600a2cfa8332682d9"><code>1832852</code></a> Release v3.4.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/c9e8174f55f8c3c1fd1b22119bfd8281b61a4e05"><code>c9e8174</code></a> Merge branch '3.3.x'</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/316fe52df4cef90b6fffc850ecf8bd2c9e887846"><code>316fe52</code></a> Next development version (v3.3.8-SNAPSHOT)</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/4300ee978d095a1100a2665476450a3e7266e88c"><code>4300ee9</code></a> Merge branch '3.3.x'</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/da593800be7828391944123dc45a6a705fc42701"><code>da59380</code></a> Upgrade to Spring Batch 5.2.1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/a085a0111d1d12d09851bf4c951d03ffe52c6184"><code>a085a01</code></a> Upgrade to Spring Batch 5.1.3</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/fcc569e5c4e381417d707873d6fc07afbd77a48a"><code>fcc569e</code></a> Upgrade to Hibernate 6.6.4.Final</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/1b8fcb60abf954145ea61904ede25bbdd8092afe"><code>1b8fcb6</code></a> Merge pull request <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43560">#43560</a> from arefbehboudi</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/dbc1fc26e6fac03eab894599173a726fe5e098ac"><code>dbc1fc2</code></a> Polish</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/ef431609abeeb5bf6b2e4c9f66f678789beefea2"><code>ef43160</code></a> Merge branch '3.3.x'</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-boot/compare/v3.3.5...v3.4.1">compare view</a></li> </ul> </details> <br /> Updates `org.springframework.boot:spring-boot-starter-data-jpa` from 3.3.5 to 3.4.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-boot/releases">org.springframework.boot:spring-boot-starter-data-jpa's releases</a>.</em></p> <blockquote> <h2>v3.4.1</h2> <h2>:lady_beetle: Bug Fixes</h2> <ul> <li>KafkaProperties fail to build SSL properties when the bundle name is an empty string <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43563">#43563</a></li> <li>Diagnostics are poor when property resolution throws a ConversionFailedException <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43559">#43559</a></li> <li>SpringApplicationShutdownHandlers do not run in deterministic order <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43536">#43536</a></li> <li>Unable to find a <code>@SpringBootConfiguration</code> results in misleading error message <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43507">#43507</a></li> <li>With multiple ResourceHandlerRegistrationCustomizer beans in the context, only one of them is used <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43497">#43497</a></li> <li>Unable to use Docker Compose support when mixing dedicated and shared services <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43472">#43472</a></li> <li>Kafka dependency management does not include the kafka-server module <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43454">#43454</a></li> <li>Docker API version is incorrectly reported when '/_ping` calls fail and version should be fixed <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43452">#43452</a></li> <li>Methods to build producer / consumer properties from KafkaProperties are inconvienenent to use without an SSL bundle <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43448">#43448</a></li> <li>Failures in -Djarmode=tools do not consistently return a non-zero exit <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43436">#43436</a></li> <li>HttpComponentsClientHttpRequestFactoryBuilder replaces the existing defaultRequestConfigCustomizer rather than adding to it <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43429">#43429</a></li> <li>spring-boot-maven-plugin sets imagePlatform even if it's empty <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43424">#43424</a></li> <li>OnBeanCondition fails to match on annotations when using Scoped Proxies <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43423">#43423</a></li> <li>Failure analysis for InvalidConfigurationPropertyValueException doesn't correctly handle fuzzy matching of environment variables <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43382">#43382</a></li> <li>H2ConsoleAutoConfiguration causes early initialization of DataSource beans <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43359">#43359</a></li> <li>Accept progress on numbers >2GB <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43356">#43356</a></li> <li>Servlet-based UserDetailsServiceAutoConfiguration is active in a reactive app <a href="https://redirect.github.com/spring-projects/spring-boot/pull/43334">#43334</a></li> <li>StructuredLoggingJsonMembersCustomizer implementations declared in spring.factories with a generic type more specific than Object are not called <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43312">#43312</a></li> <li>Overriding log level with an environment variable does not work when using an environment prefix <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43307">#43307</a></li> <li>Management endpoint access and enabled properties are ignored unless the endpoint ID is an exact match <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43302">#43302</a></li> <li>UnsupportedOperationException when starting a Maven shaded application on Java 21 with virtual threads enabled <a href="https://redirect.github.com/spring-projects/spring-boot/issues/43291">#43291</a></li> <li>JmsListener failing with Narayana (pooled ConnectionFactory) since 3.4…
- Loading branch information