Mentions légales du service

Skip to content

fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v2.7.3

Renovate Tac requested to merge renovate/spring-boot into develop

This MR contains the following updates:

Package Change Age Adoption Passing Confidence
org.springframework.boot:spring-boot-starter-parent (source) 2.6.7 -> 2.7.3 age adoption passing confidence

Release Notes

spring-projects/spring-boot

v2.7.3

Compare Source

:lady_beetle: Bug Fixes

  • Misleading error message when using JarMode Layertools and the source is not an archive #​32097
  • ClassNotFoundException can be thrown for classes in nested jars when under GC pressure #​32085
  • Flyway auto-configuration fails with Flyway 9 #​32034
  • BasicJsonParser does not protect against deeply nested maps #​32031
  • OptionalLiveReloadServer logs the wrong port number when it is configured to use an ephemeral port #​31984
  • Servlet WebServerStartStopLifecycle doesn't set running to false on stop #​31967
  • JUL-based logging performed during close of application context is lost #​31963
  • The hash of spring-boot-jarmode-layertools.jar that's added to a fat jar doesn't match the hash of the equivalent published artifact #​31949
  • management.endpoint.health.probes.add-additional-paths has no effect when configuration properties have already created the liveness and/or readiness groups #​31926
  • UnsupportedDataSourcePropertyException is thrown when attempting to set jdbcUrl for C3P0 #​31921
  • Dev Tools restart failures caused by a too short quiet period are hard to diagnose #​31906
  • HealthContributor beans managed by a CompositeHealthContributor are recreated on each call #​31879
  • Dependency management for REST Assured is incomplete #​31877
  • Jar Handler never clears MROTOCOL_HANDLER system property #​31875
  • BasicJsonParser can fail with a timeout or stackoverflow with malformed map JSON #​31873
  • BasicJsonParser can fail with a stackoverflow exception #​31871

📔 Documentation

  • Review Git contribution documentation #​32099
  • Documentation for Maven Plugin classifier has an unresolved external reference #​32043
  • Update Static Content reference documentation to reflect the DefaultServlet no longer being enabled by default #​32026
  • Example log output is out-of-date and inconsistent #​31987
  • Document that Undertow's record-request-start-time server option must be enabled for %D to work in access logging #​31976
  • Update documentation on using H2C to consider running behind a proxy that's performing TLS termination #​31974
  • Some properties in the Common Application Properties appendix have no description #​31971
  • Fix links in documentations #​31951
  • External configuration documentation uses incorrect placeholder syntax #​31943
  • server.reactive.session.cookie properties are not listed in the application properties appendix #​31914
  • Remove documentation and metadata references to ConfigFileApplicationListener #​31901
  • Metadata for 'spring.beaninfo.ignore' has incorrect SourceType #​31899
  • Remove reference to nitrite-spring-boot-starter #​31893
  • Remove reference to Azure Application Insights #​31890
  • Fix typos in code and documentation #​31865

🔨 Dependency Upgrades

❤ Contributors

We'd like to thank all the contributors who worked on this release!

v2.7.2

Compare Source

:lady_beetle: Bug Fixes

  • Publishing a docker image to a private registry fails without authentication #​31824
  • In a non-reactive application, health indicators in a parent context are not found #​31818
  • Dependency management for Derby is incomplete #​31814
  • ApplicationPid doesn't log a warning if it takes a long time to return #​31810
  • A router function with attributes causes /actuator/mappings to return a 500 response due to an UnsupportedOperationException #​31806
  • InstanceAlreadyExistsException when using Actuator with multiple context and JMX enabled #​31804
  • Using 'ImportAutoConfigurationImportSelector' in the jar package loaded by a custom class loader throws ClassNotFoundException #​31801
  • GraphQL auto-configuration does not configure the GrapQlSource with SubscriptionExceptionResolver beans #​31794
  • Trailing whitespace in the value of a property is hard to identify in failure analysis descriptions #​31780
  • Log4j2's shutdown hook is not disabled when using Log4j 2.18 or later #​31732
  • HTTP Server and Data repositories metrics record null for the description #​31706
  • Deprecation hint for spring.data.mongodb.grid-fs-database is located in the wrong section #​31690
  • Image building fails with latest Paketo base builder and additional buildpacks configured #​31558
  • Tomcat fails to start when PEM files are used and key-store-password is not specified #​31253

📔 Documentation

  • Clarify how docker image publishing registry is determined #​31826
  • Fix typo in "HTTP and WebSocket" section of GraphQL documentation #​31518

🔨 Dependency Upgrades

❤ Contributors

We'd like to thank all the contributors who worked on this release!

v2.7.1

Compare Source

:lady_beetle: Bug Fixes

  • Values in a spring.data.cassandra.config file can't override some defaults defined in CassandraProperties #​31503
  • @RestControllerAdvice @ExceptionHandler Inconsistent behavior with @RestControllerEndpoint #​31501
  • Malformed json causes BasicJsonParser to throw a NullPointerException #​31499
  • Metadata generated by the configuration properties annotation processor can miss inherited properties from nested classes #​31484
  • JarFile implementation calls close early which breaks verification of signed unpacked nested jars on Oracle JDK #​31395
  • Health indicators that take a long time to respond are difficult to diagnose #​31384
  • Custom Converter annotated with @ConfigurationPropertiesBinding does not get selected if targetType has a static factory method different return type #​31341
  • Tomcat server.max-http-header-size property is ignored when using HTTP/2 #​31329
  • OAuth2 Resource Server Auto-Configuration can only configure a single JWS algorithm #​31321
  • Maven shade plugin configuration in spring-boot-starter-parent does not append META-INF/spring/*.imports files #​31316
  • GraphQL RouterFunctions are unordered which prevents other functions from being ordered after them #​31314
  • spring-boot-dependencies manages spring-ldap-ldif-batch which no longer exists #​31254
  • Dependency task can fail due to BootJar and BootWar afterResolve hooks #​31213
  • MimeMappings does not include application/wasm #​31188
  • spring-configuration-metadata.json is missing for additional-spring-configuration-metadata.json after switching from @Configuration to @AutoConfiguration #​31186
  • Binder(ConfigurationPropertySource... sources) does not assert that sources contains only non-null elements #​31183
  • WebMvcMetricsFilter stopped working since 2.7.0 #​31150
  • Dependency management for mimepull is redundant and the managed version is incompatible with Java 8 #​31145
  • layers.xsd is out of sync with the documentation and implementation for including and excluding module dependencies #​31128

📔 Documentation

  • Make SpringApplication Kotlin samples idiomatic #​31463
  • Harmonize Kotlin example #​31458
  • Remove duplicate content from "The Spring WebFlux Framework" section #​31381
  • Document that property placeholders should use the canonical property name form #​31369
  • Fix typos in the reference documentation #​31366
  • Enable Links for the Javadoc of the Gradle Plugin #​31362
  • Remove "earlier in this chapter" from places where content is now elsewhere in the documentation #​31360
  • Restore custom favicon documentation #​31358
  • Document that when using Lombok it must be configured to run before spring-boot-configuration-processor #​31356
  • Use Lambda-based API in Spring Security examples #​31354
  • Fix typo in name of imports file in javadoc of ImportCandidates.from #​31277
  • Typos in documentation ("spring-factories" instead of "spring.factories") #​31206
  • Fix Custom Layers Configuration section title in Maven plugin docs #​31180
  • org.springframework.boot.actuate.autoconfigure.metrics.graphql has no package info #​31140
  • Update Dynatrace Micrometer registry documentation #​31132

🔨 Dependency Upgrades

❤ Contributors

We'd like to thank all the contributors who worked on this release!

v2.7.0

Compare Source

See the Release notes for 2.7 for upgrade instructions and details of new features.

⭐ New Features

  • Revert to using "application/json" as default MIME type for GraphQL while remaining compatible with "application/graphql+json" #​30860
  • Allow customization of single logout in auto-configured SAML relying party registration #​30128

:lady_beetle: Bug Fixes

  • Default properties configured on SpringApplication have higher precedence than properties configured with @PropertySource #​31093
  • A failure when an instrumented WebClient records metrics causes the request to fail #​31089
  • Dependency management for Artemis is incomplete #​31079
  • Configuration properties for Statsd's buffered and step properties are missing #​31059
  • Debug logging for requests to WebFlux-based Actuator endpoints does not identify the endpoint #​30887
  • @ConditionalOnProperty meta annotation with @AliasFor does not work #​30874
  • Event handling in JobExecutionExitCodeGenerator is not thread-safe #​30846
  • Hibernate service loading logs HHH000505 warnings for ServiceConfigurationError with Gradle-built jars since 2.5.10 when using Java 11 or later #​30791
  • Cryptic startup failure with bare LOGGING_LEVEL environment variable #​30789
  • SearchStrategy argument of MethodValidationExcludeFilter byAnnotation(Class, SearchStrategy) is not used #​30787
  • spring.security.saml2.relyingparty.registration..asserting-party. properties contain unwanted hyphen in asserting-party #​30785
  • DevTools sets deprecated spring.mustache.cache property #​30774

📔 Documentation

  • Extend documentation on Datadog metrics #​30997
  • Fix link to Upgrading From 1.x in multi-page documentation #​30995
  • Document support for Java 18 #​30782

🔨 Dependency Upgrades

❤ Contributors

We'd like to thank all the contributors who worked on this release!

v2.6.11

Compare Source

:lady_beetle: Bug Fixes

  • BasicJsonParser does not protect against deeply nested maps #​32029
  • Misleading error message when using JarMode Layertools and the source is not an archive #​31997
  • OptionalLiveReloadServer logs the wrong port number when it is configured to use an ephemeral port #​31983
  • Servlet WebServerStartStopLifecycle doesn't set running to false on stop #​31966
  • UnsupportedDataSourcePropertyException is thrown when attempting to set jdbcUrl for C3P0 #​31920
  • Jar Handler never clears MROTOCOL_HANDLER system property #​31870
  • BasicJsonParser can fail with a timeout or stackoverflow with malformed map JSON #​31869
  • BasicJsonParser can fail with a stackoverflow exception #​31868
  • Dependency management for REST Assured is incomplete #​31864
  • The hash of spring-boot-jarmode-layertools.jar that's added to a fat jar doesn't match the hash of the equivalent published artifact #​31862
  • ClassNotFoundException can be thrown for classes in nested jars when under GC pressure #​31853
  • HealthContributor beans managed by a CompositeHealthContributor are recreated on each call #​31676
  • Dev Tools restart failures caused by a too short quiet period are hard to diagnose #​31579
  • management.endpoint.health.probes.add-additional-paths has no effect when configuration properties have already created the liveness and/or readiness groups #​30612
  • JUL-based logging performed during close of application context is lost #​9457

📔 Documentation

  • Update Static Content reference documentation to reflect the DefaultServlet no longer being enabled by default #​32004
  • External configuration documentation uses incorrect placeholder syntax #​31941
  • Some properties in the Common Application Properties appendix have no description #​31916
  • server.reactive.session.cookie properties are not listed in the application properties appendix #​31912
  • Review Git contribution documentation #​31904
  • Metadata for 'spring.beaninfo.ignore' has incorrect SourceType #​31898
  • Remove documentation and metadata references to ConfigFileApplicationListener #​31895
  • Remove reference to nitrite-spring-boot-starter #​31892
  • Remove reference to Azure Application Insights #​31889
  • Fix links in documentations #​31887
  • Fix typos in code and documentation #​31734
  • Document that Undertow's record-request-start-time server option must be enabled for %D to work in access logging #​31103
  • Documentation for Maven Plugin classifier has an unresolved external reference #​29171
  • Example log output is out-of-date and inconsistent #​28208
  • Update documentation on using H2C to consider running behind a proxy that's performing TLS termination #​25855

🔨 Dependency Upgrades

❤ Contributors

We'd like to thank all the contributors who worked on this release!

v2.6.10

Compare Source

:lady_beetle: Bug Fixes

  • Using 'ImportAutoConfigurationImportSelector' in the jar package loaded by a custom class loader throws ClassNotFoundException #​31798
  • A router function with attributes causes /actuator/mappings to return a 500 response due to an UnsupportedOperationException #​31784
  • Log4j2's shutdown hook is not disabled when using Log4j 2.18 or later #​31719
  • InstanceAlreadyExistsException when using Actuator with multiple context and JMX enabled #​31718
  • Deprecation hint for spring.data.mongodb.grid-fs-database is located in the wrong section #​31689
  • ApplicationPid doesn't log a warning if it takes a long time to return #​31572
  • Trailing whitespace in the value of a property is hard to identify in failure analysis descriptions #​31571
  • Dependency management for Derby is incomplete #​31570
  • HTTP Server and Data repositories metrics record null for the description #​31516
  • Image building fails with latest Paketo base builder and additional buildpacks configured #​31233
  • Publishing a docker image to a private registry fails without authentication #​28844
  • In a non-reactive application, health indicators in a parent context are not found #​27308

📔 Documentation

  • Clarify how docker image publishing registry is determined #​31820

🔨 Dependency Upgrades

❤ Contributors

We'd like to thank all the contributors who worked on this release!

v2.6.9

Compare Source

:lady_beetle: Bug Fixes

  • @RestControllerAdvice @ExceptionHandler Inconsistent behavior with @RestControllerEndpoint #​31495
  • Tomcat server.max-http-header-size property is ignored when using HTTP/2 #​31322
  • Malformed json causes BasicJsonParser to throw a NullPointerException #​31301
  • Values in a spring.data.cassandra.config file can't override some defaults defined in CassandraProperties #​31238
  • Health indicators that take a long time to respond are difficult to diagnose #​31231
  • layers.xsd is out of sync with the documentation and implementation for including and excluding module dependencies #​31127
  • MimeMappings does not include application/wasm #​30885
  • Binder(ConfigurationPropertySource... sources) does not assert that sources contains only non-null elements #​30878
  • Dependency task can fail to BootJar and BootWar afterResolve hooks #​30586
  • JarFile implementation calls close early which breaks verification of signed unpacked nested jars on Oracle JDK #​29356
  • Custom Converter annotated with @ConfigurationPropertiesBinding does not get selected if targetType has a static factory method different return type #​28592
  • Metadata generated by the configuration properties annotation processor can miss inherited properties from nested classes #​21626

📔 Documentation

  • Remove duplicate content from "The Spring WebFlux Framework" section #​31378
  • Fix typos in the reference documentation #​31328
  • Document that property placeholders should use the canonical property name form #​31309
  • Enable Links for the Javadoc of the Gradle Plugin #​31279
  • Remove "earlier in this chapter" from places where content is now elsewhere in the documentation #​31276
  • Restore custom favicon documentation #​31224
  • Typos in documentation ("spring-factories" instead of "spring.factories") #​31203
  • Document that when using Lombok it must be configured to run before spring-boot-configuration-processor #​31190
  • Fix Custom Layers Configuration section title in Maven plugin docs #​31172
  • Use Lambda-based API in Spring Security examples #​31143

🔨 Dependency Upgrades

❤ Contributors

We'd like to thank all the contributors who worked on this release!

v2.6.8

Compare Source

:lady_beetle: Bug Fixes

  • Default properties configured on SpringApplication have higher precedence than properties configured with @PropertySource #​31092
  • A failure when an instrumented WebClient records metrics causes the request to fail #​31088
  • Dependency management for Artemis is incomplete #​31078
  • Configuration properties for Statsd's buffered and step properties are missing #​31058
  • Debug logging for requests to WebFlux-based Actuator endpoints does not identify the endpoint #​30886
  • @ConditionalOnProperty meta annotation with @AliasFor does not work #​30873
  • Event handling in JobExecutionExitCodeGenerator is not thread-safe #​30845
  • Hibernate service loading logs HHH000505 warnings for ServiceConfigurationError with Gradle-built jars since 2.5.10 when using Java 11 or later #​30790
  • Cryptic startup failure with bare LOGGING_LEVEL environment variable #​30788
  • SearchStrategy argument of MethodValidationExcludeFilter byAnnotation(Class, SearchStrategy) is not used #​30786

📔 Documentation

  • Extend documentation on Datadog metrics #​30996
  • Fix link to Upgrading From 1.x in multi-page documentation #​30994
  • Document support for Java 18 #​30781

🔨 Dependency Upgrades

❤ Contributors

We'd like to thank all the contributors who worked on this release!

Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

  • If you want to rebase/retry this MR, click this checkbox.

This MR has been generated by Renovate Bot.

Edited by Renovate Tac

Merge request reports