You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Created StackTracePrinter instances have no access to the Environment #50414
MappingsEndpoint reports the context's own ID as parentId when a parent exists #50412
Buildpack module does not validate long-to-int casts #50410
Gradle gRPC support fails if protobuf-java dependency is used instead of protobuf-java-util #50405
GraphQL WebSocket support does not configure allowed origins #50394
Spring Boot Loader Does Not Support RSA and EC Signed Jars #50298
Meter registries are not removed from the global registry when the context is closed #50287
DataSourceBuilder cannot derive a DataSource from a lazy connection proxy #50271
Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50266
Bean definitions can be added with an initializer before setAllowBeanDefinitionOverriding is called #50264
EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50261
Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50258
ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50234
NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50228
Missing dependency management for spring-boot-web-server-test #50224
Spring Batch support for MongoDB modules are not included in dependency management #50223
Apply HTML escaping to timestamp attribute in Whitelabel error page #50216
GrpcServerHealthScheduler is not started in servlet environments #50209
Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50204
📔 Documentation
Fix reference to Gradle documentation for module replacement #50647
Next steps: Take a moment to review the security alert above. Review
the linked package source code to understand the potential risk. Ensure the
package is not malicious before proceeding. If you're unsure how to proceed,
reach out to your security team or ask the Socket team for help at
support@socket.dev.
Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.
Mark the package as acceptable risk. To ignore this alert only
in this pull request, reply with the comment
@SocketSecurity ignore maven/org.apache.httpcomponents.core5/httpcore5@5.4. You can
also ignore all packages with @SocketSecurity ignore-all.
To ignore an alert for all future pull requests, use Socket's Dashboard to
change the triage state of this alert.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
github-actions
Bot
added
the
type:dependency
This PR contains the following updates:
4.0.7→4.1.04.0.7→4.1.04.0.7→4.1.0Release Notes
spring-projects/spring-boot (org.springframework.boot:spring-boot-configuration-processor)
v4.1.0Full release notes for Spring Boot 4.1 are available on the wiki.
⭐ New Features
🐞 Bug Fixes
📔 Documentation
🔨 Dependency Upgrades
❤️ Contributors
Thank you to all the contributors who worked on this release:
@Abdlatif-nabgha, @DragonFSKY, @Kapil-chn7, @Kimgyuilli, @SJvaca30, @SebTardif, @ares333, @codingkiddo, @dlwldnjs1009, @eddumelendez, @henriquejsza, @igormukhin, @johnnypwong, @kwondh5217, @leestana01, @mheath, @mmoayyed, @msridhar, @ngocnhan-tran1996, @nosan, @quaff, @scordio, @vinhhieu21, @vpavic, @won-seoop, and @zxuhan
Configuration
📅 Schedule: (in timezone Europe/Madrid)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.