Update all patch/minor versions (master)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
georchestra/geoserver		patch	2.28.4-georchestra-00 → 2.28.5-georchestra-00
tomcat (source)	final	patch	11.0.24-jre21-temurin-jammy → 11.0.25-jre21-temurin-jammy
org.springframework.security:spring-security-web (source)	dependencies	patch	7.1.0 → 7.1.1
org.springframework.security:spring-security-config (source)	dependencies	patch	7.1.0 → 7.1.1
org.springframework:spring-webmvc	dependencies	patch	7.0.8 → 7.0.9
org.springframework:spring-web	dependencies	patch	7.0.8 → 7.0.9
org.springframework:spring-tx	dependencies	patch	7.0.8 → 7.0.9
org.springframework:spring-test	dependencies	patch	7.0.8 → 7.0.9
org.springframework:spring-orm	dependencies	patch	7.0.8 → 7.0.9
org.springframework:spring-jdbc	dependencies	patch	7.0.8 → 7.0.9
org.springframework:spring-core	dependencies	patch	7.0.8 → 7.0.9
org.springframework:spring-context	dependencies	patch	7.0.8 → 7.0.9
org.springframework:spring-beans	dependencies	patch	7.0.8 → 7.0.9
org.springframework:spring-aspects	dependencies	patch	7.0.8 → 7.0.9
org.junit.platform:junit-platform-launcher (source)	dependencies	minor	6.0.1 → 6.1.3
org.locationtech.jts:jts-core (source)	dependencies	minor	1.18.2 → 1.20.0
net.sf.jasperreports:jasperreports-pdf (source)	dependencies	patch	7.0.7 → 7.0.8
net.sf.jasperreports:jasperreports-json (source)	dependencies	patch	7.0.7 → 7.0.8
net.sf.jasperreports:jasperreports-jdt (source)	dependencies	patch	7.0.7 → 7.0.8
net.sf.jasperreports:jasperreports-functions (source)	dependencies	patch	7.0.7 → 7.0.8
net.sf.jasperreports:jasperreports-fonts (source)	dependencies	patch	7.0.7 → 7.0.8
net.sf.jasperreports:jasperreports-excel-poi (source)	dependencies	patch	7.0.7 → 7.0.8
net.sf.jasperreports:jasperreports (source)	dependencies	patch	7.0.7 → 7.0.8
io.hypersistence:hypersistence-utils-hibernate-63	dependencies	patch	3.15.4 → 3.15.5
com.google.guava:guava	dependencies	minor	33.6.0-jre → 33.7.1-jre

---

Release Notes

spring-projects/spring-security (org.springframework.security:spring-security-web)

v7.1.1

Compare Source

⭐ New Features

• Fix Broken DefaultLoginPageGeneratingFilter Javadoc Link #​19252
• Remove BeanResolver Null Checks #​19209
• Remove Unnecessary AuthorizationDecision Cast #​19283
• Update One-Time Token Docs for Renamed APIs #​19274

🪲 Bug Fixes

• Correct validation logic in CasAuthenticationToken #​19372
• Differentiate Forwarded and X-Forwarded headers in proxy docs #​19477
• Find mixed-case names in InMemoryUserDetailsManager#changePassword #​19539
• Fix OAuth2PushedAuthorizationRequestUri parsing #​19445
• Update JavaDoc Links in Reference #​19199
• Validate Parameter in setPostAuthenticationChecks #​19277

🔨 Dependency Upgrades

• Bump @springio/antora-extensions from 1.14.12 to 1.14.13 in /docs #​19503
• Bump actions/checkout from 6.0.3 to 7.0.0 #​19351
• Bump actions/checkout from 7.0.0 to 7.0.1 #​19464
• Bump actions/setup-java from 5.2.0 to 5.3.0 #​19352
• Bump actions/setup-java from 5.3.0 to 5.4.0 #​19380
• Bump actions/setup-java from 5.4.0 to 5.5.0 #​19430
• Bump actions/setup-java from 5.5.0 to 5.6.0 #​19453
• Bump actions/setup-java from 5.6.0 to 5.7.0 #​19501
• Bump antora from 3.2.0-alpha.12 to 3.2.0-rc.2 in /docs #​19385
• Bump ch.qos.logback:logback-classic from 1.5.34 to 1.5.35 #​19374
• Bump ch.qos.logback:logback-classic from 1.5.35 to 1.5.36 #​19389
• Bump ch.qos.logback:logback-classic from 1.5.36 to 1.5.37 #​19396
• Bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38 #​19431
• Bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.0 #​19467
• Bump ch.qos.logback:logback-classic from 1.6.0 to 1.6.1 #​19476
• Bump ch.qos.logback:logback-classic from 1.6.1 to 1.6.2 #​19556
• Bump ch.qos.logback:logback-classic from 1.6.2 to 1.6.3 #​19564
• Bump com.fasterxml.jackson:jackson-bom from 2.22.0 to 2.22.1 #​19419
• Bump com.fasterxml.jackson:jackson-bom from 2.22.1 to 2.22.2 #​19566
• Bump com.nimbusds:oauth2-oidc-sdk from 11.37.2 to 11.38.1 #​19439
• Bump com.nimbusds:oauth2-oidc-sdk from 11.38.1 to 11.38.2 #​19525
• Bump com.unboundid:unboundid-ldapsdk from 7.0.4 to 7.0.5 #​19322
• Bump com.webauthn4j:webauthn4j-core from 0.31.6.RELEASE to 0.31.7.RELEASE #​19313
• Bump com.webauthn4j:webauthn4j-core from 0.31.7.RELEASE to 0.31.8.RELEASE #​19409
• Bump com.webauthn4j:webauthn4j-core from 0.31.8.RELEASE to 0.31.9.RELEASE #​19496
• Bump gradle-wrapper from 9.5.1 to 9.6.0 #​19360
• Bump gradle-wrapper from 9.6.0 to 9.6.1 #​19393
• Bump gradle-wrapper from 9.6.1 to 9.7.0 #​19516
• Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.13 to 0.0.14 #​19378
• Bump org-bouncycastle from 1.84 to 1.85 #​19437
• Bump org-jetbrains-kotlin from 2.4.0 to 2.4.10 #​19447
• Bump org-opensaml5 from 5.2.2 to 5.2.3 #​19358
• Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.1 to 5.6.2 #​19401
• Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.2 to 5.6.3 #​19495
• Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.3 to 5.6.4 #​19538
• Bump org.apache.kerby:kerb-simplekdc from 2.1.1 to 2.1.2 #​19387
• Bump org.hibernate.orm:hibernate-core from 7.4.0.Final to 7.4.1.Final #​19312
• Bump org.hibernate.orm:hibernate-core from 7.4.1.Final to 7.4.2.Final #​19364
• Bump org.hibernate.orm:hibernate-core from 7.4.2.Final to 7.4.3.Final #​19402
• Bump org.hibernate.orm:hibernate-core from 7.4.3.Final to 7.4.4.Final #​19416
• Bump org.hibernate.orm:hibernate-core from 7.4.4.Final to 7.4.5.Final #​19443
• Bump org.junit:junit-bom from 6.1.0 to 6.1.1 #​19395
• Bump org.junit:junit-bom from 6.1.1 to 6.1.2 #​19442
• Bump org.junit:junit-bom from 6.1.2 to 6.1.3 #​19524
• Bump org.junit:junit-bom from 6.1.2 to 6.1.3 #​19519
• Bump org.seleniumhq.selenium:htmlunit3-driver from 4.43.0 to 4.45.0 #​19365
• Bump org.seleniumhq.selenium:selenium-java from 4.43.0 to 4.45.0 #​19344
• Bump tools.jackson:jackson-bom from 3.2.0 to 3.2.1 #​19438
• Bump tools.jackson:jackson-bom from 3.2.1 to 3.2.2 #​19562
• Release 7.1.1 #​19310
• Upgrade to Micrometer 1.17.1 #​19489
• Upgrade to Reactor 2025.0.7 #​19488
• Upgrade to Spring Framework 7.0.9 #​19487
• Upgrade to Spring LDAP 4.1.1 #​19491

spring-projects/spring-framework (org.springframework:spring-webmvc)

v7.0.9

Compare Source

⚠️ Attention Required

• In Spring Framework 7.0.9, ForwardedHeaderFilter (Spring MVC) and ForwardedHeaderTransformer (WebFlux) each provide a boolean constructor argument whether to use the standard "Forwarded" header or the "X-Forwarded" alternative headers. A separate property turns on and off use of "X-Forwarded-Prefix". While the default constructor preserves the existing behavior, we recommend to use the new constructor to explicitly specify which forwarded headers to use to make the processing more deterministic and aligned with what is expected from the proxy. Please, see the updated Security Considerations section for details. In 7.1 with #​37072 the default constructor is deprecated and marked for removal. #​37090
• In Spring Framework 7.0.9, SimpleEvaluationContext no longer supports expression compilation by default, regardless of the compiler mode configured via SpelParserConfiguration or the spring.expression.compiler.mode system property or Spring property. Applications that intentionally use SimpleEvaluationContext with trusted expressions and require compilation for performance reasons can opt in by calling withCompilationSupported() on the SimpleEvaluationContext builder. Care should be taken when opting in to compilation, as doing so removes the safety guards applied during interpreted evaluation. #​37035

⭐ New Features

• Ignore an empty port value in URI parsing #​37117
• Avoid retaining class files in annotation metadata #​37112
• Add @Nullable annotations when treating Map.remove() as returning @Nullable #​37067
• Revisit SSE view fragments handling #​37061
• Check list index after auto-grow in AbstractNestablePropertyAccessor #​37036
• Disable SpEL expression compilation by default in SimpleEvaluationContext #​37035
• Limit result size of BigDecimal/BigInteger power operations in SpEL #​37034
• Refactor redirect handling in UrlHandlerFilter #​37030
• Revise stylesheet source handling in XsltView #​37029
• Revise view name handling in UrlFilenameViewController #​37027
• Handle pre-flight requests in functional endpoint setup without DispatcherHandler #​37024
• Improve WebSocket handshake error logging #​37023
• Fix missing nullability in JdbcTemplate.batchUpdate #​37012
• Timeout property in RetryPolicy does not have a default constant #​36983
• Write native configuration files as UTF-8 #​36972
• DefaultServerRequest.ServletParametersMap.entrySet() does not retain HttpServletRequest.getParameterMap() order #​36966
• Perform nextKey within synchronization for SQLite as well #​36959
• Add support for custom ObjectInputFilter on DefaultDeserializer #​36958
• Revise resource bundle caching for common locales #​36957
• Improve nullability for getSession(*) in MockHttpServletRequest #​36926
• Improve fallback logic in ParameterContentNegotiationStrategy and ParameterContentTypeResolver #​36925
• Improve ambiguous match check on preflight request #​36903
• Improve Groovy markup template loading #​36902
• Improve request path handling on a Reactor Netty server #​36893
• Improve JettyWebSocketSession error handling #​36891

🐞 Bug Fixes

• EclipseLinkJpaDialect singleton lock in EclipseLinkConnectionHandle.getConnection() serializes all JDBC connection acquisitions under load #​37085
• MetadataReader fails to read byte[] array from annotation #​37083
• Ensure parsing/tostring symmetry in ContentDisposition #​37064
• Character outside of permitted range in Content Disposition #​37062
• Release Jackson BufferRecycler to its pool in encoders #​37059
• Ensure consistent error escaping #​37055
• Refine template name processing #​37054
• Reset TwoByteMatcher partial match on mismatching byte #​37053
• Refactor async XML parsing limit checks #​37031
• Fix part constraint checks in PartEventHttpMessageReader #​37028
• Fix buffer leak in RSocket SETUP frame handling #​37026
• Ensure correct Jetty core response cookie handling #​37025
• Align domainToAscii with current WhatWG spec #​37018
• Ensure consistent ButtonTag value attribute processing #​37017
• SpEL's InlineList is cached as a mutable list in compiled mode #​37001
• Write native configuration file when only lambda hints are present #​36989
• SpEL Indexer reuses invalid cached PropertyAccessor #​36986
• SpEL reuses invalid cached ConstructorExecutor #​36985
• MimeTypeUtils raises StringIndexOutOfBoundsException for some invalid mime types #​36971
• Ignore DOCTYPE inside a multi-line comment body #​36948
• Avoid divide-by-zero in ExponentialBackOff jitter #​36932
• Refactor use or close lock in ConcurrentWebSocketSessionDecorator #​36909
• Host header initialization breaking change in StompRelayMessageBrokerHandler #​36907
• Remote address checks for SockJS session #​36681 breaks xhr-polling #​36904
• LifeCyclePrintWriter does not delegate correctly #​36885
• IllegalArgumentException when creating named native query via Shared EntityManager with Hibernate 8.0.0-SNAPSHOT / JPA 4.0.0-M4 #​36878

📔 Documentation

• Document AOP proxy semantics for Bean Overrides in tests #​37121
• Provide guidance for object model design in SpEL #​37102
• Fix Javadoc error in ProtobufDecoder #​37079
• Document security implications of evaluating untrusted SpEL expressions #​36997
• Document relationships between expressions, evaluation contexts, and accessors in SpEL #​36968
• Update Javadoc for @ActiveProfiles ordering #​36950
• Document behavior for 0 delay combined with jitter in backoff policies #​36946
• Clarify design goal of UrlFilenameViewController in Javadoc #​36906

🔨 Dependency Upgrades

• Upgrade to Micrometer 1.16.7 and Tracing 1.6.7 #​37104
• Upgrade to Reactor 2025.0.7 #​37103

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​ZaMan0806, @​alexisgra, @​alshain, @​gianmarcoschifone, @​junhyeong9812, @​msridhar, @​perovic, @​quaff, and @​samueldlightfoot

junit-team/junit-framework (org.junit.platform:junit-platform-launcher)

v6.1.2

v6.1.1

locationtech/jts (org.locationtech.jts:jts-core)

v1.20.0: JTS Release 1.20.0

Compare Source

Release Date: 09/04/2024

Developer updates:

• Polygonal Coverages and Operations in JTS
• Validating Polygonal Coverages in JTS
• Simplifying Polygonal Coverages with JTS
• Fast Coverage Union in JTS
• JTS Topological Relationships - the Next Generation
• RelateNG Performance

Eclipse: LocationTech JTS Topology Suite 1.20.0 and release review / #​794

New Features

• Add CoverageValidator CoveragePolygonValidator (#​900)
• Add CoverageGapFinder (#​900)
• Add CoverageUnion (#​900)
• Add CoverageSimplifier (#​911)
• Add OverlayNG support for simple GeometryCollection inputs (#​915)
• Add Geometry.hasDimension(int dim) method {#​944}
• Add ConcaveHull.alphaShape function (#​952)
• Add OffsetCurve Joined mode (#​956)
• Add PointLocation.isOnSegment function (#​1048)
• Add RelateNG API for improved topological relationship functionality and performance (#​1052, #​1055)
• Add system property jts.relate=ng to enable use of RelateNG in Geometry methods (#​1073)

Functionality Improvements

• Improve TopologyPreservingSimplifier to prevent edge-disjoint line collapse (#​925)
• Improve OffsetCurve to return more linework for some input situations (#​956)
• Reduce buffer curve short fillet segments (#​960)
• Added ability to specify boundary for LargestEmptyCircle (#​973)
• Improve DouglaPeuckerSimplifier and TopologyPreservingSimplifier to handle ring endpoints (#​1013)
• Add Angle functions sinSnap and cosSnap to avoid small errors, e.g. with buffer operations (#​1016)
• Improve Buffer input simplification for rings (#​1022)
• Improve CoverageSimplifier with ring removal, smoothing, inner/outer and per-feature tolerances (#​1060)

Bug Fixes

• Fix WKBReader and WKBWriter handling of M measures when writing to WKB and reading from WKB (#​734)
• Fix PreparedGeometry handling of EMPTY elements (#​904)
• Fix WKBReader parsing of WKB containing multiple empty elements (#​905)
• Fix LineSegment.orientationIndex(LineSegment) to correct orientation for non-collinear segments on right (#​914)
• Fix DepthSegment compareTo method (#​920)
• Ensure GeometryFixer does not change coordinate dimension (#​922)
• Improve ConvexHull radial sort robustness (#​927)
• Improve robustness of Delaunay Triangulation frame size heuristic (#​931)
• Fix PreparedLineString.intersects to handle mixed GCs correctly (#​944)
• Fix QuadEdgeSubdivision.TriangleEdgesListVisitor (#​945)
• Fix PolygonHoleJoiner to handle all valid inputs
  (allows PolygonTriangulator, ConstrainedDelaunayTriangulator, and ConcaveHullOfPolygons to work correctly) (#​946)
• Fix OffsetCurve handling of input with repeated points (#​956)
• Fix OffsetCurve handling zero offset distance (#​971)
• Fix MaximumInscribedCircle and LargestEmptyCircle to avoid long looping for thin inputs (#​978)
• Fix OffsetCurve to use a minimum QuadrantSegs value (#​981)
• Fix HilbertEncoder Y extent handling
• Fix Geometry.getCoordinate to return non-null coordinate for collections with empty first element (#​987)
• Fix LargestEmptyCircle to handle polygonal obstacles (#​988)
• Make intersection computation more robust (#​989)
• Fix VariableBuffer to handle zero vertex buffer distances correctly (#​997)
• Fix IncrementalDelaunayTriangulator to ensure triangulation boundary is convex (#​1004)
• Fix OverlayNG Area Check heuristic for difference (#​1005)
• Fix InteriorPointPoint to handle empty elements
• Fix DistanceOp for empty elements (#​1010)
• Fix predicates for MultiPoint with EMPTY (#​1015)
• Fix InteriorPoint for MultiLineString with EMPTY (#​1023)
• Fix TopologyPreservingSimplifier to prevent incorrect topology from jumping components (#​1024)
• Fix OffsetCurve to ensure end segments are included (#​1029)
• Fix PointLocator to respect BoundaryNodeRule for single lines (#​1031)
• Fix BufferOp Inverted Ring Removal check (#​1038)
• Improve VariableBuffer segment buffer cap generation (#​1041)
• Fix TopologyPreservingSimplifier ring endpoint removal indexing (#​1059)

Performance Improvements

• Improve Polygonizer performance in some cases with many islands (#​906)
• Improve Convex Hull performance by avoiding duplicate uniquing (#​985)
• Improve HPRtree performance (#​1012)
• Improve performance of noding and overlay via HPRtree (#​1012)
• Improve DistanceOp performance for Point-Point (#​1049)
• Improve CoveragePolygonValidator via section performance optimization (#​1053)

v1.19.0: JTS Release 1.19.0

Release Date: 06/21/2022

New Features

• Add ConstrainedDelaunayTriangulator and PolygonTriangulator (#​775, #​862)
• Add Tri data structure for representing triangulations (#​775)
• Add DiscreteFrechetDistance (#​764, #​783)
• Add OffsetCurve class (#​810, #​816)
• Add ConcaveHull class for points (#​823, #​829)
• Add ConcaveHullOfPolygons class (#​870)
• Add PolygonHullSimplifier class (#​861, #​880)
• TWKB read and write implementation (#​854)

Functionality Improvements

• Improve GeometryFixer behaviour for holes outside polygons (#​772)
• Simplify and fix logic of BufferParameters.setQuadSegs (#​778)
• Improve KdTree query code to avoid recursion (#​779)
• Add KdTree seeding toSnappingNoder (#​780)
• Add GeometryFixer option to preserve Multi geometry types when collapses occur (#​791)
• Make QuadTree thread-safe (#​792)
• Allow specifying a fixed PrecisionModel via grid size (#​804)
• Improve Densifier to interpolate Z values (#​835)
• Add support for GeoJSON Feature and FeatureCollection types (#​837)
• Add WKTReader.setFixStructure to fix WKT input (#​848)
• Improve LineSegment.hashCode to reduce collisions (#​872)

Performance Improvements

• Improve performance of CoveageUnion by using boundary chains (#​891)

Bug Fixes

• Fix WKTReader geometry typename parsing (#​786)
• Fix CoordinateArrays.reverse to handle zero-length arrays #​787
• Fix GeometryFixer to appply isKeepCollapsed flag to GeometryCollection elements (#​790)
• Fix RectangleIntersects to handle XYZM geometry (#​794)
• Fix various operations to handle XYZM geometry (#​795)
• Fix SnapRoundingNoder to use tolerance in noding (also fixes GeometryPrecisionReducer) (#​802)
• Fix MaximumInscribedCircle to avoid infinite-looping on flat collapsed input (#​807)
• Add OverlayNG result area heuristic check (#​812)
• Fix the buffers generated for mitred joins (#​818)
• Fix WKTReader to produce correct XY coordinate dimension for POLYGON EMPTY (#​828)
• Fix RelateOp for a snapped line boundary point (#​839)
• Fix IsValidOp for repeated node points (#​845)
• Fix IsSimpleOp for repeated endpoints (#​851)
• Fix GeometryFixer via noding check for zero-distance buffers (#​867)
• Fix MinimumDiameter.minimumRectangle for flat inputs (#​875)
• Fix BufferOp inverted ring check optimization (#​878)
• Fix STRtree nearest-neighbour queries on empty trees to avoid NPE (#​886)
• Remove transitive compile dependency on junit from jts-io-commmon (#​855)

Jaspersoft/jasperreports (net.sf.jasperreports:jasperreports-pdf)

v7.0.8

Compare Source

• introducing configuration properties to disable query executers and also disable dynamic
  queries that make use of $P!{} parameter references;

• introducing HTML hyperlink whitelist filter for controlling remote website access from HTML exports;

• the PDF tagging code has been isolated into a new PdfTagger interface and its latest and
  most complete implementation has been moved out of the JasperReports Library Community Edition
  code base and will only be available as part of the JasperReports Library Professional extensions
  provided by Jaspersoft; Note that PDF tagging functionality is used to produce accessible PDF
  documents (PDF/UA) and PDF documents for archiving (PDF/A);

• JasperReports can now run on stock OpenPDF 1.3.43; the Jaspersoft build of OpenPDF is only
  required for the PDF/UA link annotation /StructParent tagging, which is otherwise skipped;

• various dependencies upgrades including: Spring 6.2.19 and Jackson 2.18.8;

• minor bug fixes and improvements;

vladmihalcea/hypersistence-utils (io.hypersistence:hypersistence-utils-hibernate-63)

v3.15.5

================================================================================

Add support for batching the updateAll methods #​862

Undeprecate ListArrayType #​861

Add support for the PostgreSQL macaddr type #​858

---

Configuration

📅 Schedule: (in timezone Europe/Zurich)

• Branch creation
  • "after 5pm on the first day of the month,on the first day of the month"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.