Skip to content

fix(deps): update spring core to v7 (major) #595

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

fix(deps): update spring core to v7 (major) #595

wants to merge 1 commit into from

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 13, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence
org.springframework:spring-web 6.1.13 -> 7.0.1 age confidence
org.springframework:spring-test 6.1.13 -> 7.0.1 age confidence

Release Notes

spring-projects/spring-framework (org.springframework:spring-web)

v7.0.1

v7.0.0

🍃 Please read the official release notes and upgrade guide
⭐ New Features
  • Make SessionHolder publicly accessible for external resource management #​35799
  • RouterFunctions Builders do not support ServerResponse subtypes #​35791
  • Configure Jackson CBOR codecs by default if present #​35787
  • Rename maxAttempts to maxRetries in @Retryable and RetryPolicy #​35772
  • Prevent Kotlin Serialization side effects #​35761
  • Add default API version to the list of supported versions #​35755
  • Improve user check in TransportHandlingSockJsService #​35753
  • Update ApiVersionDeprecationHandler to provide access to handler #​35750
  • Use dedicated classes for ApiVersionResolver implementations #​35747
  • Provide AOT support for @Nested classes in a @ParameterizedClass #​35744
  • AssertJ support for WebTestClient #​35737
  • Reject attempt to use @MockitoSpyBean with a scoped proxy #​35722
  • Provide a way to supply the client builder for an HttpServiceGroup #​35707
  • Review HttpMessageConverters.Builder to improve readability of code using the API #​35704
  • Configure custom Kotlin Serialization converter on HttpMessageConverters #​35733
🐞 Bug Fixes
  • Missing support for UnprocessableContent in WebClientResponseException.create(HttpStatusCode, ..) methods #​35802
  • Relax media type checks in HttpMessageConverters #​35801
  • Fix HttpHeaders and WebSocketHttpHeaders interop issues #​35792
  • @ConcurrencyLimit weird behavior when combined with @Async and @Transactional #​35788
  • buildSrc:test failing on JDKs before JDK 25 #​35777
  • Add jar validation and fix multi-release jar #​35768
  • Upgrade to JUnit 6.0.1 and prevent AOT test scanning failure for JUnit 4 tests #​35740
  • Fix port handling in HtmlUnitRequestBuilder #​35709
  • RestTestClient.mutate() should not have side effects #​35698
📔 Documentation
  • Document workaround for @PersistenceContext and @PersistenceUnit in test classes in AOT #​31442
🔨 Dependency Upgrades
❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Sineaggi and @​UpStreamThomas

v6.2.14

Compare Source

v6.2.13

Compare Source

⭐ New Features
  • Support response encoding in select and options JSP form tags #​35783
  • Preserve Connection readOnly state for DataSource with defaultReadOnly configuration #​35743
  • Optimize resource URL resolution in SortedResourcesFactoryBean #​35687
  • Relax multiple segment matching constraints in PathPattern #​35686
  • Support wildcard path elements at the start of path patterns #​35679
  • Validating byte[]s may produce OutOfMemoryError #​35675
  • Update in FragmentsRendering to names of static methods #​33974
🐞 Bug Fixes
  • ConcurrentReferenceHashMap misses dedicated computeIfAbsent, computeIfPresent, compute, merge implementations #​35794
  • Avoid unnecessary bridge method resolution around getMostSpecificMethod #​35780
  • Fix multi-release JAR issue with VirtualThreadDelegate #​35773
  • ContentNegotiationManager not finding media type when request includes quality parameter #​35754
  • Race condition in BufferingClientHttpResponseWrapper.getBody() #​35745
  • Deprecate setConnectTimeout on HttpComponentsClientHttpRequestFactory #​35748
  • Fix PathMatchingResourcePatternResolver to handle absolute paths in JAR manifests #​35732
  • BeanDefinitionBuilder.addAutowiredProperty causes error during AOT processing #​35731
  • Improve HttpServiceMethod support for Kotlin suspending functions returning Flow #​35718
  • Exception translation does not expose original BatchUpdateException anymore #​35717
  • Add hints for entities package-private methods #​35711
  • Fix concurrency permit leak causing deadlock in SimpleAsyncTaskExecutor #​35708
  • Remove jibx-marshaller element from spring-oxm.xsd #​35699
  • NullPointerException When Handling 407 with JdkClientHttpConnector in WebClient #​35692
  • Method-based Map injection fails against target Map with incomplete generics despite bean name or qualifier match #​35690
  • JUnit Jupiter TEST_METHOD ExtensionContextScope is not fully supported #​35680
  • Introduce isAutowirableConstructor(Executable, PropertyProvider) in TestConstructorUtils and deprecate existing variants #​35676
  • Reflection on java.sql.Types without runtime hints #​35674
  • getPubliclyAccessibleMethodIfPossible() returns hidden static method #​35667
  • RestClient hangs during upload with ReactorClientHttpRequestFactory #​34707
📔 Documentation
  • Correct formatting for Mono type #​35786
  • Improve Java Bean Validation documentation for controller methods #​35759
  • Fix typo in @NumberFormat Javadoc #​35742
  • Javadoc of AsyncConfigurer does not match runtime behavior #​35736
  • Document PathPattern behavior difference between */{name} and **/{*path} #​35727
  • Fix minor typo in RestClient documentation #​35723
  • Document test-method scoped TestContext semantics #​35716
  • Improve docs on AbstractStreamingClientHttpRequest for streaming vs buffering mode #​35700
  • Fix minor typo in JDBC Core Classes documentation #​35684
  • Fix typos #​35656
  • Improve spring-web filter documentation #​30454
🔨 Dependency Upgrades
❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Anxton, @​Artur-, @​HJC96, @​MoadElfatihi, @​NYgomets, @​cbsingh1, @​dmitrysulman, @​ekcom, and @​scordio

v6.2.12

Compare Source

⭐ New Features

  • Add "forEachByte" variant to DataBuffer for efficient traversing #​35623
  • Nested transaction support via savepoints is broken in HSQLDB database [followup] #​35618
  • Improve exception handling in ConfigurationClassBeanDefinitionReader #​35631
  • Add MySQL/MariaDB to TableMetaDataProviderFactory for correct generated-keys support #​35593
  • Optimize state management in StompSubProtocolHandler #​35591
  • ServletServerHttpRequest.getRemoteAddress() may perform DNS lookup #​35589
  • Emit log message when multiple primary beans are detected #​35550
  • Duplicate key error is mapped to TransientDataAccessException by SQLStateSQLExceptionTranslator for BatchUpdateException #​35547
  • Remove redundant object allocation in cglib proxy method calls #​35543
  • Remove deprecation on CandidateComponentsIndex and CandidateComponentsIndexLoader #​35472
  • Processing response with no Content-Length header and no body raises EOFException #​35361

🐞 Bug Fixes

  • DefaultListableBeanFactory::getBeanNamesForType does not always return all bean names #​35634
  • Consider defaultCandidate for scoped proxies #​35627
  • Release data buffer in AbstractCharSequenceDecoder even when String creation fails #​35625
  • PathMatchingResourcePatternResolver is not able to resolve file in SpringBoot Packaged JAR #​35617
  • Prevent NoClassDefFoundError when Jetty Reactive HttpClient is not available #​35608
  • Performance regression with Property Placeholder Resolution #​35594
  • Retain order of produces media types in @ExceptionHandler #​35587
  • Nested transaction support via savepoints is broken in HSQLDB database #​35564
  • SpEL expression parser uses more CPU after upgrade to 6.2.9 #​35556
  • Thread race during FactoryBean instantiations starting with 6.2 due to lenient locks #​35545
  • Update parsed path handling in UrlHandlerFilter #​35538
  • ResourceHttpMessageWriter.write has unexpected error handling for invalid range requests (offset > content length) #​35536
  • AbstractTestNGSpringContextTests is not thread-safe regarding tracked exceptions #​35528
  • UrlHandlerFilter breaks RequestDispatcher.forward() on Tomcat #​35509
  • AbstractMockHttpServletRequestBuilder#buildRequest is not idempotent #​35493
  • Add support for JvmDefault (default in Kotlin 2.2.20+) #​35487
  • InstanceSupplierCodeGenerator fails to detect deprecated type on package private factory method #​35486
  • Fix synchronization in ResponseBodyEmitter #​35466
  • useCaches option in PathMatchingResourcePatternResolver not applied in special case #​35465
  • Deadlock during context initialization due to EntityManager lock #​35398

📔 Documentation

  • Improve guidance in WebFlux on how to join inbound and outbound streams in WebSocketHandler #​35572
  • Fix idref example in reference manual #​35560
  • Fix URI Patterns docs in WebMVC and WebFlux Request Mapping #​35551
  • Allow event listener method declared with multiple event classes to take a single parameter that is assignable from all of those event classes #​35506
  • Improve Task Javadoc about Runnable wrapping #​35394

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Entea, @​IMurzich, @​hosea, @​maziyarbahramian, @​mlichtblau, @​nstdio, @​reckart, and @​reda-alaoui

v6.2.11

Compare Source

⭐ New Features

  • Missing @Nullable on JsonPathAssertions.isEqualTo #​35445
  • Graceful fallback for non-default NIO.2 FileSystems #​35443
  • Avoid thread pinning in SseEmitter, ResponseBodyEmitter #​35423
  • Detect Informix error codes as DuplicateKeyException #​35400
  • Inconsistent nullability for String value arguments in ResponseCookie from*() factory methods #​35377
  • Revisit taskTerminationTimeout semantics on SimpleAsyncTaskExecutor/Scheduler #​35372
  • StandardEvaluationContext.setBeanResolver should allow @Nullable BeanResolver #​35371

🐞 Bug Fixes

  • "mainThreadPrefix = null " Causing multiple background bean locks to be blocked #​35409
  • Annotation not found on parameter in overridden method unless method is public #​35349
  • Annotations on overridden methods not found in type hierarchy with unresolved generics #​35342
  • Performance degradation when using singleton beans with Provider #​35330
  • JettyClientHttpConnector buffer leak in Spring Framework 6.2 #​35319
  • Spring application hangs on shutdown with @Scheduled(cron=…) when custom ScheduledExecutorService bean is defined (Java 19+) #​35316

📔 Documentation

  • Document potential need to use Mockito.doXxx() to stub a @MockitoSpyBean #​35410
  • Fix links to Reactive Libraries and RestTemplate #​35392
  • Fix broken link in WebDriver docs #​35374
  • Document Web DataBinder support for RouterFunction #​35367
  • Improve documentation for ApplicationEvents to clarify recommended usage #​35335
  • Document terms and units in DataSize.parse() #​35298
  • Refine @Contract Javadoc #​35285
  • Correct the default value of nestedTransactionAllowed in JpaTransactionManager javadoc #​35212

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Dockerel, @​Kehrlann, @​acktsap, @​khj68, @​ngocnhan-tran1996, @​scordio, and @​sgflt

v6.2.10

Compare Source

⭐ New Features

  • Optimize NIO path resolution in PathEditor #​35304
  • Make type in ProblemDetail nullable #​35294
  • Refine UriUtils#decode and StringUtils#uriDecode implementation and documentation #​35253
  • Provide configurable useCaches option for URLConnection usage in UrlResource (avoiding jar file leak) #​35218

🐞 Bug Fixes

  • @Scheduled tasks running in SimpleAsyncTaskScheduler are interrupted immediately on context close #​35254
  • ScriptUtils.executeSqlScript() does not support multiple results per statement #​35248
  • Successful Autowiring Dependent on Configuration ordering and Primary Bean flag #​35239
  • Locale parameter in MessageSource#getMessage methods should be nullable #​35230
  • Allow any @Transactional propagation for @TransactionalEventListener with BEFORE_COMMIT phase #​35150
  • Catalog name should be handled with the provided case #​35064
  • Accept support for generated keys column name array on HSQLDB and Derby as well #​34790
  • Handle direct CanncelationException on timeout in JdkClientHttpRequest #​34721

📔 Documentation

  • Add documentation of RequestMapping about SpEL #​35232
  • Document SqlBinaryValue behaviour with PostgreSQL #​34786

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Allan-QLB, @​carsago, @​cw-dimedis, and @​giampa91

v6.2.9

Compare Source

⭐ New Features

  • OncePerRequestFilter cannot be CGLib-proxied #​35198
  • Consistently catch InaccessibleObjectException next to IllegalAccessException #​35190
  • Introduce Date-to-Instant and Instant-to-Date converters #​35175
  • Consistent nullability and exception declarations in AbstractMessagingTemplate hierarchy #​35159
  • Register runtime hints for Instant-to-Timestamp conversion #​35156
  • Improve handling of ResponseEntity<?> in Spring MVC #​35153
  • Support @CacheConfig("myCacheName") declarations for simplified configuration #​35152
  • Declare messageSelector parameters in JmsOperations as @Nullable #​35151
  • Add getter for OverflowStrategy in ConcurrentWebSocketSessionDecorator #​35132
  • Use preset Content-Type for streaming and reactive responses in Spring MVC #​35130
  • Leniently tolerate null @Aspect bean #​35074
  • DataAccessResourceFailureException thrown when transaction times out on PostgreSQL #​35073
  • MethodInvokingFactoryBean fails to invoke publicly exported methods overridden by internal classes when using JPMS #​34028

🐞 Bug Fixes

  • Restore preference for interface (most abstract) method in getPubliclyAccessibleMethodIfPossible #​35189
  • Make targetBeanName field in AbstractBeanFactoryBasedTargetSource protected to avoid exceptions in logging and toString() #​35172
  • Fix inconsistencies in StaticListableBeanFactory #​35119
  • Support StreamingHttpOutputMessage in RestClient #​35102
  • When building DELETE requests, the request body is not used in JdkClientHttpRequest.buildRequest #​35068
  • AOT-generated bean registration file contains "too many constants" when building with many beans #​35044
  • Prevent cache pollution by storing only the factories #​34732
  • WebFlux decodes wildcard content-types as form-data/multipart #​34660
  • AOT-generated CGLib proxies do not contain method overrides #​34642
  • 500 response for ResourceHttpRequestHandler when requested range is not satisfied #​34490

📔 Documentation

  • Document how to register runtime hints for convention-based conversion #​35178
  • Link to @ContextConfiguration Javadoc from reference manual #​35088

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Meijuh, @​RazorNd, @​chenggwang, @​izeye, @​mjd507, @​ngocnhan-tran1996, and @​philwebb

v6.2.8

Compare Source

⭐ New Features

  • Nullability @Contract declaration for CodeFlow.isIntegerForNumericOp() is unnecessary #​34985
  • Serializer hint registration is broken for some Kotlin classes #​34979
  • Clients created using JdkClientHttpRequestFactory set content-length for GET, DELETE and HEAD requests #​34971
  • Support registration of non-public BeanDefinitionReader via @ImportResource #​34928
  • Make max size for pattern cache in PathPatternMatchableHandlerMapping configurable #​34918
  • Add optimized DataBufferInputStream overrides #​34799

🐞 Bug Fixes

  • Encode non-printable character in Content-Disposition parameter #​35034
  • Allow update of existing WebSession after max sessions limit is reached #​35013
  • Fix support for collections in AbstractKotlinSerializationHttpMessageConverter #​34992
  • PathPattern#combine throws StringIndexOutOfBoundsException #​34986
  • Fix AOT code generation for autowired inner class constructor #​34974
  • AbstractFileResolvingResource.exists closes JAR resource input streams with v6.2.7 #​34955
  • Enhanced configuration class fails to call package-visible superclass constructor on WebSphere #​34950
  • Fix REPLY_CHANNEL header check in MessageHeaderAccessor #​34949
  • MockEnvironment does not accept Object property values #​34947
  • PropertySourcesPlaceholderConfigurer no longer uses ConversionService from Environment #​34936
  • @Contract for StreamUtils.drain() incorrectly declares null results in an exception #​34933
  • Inconsistent behavior injecting null @Bean factory parameter #​34929
  • MockHttpServletRequest.addHeader duplicates "Content-Type" header #​34913
  • BeanUtils.getParameterNames fails for Kotlin data classes #​34760
  • JAXB message converters ignore Content-Type charset #​34745
  • Aspect Not Triggered After Restart in Spring Boot 3.4.x (But Works in 3.3.10) #​34735
  • Add caching headers to unmodified static resources #​34614

📔 Documentation

  • Apply gh-34856 to MockClientHttpRequest in testfixture package #​35031
  • Fix ResourceHttpRequestHandler#setHeaders JavaDoc #​35004
  • Remove reference to AspectJ Eclipse Javadoc #​35000
  • Mention CompletableFuture in Spring MVC "Asynchronous Requests" section of reference manual #​34991
  • Fix exception name in ModelAttribute docs #​34980
  • Fix syntax in @SqlGroup example #​34972
  • Update X-Forwarded-Proto doc to say https / http #​34959
  • Update Guidance on Best Practices To Test Code That Uses RestClient and RestTemplate #​34892
  • Add a section for WebAsyncTask in mvc-ann-async.adoc #​34885
  • Clarify what @RestControllerAdvice vs @ControllerAdvice apply to by default #​34866
  • Improve Javadoc for @ExceptionHandler #​34554

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Allan-QLB, @​Aurh1l, @​BowieDu, @​DhruvTheDev1, @​Dongnyoung, @​JimmyAx, @​addoDev, @​dmitrysulman, @​izeye, @​jjank, @​kilink, @​mbazos, @​msnsaeed71, @​ngocnhan-tran1996, @​nosan, @​remeio, @​vpavic, and @​yuzawa-san

v6.2.7

Compare Source

⭐ New Features

  • Forward more methods to underlying InputStream in NonClosingInputStream #​34893
  • Introduce Spring property for the default property placeholder escape character #​34865
  • Close ApplicationContext once AOT processing has completed #​34841
  • Fix AbstractJackson2HttpMessageConverter#getObjectMappersForType nullness #​34811
  • Add option for case-insensitive match to PatternMatchUtils #​34801
  • RestClient @RequestBody parameters lose generic type information when creating HTTP service beans #​34793
  • Adds option to set Principal in MockServerWebExchange #​34789

🐞 Bug Fixes

  • Beans created by FactoryBean are not considered as autowiring candidates if another thread holds a singletonLock #​34902
  • PropertySourcesPlaceholderConfigurer placeholder resolution fails in several scenarios #​34861
  • HttpComponentsClientHttpRequestFactory setConnectionRequestTimeout not working with httpclient 5.3.1 #​34851
  • Fragment.create() requires mutable map - which is unusable when used with Kotlin #​34848
  • Duplicate BeanOverrideHandler discovered in @Nested test case with superclass from different class or in interface implemented multiple times #​34844
  • Accidental ClassLoader defineClass enforcement after #​34677 #​34824
  • HttpEntity.EMPTY headers should not be possible to mutate via HttpHeaders constructor #​34812
  • AbstractFileResolvingResource.exists incorrectly reports result for resources inside of spring-boot executable jar #​34796
  • Correctly expand query param with same name from URI variables array #​34783
  • R2DBC NamedParameterUtils only expands reused collection parameter once #​34768
  • PathMatchingResourcePatternResolver wrongly assumes that target/classes always exists #​34764

📔 Documentation

  • Clarify CompositePropertySource behavior for EnumerablePropertySource contract #​34886
  • Javadoc and @Nullable annotation for servletContext parameter of ConfigurableWebEnvironment.initPropertySources are contradictory #​34845
  • Spring MVC: @EnableAsync needs to be redeclared for each ApplicationContext #​34843
  • Provide a working example instead of unclear placeholders #​34828

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Artur-, @​blake-bauman, @​iifawzi, @​kilink, @​quaff, @​whlit, and @​zzoe2346

v6.2.6

Compare Source

⭐ New Features

  • An option for SimpleAsyncTaskExecutor to throw an exception when limit is reached #​34727
  • Provide first-class support for Bean Overrides with @ContextHierarchy #​34723
  • Micro performance optimizations #​34717
  • Suppress "Unable to rollback against JDBC Connection" in case of timeout (connection closed) #​34714
  • Avoid early FactoryBean instantiation for type-based retrieval with includeNonSingletons=false and allowEagerInit=true #​34710
  • ReactiveCachingHandler still not using error handler on sync cache. #​34708
  • Add an exchangeForRequiredValue variant to RestClient #​34692
  • Recursively boxing Kotlin nested value classes in CoroutinesUtils #​34682
  • ServletServerHttpRequest does not use charset parameter of application/x-www-form-urlencoded #​34675
  • LifecycleGroup concurrent start and start timeout #​34634
  • HibernateJpaDialect exception translation misses concrete exceptions wrapped in Hibernate's ExecutionException #​34633

🐞 Bug Fixes

  • Inconsistency in SseEmitter.onCompletion() behavior between Spring 6.2.3 and 6.2.5 #​34762
  • Deadlock while creating Spring beans with parallel bootstrap threads on IBM Liberty #​34729
  • PropertyBatchUpdateException: causes of nested PropertyAccessExceptions not shown in output #​34691
  • IllegalAccessError for package-private member of AzureStorageConfiguration on WebSphere #​34684
  • Change in Jar usecache behavior with Spring 6.1.x causing java.lang.IllegalStateException: zip file closed #​34678
  • Startup performance regression due to CGLIB class load attempts in Spring 6.1.x #​34677
  • An infinite wait on a parallel context.getBean() #​34672
  • InvalidObservationException: Invalid start: Observation 'http.client.requests' has already been started #​34671
  • @Configuration classes can no longer be abstract without @Bean methods #​34663
  • Generated-code for LinkedHashMap is missing static keyword #​34659
  • Detect late-set primary markers for autowiring shortcut algorithm #​34658
  • @MockitoBean with custom @Qualifier is not injected into @Configuration class #​34646
  • Qualifier Resolution Issue in Parent-Child Context Hierarchies #​34644
  • Enforced container-level acknowledge call for custom acknowledgement mode #​34635
  • UriComponentsBuilder does not treat a URN as opaque if it contains a slash #​34588
  • Migrating from Spring 6.1.x to 6.2.x leads to exceptions in a Pekko setup #​34303

📔 Documentation

  • Update Javadoc for ignoreDependencyInterface() in AbstractAutowireCapableBeanFactory #​34747
  • Update Javadoc to stop mentioning 5.3.x as the status quo #​34740
  • Fix broken link for Server-Sent Events #​34705
  • Fix typo in Bean Validation section of reference manual #​34686
  • Remove unnecessary closing curly brackets in Javadoc #​34679
  • Add javadoc notes on potential exception suppression in ListableBeanFactory#getBeansOfType #​34629
  • Remove remaining references to Forwarded headers in MvcUriComponentsBuilder #​34625

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​acktsap, @​dmitrysulman, @​iggzq, @​izeye, @​ngocnhan-tran1996, @​obourgain, and @​tobias-haenel

v6.2.5

Compare Source

⭐ New Features

  • Make dependencies on AssertJ and JUnit in spring-core-test optional #​34612
  • Suggest compilation with -parameters when AspectJAdviceParameterNameDiscoverer fails against ambiguity #​34609
  • SseBuilder in ServerResponse should allow empty comment #​34608
  • MockServerWebExchange does not allow setting the ApplicationContext on the base class #​34601
  • FormHttpMessageConverter should throw HttpMessageNotReadableException when the http form data is invalid #​34594
  • Provide a method to retrieve all singleton autowire candidates from the bean factory #​34591

🐞 Bug Fixes

  • PathMatchingResourcePatternResolver regression for jar root scanning in 6.2.4 #​34607
  • AbstractReactiveTransactionManager throws IllegalStateException when rollback fails after commit attempt #​34595
  • Recursively boxing/unboxing nested inline value classes #​34592

📔 Documentation

  • MvcUriComponentsBuilder javadocs inaccurately reflects usage of forwarded headers #​34615
  • Fix formatting and update links to scripting libraries and HDIV #​34603
  • Remove dubious link to MockObjects Web site in reference manual #​34593
  • Fix StringUtils#uriDecode Javadoc #​34590

🔨 Dependency Upgrades

  • Upgrade to ASM 9.8 (for early Java 25 support) #​34600

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Helmsdown, @​dmitrysulman, and @​ngocnhan-tran1996

v6.2.4

Compare Source

⭐ New Features

  • JettyCoreHttpHandlerAdapter compatibility with Jetty 12.0.17 #​34561
  • HandlerMethodValidationException.Visitor should support RequestBody with method parameter constraints #​34549
  • Allow ContentResultMatchersDsl matchers for supertypes of the checked type #​34542
  • Avoid JarURLConnection resource leak in AbstractFileResolvingResource.exists() #​34528
  • Deprecate rowsExpected property of SqlQuery fo

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.
@renovate renovate bot added the dependencies Pull requests that update a dependency file label Nov 13, 2025
@renovate renovate bot force-pushed the renovate/major-spring-core branch from f4bb049 to b43e799 Compare November 20, 2025 13:03
@sonarqubecloud
Copy link

sonarqubecloud bot commented Nov 20, 2025

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

1 participant