Skip to content

chore(deps)(deps): bump the spring group across 1 directory with 13 updates - #153

Merged
soidisant merged 1 commit into
mainfrom
dependabot/gradle/spring-21a0f90c79
Nov 10, 2026
Merged

chore(deps)(deps): bump the spring group across 1 directory with 13 updates#153
soidisant merged 1 commit into
mainfrom
dependabot/gradle/spring-21a0f90c79

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the spring group with 13 updates in the / directory:

Package From To
org.springframework:spring-core 7.0.9 7.0.10
org.springframework:spring-context 7.0.9 7.0.10
org.springframework:spring-webmvc 7.0.9 7.0.10
org.springframework.boot:spring-boot-autoconfigure 4.1.1 4.1.2
org.springframework.boot:spring-boot-starter-web 4.1.1 4.1.2
org.springframework.boot:spring-boot-starter-data-jpa 4.1.1 4.1.2
org.springframework.boot:spring-boot-starter-data-elasticsearch 4.1.1 4.1.2
org.springframework.boot:spring-boot-starter-test 4.1.1 4.1.2
org.springframework.boot:spring-boot-starter-webmvc-test 4.1.1 4.1.2
org.springframework.boot:spring-boot-testcontainers 4.1.1 4.1.2
org.springframework.boot 4.1.1 4.1.2
org.springframework.boot:spring-boot-starter-web 4.1.1 4.1.2
org.springframework.boot:spring-boot-starter-data-jpa 4.1.1 4.1.2
org.springframework.boot:spring-boot-starter-data-elasticsearch 4.1.1 4.1.2
org.springframework.boot:spring-boot-starter-test 4.1.1 4.1.2
org.springframework.boot:spring-boot-starter-webmvc-test 4.1.1 4.1.2
org.springframework.boot:spring-boot-testcontainers 4.1.1 4.1.2
org.springframework.data:spring-data-elasticsearch 6.1.1 6.1.2
org.springframework.data:spring-data-jpa 4.1.1 4.1.2
org.springframework.boot 4.1.1 4.1.2

Updates org.springframework:spring-core from 7.0.9 to 7.0.10

Release notes

Sourced from org.springframework:spring-core's releases.

v7.0.10

⭐ New Features

  • Align DelegatingMessageSource fallback implementation with AbstractMessageSource #37383
  • HttpEntity(T, MultiValueMap) stores an HttpHeaders unchecked, causing IncompatibleClassChangeError inside RestTemplate #37358
  • Recognize relocated Mockito MockAccess interface in ProxyProcessorSupport #37342
  • Runtime compatibility with JPA 4.0 M7 and corresponding Hibernate 8.0 snapshots #37315
  • Avoid Kotlin reflection in MethodParameter for non-suspending functions #37300
  • Revise underscore naming fallback in SimplePropertyRowMapper #37297
  • Avoid useless queue ops in ConcurrentLruCache.clear() #37292
  • PathMatchingResourcePatternResolver misses jars on java.class.path whose path contains % #37280
  • Remove redundant whitespace in exception messages #37277
  • OpenInView does no longer work with HibernateTransactionManager #37273
  • Lazily handle setClientInfo/setNetworkTimeout in LazyConnectionDataSourceProxy #37261
  • Avoid redundant filtering in FilteredMap.size() #37256
  • Support NaN and inifinite float values in toString() for synthesized annotations #37244
  • Use ArrayList instead of LinkedList in CompositeRetryListener #37231
  • redirectedUrl() argument in MockMvcResultMatchers should be @Nullable #37230
  • Published Gradle module file is missing javadocElements and sourcesElements #37209
  • Introduce a builder for SpelParserConfiguration #37187
  • Protobuf support classes all implement getMessageBuilder() #37147
  • Allow null contextPath in ServerHttpRequest.Builder #37099
  • Log broker availability events as String messages #36856

🐞 Bug Fixes

  • Avoid unnecessary dependent-bean registration for autowire-by-type #37424
  • Handle zero readTimeout in JdkClientHttpConnector #37412
  • Race condition in PartGenerator.CreateFileState can lose the completion signal #37409
  • Paused executor with late shutdown leaks its worker thread (and the closed context) after close #37406
  • Fix hanging retries for Flux-returning methods with caching #37403
  • Avoid serving stale values after failed refill in AbstractIdentityColumnMaxValueIncrementer #37402
  • Copy cookies in RenderingResponse.from() #37378
  • Avoid phantom keys in LinkedCaseInsensitiveMap.computeIfAbsent #37351
  • Fix single-value adaptation for primitive array types in TypeMappedAnnotation #37349
  • CssLinkResourceTransformer fails for invalid CSS links #37336
  • Fix cached ID reuse after commit failure in MySQLMaxValueIncrementer #37322
  • Fix connection leak in MySQLMaxValueIncrementer #37321
  • @CacheEvict truncates Flux results to the first element #37309
  • ConcurrentLruCache.clear() can miss entries added while it's running #37287
  • Enforce disk usage limit when spilling part to disk #37285
  • Prevent double size decrement in ConcurrentLruCache #37268
  • LogAccessor.debug(CharSequence) eagerly renders LogMessage since spring-core 7 switched from spring-jcl to commons-logging #37266
  • WebFlux loses empty multipart file when the file part is not last. #37264
  • Complete empty Uni instances from the Mutiny reactive adapter #37259
  • DefaultAsyncServerResponse.writeAsync() discards previously configured AsyncWebRequest timeout #37257
  • Provide missing native image hints for proxied hibernate 8 query types #37251
  • Provide missing native image hint for StatelessSession proxy created by SharedEntityManagerCreator. #37249
  • Provide missing native image reflection hint for hibernate PersistenceUnitInfoDescriptor. #37247
  • Sort duplicate key codes in SQLErrorCodes #37235

... (truncated)

Commits
  • 33a85b0 Release Spring Framework 7.0.10
  • ac5eb2a Upgrade to Micrometer 1.16.8
  • f2d3222 Upgrade to Reactor 2025.0.8
  • 884b3b2 Switch to Micrometer INTERNAL SNAPSHOT
  • ed94dc4 Build against Reactor SNAPSHOTs
  • 005807b Switch to INTERNAL-SNAPSHOT
  • e2688e8 Move ApplicationContextExpressionBenchmark to support package
  • 7632330 Avoid web.util.SeeUtils dependency through package-local copy
  • 44f93a6 Update release orchestration workflows to 0.0.7
  • 53404f5 Reduce ConcurrentMap declarations to plain Map
  • Additional commits viewable in compare view

Updates org.springframework:spring-context from 7.0.9 to 7.0.10

Release notes

Sourced from org.springframework:spring-context's releases.

v7.0.10

⭐ New Features

  • Align DelegatingMessageSource fallback implementation with AbstractMessageSource #37383
  • HttpEntity(T, MultiValueMap) stores an HttpHeaders unchecked, causing IncompatibleClassChangeError inside RestTemplate #37358
  • Recognize relocated Mockito MockAccess interface in ProxyProcessorSupport #37342
  • Runtime compatibility with JPA 4.0 M7 and corresponding Hibernate 8.0 snapshots #37315
  • Avoid Kotlin reflection in MethodParameter for non-suspending functions #37300
  • Revise underscore naming fallback in SimplePropertyRowMapper #37297
  • Avoid useless queue ops in ConcurrentLruCache.clear() #37292
  • PathMatchingResourcePatternResolver misses jars on java.class.path whose path contains % #37280
  • Remove redundant whitespace in exception messages #37277
  • OpenInView does no longer work with HibernateTransactionManager #37273
  • Lazily handle setClientInfo/setNetworkTimeout in LazyConnectionDataSourceProxy #37261
  • Avoid redundant filtering in FilteredMap.size() #37256
  • Support NaN and inifinite float values in toString() for synthesized annotations #37244
  • Use ArrayList instead of LinkedList in CompositeRetryListener #37231
  • redirectedUrl() argument in MockMvcResultMatchers should be @Nullable #37230
  • Published Gradle module file is missing javadocElements and sourcesElements #37209
  • Introduce a builder for SpelParserConfiguration #37187
  • Protobuf support classes all implement getMessageBuilder() #37147
  • Allow null contextPath in ServerHttpRequest.Builder #37099
  • Log broker availability events as String messages #36856

🐞 Bug Fixes

  • Avoid unnecessary dependent-bean registration for autowire-by-type #37424
  • Handle zero readTimeout in JdkClientHttpConnector #37412
  • Race condition in PartGenerator.CreateFileState can lose the completion signal #37409
  • Paused executor with late shutdown leaks its worker thread (and the closed context) after close #37406
  • Fix hanging retries for Flux-returning methods with caching #37403
  • Avoid serving stale values after failed refill in AbstractIdentityColumnMaxValueIncrementer #37402
  • Copy cookies in RenderingResponse.from() #37378
  • Avoid phantom keys in LinkedCaseInsensitiveMap.computeIfAbsent #37351
  • Fix single-value adaptation for primitive array types in TypeMappedAnnotation #37349
  • CssLinkResourceTransformer fails for invalid CSS links #37336
  • Fix cached ID reuse after commit failure in MySQLMaxValueIncrementer #37322
  • Fix connection leak in MySQLMaxValueIncrementer #37321
  • @CacheEvict truncates Flux results to the first element #37309
  • ConcurrentLruCache.clear() can miss entries added while it's running #37287
  • Enforce disk usage limit when spilling part to disk #37285
  • Prevent double size decrement in ConcurrentLruCache #37268
  • LogAccessor.debug(CharSequence) eagerly renders LogMessage since spring-core 7 switched from spring-jcl to commons-logging #37266
  • WebFlux loses empty multipart file when the file part is not last. #37264
  • Complete empty Uni instances from the Mutiny reactive adapter #37259
  • DefaultAsyncServerResponse.writeAsync() discards previously configured AsyncWebRequest timeout #37257
  • Provide missing native image hints for proxied hibernate 8 query types #37251
  • Provide missing native image hint for StatelessSession proxy created by SharedEntityManagerCreator. #37249
  • Provide missing native image reflection hint for hibernate PersistenceUnitInfoDescriptor. #37247
  • Sort duplicate key codes in SQLErrorCodes #37235

... (truncated)

Commits
  • 33a85b0 Release Spring Framework 7.0.10
  • ac5eb2a Upgrade to Micrometer 1.16.8
  • f2d3222 Upgrade to Reactor 2025.0.8
  • 884b3b2 Switch to Micrometer INTERNAL SNAPSHOT
  • ed94dc4 Build against Reactor SNAPSHOTs
  • 005807b Switch to INTERNAL-SNAPSHOT
  • e2688e8 Move ApplicationContextExpressionBenchmark to support package
  • 7632330 Avoid web.util.SeeUtils dependency through package-local copy
  • 44f93a6 Update release orchestration workflows to 0.0.7
  • 53404f5 Reduce ConcurrentMap declarations to plain Map
  • Additional commits viewable in compare view

Updates org.springframework:spring-webmvc from 7.0.9 to 7.0.10

Release notes

Sourced from org.springframework:spring-webmvc's releases.

v7.0.10

⭐ New Features

  • Align DelegatingMessageSource fallback implementation with AbstractMessageSource #37383
  • HttpEntity(T, MultiValueMap) stores an HttpHeaders unchecked, causing IncompatibleClassChangeError inside RestTemplate #37358
  • Recognize relocated Mockito MockAccess interface in ProxyProcessorSupport #37342
  • Runtime compatibility with JPA 4.0 M7 and corresponding Hibernate 8.0 snapshots #37315
  • Avoid Kotlin reflection in MethodParameter for non-suspending functions #37300
  • Revise underscore naming fallback in SimplePropertyRowMapper #37297
  • Avoid useless queue ops in ConcurrentLruCache.clear() #37292
  • PathMatchingResourcePatternResolver misses jars on java.class.path whose path contains % #37280
  • Remove redundant whitespace in exception messages #37277
  • OpenInView does no longer work with HibernateTransactionManager #37273
  • Lazily handle setClientInfo/setNetworkTimeout in LazyConnectionDataSourceProxy #37261
  • Avoid redundant filtering in FilteredMap.size() #37256
  • Support NaN and inifinite float values in toString() for synthesized annotations #37244
  • Use ArrayList instead of LinkedList in CompositeRetryListener #37231
  • redirectedUrl() argument in MockMvcResultMatchers should be @Nullable #37230
  • Published Gradle module file is missing javadocElements and sourcesElements #37209
  • Introduce a builder for SpelParserConfiguration #37187
  • Protobuf support classes all implement getMessageBuilder() #37147
  • Allow null contextPath in ServerHttpRequest.Builder #37099
  • Log broker availability events as String messages #36856

🐞 Bug Fixes

  • Avoid unnecessary dependent-bean registration for autowire-by-type #37424
  • Handle zero readTimeout in JdkClientHttpConnector #37412
  • Race condition in PartGenerator.CreateFileState can lose the completion signal #37409
  • Paused executor with late shutdown leaks its worker thread (and the closed context) after close #37406
  • Fix hanging retries for Flux-returning methods with caching #37403
  • Avoid serving stale values after failed refill in AbstractIdentityColumnMaxValueIncrementer #37402
  • Copy cookies in RenderingResponse.from() #37378
  • Avoid phantom keys in LinkedCaseInsensitiveMap.computeIfAbsent #37351
  • Fix single-value adaptation for primitive array types in TypeMappedAnnotation #37349
  • CssLinkResourceTransformer fails for invalid CSS links #37336
  • Fix cached ID reuse after commit failure in MySQLMaxValueIncrementer #37322
  • Fix connection leak in MySQLMaxValueIncrementer #37321
  • @CacheEvict truncates Flux results to the first element #37309
  • ConcurrentLruCache.clear() can miss entries added while it's running #37287
  • Enforce disk usage limit when spilling part to disk #37285
  • Prevent double size decrement in ConcurrentLruCache #37268
  • LogAccessor.debug(CharSequence) eagerly renders LogMessage since spring-core 7 switched from spring-jcl to commons-logging #37266
  • WebFlux loses empty multipart file when the file part is not last. #37264
  • Complete empty Uni instances from the Mutiny reactive adapter #37259
  • DefaultAsyncServerResponse.writeAsync() discards previously configured AsyncWebRequest timeout #37257
  • Provide missing native image hints for proxied hibernate 8 query types #37251
  • Provide missing native image hint for StatelessSession proxy created by SharedEntityManagerCreator. #37249
  • Provide missing native image reflection hint for hibernate PersistenceUnitInfoDescriptor. #37247
  • Sort duplicate key codes in SQLErrorCodes #37235

... (truncated)

Commits
  • 33a85b0 Release Spring Framework 7.0.10
  • ac5eb2a Upgrade to Micrometer 1.16.8
  • f2d3222 Upgrade to Reactor 2025.0.8
  • 884b3b2 Switch to Micrometer INTERNAL SNAPSHOT
  • ed94dc4 Build against Reactor SNAPSHOTs
  • 005807b Switch to INTERNAL-SNAPSHOT
  • e2688e8 Move ApplicationContextExpressionBenchmark to support package
  • 7632330 Avoid web.util.SeeUtils dependency through package-local copy
  • 44f93a6 Update release orchestration workflows to 0.0.7
  • 53404f5 Reduce ConcurrentMap declarations to plain Map
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-autoconfigure from 4.1.1 to 4.1.2

Release notes

Sourced from org.springframework.boot:spring-boot-autoconfigure's releases.

v4.1.2

⭐ New Features

  • Add TWENTY_SEVEN to JavaVersion enum #51426

🐞 Bug Fixes

  • OriginTrackedResource does not implement equals correctly #52267
  • OriginTrackedPropertiesLoader drops properties whose name starts with # or ! #52265
  • JWTs are rejected when issuer-uri is empty and jwk-set-uri is set #52260
  • Package manifest attributes are missing for nested jars without directory entries #52258
  • Logback ColorConverter unnecessarily parses its options for every log event #52228
  • Empty system property in TestPropertyValues is cleared instead of being restored to its empty value #52208
  • Graceful shutdown of Tomcat or Jetty may call back with REQUESTS_ACTIVE when stop is called immediately after shutDownGracefully on an idle server #52197
  • NettyWebServer stop may hang when called immediately after shutDownGracefully #52196
  • gRPC client 'grpc' load balancing fails to bind with a NullPointerException when no child policies are configured #52193
  • Prevent gRPC client properties from overriding user customizations #52175
  • MongoDB fails to connect when credentials contain a space #52168
  • Authentication fails when password configured in spring.elasticsearch.uris contains a colon #52166
  • Logging can be lost when a context is paused by the test context framework #52088
  • Docker Compose support for MongoDB fails to connect when credentials contain a character that requires URL encoding #52084
  • Jersey does not use the endpoint ObjectMapper when Actuator is running on a separate port #51982
  • Fractions of a second are handled incorrectly when configuring gRPC service config durations #51957
  • Configuration property descriptions may be lost when building incrementally with Gradle #51925
  • BasicJsonParser mishandles escaped characters in nested lists and maps #51908
  • Zero week value conversion fails with 'intValue cannot be extracted from WEEKS' exception #51894
  • App fails to start when using DevTools and manually configuring JDBC or R2DBC without spring-boot-jdbc or spring-boot-r2dbc #51890
  • Docker Compose support incorrectly recognizes MARIADB_ALLOW_EMPTY_PASSWORD instead of MARIADB_ALLOW_EMPTY_ROOT_PASSWORD #51888
  • Auto-configured Kotlinx Serialization JSON codec customization is not applied #51877
  • NullPointerException can be thrown when using uber jars due to a race condition in NestedJarFileResources #51745
  • DevTools does not detect a reactive web environment #51730
  • spring.http.clients.cookie-handling has no effect when using a reactive client backed by an HttpComponents connector #51724
  • Connection fails when rabbitmq Docker Compose service is configured to use SSL #51667
  • SBOM-related manifest attributes are missing from Maven-packaged wars #51651
  • When server.reactive.session.cookie.same-site is not set, session cookies have no SameSite attribute #51639
  • OAuth2 resource server ignores authorities-claim-delimiter when set on its own #51630
  • developmentOnly and testAndDevelopmentOnly configurations do not specify any attributes causing potential resolution problems #51623
  • In a reactive web application, Cloud Foundry security integration returns a 500 rather than a 503 when the cloud controller URL is unavailable #51614
  • Layer temp file is not deleted when layer creation fails #51581
  • Docker Compose integration for RabbitMQ skips credential fallbacks when an environment variable has no value #51578
  • Some assertion messages name the wrong parameter #51574
  • OAuth2ResourceServerProperties.Jwt has a setter that does not match its getter #51562
  • jarmode tools commands print stacktrace instead of an error message #51547
  • Docker Compose ProcessRunner can hang or leave orphan processes #51538
  • NestedByteChannel.read(ByteBuffer) incorrectly returns 0 when buffer could not be filled #51520
  • Customizer null checks in HTTP client builders assert the wrong attribute #51513
  • SSL host config customizations may be lost during Tomcat initialization #51511
  • SQL Server Docker Compose integration may duplicate the JDBC URL's encrypt parameter #51481
  • WritableJson.toByteArray() may corrupt supplementary characters #51464
  • SSL host config customizations are lost when reloading SSL bundles #51457

... (truncated)

Commits
  • 634e6fd Release 4.1.2
  • 6b43cf1 Upgrade to Spring WS 5.0.3
  • a73dfad Upgrade to Spring Security 7.1.2
  • 0485f1e Upgrade to Spring RESTDocs 4.0.2
  • de2c11a Upgrade to Spring Pulsar 2.0.8
  • 8d0359e Upgrade to Spring LDAP 4.1.2
  • f22c6e6 Upgrade to Spring Kafka 4.1.2
  • ed55709 Upgrade to Spring Integration 7.1.2
  • 2e88a38 Upgrade to Spring HATEOAS 3.1.3
  • 0d69ce5 Upgrade to Spring gRPC 1.1.2
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-web from 4.1.1 to 4.1.2

Release notes

Sourced from org.springframework.boot:spring-boot-starter-web's releases.

v4.1.2

⭐ New Features

  • Add TWENTY_SEVEN to JavaVersion enum #51426

🐞 Bug Fixes

  • OriginTrackedResource does not implement equals correctly #52267
  • OriginTrackedPropertiesLoader drops properties whose name starts with # or ! #52265
  • JWTs are rejected when issuer-uri is empty and jwk-set-uri is set #52260
  • Package manifest attributes are missing for nested jars without directory entries #52258
  • Logback ColorConverter unnecessarily parses its options for every log event #52228
  • Empty system property in TestPropertyValues is cleared instead of being restored to its empty value #52208
  • Graceful shutdown of Tomcat or Jetty may call back with REQUESTS_ACTIVE when stop is called immediately after shutDownGracefully on an idle server #52197
  • NettyWebServer stop may hang when called immediately after shutDownGracefully #52196
  • gRPC client 'grpc' load balancing fails to bind with a NullPointerException when no child policies are configured #52193
  • Prevent gRPC client properties from overriding user customizations #52175
  • MongoDB fails to connect when credentials contain a space #52168
  • Authentication fails when password configured in spring.elasticsearch.uris contains a colon #52166
  • Logging can be lost when a context is paused by the test context framework #52088
  • Docker Compose support for MongoDB fails to connect when credentials contain a character that requires URL encoding #52084
  • Jersey does not use the endpoint ObjectMapper when Actuator is running on a separate port #51982
  • Fractions of a second are handled incorrectly when configuring gRPC service config durations #51957
  • Configuration property descriptions may be lost when building incrementally with Gradle #51925
  • BasicJsonParser mishandles escaped characters in nested lists and maps #51908
  • Zero week value conversion fails with 'intValue cannot be extracted from WEEKS' exception #51894
  • App fails to start when using DevTools and manually configuring JDBC or R2DBC without spring-boot-jdbc or spring-boot-r2dbc #51890
  • Docker Compose support incorrectly recognizes MARIADB_ALLOW_EMPTY_PASSWORD instead of MARIADB_ALLOW_EMPTY_ROOT_PASSWORD #51888
  • Auto-configured Kotlinx Serialization JSON codec customization is not applied #51877
  • NullPointerException can be thrown when using uber jars due to a race condition in NestedJarFileResources #51745
  • DevTools does not detect a reactive web environment #51730
  • spring.http.clients.cookie-handling has no effect when using a reactive client backed by an HttpComponents connector #51724
  • Connection fails when rabbitmq Docker Compose service is configured to use SSL #51667
  • SBOM-related manifest attributes are missing from Maven-packaged wars #51651
  • When server.reactive.session.cookie.same-site is not set, session cookies have no SameSite attribute #51639
  • OAuth2 resource server ignores authorities-claim-delimiter when set on its own #51630
  • developmentOnly and testAndDevelopmentOnly configurations do not specify any attributes causing potential resolution problems #51623
  • In a reactive web application, Cloud Foundry security integration returns a 500 rather than a 503 when the cloud controller URL is unavailable #51614
  • Layer temp file is not deleted when layer creation fails #51581
  • Docker Compose integration for RabbitMQ skips credential fallbacks when an environment variable has no value #51578
  • Some assertion messages name the wrong parameter #51574
  • OAuth2ResourceServerProperties.Jwt has a setter that does not match its getter #51562
  • jarmode tools commands print stacktrace instead of an error message #51547
  • Docker Compose ProcessRunner can hang or leave orphan processes #51538
  • NestedByteChannel.read(ByteBuffer) incorrectly returns 0 when buffer could not be filled #51520
  • Customizer null checks in HTTP client builders assert the wrong attribute #51513
  • SSL host config customizations may be lost during Tomcat initialization #51511
  • SQL Server Docker Compose integration may duplicate the JDBC URL's encrypt parameter #51481
  • WritableJson.toByteArray() may corrupt supplementary characters #51464
  • SSL host config customizations are lost when reloading SSL bundles #51457

... (truncated)

Commits
  • 634e6fd Release 4.1.2
  • 6b43cf1 Upgrade to Spring WS 5.0.3
  • a73dfad Upgrade to Spring Security 7.1.2
  • 0485f1e Upgrade to Spring RESTDocs 4.0.2
  • de2c11a Upgrade to Spring Pulsar 2.0.8
  • 8d0359e Upgrade to Spring LDAP 4.1.2
  • f22c6e6 Upgrade to Spring Kafka 4.1.2
  • ed55709 Upgrade to Spring Integration 7.1.2
  • 2e88a38 Upgrade to Spring HATEOAS 3.1.3
  • 0d69ce5 Upgrade to Spring gRPC 1.1.2
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-data-jpa from 4.1.1 to 4.1.2

Release notes

Sourced from org.springframework.boot:spring-boot-starter-data-jpa's releases.

v4.1.2

⭐ New Features

  • Add TWENTY_SEVEN to JavaVersion enum #51426

🐞 Bug Fixes

  • OriginTrackedResource does not implement equals correctly #52267
  • OriginTrackedPropertiesLoader drops properties whose name starts with # or ! #52265
  • JWTs are rejected when issuer-uri is empty and jwk-set-uri is set #52260
  • Package manifest attributes are missing for nested jars without directory entries #52258
  • Logback ColorConverter unnecessarily parses its options for every log event #52228
  • Empty system property in TestPropertyValues is cleared instead of being restored to its empty value #52208
  • Graceful shutdown of Tomcat or Jetty may call back with REQUESTS_ACTIVE when stop is called immediately after shutDownGracefully on an idle server #52197
  • NettyWebServer stop may hang when called immediately after shutDownGracefully #52196
  • gRPC client 'grpc' load balancing fails to bind with a NullPointerException when no child policies are configured #52193
  • Prevent gRPC client properties from overriding user customizations #52175
  • MongoDB fails to connect when credentials contain a space #52168
  • Authentication fails when password configured in spring.elasticsearch.uris contains a colon #52166
  • Logging can be lost when a context is paused by the test context framework #52088
  • Docker Compose support for MongoDB fails to connect when credentials contain a character that requires URL encoding #52084
  • Jersey does not use the endpoint ObjectMapper when Actuator is running on a separate port #51982
  • Fractions of a second are handled incorrectly when configuring gRPC service config durations #51957
  • Configuration property descriptions may be lost when building incrementally with Gradle #51925
  • BasicJsonParser mishandles escaped characters in nested lists and maps #51908
  • Zero week value conversion fails with 'intValue cannot be extracted from WEEKS' exception #51894
  • App fails to start when using DevTools and manually configuring JDBC or R2DBC without spring-boot-jdbc or spring-boot-r2dbc #51890
  • Docker Compose support incorrectly recognizes MARIADB_ALLOW_EMPTY_PASSWORD instead of MARIADB_ALLOW_EMPTY_ROOT_PASSWORD #51888
  • Auto-configured Kotlinx Serialization JSON codec customization is not applied #51877
  • NullPointerException can be thrown when using uber jars due to a race condition in NestedJarFileResources #51745
  • DevTools does not detect a reactive web environment #51730
  • spring.http.clients.cookie-handling has no effect when using a reactive client backed by an HttpComponents connector #51724
  • Connection fails when rabbitmq Docker Compose service is configured to use SSL #51667
  • SBOM-related manifest attributes are missing from Maven-packaged wars #51651
  • When server.reactive.session.cookie.same-site is not set, session cookies have no SameSite attribute #51639
  • OAuth2 resource server ignores authorities-claim-delimiter when set on its own #51630
  • developmentOnly and testAndDevelopmentOnly configurations do not specify any attributes causing potential resolution problems #51623
  • In a reactive web application, Cloud Foundry security integration returns a 500 rather than a 503 when the cloud controller URL is unavailable #51614
  • Layer temp file is not deleted when layer creation fails #51581
  • Docker Compose integration for RabbitMQ skips credential fallbacks when an environment variable has no value #51578
  • Some assertion messages name the wrong parameter #51574
  • OAuth2ResourceServerProperties.Jwt has a setter that does not match its getter #51562
  • jarmode tools commands print stacktrace instead of an error message #51547
  • Docker Compose ProcessRunner can hang or leave orphan processes #51538
  • NestedByteChannel.read(ByteBuffer) incorrectly returns 0 when buffer could not be filled #51520
  • Customizer null checks in HTTP client builders assert the wrong attribute #51513
  • SSL host config customizations may be lost during Tomcat initialization #51511
  • SQL Server Docker Compose integration may duplicate the JDBC URL's encrypt parameter #51481
  • WritableJson.toByteArray() may corrupt supplementary characters #51464
  • SSL host config customizations are lost when reloading SSL bundles #51457

... (truncated)

Commits
  • 634e6fd Release 4.1.2
  • 6b43cf1 Upgrade to Spring WS 5.0.3
  • a73dfad Upgrade to Spring Security 7.1.2
  • 0485f1e Upgrade to Spring RESTDocs 4.0.2
  • de2c11a Upgrade to Spring Pulsar 2.0.8
  • 8d0359e Upgrade to Spring LDAP 4.1.2
  • f22c6e6 Upgrade to Spring Kafka 4.1.2
  • ed55709 Upgrade to Spring Integration 7.1.2
  • 2e88a38 Upgrade to Spring HATEOAS 3.1.3
  • 0d69ce5 Upgrade to Spring gRPC 1.1.2
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-data-elasticsearch from 4.1.1 to 4.1.2
<d...

Description has been truncated

@dependabot @github

dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
chore(deps)(deps): bump the spring group across 1 directory with 13 u…
94be52f 
…pdates

Bumps the spring group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework:spring-core](https://github.com/spring-projects/spring-framework) | `7.0.9` | `7.0.10` |
| [org.springframework:spring-context](https://github.com/spring-projects/spring-framework) | `7.0.9` | `7.0.10` |
| [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) | `7.0.9` | `7.0.10` |
| [org.springframework.boot:spring-boot-autoconfigure](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot:spring-boot-starter-web](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot:spring-boot-starter-data-jpa](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot:spring-boot-starter-data-elasticsearch](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot:spring-boot-starter-test](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot:spring-boot-starter-webmvc-test](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot:spring-boot-testcontainers](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot:spring-boot-starter-web](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot:spring-boot-starter-data-jpa](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot:spring-boot-starter-data-elasticsearch](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot:spring-boot-starter-test](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot:spring-boot-starter-webmvc-test](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.boot:spring-boot-testcontainers](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [org.springframework.data:spring-data-elasticsearch](https://github.com/spring-projects/spring-data-elasticsearch) | `6.1.1` | `6.1.2` |
| [org.springframework.data:spring-data-jpa](https://github.com/spring-projects/spring-data-jpa) | `4.1.1` | `4.1.2` |
| [org.springframework.boot](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |



Updates `org.springframework:spring-core` from 7.0.9 to 7.0.10
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v7.0.9...v7.0.10)

Updates `org.springframework:spring-context` from 7.0.9 to 7.0.10
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v7.0.9...v7.0.10)

Updates `org.springframework:spring-webmvc` from 7.0.9 to 7.0.10
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v7.0.9...v7.0.10)

Updates `org.springframework.boot:spring-boot-autoconfigure` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-starter-web` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-starter-data-jpa` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-starter-data-elasticsearch` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-starter-test` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-starter-webmvc-test` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-testcontainers` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-starter-web` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-starter-data-jpa` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-starter-data-elasticsearch` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-starter-test` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-starter-webmvc-test` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.boot:spring-boot-testcontainers` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `org.springframework.data:spring-data-elasticsearch` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/spring-projects/spring-data-elasticsearch/releases)
- [Commits](spring-projects/spring-data-elasticsearch@6.1.1...6.1.2)

Updates `org.springframework.data:spring-data-jpa` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-data-jpa/releases)
- [Commits](spring-projects/spring-data-jpa@4.1.1...4.1.2)

Updates `org.springframework.boot` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

---
updated-dependencies:
- dependency-name: org.springframework.boot
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-autoconfigure
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-data-elasticsearch
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-data-elasticsearch
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-data-jpa
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-data-jpa
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-test
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-test
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-web
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-web
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-webmvc-test
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-webmvc-test
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-testcontainers
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-testcontainers
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.data:spring-data-elasticsearch
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.data:spring-data-jpa
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-context
  dependency-version: 7.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-core
  dependency-version: 7.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-webmvc
  dependency-version: 7.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps)(deps): bump the spring group with 13 updates chore(deps)(deps): bump the spring group across 1 directory with 13 updates Nov 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/gradle/spring-21a0f90c79 branch from 78810d9 to 94be52f Compare November 10, 2026 08:33
@soidisant
soidisant merged commit 151b357 into main Nov 10, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@soidisant soidisant soidisant approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@soidisant