Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v3 #57

Merged
merged 1 commit into from
May 29, 2023

Conversation

mend-for-github-com[bot]
Copy link
Contributor

@mend-for-github-com mend-for-github-com bot commented May 25, 2023

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
org.springframework.boot:spring-boot-starter-parent (source) 2.7.9 -> 3.1.0 age adoption passing confidence

Release Notes

spring-projects/spring-boot

v3.1.0

Compare Source

⭐ New Features

  • Result from SpringApplication.from(...) may need to provide access to more details in the future #​35451
  • Ensure that Flyway uses SLF4J by default and provide a configuration property to override the setting #​35158

🐞 Bug Fixes

  • Welcome page may return a 404 when an acceptable response cannot be produced #​35554
  • Docker compose dependency causes failures during Maven AOT processing #​35548
  • Defining a zipkin2.reporter.Reporter results in two reporter beans as the auto-configured AsyncReporter does not back off #​35546
  • Docker compose service readiness checks cannot be bypassed #​35545
  • Many spring.security.oauth2.authorizationserver properties do not have default values #​35460
  • Default for spring.flway.execute-in-transaction is not aligned with Flyway's default #​35447
  • developmentOnly dependencies are included in the AOT processing classpath #​35444
  • Restarts are slow when using spring-boot-devtools and spring-boot-docker-compose #​35435
  • Hibernate 6.2 doesn't work in native-image: No available JtaPlatform candidates #​35425
  • In a native image, configuration property binding fails when the target has package-private getters and setters #​35400
  • Invalid reference format error when tagging images using Podman #​35396
  • App startup fails with confusing message when a Docker Compose file is not found #​35383
  • WebClient auto-configuration tries to use HttpComponentsClientHttpConnector when all required classes are not present #​35381
  • MinIdle and MaxValidationTime properties missing for R2DBC pools #​35379
  • spring.data.mongodb.replica-set-name is not applied correctly #​35370
  • Anonymous requests to the token endpoint are redirected to the Spring Security login page instead of receiving a 401 response #​35368
  • Application yaml files cannot be loaded when they exceed 3mb #​35367
  • Can't use PEM encoded PKCS#​8 EC keys with server.ssl.certificate-private-key #​35365
  • DisableObservabilityContextCustomizer can't be switched off through properties #​35360
  • FactoryBean.getObject for non-singleton executed when resetting mocks #​35330
  • Tracking of artifact dependency coordinates by BootJar and BootWar may break artifact transforms in sub-projects #​35328

📔 Documentation

  • Javadoc since version for ImageReference is wrong #​35459
  • Polish formatting of permitAll() endpoint security Kotlin example #​35457
  • Improve Kotlin Testcontainers samples #​35446
  • Improve documentation for including Docker Compose support #​35384
  • Wrong anchors in Maven plugin documentation #​35373
  • Fix typo #​35369
  • Formatting issue in the Maven plugin documentation #​35349
  • Clarify profile support when using AOT #​35321

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Ckram, @​JunJaBoy, @​TheHound, @​bclozel, @​be-hase, @​davin111, @​dreis2211, @​izeye, @​quaff, @​scordio, @​sdeleuze, and @​sjohnr

v3.0.7

Compare Source

🐞 Bug Fixes

  • Welcome page may return a 404 when an acceptable response cannot be produced #​35553
  • Defining a zipkin2.reporter.Reporter results in two reporter beans as the auto-configured AsyncReporter does not back off #​35455
  • developmentOnly dependencies are included in the AOT processing classpath #​35433
  • Hibernate 6.2 doesn't work in native-image: No available JtaPlatform candidates #​35423
  • In a native image, configuration property binding fails when the target has package-private getters and setters #​35397
  • Invalid reference format error when tagging images using Podman #​35395
  • WebClient auto-configuration tries to use HttpComponentsClientHttpConnector when all required classes are not present #​35380
  • MinIdle and MaxValidationTime properties missing for R2DBC pools #​35378
  • Can't use PEM encoded PKCS#​8 EC keys with server.ssl.certificate-private-key #​35364
  • FactoryBean.getObject for non-singleton executed when resetting mocks #​35329
  • Webflux server gracefulshutdown throws NullPointerException #​35269
  • Health actuator mail details shows the port as -1 when using the default port #​35254
  • SessionRepositoryFilterConfiguration can cause early initialization of SessionRepository beans including Redis #​35241
  • Liveness and readiness probes return down when lazy initialization is enabled #​35235
  • Devtools main method search algorithm can find incorrect main method #​35220
  • When a WebFlux app is deployed to Cloud Foundry some metrics are lost and numerous beans are ineligible for post-processing #​35170
  • Treating a null Flyway-specific password as an empty string prevents the use of PGPASS for authentication #​35131
  • DisableObservabilityContextCustomizer can't be switched off through properties #​35009
  • Application yaml files cannot be loaded when they exceed 3mb #​34743
  • @ServletComponentScan causes AOT processing to fail with "Code generation is not supported for bean definitions declaring an instance supplier callback" #​34563
  • Tracking of artifact dependency coordinates by BootJar and BootWar may break artifact transforms in sub-projects #​31216

📔 Documentation

  • Polish formatting of permitAll() endpoint security Kotlin example #​35456
  • Wrong anchors in Maven plugin documentation #​35372
  • Clarify profile support when using AOT #​35262
  • Add reference to Tor Spring Boot Starter #​35256
  • Correct list of annotations that are equivalent to @SpringBootApplication #​35230
  • Harmonize references to application.yaml files in reference docs #​35129

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​JunJaBoy, @​aasaru, @​be-hase, @​davin111, @​ivandimitrov8080, and @​theborakompanioni

v3.0.6

Compare Source

🐞 Bug Fixes

  • CloudFoundry integration does not use endpoint path mappings #​35086
  • ApplicationAvailability bean is auto-configured even if a custom one is already present #​35068
  • Gradle Spring Boot plugin with Kotlin DSL does not support includeProjectDependencies in bootJar > layered > dependencies configuration #​35035
  • Cassandra default configuration substitutions don't resolve against configuration derived from spring.data.cassandra properties #​34799
  • Banner placeholders use default values too soon #​34792
  • Nested test classes don't inherit properties from slice test annotations on enclosing class #​34781
  • Hints for including Liquibase changelogs in a native image are unnecessarily narrow #​34729
  • Unlike @EnableBatchProcessing, auto-configuration for Spring Batch does not enable observability of steps and jobs #​34305

📔 Documentation

  • Improve documentation of tracing dependencies and configuration properties #​34991
  • Use current Neo4j version in Testcontainers-based examples #​34940
  • BatchProperties has an outdated reference to JPA #​34844
  • Document that optional dependencies are included by default in fat jars built with Maven #​34788

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Ferioney, @​RobertRad, @​SeasonPanPan, @​acktsap, @​benelog, @​dreis2211, @​kdomo, @​krzyk, @​marbon87, and @​meistermeier

v3.0.5

Compare Source

🐞 Bug Fixes

  • EmbeddedWebServerFactoryCustomizerAutoConfiguration should not run when embedded web server is not configured #​34659
  • StandardConfigDataResource can import the same file twice if the classpath includes '.' #​34617
  • Loading application.yml fails with NoSuchMethodError when using SnakeYAML 2.0 #​34515
  • @ConfigurationProperties no longer works on a mutable Kotlin data classes #​34500
  • Image builds with podman fail when image buildpacks are configured #​34495
  • Use of @EntityScan causes AOT instance supplier code generation error #​34371

📔 Documentation

  • Document support for Java 20 #​34726
  • Clarify conventions for custom error pages in WebFlux #​34705
  • Add documentation tip showing how to configure publishRegistry Maven properties from the command line #​34704
  • Typo in Batch documentation: content instead of context #​34646
  • Update two references to old APIs #​34602
  • Fix Javadoc in JobLauncherApplicationRunner #​34596
  • Document how to get socket location for image building configuration with podman #​34475

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​1993heqiang, @​anthonydahanne, @​benelog, @​dsyer, @​izeye, @​swapy, and @​terminux

v3.0.4

Compare Source

🐞 Bug Fixes

  • Maven plugin uses timezone-local timestamps when outputTimestamp is used #​34430
  • org.springframework.boot.web.embedded.jetty.GracefulShutdown uses the wrong class to create its logger #​34419
  • @ConfigurationProperties with initialized nested record properties values no longer bind #​34407
  • Custom ConfigDataLocationResolver/ConfigDataLoader fails in 3.0.x when combined with spring-boot-devtools #​34372
  • defaultTracingObservationHandler is not ordered as documented #​34216
  • Spring Boot 3 does not provide a configuration property for configuring red metrics custom tag keys #​34194

📔 Documentation

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​1993heqiang, @​anandmnair, @​dalbani, @​fmbenhassine, @​izeye, @​jongwooo, and @​ttddyy

v3.0.3

Compare Source

🐞 Bug Fixes

  • ClassNotFoundException during AOT processing of Logback XML that references a variable when defining a component's class #​34336
  • Logback configuration errors are not reported when running as a native image #​34315
  • Dependency management for Spring LDAP includes spring-ldap-core-tiger which no longer exists #​34299
  • Kotlin ConfigurationProperties default values are not picked up when nativeRun is used #​34157
  • Maven Plugin's PropertiesMergingResourceTransformer closes InputStream when it should not do so #​34072
  • Actuator Health web endpoint broken with Gson and Java 17 #​34070
  • Manifests of jars built with Gradle do not have a Implementation entries #​34059
  • Spies are not reset after test execution when using @SpyBean #​34044
  • Using devtools with Reactive application results in slower restarts #​34036
  • spring-boot-dependencies manages mysql:mysql-connector-java which no longer exists #​34021
  • Dependency management for Mongo's Java Driver is incomplete #​34019
  • jOOQ DefaultConfiguration does not use TransactionProvider #​33979
  • ObservationFilter beans are not registered automatically #​33968
  • Properties Migrator does not detect properties of Map type that are marked as deprecated #​33963
  • Dependency management for some Angus Mail modules uses the wrong artifact ID #​33947
  • ElasticsearchClientAutoConfiguration causes global ObjectMapper to be overwritten #​33426

📔 Documentation

  • Updated documentation for @ConfigurationProperties bean naming rules #​34192
  • Document additional configuration that is required for spring.mvc.throw-exception-if-no-handler-found=true to be effective #​34190
  • Use Maven Central for release downloads in CLI installation documentation #​34161
  • Update Customizing Sanitization documentation as built-in key-based sanitization is no longer performed #​34051
  • Add Redis application properties example #​34041
  • Restore "Use Jedis Instead of Lettuce" how-to documentation #​33995
  • Actuator section is missing from documentation overview #​33933
  • Add Javadoc since to OperationParameter.getAnnotation() #​33919

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Anubhav-2000, @​artembilan, @​ath0s, @​enimiste, @​izeye, @​jprinet, @​krzyk, @​marcel-wollschlaeger, @​mhalbritter, @​michaldo, and @​sannanansari

v3.0.2

Compare Source

🐞 Bug Fixes

  • Failure analysis of NoUniqueBeanDefinitionException reports "defined in null" when bean definition has no resource description #​33876
  • @DeprecatedConfigurationProperty has no effect when declared on a record component's accessor method #​33871
  • Devtools sets non-existent property spring.reactor.debug #​33860
  • Failing calls to reactive health indicators are not logged #​33856
  • Spring Boot 3 Native: Fails to bind properties under 'spring.groovy.template' #​33847
  • Diagnostics are poor when the JMX port used by the Maven start goal is in use #​33845
  • Inconsistent discovery of parameter names for selectors in custom actuator endpoints #​33841
  • OpenTelemetryAutoConfiguration should use parent-based sampler by default #​33821
  • SpringBootMockResolver causes AopTestUtils.getUltimateTargetObject to recurse until the stack overflows when it calls it with Spring Security's authentication manager bean #​33792
  • It is not possible to provide a custom TransactionProvider bean for JOOQ #​33776
  • Remove usage of bean definition instance supplier since not compatible with AOT #​33763
  • DevTools prevent startup in native image when using maven #​33760
  • NPE in RabbitProperties when user is given, but password not #​33753
  • EndpointRequestMatcher should have a toString method #​33729
  • SDKMAN should not use repo.spring.io for releases #​33723
  • @ConfigurationProperties on a @Bean method does not work when the bean has a constructor that is eligible for constructor binding #​33710
  • Homebrew and Scoop should not use repo.spring.io for releases #​33706
  • Installing Homebrew formula with --head does not work #​33704
  • Flyway-specific DataSource cannot be created in a native image due to missing reflection hints #​33692
  • Remove Jetty/Netty/ApacheHttpClient checks for WebClient #​33640
  • Fix no effect of custom SessionRepositoryCustomizer in application context #​33514
  • Nested properties without a setter can no longer be bound in 3.0 #​33409

📔 Documentation

  • Fix typo in testing-native-application.adoc #​33896
  • Replace "via" in documentation and use "over" or "through" instead #​33880
  • Fix typo in kotlin getting started documentation #​33869
  • Update com.gorylenko.gradle-git-properties version to 2.4.1 in doc #​33857
  • Description of spring-boot-starter-websocket does not make it clear that it's Servlet-specific #​33842
  • Fix 'the the' typos #​33756
  • Fix docs with repeated words. #​33749
  • Update HTTP 2 documentation for Java 17 #​33734
  • Fix typo in getting started documentation #​33732
  • Fix typo in External Configuration documentation #​33728
  • Fix a typo in the ExitCodeGenerator documentation #​33726
  • Fix typo in javadoc of org.springframework.boot.web.server.LocalServerPort #​33724
  • Update dockerfile samples to use Java 17 #​33629
  • Remove the run example #​33519

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​BartR96, @​IDJack, @​anugrahsinghal, @​asomov, @​devrishal, @​dreis2211, @​izeye, @​josephlane, @​krzyk, @​kvmw, @​mhalbritter, @​michaelweidmann, @​qyqcswill, @​rfigueroa, @​sannanansari, @​sdeleuze, @​yyjstudy, and @​zhangyanyue

v3.0.1

Compare Source

🐞 Bug Fixes

  • Fix typo in LocalDevToolsAutoConfiguration logging #​33615
  • No warning is given when <springProfile> is used in a Logback <root> block #​33610
  • Auto-configure PropagationWebGraphQlInterceptor for tracing propagation #​33542
  • WebClient instrumentation fails with IllegalArgumentException when adapting to WebClientExchangeTagsProvider #​33483
  • Reactive observation auto-configuration does not declare order for WebFilter #​33444
  • Web server fails to start due to "Resource location must not be null" when attempting to use a PKCS 11 KeyStore #​33433
  • Actuator health endpoint for neo4j throws NoSuchElementException and always returns Status.DOWN #​33428
  • Anchors in YAML configuration files throw UnsupportedOperationException #​33404
  • ZipkinRestTemplateSender is not customizable #​33399
  • AOT doesn't work with Logstash Logback Encoder #​33387
  • Maven process-aot goal fails when release version is set in Maven compiler plugin #​33382
  • DependsOnDatabaseInitializationPostProcessor re-declares bean dependencies at native image runtime #​33374
  • @SpringBootTest now throws a NullPointerException rather than a helpful IllegalStateException when @SpringBootConfiguration is not found #​33371
  • bootBuildImage always trys to create a native image due to bootJar always adding a META-INF/native-image/argfile to the jar #​33363

📔 Documentation

  • Improve gradle plugin tags documentation #​33617
  • Improve maven plugin tags documentation #​33616
  • Fix typo in tomcat accesslog checkExists doc #​33512
  • Documented Java compiler level is wrong #​33505
  • Fix typo in documentation #​33453
  • Update instead of replace environment in bootBuildImage documentation #​33424
  • Update the reference docs to document the need to declare the native-maven-plugin when using buildpacks to create a native image #​33422
  • Document that the shutdown endpoint is not intended for use when deploying a war to a servlet container #​33410
  • Reinstate GraphQL testing documentaion #​33407
  • Description of NEVER in Sanitize Sensitive Values isn't formatted correctly #​33398

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Artur-,


Configuration

📅 Schedule: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/major-spring-boot branch 3 times, most recently from 11c4aaa to a1b2f8d Compare May 25, 2023 16:43
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/major-spring-boot branch from a1b2f8d to 0bf5622 Compare May 26, 2023 22:58
Copy link
Collaborator

@suhasini-b suhasini-b left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Application is working properly after upgrading the version of spring boot starter parent dependency.

@tylerezimmerman tylerezimmerman merged commit d980181 into main May 29, 2023
1 of 2 checks passed
@tylerezimmerman tylerezimmerman deleted the whitesource-remediate/major-spring-boot branch May 29, 2023 13:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants