CBIIT / nci-ctd2-dashboard-tmpl-helper

NCI CTD^2 Dashboard Template Helper
3 stars 1 forks source link

Bump org.springframework:spring-webmvc from 6.0.8 to 6.0.14 in /web #81

Closed dependabot[bot] closed 6 months ago

dependabot[bot] commented 7 months ago

Bumps org.springframework:spring-webmvc from 6.0.8 to 6.0.14.

Release notes

Sourced from org.springframework:spring-webmvc's releases.

v6.0.14

:star: New Features

  • Provide caching for HandlerMappingIntrospector lookups #31588
  • Log4jLog needs to re-resolve ExtendedLogger on deserialization (for compatibility with Log4J 2.21) #31582
  • Optimize StandardTypeLocator for hotspot when the same classes are resolved #31579
  • Add duplicate key exception error code for SAP HANA database #31554
  • Do not delegate TRACE to HttpServlet on ERROR dispatch #31457
  • Add properties setter to ProblemDetail #31430

:lady_beetle: Bug Fixes

  • GeneratedFiles#addSource does not provide proper context if the specified class name is invalid #31612
  • MessageBuilder#createMessage should not define the payload as @Nullable #31610
  • Default Mixin added by Jackson2ObjectMapperBuilder are missing required runtime hints #31606
  • NettyDataBuffer#toByteBuffer fails if readPosition > 0 #31605
  • Avoid duplicate JAR resources in PathMatchingResourcePatternResolver on MS Windows #31598
  • NamedParameterUtils broken parsing related to square brackets #31596
  • Multipart cleanup is done too eagerly #31567
  • Jakarta validation field constraints in superclass are ignored in native image #31552
  • Function column out doesn't resolve to SqlOutParameter #31550
  • Restore support for recursive annotations in Kotlin #31518
  • Resolve to empty MultiValueMap when no matrix variables are provided #31483
  • ProxyFactoryBean declaration may lead to unexpected non-fatal "FactoryBean threw exception from getObjectType" stacktrace output #31473
  • Use of @Value in compact constructor of a record should not register method injection #31433
  • Prevent duplicate HTTP server observations for cancelled exchanges #31417
  • Spring MVC raises MissingPathVariableException resulting in 500 instead of 400 error when path segment is u001F or u00D and cannot be converted to target type UUID #31382
  • Ensure consistent value count in ConcurrentReferenceHashMap#Segment #31373
  • HeaderContentNegotiationStrategy.resolveMediaTypes throws unexpected IllegalArgumentException #31254
  • Session Cookie in Reactive WebSession is not deleted if maxAge is set through cookie initializer (e.g. via Boot application property) #31214
  • DefaultWebClient logs URI without the port number #30519
  • CGLIB BeanCopier falls back to ClassLoader.defineClass for public target #28699
  • BeanUtils.copyProperties() consumes large amount of memory #27246

:notebook_with_decorative_cover: Documentation

  • RestTemplate initialization documentation in 6.0.x mentions Netty, yet no ClientHttpRequestFactory is present in the package. #31526
  • Correct typo in annotations.adoc #31519
  • Document X-Forwarded-* Headers #31491
  • Improve support and documentation for the "default" bean definition profile name #29071
  • Document that pertypewithin is supported by Spring AOP #25887
  • Document alternatives of using multiple PropertyPlaceholderConfigurers [SPR-9989] #14623

:hammer: Dependency Upgrades

  • Upgrade to Micrometer 1.10.13 #31586
  • Upgrade to Reactor 2022.0.13 #31585

:heart: Contributors

... (truncated)

Commits
  • 28bb639 Release v6.0.14
  • 770cbd2 Revise exception handling in HandlerMappingIntrospector
  • e5f04e5 Polishing
  • c187846 Reduce allocations in server conventions
  • 51cdff5 Merge pull request #31612 from PiotrFLEURY
  • d93114d Polish "Provide invalid class name in exception message"
  • 5ac4c3b Provide invalid class name in exception message
  • 05c3ffb Use InvalidMimeTypeException in MimeTypeUtils#sortBySpecificity
  • 19e8ed1 Cache Filter for HandlerMappingIntrospector and log warnings
  • 4464251 Add missing runtime hints for ProblemDetail mixins
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/CBIIT/nci-ctd2-dashboard-tmpl-helper/network/alerts).