KorAP / Kustvakt

:speedboat: User and policy management component for KorAP, capable of rewriting queries for policy based document restrictions.
BSD 2-Clause "Simplified" License
4 stars 3 forks source link

Bump org.springframework:spring-web from 6.1.4 to 6.1.5 #751

Closed dependabot[bot] closed 8 months ago

dependabot[bot] commented 8 months ago

Bumps org.springframework:spring-web from 6.1.4 to 6.1.5.

Release notes

Sourced from org.springframework:spring-web's releases.

v6.1.5

:star: New Features

  • Extract reusable method for URI validations #32440
  • Allow UriTemplate to be built with an empty template #32432
  • Optimize Coroutine invocations #32390
  • Improve exception message when Scheduled tasks that are using Virtual Threads fail on shutdown #32381
  • Add query parameters to MockMvc Kotlin DSL #32371
  • Optimize content type parsing in ServletServerHttpResponse #32361
  • Refine handling of disconnected client error in ExceptionHandlerExceptionResolver #32359
  • Refine \*HttpMessageConverter#getContentLength return value null safety #32325
  • Optimize HttpHeaders.getAcceptLanguageAsLocales #32318
  • SimpleAsyncTaskScheduler: consistently apply default error handling #32298
  • Use Spliterator of underlying collection in MutablePropertyValues / MutablePropertySources #32281

:lady_beetle: Bug Fixes

  • SpEL fails to compile expression indexing into boolean array #32400
  • WebClient Observations are missing error #32389
  • WebClient request sent twice instantly when using @Cacheable #32370
  • AopUtils.getMostSpecificMethod does not return original method for proxy-derived method anymore #32365
  • Fix ServletResponseHttpHeaders#get null handling #32362
  • Compiled SpEL expression fails if #root or #this is a non-public type #32356
  • Suspend handler methods fail on nullable value class parameters #32353
  • Better protect against concurrent error handling for async requests #32340
  • Performance degradation due to Kotlin value class checks #32334
  • With value referenced from property file in XML configuration, setter selection can be random in case of overloaded setter methods (e.g. on SimpleClientHttpRequestFactory) #32329
  • constructor-impl of Kotlin value class is not called #32324
  • ContentCachingResponseWrapper no longer honors Content-Type and Content-Length #32317
  • Hibernate native image support broken by HHH-17643 #32311
  • Revisit DatabaseMetadata#getProcedures to only apply fallback if original search yield more than one result #32295
  • Remove Observation.Context from WebClient request #32198

:notebook_with_decorative_cover: Documentation

  • Refine "Redirecting to a resource" section code sample #32423
  • Javadoc of ReactorNettyClientRequestFactory#setExchangeTimeout methods have wrong default value #32419
  • Fix order of 2 sections in the Validation chapter of the reference manual #32408
  • Fix Javadoc #32403
  • Document that SpEL expressions using array construction cannot be compiled #32401
  • Improve documentation for @Sql execution phases regarding lifecycle #32343
  • Omit parameter names in REST Clients section of reference docs #32335
  • Different transaction name when using TransactionAspectSupport.currentTransactionStatus().transactionName #32310
  • Provide guidelines for using Kotlin properties with proxies (@RequestScope and similar use cases) #32287
  • Correct documentation for userDestinationPrefix in MessageBrokerRegistry #32272

:hammer: Dependency Upgrades

  • Upgrade to Micrometer 1.12.4 #32431
  • Upgrade to Reactor 2023.0.4 #32420

... (truncated)

Commits
  • c04290e Release v6.1.5
  • 381f790 Extract reusable checkSchemeAndPort method
  • f5a3658 Upgrade to Protobuf 3.25.3, Woodstox 6.6.1, JsonPath 2.9, QDox 2.1
  • 54a6d89 Additional unit tests for operations on empty UriTemplate
  • 2922a82 Merge pull request #32432 from bsgrd
  • a34ceb4 Polish "Allow UriTemplate to be built with an empty template"
  • 1b25a15 Allow UriTemplate to be built with an empty template
  • 723c94e Polishing
  • e5a69dc Upgrade to Reactor 2023.0.4 and Micrometer 1.12.4
  • c2248c9 Update Javadoc in DefaultUserDestinationResolver
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/KorAP/Kustvakt/network/alerts).
dependabot[bot] commented 8 months ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.