search

amaybaum-dev / verademo

A deliberately insecure Java web application
MIT License
0 stars 3 forks source link

Update dependency org.springframework.boot:spring-boot-starter-tomcat to v2.3.9.RELEASE - autoclosed #2

Closed dev-mend-for-github-com[bot] closed 1 year ago

dev-mend-for-github-com[bot] commented 1 year ago

This PR contains the following updates:

Package Type Update Change
org.springframework.boot:spring-boot-starter-tomcat (source) provided patch 2.3.1.RELEASE -> 2.3.9.RELEASE

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
High High 7.5 CVE-2020-13934
High High 7.5 CVE-2020-13935
High High 7.5 CVE-2021-25122
High High 7.0 CVE-2021-25329
Medium Medium 5.9 CVE-2021-24122
Medium Medium 4.3 CVE-2020-13943

Release Notes

spring-projects/spring-boot ### [`v2.3.9.RELEASE`](https://togithub.com/spring-projects/spring-boot/releases/tag/v2.3.9.RELEASE) [Compare Source](https://togithub.com/spring-projects/spring-boot/compare/v2.3.8.RELEASE...v2.3.9.RELEASE) #### :beetle: Bug Fixes - Migrations performed by Flyway or Liquibase may not have completed before the database is accessed via jOOQ [#​25279](https://togithub.com/spring-projects/spring-boot/pull/25279) - Dependency management for Hibernate's new hibernate-micrometer module is missing [#​25277](https://togithub.com/spring-projects/spring-boot/issues/25277) - DatabaseDriver does not detect Amazon Redshift correctly [#​25265](https://togithub.com/spring-projects/spring-boot/pull/25265) - Missing RabbitMQ metrics if bean is defined as a ConnectionFactory [#​25138](https://togithub.com/spring-projects/spring-boot/issues/25138) - A ContextRefreshedEvent from a child context may result in deadlock when using JPA deferred repositories [#​24966](https://togithub.com/spring-projects/spring-boot/issues/24966) - Spring Data Solr support is not flagged as deprecated [#​24942](https://togithub.com/spring-projects/spring-boot/issues/24942) - Failures when recording metrics in MetricsClientHttpRequestInterceptor may interfere with RestTemplate's main behaviour [#​24753](https://togithub.com/spring-projects/spring-boot/pull/24753) - WebMvcTest and WebFluxTest ignore user-provided Thymeleaf IDialect beans [#​24149](https://togithub.com/spring-projects/spring-boot/issues/24149) #### :notebook_with_decorative_cover: Documentation - Update the Gradle plugin documentation to recommend the maven-publish plugin over the maven plugin [#​25299](https://togithub.com/spring-projects/spring-boot/pull/25299) - Document Kafka Streams metrics support [#​25272](https://togithub.com/spring-projects/spring-boot/pull/25272) - Default values of integer properties in the application properties appendix are rendered as decimals [#​25172](https://togithub.com/spring-projects/spring-boot/issues/25172) - bootRun project property command line example is incomplete [#​25012](https://togithub.com/spring-projects/spring-boot/pull/25012) - Document the need to use the launcher to be able to use application.\* properties in a custom banner [#​24982](https://togithub.com/spring-projects/spring-boot/pull/24982) - CONTRIBUTING.adoc contains broken link to spring-javaformat-intellij-idea-plugin [#​24864](https://togithub.com/spring-projects/spring-boot/issues/24864) - Since 2.3.8 and 2.4.2, the documented index format does not match the implementation [#​24856](https://togithub.com/spring-projects/spring-boot/issues/24856) - Add version to reference docs index [#​24848](https://togithub.com/spring-projects/spring-boot/issues/24848) - Document logging.register-shutdown-hook and why you may want to enable it [#​24507](https://togithub.com/spring-projects/spring-boot/issues/24507) - Add some guidance to the reference documentation about diagnosing unexpected property values [#​24336](https://togithub.com/spring-projects/spring-boot/pull/24336) - Clarify when retaining . characters in property keys requires bracket notation to be used [#​23390](https://togithub.com/spring-projects/spring-boot/issues/23390) - Highlight that Duration and Period conversion is provided by the ApplicationConversionService and, by default, is not available for web conversion [#​22718](https://togithub.com/spring-projects/spring-boot/issues/22718) #### :hammer: Dependency Upgrades - Upgrade to AppEngine SDK 1.9.86 [#​25189](https://togithub.com/spring-projects/spring-boot/issues/25189) - Upgrade to Byte Buddy 1.10.20 [#​25190](https://togithub.com/spring-projects/spring-boot/issues/25190) - Upgrade to FreeMarker 2.3.31 [#​25334](https://togithub.com/spring-projects/spring-boot/issues/25334) - Upgrade to Hazelcast 3.12.12 [#​25191](https://togithub.com/spring-projects/spring-boot/issues/25191) - Upgrade to Hibernate 5.4.28.Final [#​25192](https://togithub.com/spring-projects/spring-boot/issues/25192) - Upgrade to Janino 3.1.3 [#​25193](https://togithub.com/spring-projects/spring-boot/issues/25193) - Upgrade to Jaybird 3.0.10 [#​25194](https://togithub.com/spring-projects/spring-boot/issues/25194) - Upgrade to Jetty 9.4.36.v20210114 [#​25195](https://togithub.com/spring-projects/spring-boot/issues/25195) - Upgrade to Johnzon 1.2.10 [#​25196](https://togithub.com/spring-projects/spring-boot/issues/25196) - Upgrade to JUnit 4.13.2 [#​25335](https://togithub.com/spring-projects/spring-boot/issues/25335) - Upgrade to Lombok 1.18.18 [#​25197](https://togithub.com/spring-projects/spring-boot/issues/25197) - Upgrade to Micrometer 1.5.11 [#​25285](https://togithub.com/spring-projects/spring-boot/issues/25285) - Upgrade to MySQL 8.0.23 [#​25198](https://togithub.com/spring-projects/spring-boot/issues/25198) - Upgrade to Neo4j OGM 3.2.20 [#​25199](https://togithub.com/spring-projects/spring-boot/issues/25199) - Upgrade to Netty 4.1.59.Final [#​25200](https://togithub.com/spring-projects/spring-boot/issues/25200) - Upgrade to Reactor Dysprosium-SR17 [#​25280](https://togithub.com/spring-projects/spring-boot/issues/25280) - Upgrade to RxJava2 2.2.21 [#​25336](https://togithub.com/spring-projects/spring-boot/issues/25336) - Upgrade to Spring AMQP 2.2.15.RELEASE [#​25284](https://togithub.com/spring-projects/spring-boot/issues/25284) - Upgrade to Spring Data Neumann-SR7 [#​25282](https://togithub.com/spring-projects/spring-boot/issues/25282) - Upgrade to Spring Framework 5.2.13 [#​25281](https://togithub.com/spring-projects/spring-boot/issues/25281) - Upgrade to Spring HATEOAS 1.1.4.RELEASE [#​25337](https://togithub.com/spring-projects/spring-boot/issues/25337) - Upgrade to Spring Integration 5.3.6.RELEASE [#​25283](https://togithub.com/spring-projects/spring-boot/issues/25283) - Upgrade to Spring Security 5.3.8.RELEASE [#​25201](https://togithub.com/spring-projects/spring-boot/issues/25201) - Upgrade to Spring Session Bom Dragonfruit-SR2 [#​25202](https://togithub.com/spring-projects/spring-boot/issues/25202) - Upgrade to Tomcat 9.0.43 [#​25203](https://togithub.com/spring-projects/spring-boot/issues/25203) - Upgrade to Undertow 2.1.6.Final [#​25204](https://togithub.com/spring-projects/spring-boot/issues/25204) #### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​robert-smith-911](https://togithub.com/robert-smith-911) - [@​izeye](https://togithub.com/izeye) - [@​dreis2211](https://togithub.com/dreis2211) - [@​eddumelendez](https://togithub.com/eddumelendez) - [@​melburne](https://togithub.com/melburne) - [@​jongmin92](https://togithub.com/jongmin92) - [@​rand0m86](https://togithub.com/rand0m86) - [@​wesuga](https://togithub.com/wesuga) - [@​bono007](https://togithub.com/bono007) ### [`v2.3.8.RELEASE`](https://togithub.com/spring-projects/spring-boot/releases/tag/v2.3.8.RELEASE) [Compare Source](https://togithub.com/spring-projects/spring-boot/compare/v2.3.7.RELEASE...v2.3.8.RELEASE) #### :beetle: Bug Fixes - Default servlet location is not registered using a ServletContextResource [#​24747](https://togithub.com/spring-projects/spring-boot/issues/24747) - DataSourceUnwrapper calls Wrapper.isWrapperFor with a interface rather than an class causing HikariDataSourceMetricsRegistry failure [#​24697](https://togithub.com/spring-projects/spring-boot/issues/24697) - JSR-305 `@Nullable` cannot be used to indicate that a parameter to an endpoint operation is optional [#​24647](https://togithub.com/spring-projects/spring-boot/issues/24647) - FailureAnalyzers' unmet dependency errors add noise to logs [#​24630](https://togithub.com/spring-projects/spring-boot/issues/24630) - Auto-configured JdbcSessionDataSourceInitializer does not use the `@SpringSessionDataSource` if available [#​24624](https://togithub.com/spring-projects/spring-boot/issues/24624) - Error `Invalid entry size` when build application with a dependency jar larger than 2,147,483,647 bytes with Gradle [#​24618](https://togithub.com/spring-projects/spring-boot/issues/24618) - WebServer implementations should return -1 if not listening on a port [#​24606](https://togithub.com/spring-projects/spring-boot/pull/24606) - Avoid duplicate classes in MergedContextConfiguration [#​24532](https://togithub.com/spring-projects/spring-boot/pull/24532) - Image is built from jar file when when using war packaging with Gradle [#​24521](https://togithub.com/spring-projects/spring-boot/issues/24521) - bootRun task does not use the project's toolchain by default [#​24517](https://togithub.com/spring-projects/spring-boot/issues/24517) - BootRun does not consider configured javaLauncher when determining JVM arguments for an optimized launch [#​24512](https://togithub.com/spring-projects/spring-boot/issues/24512) - Exploded archives launched using the launcher have an incorrectly ordered classpath that also contains non-existent jar files [#​24192](https://togithub.com/spring-projects/spring-boot/issues/24192) - spring-boot:build-image has a layout parameter that cannot be always be honoured [#​24105](https://togithub.com/spring-projects/spring-boot/issues/24105) - WebTestClient base path is not set to the application context path [#​24168](https://togithub.com/spring-projects/spring-boot/issues/24168) - Opening a connection to a jar:war: URL created by Tomcat results in an illegal reflective access warning on Java 13+ [#​18631](https://togithub.com/spring-projects/spring-boot/issues/18631) #### :notebook_with_decorative_cover: Documentation - Clarify behaviour of WebServerFactory in reference guide [#​24705](https://togithub.com/spring-projects/spring-boot/issues/24705) - Migrate away from pivotal-legacy/homebrew-tap [#​24680](https://togithub.com/spring-projects/spring-boot/issues/24680) - Document warning about `InMemoryOAuth2AuthorizedClientService` [#​24596](https://togithub.com/spring-projects/spring-boot/issues/24596) - Harmonize ActiveMQ Artemis naming [#​24586](https://togithub.com/spring-projects/spring-boot/issues/24586) - Update version of git-properties plugin in the docs [#​24567](https://togithub.com/spring-projects/spring-boot/issues/24567) - Reorder documentation about building images [#​24560](https://togithub.com/spring-projects/spring-boot/issues/24560) - Clarify when SpEL expressions in application properties are evaluated [#​24531](https://togithub.com/spring-projects/spring-boot/issues/24531) - Improve error message when attempting to build an image when using war packaging with Maven [#​24522](https://togithub.com/spring-projects/spring-boot/issues/24522) - Testing Properties missing from Application Properties Appendix [#​24486](https://togithub.com/spring-projects/spring-boot/issues/24486) - Improve "Git Commit Information" reference documentation [#​24205](https://togithub.com/spring-projects/spring-boot/issues/24205) #### :hammer: Dependency Upgrades - Upgrade to AppEngine SDK 1.9.84 [#​24754](https://togithub.com/spring-projects/spring-boot/issues/24754) - Upgrade to Byte Buddy 1.10.19 [#​24755](https://togithub.com/spring-projects/spring-boot/issues/24755) - Upgrade to Dependency Management Plugin 1.0.11.RELEASE [#​24821](https://togithub.com/spring-projects/spring-boot/issues/24821) - Upgrade to Dropwizard Metrics 4.1.17 [#​24756](https://togithub.com/spring-projects/spring-boot/issues/24756) - Upgrade to Hazelcast 3.12.11 [#​24757](https://togithub.com/spring-projects/spring-boot/issues/24757) - Upgrade to Hibernate 5.4.27.Final [#​24758](https://togithub.com/spring-projects/spring-boot/issues/24758) - Upgrade to Hibernate Validator 6.1.7.Final [#​24759](https://togithub.com/spring-projects/spring-boot/issues/24759) - Upgrade to Jackson Bom 2.11.4 [#​24760](https://togithub.com/spring-projects/spring-boot/issues/24760) - Upgrade to Jetty Reactive HTTPClient 1.1.5 [#​24761](https://togithub.com/spring-projects/spring-boot/issues/24761) - Upgrade to Johnzon 1.2.9 [#​24762](https://togithub.com/spring-projects/spring-boot/issues/24762) - Upgrade to Lettuce 5.3.6.RELEASE [#​24801](https://togithub.com/spring-projects/spring-boot/issues/24801) - Upgrade to Micrometer 1.5.10 [#​24785](https://togithub.com/spring-projects/spring-boot/issues/24785) - Upgrade to Neo4j OGM 3.2.19 [#​24763](https://togithub.com/spring-projects/spring-boot/issues/24763) - Upgrade to Netty 4.1.58.Final [#​24822](https://togithub.com/spring-projects/spring-boot/issues/24822) - Upgrade to Netty tcNative 2.0.36.Final [#​24823](https://togithub.com/spring-projects/spring-boot/issues/24823) - Upgrade to Reactor Dysprosium-SR16 [#​24765](https://togithub.com/spring-projects/spring-boot/issues/24765) - Upgrade to Spring AMQP 2.2.14.RELEASE [#​24824](https://togithub.com/spring-projects/spring-boot/issues/24824) - Upgrade to Spring Integration 5.3.5.RELEASE [#​24825](https://togithub.com/spring-projects/spring-boot/issues/24825) - Upgrade to Spring Kafka 2.5.11.RELEASE [#​24826](https://togithub.com/spring-projects/spring-boot/issues/24826) - Upgrade to Thymeleaf 3.0.12 [#​24599](https://togithub.com/spring-projects/spring-boot/issues/24599) #### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​izeye](https://togithub.com/izeye) - [@​dreis2211](https://togithub.com/dreis2211) - [@​runningcode](https://togithub.com/runningcode) - [@​spartusch](https://togithub.com/spartusch) - [@​andrey4623](https://togithub.com/andrey4623) ### [`v2.3.7.RELEASE`](https://togithub.com/spring-projects/spring-boot/releases/tag/v2.3.7.RELEASE) [Compare Source](https://togithub.com/spring-projects/spring-boot/compare/v2.3.6.RELEASE...v2.3.7.RELEASE) #### :beetle: Bug Fixes - Configuration property binding processes JavaBean methods in a non-deterministic order which may result in variable behavior [#​24424](https://togithub.com/spring-projects/spring-boot/issues/24424) - Redis health indicator requests more information than it needs resulting in unnecessarily large responses from Redis [#​24250](https://togithub.com/spring-projects/spring-boot/issues/24250) - JPA repositories mode should not be deferred by default [#​24249](https://togithub.com/spring-projects/spring-boot/issues/24249) - ErrorAttributeOptions.excluding throws IllegalArgumentException if includes is empty [#​24230](https://togithub.com/spring-projects/spring-boot/pull/24230) - Actuator web endpoints cannot respond with custom HTTP status codes when running on MVC or WebFlux [#​24222](https://togithub.com/spring-projects/spring-boot/issues/24222) - Missing Spring Integration metrics due to the MeterRegistry bean being looked for before it has been defined [#​24219](https://togithub.com/spring-projects/spring-boot/issues/24219) - WebFluxTags performs unnecessary Pattern compilation when ignoring trailing slashes [#​24193](https://togithub.com/spring-projects/spring-boot/issues/24193) - elasticsearch-rest-client-sniffer is missing from the dependency management for Elasticsearch's REST client modules [#​24185](https://togithub.com/spring-projects/spring-boot/issues/24185) - DataSourceUnwrapper calls Wrapper.isWrapperFor with a class rather than an interface causing Oracle UCP warnings [#​24154](https://togithub.com/spring-projects/spring-boot/issues/24154) #### :notebook_with_decorative_cover: Documentation - Document how to use Devtools without an IDE [#​24409](https://togithub.com/spring-projects/spring-boot/issues/24409) - Add link to appendix from error handling documentation [#​24407](https://togithub.com/spring-projects/spring-boot/issues/24407) - Invalid ErrorAttributesOptions#getInclude Javadoc [#​24257](https://togithub.com/spring-projects/spring-boot/pull/24257) - Security properties appendix contains spring.session and spring.ldap properties that belong elsewhere [#​24195](https://togithub.com/spring-projects/spring-boot/issues/24195) - Rename "sla" to "slo" in reference documentation [#​24160](https://togithub.com/spring-projects/spring-boot/pull/24160) #### :hammer: Dependency Upgrades - Upgrade to ActiveMQ 5.15.14 [#​24436](https://togithub.com/spring-projects/spring-boot/issues/24436) - Upgrade to Caffeine 2.8.8 [#​24437](https://togithub.com/spring-projects/spring-boot/issues/24437) - Upgrade to DB2 JDBC 11.5.5.0 [#​24369](https://togithub.com/spring-projects/spring-boot/issues/24369) - Upgrade to Dropwizard Metrics 4.1.16 [#​24370](https://togithub.com/spring-projects/spring-boot/issues/24370) - Upgrade to Groovy 2.5.14 [#​24371](https://togithub.com/spring-projects/spring-boot/issues/24371) - Upgrade to Hibernate 5.4.25.Final [#​24372](https://togithub.com/spring-projects/spring-boot/issues/24372) - Upgrade to HttpCore 4.4.14 [#​24373](https://togithub.com/spring-projects/spring-boot/issues/24373) - Upgrade to Jetty 9.4.35.v20201120 [#​24374](https://togithub.com/spring-projects/spring-boot/issues/24374) - Upgrade to Micrometer 1.5.9 [#​24427](https://togithub.com/spring-projects/spring-boot/issues/24427) - Upgrade to Netty 4.1.55.Final [#​24438](https://togithub.com/spring-projects/spring-boot/issues/24438) - Upgrade to Netty tcNative 2.0.35.Final [#​24439](https://togithub.com/spring-projects/spring-boot/issues/24439) - Upgrade to Reactor Dysprosium-SR15 [#​24274](https://togithub.com/spring-projects/spring-boot/issues/24274) - Upgrade to Spring AMQP 2.2.13 [#​24287](https://togithub.com/spring-projects/spring-boot/issues/24287) - Upgrade to Spring Batch 4.2.5 [#​24290](https://togithub.com/spring-projects/spring-boot/issues/24290) - Upgrade to Spring Data Neumann-SR6 [#​24283](https://togithub.com/spring-projects/spring-boot/issues/24283) - Upgrade to Spring Framework 5.2.12 [#​24277](https://togithub.com/spring-projects/spring-boot/issues/24277) - Upgrade to Spring HATEOAS 1.1.3 [#​24419](https://togithub.com/spring-projects/spring-boot/issues/24419) - Upgrade to Spring Kafka 2.5.10 [#​24293](https://togithub.com/spring-projects/spring-boot/issues/24293) - Upgrade to Spring Security 5.3.6 [#​24296](https://togithub.com/spring-projects/spring-boot/issues/24296) - Upgrade to Tomcat 9.0.41 [#​24440](https://togithub.com/spring-projects/spring-boot/issues/24440) - Upgrade to Undertow 2.1.5.Final [#​24441](https://togithub.com/spring-projects/spring-boot/issues/24441) #### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​izeye](https://togithub.com/izeye) - [@​xJoeWoo](https://togithub.com/xJoeWoo) - [@​stokpop](https://togithub.com/stokpop) - [@​CubeOfCheese](https://togithub.com/CubeOfCheese) - [@​artembilan](https://togithub.com/artembilan) - [@​wanderleisouza](https://togithub.com/wanderleisouza) - [@​JimStockwell](https://togithub.com/JimStockwell) - [@​SCORE1387](https://togithub.com/SCORE1387) ### [`v2.3.6.RELEASE`](https://togithub.com/spring-projects/spring-boot/releases/tag/v2.3.6.RELEASE) [Compare Source](https://togithub.com/spring-projects/spring-boot/compare/v2.3.5.RELEASE...v2.3.6.RELEASE) #### :beetle: Bug Fixes - Configuration metadata annotation processor may use the wrong accessor for boolean properties [#​24058](https://togithub.com/spring-projects/spring-boot/issues/24058) - When using Tomcat, key and trust store passwords set via javax.net.ssl system properties are overwritten with null when Spring Boot's equivalent properties have not been set [#​24052](https://togithub.com/spring-projects/spring-boot/issues/24052) - `@DataJpaTest` using H2 with schema.sql and spring.datasource.schema-username fails [#​24023](https://togithub.com/spring-projects/spring-boot/issues/24023) - JdbcStoreTypeConfiguration picks transaction of primary data source when Quartz data source is not the primary data source [#​24014](https://togithub.com/spring-projects/spring-boot/issues/24014) - TestTypeExcludeFilter does not implement hashCode and equals as required by its super-class [#​24012](https://togithub.com/spring-projects/spring-boot/issues/24012) - Our auto-configuration should not use `@PostConstruct` as it's ignored on Java 11+ without a dependency on jakarta-annotation-api [#​24009](https://togithub.com/spring-projects/spring-boot/issues/24009) - Config files no longer loaded if they contain a hidden path element [#​23983](https://togithub.com/spring-projects/spring-boot/issues/23983) - "java.lang.IllegalStateException: zip file closed" when call JarFileWrapper.stream() of spring-boot-loader [#​23821](https://togithub.com/spring-projects/spring-boot/issues/23821) #### :notebook_with_decorative_cover: Documentation - Fix link to Flyway callback docs [#​24121](https://togithub.com/spring-projects/spring-boot/issues/24121) - Provide more details about overriding SpringPhysicalNamingStrategy's case insensitive flag [#​24060](https://togithub.com/spring-projects/spring-boot/issues/24060) - Clarify documentation regarding relaxed binding of environment variables [#​24032](https://togithub.com/spring-projects/spring-boot/issues/24032) - Enhance spring.datasource.initialization-mode property description [#​24029](https://togithub.com/spring-projects/spring-boot/issues/24029) - Recommend disabling context path redirects when using proxy-terminated SSL with Tomcat [#​24025](https://togithub.com/spring-projects/spring-boot/issues/24025) - Improve Spring Session back off documentation [#​24018](https://togithub.com/spring-projects/spring-boot/issues/24018) - Clarify the javadoc of AutoConfigureTestDatabase to make it clearer that it only replaces the main DataSource [#​24006](https://togithub.com/spring-projects/spring-boot/issues/24006) - Recommend that bean definitions provide as much type information as possible [#​24004](https://togithub.com/spring-projects/spring-boot/issues/24004) - Add missing default value for enum-based configuration properties [#​23991](https://togithub.com/spring-projects/spring-boot/issues/23991) #### :hammer: Dependency Upgrades - Upgrade to AppEngine SDK 1.9.83 [#​24077](https://togithub.com/spring-projects/spring-boot/issues/24077) - Upgrade to Byte Buddy 1.10.18 [#​24078](https://togithub.com/spring-projects/spring-boot/issues/24078) - Upgrade to Couchbase Client 3.0.10 [#​24079](https://togithub.com/spring-projects/spring-boot/issues/24079) - Upgrade to Hibernate 5.4.23.Final [#​24080](https://togithub.com/spring-projects/spring-boot/issues/24080) - Upgrade to Jetty 9.4.34.v20201102 [#​24046](https://togithub.com/spring-projects/spring-boot/issues/24046) - Upgrade to jOOQ 3.13.6 [#​24081](https://togithub.com/spring-projects/spring-boot/issues/24081) - Upgrade to Micrometer 1.5.7 [#​24050](https://togithub.com/spring-projects/spring-boot/issues/24050) - Upgrade to Neo4j OGM 3.2.18 [#​24125](https://togithub.com/spring-projects/spring-boot/issues/24125) - Upgrade to Netty 4.1.54.Final [#​24124](https://togithub.com/spring-projects/spring-boot/issues/24124) - Upgrade to Reactor Dysprosium-SR14 [#​24109](https://togithub.com/spring-projects/spring-boot/issues/24109) - Upgrade to Spring Framework 5.2.11 [#​24034](https://togithub.com/spring-projects/spring-boot/issues/24034) - Upgrade to Spring Integration 5.3.4 [#​24096](https://togithub.com/spring-projects/spring-boot/issues/24096) - Upgrade to Spring Kafka 2.5.8.RELEASE [#​24075](https://togithub.com/spring-projects/spring-boot/issues/24075) #### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​mruzicka](https://togithub.com/mruzicka) ### [`v2.3.5.RELEASE`](https://togithub.com/spring-projects/spring-boot/releases/tag/v2.3.5.RELEASE) [Compare Source](https://togithub.com/spring-projects/spring-boot/compare/v2.3.4.RELEASE...v2.3.5.RELEASE) #### :beetle: Bug Fixes - Configuration property annotation processor does not notice overriding getter methods [#​23969](https://togithub.com/spring-projects/spring-boot/issues/23969) - Incremental compilation does not keep metadata for inner classes [#​23959](https://togithub.com/spring-projects/spring-boot/issues/23959) - HttpEncodingAutoConfiguration is not added to the WebMvcTest slice [#​23813](https://togithub.com/spring-projects/spring-boot/issues/23813) - Jar entries are duplicated in BOOT-INF/lib with layered jars and Maven [#​23801](https://togithub.com/spring-projects/spring-boot/issues/23801) - server.servlet.session.timeout not in effect when using Jetty starter without jakarta.annotation and javax.annotation [#​23750](https://togithub.com/spring-projects/spring-boot/issues/23750) - If the JVM is killed while refresh is in progress, the shutdown hook does not close the context [#​23743](https://togithub.com/spring-projects/spring-boot/issues/23743) - Setting server.undertow.eager-filter-init has no effect [#​23676](https://togithub.com/spring-projects/spring-boot/issues/23676) - `@ConfigurationPropertiesBinding` does not apply Formatter beans [#​23614](https://togithub.com/spring-projects/spring-boot/issues/23614) - H2 Console error with AbstractRoutingDataSource [#​23569](https://togithub.com/spring-projects/spring-boot/issues/23569) - When using embedded Jetty, an error response to a HEAD request has a body [#​23555](https://togithub.com/spring-projects/spring-boot/issues/23555) - Custom layer definition does not pick up snapshots [#​23533](https://togithub.com/spring-projects/spring-boot/issues/23533) - BootJar.getConfigurations() should not be public API [#​23527](https://togithub.com/spring-projects/spring-boot/issues/23527) - Dependency management for Netty tcNative does not include its netty-tcnative module [#​23508](https://togithub.com/spring-projects/spring-boot/issues/23508) - PropertiesLauncher requires spring-core on the classpath [#​23500](https://togithub.com/spring-projects/spring-boot/issues/23500) - Log4j's tag library doesn't work out of the box as log4j-\*.jar is skipped by default [#​23481](https://togithub.com/spring-projects/spring-boot/issues/23481) - Unexpected application context cache hit when testing with SpringBootTest webEnvironment MOCK and DEFINED_PORT [#​23477](https://togithub.com/spring-projects/spring-boot/issues/23477) - Log4j2 configuration is not picking up some properties [#​23428](https://togithub.com/spring-projects/spring-boot/issues/23428) - Flyway configuration ignores init-sqls when using spring.datasource.\* properties [#​23408](https://togithub.com/spring-projects/spring-boot/issues/23408) - Wildcard locations for configs causes files to be parsed multiple times on k8s [#​23160](https://togithub.com/spring-projects/spring-boot/issues/23160) - Datasource initialisation with JPA schema configured in deferred mode happens asynchronously [#​22852](https://togithub.com/spring-projects/spring-boot/issues/22852) - Maven plugin build-image creator step fails in Bitbucket pipelines [#​22840](https://togithub.com/spring-projects/spring-boot/issues/22840) #### :notebook_with_decorative_cover: Documentation - Remove version elements from Maven plugin documentation [#​23930](https://togithub.com/spring-projects/spring-boot/issues/23930) - Document how to enable h2c via programmatic configuration [#​23812](https://togithub.com/spring-projects/spring-boot/issues/23812) - Note that using LiveReload requires Devtools restart to be enabled [#​23764](https://togithub.com/spring-projects/spring-boot/issues/23764) - Add upgrading section to reference docs with a link to the wiki [#​23611](https://togithub.com/spring-projects/spring-boot/issues/23611) - Add example of setting system property in gradle bootRun [#​23598](https://togithub.com/spring-projects/spring-boot/issues/23598) - Update configuration metadata appendix to remove description for Gradle 4.5 and earlier as it is no longer supported [#​23567](https://togithub.com/spring-projects/spring-boot/issues/23567) - Fix typos in reference documentation and contributing guidelines [#​23561](https://togithub.com/spring-projects/spring-boot/pull/23561) - Fix link to Log4j's JDK Logging Adapter in reference documentation [#​23461](https://togithub.com/spring-projects/spring-boot/issues/23461) - Revisit hint on using classpath\* for retrieving templates [#​23452](https://togithub.com/spring-projects/spring-boot/issues/23452) - Document support for Java 15 [#​23448](https://togithub.com/spring-projects/spring-boot/issues/23448) - Note the Kt class name suffix when describing how to configure a Kotlin application's main class name [#​23422](https://togithub.com/spring-projects/spring-boot/issues/23422) - Add anchor links to section headers in Gradle and Maven plugin reference docs [#​23406](https://togithub.com/spring-projects/spring-boot/issues/23406) - Document how JAVA_OPTS can be used with the buildpack [#​21582](https://togithub.com/spring-projects/spring-boot/issues/21582) - Maven layers documentation is incomplete [#​21555](https://togithub.com/spring-projects/spring-boot/issues/21555) - Document how to override attributes already specified in Maven plugin configuration [#​21536](https://togithub.com/spring-projects/spring-boot/issues/21536) - Add example of default Cloud Native Buildpacks Builder [#​19967](https://togithub.com/spring-projects/spring-boot/issues/19967) #### :hammer: Dependency Upgrades - Upgrade to Byte Buddy 1.10.17 [#​23865](https://togithub.com/spring-projects/spring-boot/issues/23865) - Upgrade to Caffeine 2.8.6 [#​23866](https://togithub.com/spring-projects/spring-boot/issues/23866) - Upgrade to Couchbase Client 3.0.9 [#​23867](https://togithub.com/spring-projects/spring-boot/issues/23867) - Upgrade to Dropwizard Metrics 4.1.14 [#​23868](https://togithub.com/spring-projects/spring-boot/issues/23868) - Upgrade to Hazelcast 3.12.10 [#​23869](https://togithub.com/spring-projects/spring-boot/issues/23869) - Upgrade to Hibernate 5.4.22.Final [#​23870](https://togithub.com/spring-projects/spring-boot/issues/23870) - Upgrade to Hibernate Validator 6.1.6.Final [#​23871](https://togithub.com/spring-projects/spring-boot/issues/23871) - Upgrade to HttpClient 4.5.13 [#​23872](https://togithub.com/spring-projects/spring-boot/issues/23872) - Upgrade to Jackson Bom 2.11.3 [#​23873](https://togithub.com/spring-projects/spring-boot/issues/23873) - Upgrade to Jetty 9.4.33.v20201020 [#​23874](https://togithub.com/spring-projects/spring-boot/issues/23874) - Upgrade to jOOQ 3.13.5 [#​23875](https://togithub.com/spring-projects/spring-boot/issues/23875) - Upgrade to JUnit 4.13.1 [#​23876](https://togithub.com/spring-projects/spring-boot/issues/23876) - Upgrade to JUnit Jupiter 5.6.3 [#​23915](https://togithub.com/spring-projects/spring-boot/issues/23915) - Upgrade to Lettuce 5.3.5.RELEASE [#​23922](https://togithub.com/spring-projects/spring-boot/issues/23922) - Upgrade to Lombok 1.18.16 [#​23877](https://togithub.com/spring-projects/spring-boot/issues/23877) - Upgrade to Micrometer 1.5.6 [#​23791](https://togithub.com/spring-projects/spring-boot/issues/23791) - Upgrade to MySQL 8.0.22 [#​23878](https://togithub.com/spring-projects/spring-boot/issues/23878) - Upgrade to Neo4j OGM 3.2.17 [#​23879](https://togithub.com/spring-projects/spring-boot/issues/23879) - Upgrade to Netty 4.1.53.Final [#​23880](https://togithub.com/spring-projects/spring-boot/issues/23880) - Upgrade to Postgresql 42.2.18 [#​23881](https://togithub.com/spring-projects/spring-boot/issues/23881) - Upgrade to R2DBC Bom Arabba-SR8 [#​23882](https://togithub.com/spring-projects/spring-boot/issues/23882) - Upgrade to Reactor Dysprosium-SR13 [#​23770](https://togithub.com/spring-projects/spring-boot/issues/23770) - Upgrade to RSocket 1.0.3 [#​23911](https://togithub.com/spring-projects/spring-boot/issues/23911) - Upgrade to RxJava2 2.2.20 [#​23883](https://togithub.com/spring-projects/spring-boot/issues/23883) - Upgrade to Spring AMQP 2.2.12 [#​23784](https://togithub.com/spring-projects/spring-boot/issues/23784) - Upgrade to Spring Data Neumann-SR5 [#​23777](https://togithub.com/spring-projects/spring-boot/issues/23777) - Upgrade to Spring Framework 5.2.10 [#​23526](https://togithub.com/spring-projects/spring-boot/issues/23526) - Upgrade to Spring Integration 5.3.3 [#​23780](https://togithub.com/spring-projects/spring-boot/issues/23780) - Upgrade to Spring Kafka 2.5.7 [#​23787](https://togithub.com/spring-projects/spring-boot/issues/23787) - Upgrade to Spring Security 5.3.5.RELEASE [#​23884](https://togithub.com/spring-projects/spring-boot/issues/23884) - Upgrade to Tomcat 9.0.39 [#​23885](https://togithub.com/spring-projects/spring-boot/issues/23885) #### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​thorasine](https://togithub.com/thorasine) ### [`v2.3.4.RELEASE`](https://togithub.com/spring-projects/spring-boot/releases/tag/v2.3.4.RELEASE) [Compare Source](https://togithub.com/spring-projects/spring-boot/compare/v2.3.3.RELEASE...v2.3.4.RELEASE) #### :beetle: Bug Fixes - `@ManagementContextConfiguration` is meta-annotated with `@Configuration(proxyBeanMethods=false)` which does not disable proxying [#​23305](https://togithub.com/spring-projects/spring-boot/issues/23305) - Signed jar dependency performance problem when repackaged in a single jar [#​23264](https://togithub.com/spring-projects/spring-boot/issues/23264) - ValidationHandler no longer works with certain map keys [#​23260](https://togithub.com/spring-projects/spring-boot/issues/23260) - MVC error model unnecessarily requires timestamp entry to be a java.util.Date [#​23258](https://togithub.com/spring-projects/spring-boot/issues/23258) - Missing sanitization in lists of URIs properties on actuator endpoints [#​23252](https://togithub.com/spring-projects/spring-boot/issues/23252) - Cassandra's pool duration mapping uses a wrong duration unit [#​23249](https://togithub.com/spring-projects/spring-boot/issues/23249) - When using HSQLDB, Hikari logs a warning message about the driver class name when the first connection is retrieved from the pool [#​23203](https://togithub.com/spring-projects/spring-boot/issues/23203) - ErrorPageFilter is no longer ordered at HIGHEST_PRECEDENCE + 1 [#​23200](https://togithub.com/spring-projects/spring-boot/issues/23200) - spring-boot-dependencies should not define a spring-boot.version property [#​23174](https://togithub.com/spring-projects/spring-boot/issues/23174) - PropertiesLauncher fails to load PBKDF-OpenSSL of bcprov-jdk15on-1.64.jar [#​23165](https://togithub.com/spring-projects/spring-boot/issues/23165) - Configurable SSL Logback extensions can't be supported due to URL checks [#​23135](https://togithub.com/spring-projects/spring-boot/issues/23135) - Image building support does not zero-pad digest hashes to 64 characters [#​23132](https://togithub.com/spring-projects/spring-boot/issues/23132) - Image builder fails silently when there's an error loading the ephemeral image [#​23130](https://togithub.com/spring-projects/spring-boot/issues/23130) - Large files can throw YAMLException due to node limits [#​23096](https://togithub.com/spring-projects/spring-boot/issues/23096) - RSocketPortInfoApplicationContextInitializer can throw NPE [#​23087](https://togithub.com/spring-projects/spring-boot/issues/23087) - UndertowWebServerFactoryCustomizer requires commons lang via an unintended import on ClassUtils [#​23063](https://togithub.com/spring-projects/spring-boot/issues/23063) - JarFile can cause memory issues when running on Java 11+ [#​22998](https://togithub.com/spring-projects/spring-boot/issues/22998) - Dependency convergence error for nimbus-jose-jwt when depending on spring-boot-starter-oauth2-client [#​22996](https://togithub.com/spring-projects/spring-boot/pull/22996) - LayoutFactory can be presented with empty source file [#​22995](https://togithub.com/spring-projects/spring-boot/issues/22995) - Metrics auto-configurations are not ordered correctly [#​22989](https://togithub.com/spring-projects/spring-boot/issues/22989) - The `@TypeExcludeFilters` annotation is not `@Inherited` [#​22966](https://togithub.com/spring-projects/spring-boot/issues/22966) - Exception inclusion cannot be disabled when sub-classing DefaultErrorAttributes and using its deprecated constructor [#​22750](https://togithub.com/spring-projects/spring-boot/pull/22750) - Too much logging when building an OCI image with Maven [#​22674](https://togithub.com/spring-projects/spring-boot/issues/22674) #### :notebook_with_decorative_cover: Documentation - Document that `@ConfigurationProperties` beans are not scanned in sliced tests [#​23243](https://togithub.com/spring-projects/spring-boot/issues/23243) - Fix documentation on Elasticsearch client configuration [#​23074](https://togithub.com/spring-projects/spring-boot/issues/23074) - Provide examples of Actuator custom endpoints in the reference documentation [#​23060](https://togithub.com/spring-projects/spring-boot/issues/23060) - Mention correct JUnit 5 annotations in Kotlin testing section [#​23004](https://togithub.com/spring-projects/spring-boot/issues/23004) - Document that extracting layers with layertools doesn't work with executable JAR files [#​22993](https://togithub.com/spring-projects/spring-boot/issues/22993) - Javadoc inaccuracy in SpringApplicationBuilder.properties(Properties) [#​22964](https://togithub.com/spring-projects/spring-boot/issues/22964) - Fix typo `Assert4J` -> `AssertJ` [#​22960](https://togithub.com/spring-projects/spring-boot/issues/22960) - Document that graceful shutdown may not work from IDEs [#​22959](https://togithub.com/spring-projects/spring-boot/issues/22959) - Fix typos in docs [#​22945](https://togithub.com/spring-projects/spring-boot/pull/22945) - Fix Gradle Plugin custom image name example and documentation [#​22918](https://togithub.com/spring-projects/spring-boot/pull/22918) - Document how to use spring.factories to add auto-configuration to a test slice [#​22531](https://togithub.com/spring-projects/spring-boot/issues/22531) - Update Maven Plugin's documentation to note the importance of configuring start and stop goals with the same JMX port [#​22401](https://togithub.com/spring-projects/spring-boot/issues/22401) - Document how to perform tasks after application startup [#​22100](https://togithub.com/spring-projects/spring-boot/issues/22100) - Document setting buildpack Java version from compiler plugin version [#​21796](https://togithub.com/spring-projects/spring-boot/issues/21796) - Document that buildpacks use non-root users for building container images and running containers [#​21122](https://togithub.com/spring-projects/spring-boot/issues/21122) #### :hammer: Dependency Upgrades - Upgrade to Micrometer 1.5.5 [#​23393](https://togithub.com/spring-projects/spring-boot/issues/23393) - Upgrade to Spring REST Docs 2.0.5.RELEASE [#​23376](https://togithub.com/spring-projects/spring-boot/issues/23376) - Upgrade to Spring AMQP 2.2.11 [#​23373](https://togithub.com/spring-projects/spring-boot/issues/23373) - Upgrade to Spring WS 3.0.10.RELEASE [#​23339](https://togithub.com/spring-projects/spring-boot/issues/23339) - Upgrade to Spring HATEOAS 1.1.2.RELEASE [#​23338](https://togithub.com/spring-projects/spring-boot/issues/23338) - Upgrade to Lettuce 5.3.4.RELEASE [#​23337](https://togithub.com/spring-projects/spring-boot/issues/23337) - Upgrade to Undertow 2.1.4.Final [#​23318](https://togithub.com/spring-projects/spring-boot/issues/23318) - Upgrade to Tomcat 9.0.38 [#​23317](https://togithub.com/spring-projects/spring-boot/issues/23317) - Upgrade to R2DBC Bom Arabba-SR7 [#​23316](https://togithub.com/spring-projects/spring-boot/issues/23316) - Upgrade to Postgresql 42.2.16 [#​23315](https://togithub.com/spring-projects/spring-boot/issues/23315) - Upgrade to Netty tcNative 2.0.34.Final [#​23314](https://togithub.com/spring-projects/spring-boot/issues/23314) - Upgrade to Netty 4.1.52.Final [#​23313](https://togithub.com/spring-projects/spring-boot/issues/23313) - Upgrade to Neo4j OGM 3.2.16 [#​23312](https://togithub.com/spring-projects/spring-boot/issues/23312) - Upgrade to Hibernate 5.4.21.Final [#​23311](https://togithub.com/spring-projects/spring-boot/issues/23311) - Upgrade to Hazelcast 3.12.9 [#​23310](https://togithub.com/spring-projects/spring-boot/issues/23310) - Upgrade to Flatten Maven Plugin 1.2.5 [#​23309](https://togithub.com/spring-projects/spring-boot/issues/23309) - Upgrade to Couchbase Client 3.0.8 [#​23308](https://togithub.com/spring-projects/spring-boot/issues/23308) - Upgrade to AppEngine SDK 1.9.82 [#​23307](https://togithub.com/spring-projects/spring-boot/issues/23307) - Upgrade to Spring Kafka 2.5.6 [#​23199](https://togithub.com/spring-projects/spring-boot/issues/23199) - Upgrade to Spring Data Neumann-SR4 [#​23196](https://togithub.com/spring-projects/spring-boot/issues/23196) - Upgrade to Reactor Dysprosium-SR12 [#​23192](https://togithub.com/spring-projects/spring-boot/issues/23192) - Upgrade to Spring Session Dragonfruit-SR1 [#​23187](https://togithub.com/spring-projects/spring-boot/issues/23187) - Upgrade to Spring Framework 5.2.9 [#​23183](https://togithub.com/spring-projects/spring-boot/issues/23183) #### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​dreis2211](https://togithub.com/dreis2211) - [@​Lopfest](https://togithub.com/Lopfest) - [@​jnizet](https://togithub.com/jnizet) - [@​ThomasKasene](https://togithub.com/ThomasKasene) ### [`v2.3.3.RELEASE`](https://togithub.com/spring-projects/spring-boot/releases/tag/v2.3.3.RELEASE) [Compare Source](https://togithub.com/spring-projects/spring-boot/compare/v2.3.2.RELEASE...v2.3.3.RELEASE) #### :warning: Upgrading from 2.3.2.RELEASE - If you've applied a configuration workaround for an issue about missing liveness/readiness probes [#​22562](https://togithub.com/spring-projects/spring-boot/issues/22562), you should ensure that this workaround is removed when upgrading to 2.3.3.RELEASE. #### :star: New Features - Jetty with Conscrypt no longer a requirement for easy HTTP/2 [#​22188](https://togithub.com/spring-projects/spring-boot/issues/22188) #### :beetle: Bug Fixes - Externalized Configuration ignores null values in SPRING_APPLICATION_JSON [#​22895](https://togithub.com/spring-projects/spring-boot/issues/22895) - Legacy endpoint ids with '-' do not migrate cleanly [#​22849](https://togithub.com/spring-projects/spring-boot/issues/22849) - When Reactor's debug agent fails to initialize, the cause of the failure is discarded [#​22847](https://togithub.com/spring-projects/spring-boot/issues/22847) - OCI image build fails if environment has any empty properties [#​22703](https://togithub.com/spring-projects/spring-boot/issues/22703) - LiquibaseEndpoint does not report change sets from ancestor contexts [#​22686](https://togithub.com/spring-projects/spring-boot/issues/22686) - Requests that should be handled by an additional DispatcherServlet result in a 404 response [#​22682](https://togithub.com/spring-projects/spring-boot/issues/22682) - Async exceptions not handled by error pages in war deployments [#​22672](https://togithub.com/spring-projects/spring-boot/issues/22672) - XADataSourceAutoConfiguration is difficult to use with DB2XADataSource as it does not have a URL property [#​22641](https://togithub.com/spring-projects/spring-boot/issues/22641) - TaskExecutorBuilder only uses second-precision when configuring the await termination period [#​22611](https://togithub.com/spring-projects/spring-boot/issues/22611) - Setting ignoreInvalidFields=true on [@​ConfigurationProperties](https://togithub.com/ConfigurationProperties) causes unknown fields to be ignored as well [#​22585](https://togithub.com/spring-projects/spring-boot/issues/22585) - Spring Boot 2.3.2: new context is created for every IT class if SpyBean is used [#​22583](https://togithub.com/spring-projects/spring-boot/issues/22583) - Background preinitialisation may cause Jackson2ObjectMapperBuilder's Kotlin detection warning to be silently dropped [#​22580](https://togithub.com/spring-projects/spring-boot/issues/22580) - UndertowWebServerFactoryCustomizer does not support Options but only UndertowOptions [#​22578](https://togithub.com/spring-projects/spring-boot/issues/22578) - WebMvcTest and WebFluxTest do not include Jackson Module beans [#​22576](https://togithub.com/spring-projects/spring-boot/issues/22576) - CouchbaseCacheManager can no longer be customized using CacheManagerCustomizer [#​22573](https://togithub.com/spring-projects/spring-boot/issues/22573) - Kubernetes readiness probe endpoint returning 404 [#​22562](https://togithub.com/spring-projects/spring-boot/issues/22562) - CouchbaseCacheConfiguration is not ordered properly [#​22542](https://togithub.com/spring-projects/spring-boot/issues/22542) - MustacheEnvironmentCollector with nullValue compiler option no longer works in version 2.3.1 [#​22039](https://togithub.com/spring-projects/spring-boot/issues/22039) #### :notebook_with_decorative_cover: Documentation - PushGateway documentation does not document enabled flag properly [#​22930](https://togithub.com/spring-projects/spring-boot/issues/22930) - Default value of server.jetty.accesslog.format is wrongly associated to server.forward-headers-strategy [#​22921](https://togithub.com/spring-projects/spring-boot/issues/22921) - Use wildcard in BP_JVM_VERSION with image building [#​22916](https://togithub.com/spring-projects/spring-boot/issues/22916) - Kotlin examples for configuring bootBuildImage's environment use wrong map configuration syntax [#​22913](https://togithub.com/spring-projects/spring-boot/issues/22913) - Mention configuration customizers for WebTestClient and RestAssured in AutoConfigureRestDocs' javadoc [#​22910](https://togithub.com/spring-projects/spring-boot/issues/22910) - Document how to discover the HTTP Port at Runtime for both Servlet and Reactive web apps [#​22899](https://togithub.com/spring-projects/spring-boot/issues/22899) - Document that spring-boot-configuration-processor cannot detect default value defined externally [#​22890](https://togithub.com/spring-projects/spring-boot/issues/22890) - Docs say Health's inner `details` section may contain components [#​22774](https://togithub.com/spring-projects/spring-boot/issues/22774) - Fix wrong reference in `ReadinessStateHealthIndicator` javadoc [#​22760](https://togithub.com/spring-projects/spring-boot/pull/22760) - Recommend the use of AopTestUtils.getTargetObject() when setting expectations on a spied bean that Spring has proxied [#​22758](https://togithub.com/spring-projects/spring-boot/issues/22758) - Document that schema.sql and data.sql will still be run when using Flyway or Liquibase but discourage their use [#​22748](https://togithub.com/spring-projects/spring-boot/issues/22748) - Fix broken links to Micrometer registry docs [#​22706](https://togithub.com/spring-projects/spring-boot/issues/22706) - Clarify documentation on use of [@​AutoConfigureRestDocs](https://togithub.com/AutoConfigureRestDocs) with WebTestClient [#​22669](https://togithub.com/spring-projects/spring-boot/issues/22669) - Document that constructor binding does not support [@​DurationUnit](https://togithub.com/DurationUnit) and [@​DataSizeUnit](https://togithub.com/DataSizeUnit) [#​22665](https://togithub.com/spring-projects/spring-boot/issues/22665) - Document properties to enable probe health indicators [#​22631](https://togithub.com/spring-projects/spring-boot/pull/22631) - Update metrics documentation to note the benefits of using a MeterBinder when registering a metric that relies on other beans [#​22629](https://togithub.com/spring-projects/spring-boot/issues/22629) - Include a hint where to find documentation for DevTools in docs overview [#​22622](https://togithub.com/spring-projects/spring-boot/issues/22622) - Fix link to Elasticsearch health indicator [#​22617](https://togithub.com/spring-projects/spring-boot/issues/22617) - Add ElasticsearchReactiveHealthIndicator to docs [#​22616](https://togithub.com/spring-projects/spring-boot/pull/22616) - Link to App Engine Standard sample not working [#​22608](https://togithub.com/spring-projects/spring-boot/issues/22608) - Improve documentation about swapping one technical starter for another [#​22596](https://togithub.com/spring-projects/spring-boot/issues/22596) - Document how to use MongoClientSettingsBuilderCustomizer [#​22589](https://togithub.com/spring-projects/spring-boot/issues/22589) - Document the need for configuration files to have a file extension [#​22587](https://togithub.com/spring-projects/spring-boot/issues/22587) - Document that java.util.Optional is not recommended with ConfigurationProperties [#​22574](https://togithub.com/spring-projects/spring-boot/issues/22574) - Typo in metadata for "management.health.readinessstate.enabled" [#​22560](https://togithub.com/spring-projects/spring-boot/issues/22560) - Document how to opt back in to DataSource auto-configuration when using R2DBC [#​22094](https://togithub.com/spring-projects/spring-boot/issues/22094) - Document that application.conf is not read by default when using the Cassandra auto-configuration [#​21787](https://togithub.com/spring-projects/spring-boot/issues/21787) - Document how to use Gradle's native bom support as an alternative to the dependency management plugin [#​21570](https://togithub.com/spring-projects/spring-boot/issues/21570) #### :hammer: Dependency Upgrades - Upgrade to Micrometer 1.5.4 [#​22932](https://togithub.com/spring-projects/spring-boot/issues/22932) - Upgrade to Spring Security 5.3.4.RELEASE [#​22873](https://togithub.com/spring-projects/spring-boot/issues/22873) - Upgrade to Spring HATEOAS 1.1.1.RELEASE [#​22872](https://togithub.com/spring-projects/spring-boot/issues/22872) - Upgrade to RSocket 1.0.2 [#​22871](https://togithub.com/spring-projects/spring-boot/issues/22871) - Upgrade to Pooled JMS 1.1.2 [#​22870](https://togithub.com/spring-projects/spring-boot/issues/22870) - Upgrade to Lettuce 5.3.3.RELEASE [#​22869](https://togithub.com/spring-projects/spring-boot/issues/22869) - Upgrade to Kafka 2.5.1 [#​22868](https://togithub.com/spring-projects/spring-boot/issues/22868) - Upgrade to jOOQ 3.13.4 [#​22867](https://togithub.com/spring-projects/spring-boot/issues/22867) - Upgrade to Jetty 9.4.31.v20200723 [#​22866](https://togithub.com/spring-projects/spring-boot/issues/22866) - Upgrade to Jackson Bom 2.11.2 [#​22865](https://togithub.com/spring-projects/spring-boot/issues/22865) - Upgrade to Hibernate 5.4.20.Final [#​22864](https://togithub.com/spring-projects/spring-boot/issues/22864) - Upgrade to Dropwizard Metrics 4.1.12.1 [#​22863](https://togithub.com/spring-projects/spring-boot/issues/22863) - Upgrade to Dependency Management Plugin 1.0.10.RELEASE [#​22862](https://togithub.com/spring-projects/spring-boot/issues/22862) - Upgrade to Couchbase Client 3.0.7 [#​22861](https://togithub.com/spring-projects/spring-boot/issues/22861) - Upgrade to Commons Pool2 2.8.1 [#​22860](https://togithub.com/spring-projects/spring-boot/issues/22860) - Upgrade to Byte Buddy 1.10.14 [#​22859](https://togithub.com/spring-projects/spring-boot/issues/22859) - Upgrade to Spring Data Neumann SR3 [#​22844](https://togithub.com/spring-projects/spring-boot/issues/22844) - Upgrade to Spring Kafka 2.5.5 [#​22843](https://togithub.com/spring-projects/spring-boot/issues/22843) - Upgrade to Spring AMQP 2.2.10 [#​22842](https://togithub.com/spring-projects/spring-boot/issues/22842) - Upgrade to Reactor Dysprosium-SR11 [#​22841](https://togithub.com/spring-projects/spring-boot/issues/22841) #### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​izeye](https://togithub.com/izeye) - [@​dreis2211](https://togithub.com/dreis2211) - [@​ttddyy](https://togithub.com/ttddyy) - [@​ksmilek-wr](https://togithub.com/ksmilek-wr) ### [`v2.3.2.RELEASE`](https://togithub.com/spring-projects/spring-boot/releases/tag/v2.3.2.RELEASE) [Compare Source](https://togithub.com/spring-projects/spring-boot/compare/v2.3.1.RELEASE...v2.3.2.RELEASE) #### :star: New Features - Improve Liveness/Readiness health indicators and probes configuration [#​22107](https://togithub.com/spring-projects/spring-boot/issues/22107) - Add run-image option for image building [#​21534](https://togithub.com/spring-projects/spring-boot/issues/21534) - Add support for reactive Elasticsearch healthcheck [#​21042](https://togithub.com/spring-projects/spring-boot/pull/21042) #### :beetle: Bug Fixes - AbstractRepositoryConfigurationSourceSupport does not override registerBeanDefinitions(AnnotationMetadata, BeanDefinitionRegistry) [#​22480](https://togithub.com/spring-projects/spring-boot/issues/22480) - ConditionMessage#items throws an NPE with a null list of items although the Javadoc states it is tolerated [#​22344](https://togithub.com/spring-projects/spring-boot/pull/22344) - ConfigurationPropertiesBeanDefinitionValidator interferes with EclipseLink load-time weaving [#​22325](https://togithub.com/spring-projects/spring-boot/issues/22325) - Image building fails when DOCKER_HOST is set to a local socket prefixed with unix:// [#​22300](https://togithub.com/spring-projects/spring-boot/issues/22300) - OnClassCondition tries to determine the outcome for single auto-configuration classes in parallel [#​22294](https://togithub.com/spring-projects/spring-boot/pull/22294) - A WebFlux app that depends on com.amazonaws:DynamoDBLocal fails to start [#​22282](https://togithub.com/spring-projects/spring-boot/issues/22282) - NullPointerException in ErrorPageFilter when a MissingServletRequestParameterException is thrown and there's no DefaultHandlerExceptionResolver [#​22249](https://togithub.com/spring-projects/spring-boot/issues/22249) - Numerous logs mentioning a failed JNDI lookup when using Jetty [#​22241](https://togithub.com/spring-projects/spring-boot/issues/22241) - OAuth2ResourceServerAutoConfiguration does not back off completely when spring-security-oauth2-resource-server is not on the classpath [#​22233](https://togithub.com/spring-projects/spring-boot/issues/22233) - Period conversion does not support a ChronoUnit of WEEKS but supports weeks in ISO-8601 (e.g. P2W) and simple (e.g. 2w) formats [#​22225](https://togithub.com/spring-projects/spring-boot/issues/22225) - Image building fails with an unhelpful error message when building an image from a jar that includes the launch script [#​22223](https://togithub.com/spring-projects/spring-boot/issues/22223) - Layered bootJar task causes warnings wh