Bump org.springframework:spring-web from 5.3.37 to 5.3.39

[dependabot[bot]]

Bumps org.springframework:spring-web from 5.3.37 to 5.3.39.

Release notes

Sourced from org.springframework:spring-web's releases.

v5.3.39

:star: New Features

• SimpleEvaluationContext should disable array allocation #33386

v5.3.38

:star: New Features

• Efficient handling of conditional HTTP requests #33378

:lady_beetle: Bug Fixes

• Fix incorrect weak ETag validation #33377
• SimpleEvaluationContext does not enforce read-only semantics #33320
• ConversionService cannot convert primitive array to Object[] #33314
• SpEL Indexer silently ignores failure to set property as index #33312
• Mockito mock falsely initialized as CGLIB proxy with AspectJ aspect #33142
• "file:." cannot be resolved to java.nio.file.Path (and plain "." value resolves to classpath root) #33140

:notebook_with_decorative_cover: Documentation

• Typo in Annotation-driven Listener Endpoints section of Spring Framework documentation #33052
• Container Extension Points section of Spring Framework documentation refers to the wrong property name #33039
• Incorrect constructor details in the javadoc for ApplicationContextEvent #33034

:hammer: Dependency Upgrades

• Upgrade to Reactor 2020.0.47 #33322

Commits

• f1b128b Release v5.3.39
• 8a44eaa Next development version (v5.3.39-SNAPSHOT)
• f44d13c Disable array allocation in case of no constructor resolution
• f00bc7b Remove snapshot repo
• 582bfcc Efficient ETag parsing
• 406b33d Upgrade to Netty 4.1.112
• f9c3d00 Introduce withAssignmentDisabled() option for SimpleEvaluationContext
• d2715d2 Fix incorrect weak ETag assertion
• 57b02da Upgrade to Reactor 2020.0.47
• df33bf2 Sync GHA setup
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

| Dependency Name | Ignore Conditions | | --- | --- | | org.springframework:spring-web | [>= 6.a, < 7] |

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)