search

dniel / traefik-forward-auth0

A backend for performing forward authentication with Auth0 using the Traefik reverse proxy.
GNU General Public License v3.0
86 stars 16 forks source link

Update dependency org.springframework.boot:spring-boot-dependencies to v2.5.12 [SECURITY] - autoclosed #329

Closed renovate[bot] closed 2 years ago

renovate[bot] commented 2 years ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
org.springframework.boot:spring-boot-dependencies (source) 2.3.0.RELEASE -> 2.5.12 age adoption passing confidence

This PR upgrades one or more Spring framework packages to fix a critical vulnerability.

Release Notes

spring-projects/spring-boot ### [`v2.5.12`](https://togithub.com/spring-projects/spring-boot/releases/tag/v2.5.12) [Compare Source](https://togithub.com/spring-projects/spring-boot/compare/v2.5.11...v2.5.12) #### :lady_beetle: Bug Fixes - MustacheAutoConfiguration in a Servlet web application fails with a ClassNotFoundException when Spring MVC is not on the classpath [#​30456](https://togithub.com/spring-projects/spring-boot/pull/30456) #### :notebook_with_decorative_cover: Documentation - Javadoc of org.springframework.boot.gradle.plugin.ResolveMainClassName.setClasspath(Object) is inaccurate [#​30468](https://togithub.com/spring-projects/spring-boot/issues/30468) - Document that `@DefaultValue` can be used on a record component [#​30460](https://togithub.com/spring-projects/spring-boot/issues/30460) #### :hammer: Dependency Upgrades - Upgrade to Jackson Bom 2.12.6.20220326 [#​30477](https://togithub.com/spring-projects/spring-boot/issues/30477) - Upgrade to Spring Framework 5.3.18 [#​30491](https://togithub.com/spring-projects/spring-boot/issues/30491) #### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​quaff](https://togithub.com/quaff) - [@​eddumelendez](https://togithub.com/eddumelendez) - [@​candrews](https://togithub.com/candrews) ### [`v2.5.11`](https://togithub.com/spring-projects/spring-boot/releases/tag/v2.5.11) [Compare Source](https://togithub.com/spring-projects/spring-boot/compare/v2.5.10...v2.5.11) #### :star: New Features - Add EIGHTEEN to JavaVersion enum [#​29524](https://togithub.com/spring-projects/spring-boot/issues/29524) #### :lady_beetle: Bug Fixes - Thymeleaf auto-configuration in a reactive application can fail due to duplicate templateEngine beans [#​30384](https://togithub.com/spring-projects/spring-boot/issues/30384) - ConfigurationPropertyName#equals is not symmetric when adapt has removed trailing characters from an element [#​30317](https://togithub.com/spring-projects/spring-boot/issues/30317) - server.tomcat.keep-alive-timeout is not applied to HTTP/2 [#​30267](https://togithub.com/spring-projects/spring-boot/issues/30267) - Setting spring.mustache.enabled to false has no effect [#​30250](https://togithub.com/spring-projects/spring-boot/issues/30250) - bootWar is configured eagerly [#​30211](https://togithub.com/spring-projects/spring-boot/issues/30211) - Actuator `@ReadOperation` on Flux cancels request after first element emitted [#​30095](https://togithub.com/spring-projects/spring-boot/issues/30095) - No metrics are bound for R2DBC ConnectionPools that have been wrapped [#​30090](https://togithub.com/spring-projects/spring-boot/issues/30090) - Unnecessary allocations in Prometheus scraping endpoint [#​30085](https://togithub.com/spring-projects/spring-boot/pull/30085) - Condition evaluation report entry for a `@ConditionalOnSingleCandidate` that does not match due to multiple primary beans isn't as clear as it could be [#​30073](https://togithub.com/spring-projects/spring-boot/issues/30073) - Generated password are logged without an "unsuitable for production use" note [#​30061](https://togithub.com/spring-projects/spring-boot/issues/30061) - Files in META-INF are not found when deploying a Gradle-built executable war to a servlet container [#​30026](https://togithub.com/spring-projects/spring-boot/issues/30026) - spring-boot-configuration-processor fails compilation due to `@DefaultValue` with a long value and generates invalid metadata for byte and short properties with out-of-range default values [#​30020](https://togithub.com/spring-projects/spring-boot/issues/30020) - Dependency management for Netty tcNative is incomplete leading to possible version conflicts [#​30010](https://togithub.com/spring-projects/spring-boot/issues/30010) - Dependency management for Apache Kafka is incomplete [#​29023](https://togithub.com/spring-projects/spring-boot/issues/29023) #### :notebook_with_decorative_cover: Documentation - Fix JsonSerializer example in reference guide [#​30329](https://togithub.com/spring-projects/spring-boot/pull/30329) - Default value of spring.thymeleaf.reactive.media-types is not documented [#​30280](https://togithub.com/spring-projects/spring-boot/issues/30280) - Add Netty in "Enable HTTP Response Compression" [#​30234](https://togithub.com/spring-projects/spring-boot/pull/30234) - Fix typo [#​30118](https://togithub.com/spring-projects/spring-boot/pull/30118) - Remove non-existent spring.data.cassandra.connection.connection-timeout property from the documentation [#​30074](https://togithub.com/spring-projects/spring-boot/pull/30074) - Use Gradle's task configuration avoidance APIs in the Gradle Plugin's reference docs [#​30056](https://togithub.com/spring-projects/spring-boot/issues/30056) - Polish web examples in reference doc [#​30027](https://togithub.com/spring-projects/spring-boot/pull/30027) - Improve property placeholder documentation to mention environment variables and default values [#​30012](https://togithub.com/spring-projects/spring-boot/pull/30012) - Use Gradle's task configuration avoidance APIs in the main reference docs [#​30000](https://togithub.com/spring-projects/spring-boot/pull/30000) - Document how to access the H2 Console in a secured web application [#​29932](https://togithub.com/spring-projects/spring-boot/pull/29932) - Add links to Spring Boot for Apache Geode to the reference documentation [#​29697](https://togithub.com/spring-projects/spring-boot/issues/29697) - Include default Dev Tools properties in the reference documentation [#​29406](https://togithub.com/spring-projects/spring-boot/issues/29406) - Document the WebSocket-related exclusions that are required to use Jetty 10 [#​29275](https://togithub.com/spring-projects/spring-boot/issues/29275) - Clarify type matching that is performed when using `@MockBean` and `@SpyBean` [#​28656](https://togithub.com/spring-projects/spring-boot/issues/28656) - Add documentation for spring.profiles.include [#​28451](https://togithub.com/spring-projects/spring-boot/issues/28451) - Document the scalar types supported by MapBinder [#​27581](https://togithub.com/spring-projects/spring-boot/issues/27581) - Document when config data properties are invalid [#​25849](https://togithub.com/spring-projects/spring-boot/issues/25849) - Document how to rely on ServletContext with an embedded container setup [#​24561](https://togithub.com/spring-projects/spring-boot/issues/24561) - Clarify that build plugins or the CLI does not have an auto-compile feature [#​17851](https://togithub.com/spring-projects/spring-boot/issues/17851) - Document how to structure configurations so that `@Bean` methods are included in slice tests [#​16088](https://togithub.com/spring-projects/spring-boot/issues/16088) #### :hammer: Dependency Upgrades - Upgrade to Couchbase Client 3.1.8 [#​30221](https://togithub.com/spring-projects/spring-boot/issues/30221) - Upgrade to Dropwizard Metrics 4.1.31 [#​30222](https://togithub.com/spring-projects/spring-boot/issues/30222) - Upgrade to Groovy 3.0.10 [#​30223](https://togithub.com/spring-projects/spring-boot/issues/30223) - Upgrade to Hibernate Validator 6.2.3.Final [#​30224](https://togithub.com/spring-projects/spring-boot/issues/30224) - Upgrade to Lettuce 6.1.8.RELEASE [#​30336](https://togithub.com/spring-projects/spring-boot/issues/30336) - Upgrade to Log4j2 2.17.2 [#​30225](https://togithub.com/spring-projects/spring-boot/issues/30225) - Upgrade to Logback 1.2.11 [#​30226](https://togithub.com/spring-projects/spring-boot/issues/30226) - Upgrade to Micrometer 1.7.10 [#​30171](https://togithub.com/spring-projects/spring-boot/issues/30171) - Upgrade to Netty 4.1.75.Final [#​30227](https://togithub.com/spring-projects/spring-boot/issues/30227) - Upgrade to Netty tcNative 2.0.51.Final [#​30228](https://togithub.com/spring-projects/spring-boot/issues/30228) - Upgrade to R2DBC Bom Arabba-SR13 [#​30337](https://togithub.com/spring-projects/spring-boot/issues/30337) - Upgrade to Reactor 2020.0.17 [#​30169](https://togithub.com/spring-projects/spring-boot/issues/30169) - Upgrade to Spring AMQP 2.3.15 [#​30173](https://togithub.com/spring-projects/spring-boot/issues/30173) - Upgrade to Spring Data 2021.0.10 [#​30172](https://togithub.com/spring-projects/spring-boot/issues/30172) - Upgrade to Spring Framework 5.3.17 [#​30170](https://togithub.com/spring-projects/spring-boot/issues/30170) - Upgrade to Spring Integration 5.5.10 [#​30175](https://togithub.com/spring-projects/spring-boot/issues/30175) - Upgrade to Spring Kafka 2.7.12 [#​30351](https://togithub.com/spring-projects/spring-boot/issues/30351) - Upgrade to Spring Retry 1.3.2 [#​30229](https://togithub.com/spring-projects/spring-boot/issues/30229) - Upgrade to Spring WS 3.1.3 [#​30174](https://togithub.com/spring-projects/spring-boot/issues/30174) - Upgrade to Tomcat 9.0.60 [#​30230](https://togithub.com/spring-projects/spring-boot/issues/30230) #### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​izeye](https://togithub.com/izeye) - [@​stokpop](https://togithub.com/stokpop) - [@​larsgrefer](https://togithub.com/larsgrefer) - [@​wonwoo](https://togithub.com/wonwoo) - [@​abelsromero](https://togithub.com/abelsromero) - [@​fml2](https://togithub.com/fml2) - [@​hak7a3](https://togithub.com/hak7a3) - [@​octylFractal](https://togithub.com/octylFractal) - [@​hpoettker](https://togithub.com/hpoettker) - [@​62mkv](https://togithub.com/62mkv) - [@​PPakSang](https://togithub.com/PPakSang) - [@​m-semnani](https://togithub.com/m-semnani) ### [`v2.5.10`](https://togithub.com/spring-projects/spring-boot/releases/tag/v2.5.10) [Compare Source](https://togithub.com/spring-projects/spring-boot/compare/v2.5.9...v2.5.10) ##### :lady_beetle: Bug Fixes - Default JmxAutoConfiguration changes JConsole hierarchy for multi-property `@ManagedResource` object names [#​29953](https://togithub.com/spring-projects/spring-boot/issues/29953) - The active profiles log message is ambiguous when a profile's name contains a comma [#​29896](https://togithub.com/spring-projects/spring-boot/pull/29896) - Failed application contexts are not deregistered from SpringApplicationShutdownHook [#​29874](https://togithub.com/spring-projects/spring-boot/issues/29874) - Gradle Plugin triggers eager configuration of some tasks [#​29762](https://togithub.com/spring-projects/spring-boot/pull/29762) - MimeMapping for ots has a trailing space in its mime type [#​29746](https://togithub.com/spring-projects/spring-boot/issues/29746) - Dependency management for Liquibase does not include its liquibase-cdi module [#​29676](https://togithub.com/spring-projects/spring-boot/issues/29676) - Ignore invalid stream types when reading log update events [#​29675](https://togithub.com/spring-projects/spring-boot/pull/29675) - bootJar, bootRun, and bootWar do not pick up changes to the main source set's runtime classpath that are made after Boot's plugin has been applied [#​29672](https://togithub.com/spring-projects/spring-boot/issues/29672) - `@SpyBean` causes BeanCurrentlyInCreationException when there are circular references [#​29639](https://togithub.com/spring-projects/spring-boot/issues/29639) - server.tomcat.use-relative-redirects=true not honored when server.forward-headers-strategy=framework [#​29333](https://togithub.com/spring-projects/spring-boot/pull/29333) - A fat jar built with Gradle moves META-INF beneath BOOT-INF/classes while Maven leaves it at the jar's root [#​28562](https://togithub.com/spring-projects/spring-boot/issues/28562) ##### :notebook_with_decorative_cover: Documentation - bootRun example should use mainClass, rather than main which was deprecated in Gradle 7.1 [#​29965](https://togithub.com/spring-projects/spring-boot/issues/29965) - Rectify incorrect sanitizing regex example provided in how-to docs [#​29951](https://togithub.com/spring-projects/spring-boot/issues/29951) - "Customizing the Banner" should make it more obvious that any environment property can be used [#​29931](https://togithub.com/spring-projects/spring-boot/pull/29931) - Update javadoc to reflect move from WebSecurityConfigurerAdapter to SecurityFilterChain [#​29900](https://togithub.com/spring-projects/spring-boot/issues/29900) - Link directly to the Integration Properties section of the appendix when cross-referencing Kafka properties [#​29758](https://togithub.com/spring-projects/spring-boot/pull/29758) - Add documentation for WebMvc.fn [#​29683](https://togithub.com/spring-projects/spring-boot/pull/29683) - Move appendix subsections under appendix section [#​29667](https://togithub.com/spring-projects/spring-boot/pull/29667) - In Gradle plugin docs, replace classifier (deprecated) with archiveClassifier in examples [#​29611](https://togithub.com/spring-projects/spring-boot/pull/29611) - Clarify relation of import path to resultant properties in configtree import data [#​29606](https://togithub.com/spring-projects/spring-boot/issues/29606) - Upgrade version of gradle-git-properties in reference doc [#​29535](https://togithub.com/spring-projects/spring-boot/pull/29535) - Rename Boxfuse to CloudCaptain [#​29523](https://togithub.com/spring-projects/spring-boot/pull/29523) - Provide some guidance on identifying and resolving Devtools classloading issues [#​29438](https://togithub.com/spring-projects/spring-boot/pull/29438) - Warn about the dangers of early bean initialization when using `@ConditionalOnExpression` [#​29276](https://togithub.com/spring-projects/spring-boot/pull/29276) - Document that placeholders in `@DefaultValue` annotations are not resolved [#​23164](https://togithub.com/spring-projects/spring-boot/issues/23164) ##### :hammer: Dependency Upgrades - Upgrade to ActiveMQ 5.16.4 [#​29925](https://togithub.com/spring-projects/spring-boot/issues/29925) - Upgrade to AppEngine SDK 1.9.95 [#​29926](https://togithub.com/spring-projects/spring-boot/issues/29926) - Upgrade to Dropwizard Metrics 4.1.30 [#​29768](https://togithub.com/spring-projects/spring-boot/issues/29768) - Upgrade to Glassfish JAXB 2.3.6 [#​29769](https://togithub.com/spring-projects/spring-boot/issues/29769) - Upgrade to Hibernate Validator 6.2.2.Final [#​29770](https://togithub.com/spring-projects/spring-boot/issues/29770) - Upgrade to Jetty 9.4.45.v20220203 [#​29771](https://togithub.com/spring-projects/spring-boot/issues/29771) - Upgrade to Jetty Reactive HTTPClient 1.1.11 [#​29927](https://togithub.com/spring-projects/spring-boot/issues/29927) - Upgrade to Johnzon 1.2.16 [#​29772](https://togithub.com/spring-projects/spring-boot/issues/29772) - Upgrade to Json-smart 2.4.8 [#​29773](https://togithub.com/spring-projects/spring-boot/issues/29773) - Upgrade to Micrometer 1.7.9 [#​29708](https://togithub.com/spring-projects/spring-boot/issues/29708) - Upgrade to Neo4j Java Driver 4.2.9 [#​29774](https://togithub.com/spring-projects/spring-boot/issues/29774) - Upgrade to Netty 4.1.74.Final [#​29775](https://togithub.com/spring-projects/spring-boot/issues/29775) - Upgrade to Netty tcNative 2.0.50.Final [#​29973](https://togithub.com/spring-projects/spring-boot/issues/29973) - Upgrade to Postgresql 42.2.25 [#​29777](https://togithub.com/spring-projects/spring-boot/issues/29777) - Upgrade to Reactor 2020.0.16 [#​29707](https://togithub.com/spring-projects/spring-boot/issues/29707) - Upgrade to SLF4J 1.7.36 [#​29778](https://togithub.com/spring-projects/spring-boot/issues/29778) - Upgrade to Spring Batch 4.3.5 [#​29714](https://togithub.com/spring-projects/spring-boot/issues/29714) - Upgrade to Spring Data 2021.0.9 [#​29711](https://togithub.com/spring-projects/spring-boot/issues/29711) - Upgrade to Spring Framework 5.3.16 [#​29709](https://togithub.com/spring-projects/spring-boot/issues/29709) - Upgrade to Spring Integration 5.5.9 [#​29962](https://togithub.com/spring-projects/spring-boot/issues/29962) - Upgrade to Spring Kafka 2.7.11 [#​29712](https://togithub.com/spring-projects/spring-boot/issues/29712) - Upgrade to Spring LDAP 2.3.6 [#​29710](https://togithub.com/spring-projects/spring-boot/issues/29710) - Upgrade to Spring Security 5.5.5 [#​29713](https://togithub.com/spring-projects/spring-boot/issues/29713) - Upgrade to Spring Session 2021.0.5 [#​29715](https://togithub.com/spring-projects/spring-boot/issues/29715) - Upgrade to Thymeleaf 3.0.15.RELEASE [#​29779](https://togithub.com/spring-projects/spring-boot/issues/29779) - Upgrade to Tomcat 9.0.58 [#​29780](https://togithub.com/spring-projects/spring-boot/issues/29780) - Upgrade to Undertow 2.2.16.Final [#​29781](https://togithub.com/spring-projects/spring-boot/issues/29781) ##### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​dreis2211](https://togithub.com/dreis2211) - [@​UbaidurRehman1](https://togithub.com/UbaidurRehman1) - [@​mhalbritter](https://togithub.com/mhalbritter) - [@​quaff](https://togithub.com/quaff) - [@​axelfontaine](https://togithub.com/axelfontaine) - [@​lachlan-roberts](https://togithub.com/lachlan-roberts) - [@​aahlenst](https://togithub.com/aahlenst) - [@​jvalkeal](https://togithub.com/jvalkeal) - [@​mihailcornescu](https://togithub.com/mihailcornescu) - [@​izeye](https://togithub.com/izeye) - [@​larsgrefer](https://togithub.com/larsgrefer) - [@​halcyon22](https://togithub.com/halcyon22) - [@​polarbear567](https://togithub.com/polarbear567) - [@​gcoppex](https://togithub.com/gcoppex) - [@​terminux](https://togithub.com/terminux) ### [`v2.5.9`](https://togithub.com/spring-projects/spring-boot/releases/tag/v2.5.9) [Compare Source](https://togithub.com/spring-projects/spring-boot/compare/v2.5.8...v2.5.9) #### :lady_beetle: Bug Fixes - ConfigurationPropertySources.attach will always reattach when called multiple times [#​29409](https://togithub.com/spring-projects/spring-boot/issues/29409) - 'spring.config.import' placeholders can resolve from profile-specific documents when they should fail [#​29386](https://togithub.com/spring-projects/spring-boot/issues/29386) - Embedded launch script fails if jar is owned by an unknown user [#​29370](https://togithub.com/spring-projects/spring-boot/issues/29370) - Maven repackaging of a jar with a deeply nested package is prohibitively slow [#​29175](https://togithub.com/spring-projects/spring-boot/issues/29175) - `@SpringBootTest` does not use spring.main.web-application-type properties declared in test resource files [#​29169](https://togithub.com/spring-projects/spring-boot/issues/29169) - Warning from AprLifecycleListener when using Tomcat Native and Tomcat 9.0.55 or later [#​28814](https://togithub.com/spring-projects/spring-boot/issues/28814) #### :notebook_with_decorative_cover: Documentation - Clarify documentation for RestTemplate customization [#​29394](https://togithub.com/spring-projects/spring-boot/issues/29394) - Refer to Maven Resolver rather than Aether [#​29255](https://togithub.com/spring-projects/spring-boot/issues/29255) #### :hammer: Dependency Upgrades - Upgrade to HttpCore5 5.1.3 [#​29334](https://togithub.com/spring-projects/spring-boot/issues/29334) - Upgrade to Infinispan 12.1.11.Final [#​29335](https://togithub.com/spring-projects/spring-boot/issues/29335) - Upgrade to Jaybird 4.0.5.java8 [#​29336](https://togithub.com/spring-projects/spring-boot/issues/29336) - Upgrade to JBoss Logging 3.4.3.Final [#​29337](https://togithub.com/spring-projects/spring-boot/issues/29337) - Upgrade to Lettuce 6.1.6.RELEASE [#​29338](https://togithub.com/spring-projects/spring-boot/issues/29338) - Upgrade to Log4j2 2.17.1 [#​29183](https://togithub.com/spring-projects/spring-boot/issues/29183) - Upgrade to Logback 1.2.10 [#​29339](https://togithub.com/spring-projects/spring-boot/issues/29339) - Upgrade to MariaDB 2.7.5 [#​29496](https://togithub.com/spring-projects/spring-boot/issues/29496) - Upgrade to Maven Jar Plugin 3.2.2 [#​29340](https://togithub.com/spring-projects/spring-boot/issues/29340) - Upgrade to Micrometer 1.7.8 [#​29310](https://togithub.com/spring-projects/spring-boot/issues/29310) - Upgrade to MySQL 8.0.28 [#​29464](https://togithub.com/spring-projects/spring-boot/issues/29464) - Upgrade to Netty 4.1.73.Final [#​29341](https://togithub.com/spring-projects/spring-boot/issues/29341) - Upgrade to Netty tcNative 2.0.47.Final [#​29465](https://togithub.com/spring-projects/spring-boot/issues/29465) - Upgrade to Pooled JMS 1.2.3 [#​29466](https://togithub.com/spring-projects/spring-boot/issues/29466) - Upgrade to R2DBC Bom Arabba-SR12 [#​29391](https://togithub.com/spring-projects/spring-boot/issues/29391) - Upgrade to Reactor 2020.0.15 [#​29309](https://togithub.com/spring-projects/spring-boot/issues/29309) - Upgrade to SLF4J 1.7.33 [#​29392](https://togithub.com/spring-projects/spring-boot/issues/29392) - Upgrade to Spring AMQP 2.3.14 [#​29312](https://togithub.com/spring-projects/spring-boot/issues/29312) - Upgrade to Spring Data 2021.0.8 [#​29311](https://togithub.com/spring-projects/spring-boot/issues/29311) - Upgrade to Spring Framework 5.3.15 [#​29326](https://togithub.com/spring-projects/spring-boot/issues/29326) - Upgrade to Spring HATEOAS 1.3.7 [#​29352](https://togithub.com/spring-projects/spring-boot/issues/29352) - Upgrade to Spring Integration 5.5.8 [#​29314](https://togithub.com/spring-projects/spring-boot/issues/29314) - Upgrade to Spring Kafka 2.7.10 [#​29313](https://togithub.com/spring-projects/spring-boot/issues/29313) - Upgrade to Spring REST Docs 2.0.6.RELEASE [#​29321](https://togithub.com/spring-projects/spring-boot/issues/29321) #### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​izeye](https://togithub.com/izeye) - [@​dreis2211](https://togithub.com/dreis2211) - [@​jprinet](https://togithub.com/jprinet) ### [`v2.5.8`](https://togithub.com/spring-projects/spring-boot/releases/tag/v2.5.8) [Compare Source](https://togithub.com/spring-projects/spring-boot/compare/v2.5.7...v2.5.8) #### :lady_beetle: Bug Fixes - DatabaseInitializationDependencyConfigurer triggers eager initialization of factory beans [#​28977](https://togithub.com/spring-projects/spring-boot/issues/28977) - App fails to start when it depends on thymeleaf-extras-springsecurity5 but does not have Spring Security on the classpath [#​28967](https://togithub.com/spring-projects/spring-boot/pull/28967) - Platform used for Quartz, Session, Integration, and Batch schema initialization cannot be configured [#​28932](https://togithub.com/spring-projects/spring-boot/issues/28932) - Image buildpack references without tag do not default to latest version [#​28921](https://togithub.com/spring-projects/spring-boot/issues/28921) - The getter and setter that's used during configuration property binding varies when a getter or setter has been overridden to use a subclass of the property's type [#​28917](https://togithub.com/spring-projects/spring-boot/issues/28917) - Invalid classpath index manifest attribute in war files built with Maven [#​28895](https://togithub.com/spring-projects/spring-boot/issues/28895) - The name of the matching-strategy property is incorrect in the action message of the failure analysis for a PatternParseException [#​28809](https://togithub.com/spring-projects/spring-boot/pull/28809) - Dependency management for org.elasticsearch.distribution.integ-test-zip:elasticsearch should declare its type as zip [#​28725](https://togithub.com/spring-projects/spring-boot/issues/28725) #### :notebook_with_decorative_cover: Documentation - Polish Creating Your Own Auto-configuration section in Core Features reference doc [#​29115](https://togithub.com/spring-projects/spring-boot/pull/29115) - Polish CacheManager customization section in reference doc [#​29094](https://togithub.com/spring-projects/spring-boot/pull/29094) - Document that using DevTools with a remote application is not supported with WebFlux [#​28955](https://togithub.com/spring-projects/spring-boot/issues/28955) - 2.5.x snapshot documentation links to source code on the main branch [#​28856](https://togithub.com/spring-projects/spring-boot/issues/28856) - Polish README.adoc [#​28835](https://togithub.com/spring-projects/spring-boot/pull/28835) - Fix output of "spring --version" in reference documentation [#​28831](https://togithub.com/spring-projects/spring-boot/pull/28831) - Fix typos in the "External Application Properties" section [#​28830](https://togithub.com/spring-projects/spring-boot/pull/28830) - Improve deprecation notice on ResourceProperties to direct people to WebProperties for dependency injection and then getResources() [#​28762](https://togithub.com/spring-projects/spring-boot/issues/28762) - Add a package description for org.springframework.boot.actuate.metrics.data [#​28756](https://togithub.com/spring-projects/spring-boot/pull/28756) #### :hammer: Dependency Upgrades - Upgrade to AppEngine SDK 1.9.93 [#​29038](https://togithub.com/spring-projects/spring-boot/issues/29038) - Upgrade to Caffeine 2.9.3 [#​29039](https://togithub.com/spring-projects/spring-boot/issues/29039) - Upgrade to DB2 JDBC 11.5.7.0 [#​29117](https://togithub.com/spring-projects/spring-boot/issues/29117) - Upgrade to Dropwizard Metrics 4.1.29 [#​29118](https://togithub.com/spring-projects/spring-boot/issues/29118) - Upgrade to Ehcache3 3.9.9 [#​29119](https://togithub.com/spring-projects/spring-boot/issues/29119) - Upgrade to Hazelcast 4.1.8 [#​29145](https://togithub.com/spring-projects/spring-boot/issues/29145) - Upgrade to Hibernate 5.4.33 [#​29120](https://togithub.com/spring-projects/spring-boot/issues/29120) - Upgrade to HttpAsyncClient 4.1.5 [#​29043](https://togithub.com/spring-projects/spring-boot/issues/29043) - Upgrade to HttpCore 4.4.15 [#​29044](https://togithub.com/spring-projects/spring-boot/issues/29044) - Upgrade to Infinispan 12.1.10.Final [#​29121](https://togithub.com/spring-projects/spring-boot/issues/29121) - Upgrade to Jackson Bom 2.12.6 [#​29045](https://togithub.com/spring-projects/spring-boot/issues/29045) - Upgrade to JDOM2 2.0.6.1 [#​29046](https://togithub.com/spring-projects/spring-boot/issues/29046) - Upgrade to Kotlin 1.5.32 [#​29047](https://togithub.com/spring-projects/spring-boot/issues/29047) - Upgrade to Log4j2 2.17.0 [#​28983](https://togithub.com/spring-projects/spring-boot/issues/28983) - Upgrade to Logback 1.2.9 [#​29011](https://togithub.com/spring-projects/spring-boot/issues/29011) - Upgrade to Micrometer 1.7.7 [#​28962](https://togithub.com/spring-projects/spring-boot/issues/28962) - Upgrade to Netty 4.1.72.Final [#​29004](https://togithub.com/spring-projects/spring-boot/issues/29004) - Upgrade to Reactor 2020.0.14 [#​28960](https://togithub.com/spring-projects/spring-boot/issues/28960) - Upgrade to Spring AMQP 2.3.13 [#​28994](https://togithub.com/spring-projects/spring-boot/issues/28994) - Upgrade to Spring Framework 5.3.14 [#​28961](https://togithub.com/spring-projects/spring-boot/issues/28961) - Upgrade to Spring Integration 5.5.7 [#​28966](https://togithub.com/spring-projects/spring-boot/issues/28966) - Upgrade to Spring LDAP 2.3.5 [#​28963](https://togithub.com/spring-projects/spring-boot/issues/28963) - Upgrade to Spring Security 5.5.4 [#​28964](https://togithub.com/spring-projects/spring-boot/issues/28964) - Upgrade to Spring Session 2021.0.4 [#​28965](https://togithub.com/spring-projects/spring-boot/issues/28965) - Upgrade to Spring WS 3.1.2 [#​29048](https://togithub.com/spring-projects/spring-boot/issues/29048) - Upgrade to Thymeleaf 3.0.14.RELEASE [#​29049](https://togithub.com/spring-projects/spring-boot/issues/29049) - Upgrade to Tomcat 9.0.56 [#​29050](https://togithub.com/spring-projects/spring-boot/issues/29050) - Upgrade to Undertow 2.2.14.Final [#​29051](https://togithub.com/spring-projects/spring-boot/issues/29051) - Upgrade to XmlUnit2 2.8.4 [#​29123](https://togithub.com/spring-projects/spring-boot/issues/29123) #### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​asa1997](https://togithub.com/asa1997) - [@​vashisthabhinav](https://togithub.com/vashisthabhinav) - [@​An1s9n](https://togithub.com/An1s9n) - [@​copbint](https://togithub.com/copbint) - [@​charissathomas](https://togithub.com/charissathomas) - [@​jprinet](https://togithub.com/jprinet) - [@​mikrethor](https://togithub.com/mikrethor) - [@​fml2](https://togithub.com/fml2) - [@​polarbear567](https://togithub.com/polarbear567) - [@​terminux](https://togithub.com/terminux) ### [`v2.5.7`](https://togithub.com/spring-projects/spring-boot/releases/tag/v2.5.7) [Compare Source](https://togithub.com/spring-projects/spring-boot/compare/v2.5.6...v2.5.7) ##### :lady_beetle: Bug Fixes - Dependency management for JSTL is out of date [#​28659](https://togithub.com/spring-projects/spring-boot/issues/28659) - JUnit annotations may prevent a test context from being cached [#​28565](https://togithub.com/spring-projects/spring-boot/issues/28565) - Avoid duplicate AOP proxy class definition with FilteredClassLoader [#​28531](https://togithub.com/spring-projects/spring-boot/pull/28531) - Profiles added using `@ActiveProfiles` have different precedence [#​28530](https://togithub.com/spring-projects/spring-boot/issues/28530) - Logback should default to JVM's default charset instead of ASCII [#​28486](https://togithub.com/spring-projects/spring-boot/issues/28486) - When a parent context has method validation configuration, it isn't auto-configured in its child contexts [#​28479](https://togithub.com/spring-projects/spring-boot/issues/28479) - Prometheus actuator endpoint should produce a text/plain response unless application/openmetrics-text is explicitly accepted [#​28446](https://togithub.com/spring-projects/spring-boot/issues/28446) ##### :notebook_with_decorative_cover: Documentation - Fix "Configure Two DataSources" example [#​28712](https://togithub.com/spring-projects/spring-boot/pull/28712) - Update URL for GraphQL Spring Boot starter [#​28683](https://togithub.com/spring-projects/spring-boot/pull/28683) - Fix `@deprecated` and `@see` in org.springframework.boot.loader.archive.Archive's javadoc [#​28680](https://togithub.com/spring-projects/spring-boot/issues/28680) - Configuration sample in reference doc has wrong yaml formatting [#​28671](https://togithub.com/spring-projects/spring-boot/pull/28671) - Fix yaml sample format in reference doc [#​28670](https://togithub.com/spring-projects/spring-boot/pull/28670) - Fix typo in "Ant-style path matching" [#​28549](https://togithub.com/spring-projects/spring-boot/issues/28549) - Change description of property "logging.logback.rollingpolicy.max-history" to match Logback documentation [#​28466](https://togithub.com/spring-projects/spring-boot/issues/28466) - Improve documentation on using an embedded ActiveMQ broker [#​28434](https://togithub.com/spring-projects/spring-boot/issues/28434) - Don't use markdown syntax in javadoc or error messages [#​28424](https://togithub.com/spring-projects/spring-boot/issues/28424) ##### :hammer: Dependency Upgrades - Upgrade to AppEngine SDK 1.9.92 [#​28556](https://togithub.com/spring-projects/spring-boot/issues/28556) - Upgrade to Gson 2.8.9 [#​28557](https://togithub.com/spring-projects/spring-boot/issues/28557) - Upgrade to Hazelcast 4.1.6 [#​28558](https://togithub.com/spring-projects/spring-boot/issues/28558) - Upgrade to Johnzon 1.2.15 [#​28559](https://togithub.com/spring-projects/spring-boot/issues/28559) - Upgrade to Kafka 2.7.2 [#​28694](https://togithub.com/spring-projects/spring-boot/issues/28694) - Upgrade to Logback 1.2.7 [#​28695](https://togithub.com/spring-projects/spring-boot/issues/28695) - Upgrade to Micrometer 1.7.6 [#​28511](https://togithub.com/spring-projects/spring-boot/issues/28511) - Upgrade to Neo4j Java Driver 4.2.8 [#​28717](https://togithub.com/spring-projects/spring-boot/issues/28717) - Upgrade to Netty 4.1.70.Final [#​28560](https://togithub.com/spring-projects/spring-boot/issues/28560) - Upgrade to Netty tcNative 2.0.46.Final [#​28718](https://togithub.com/spring-projects/spring-boot/issues/28718) - Upgrade to Reactor 2020.0.13 [#​28509](https://togithub.com/spring-projects/spring-boot/issues/28509) - Upgrade to Spring AMQP 2.3.12 [#​28600](https://togithub.com/spring-projects/spring-boot/issues/28600) - Upgrade to Spring Batch 4.3.4 [#​28250](https://togithub.com/spring-projects/spring-boot/issues/28250) - Upgrade to Spring Data 2021.0.7 [#​28512](https://togithub.com/spring-projects/spring-boot/issues/28512) - Upgrade to Spring Framework 5.3.13 [#​28510](https://togithub.com/spring-projects/spring-boot/issues/28510) - Upgrade to Spring HATEOAS 1.3.6 [#​28609](https://togithub.com/spring-projects/spring-boot/issues/28609) - Upgrade to Spring Integration 5.5.6 [#​28513](https://togithub.com/spring-projects/spring-boot/issues/28513) - Upgrade to Spring Kafka 2.7.9 [#​28539](https://togithub.com/spring-projects/spring-boot/issues/28539) - Upgrade to Tomcat 9.0.55 [#​28696](https://togithub.com/spring-projects/spring-boot/issues/28696) ##### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​izeye](https://togithub.com/izeye) - [@​ghusta](https://togithub.com/ghusta) - [@​dreis2211](https://togithub.com/dreis2211) - [@​jzheaux](https://togithub.com/jzheaux) - [@​phxql](https://togithub.com/phxql) - [@​polarbear567](https://togithub.com/polarbear567) - [@​vpavic](https://togithub.com/vpavic) - [@​weixsun](https://togithub.com/weixsun) - [@​slowjoe007](https://togithub.com/slowjoe007) - [@​ledoyen](https://togithub.com/ledoyen) ### [`v2.5.6`](https://togithub.com/spring-projects/spring-boot/releases/tag/v2.5.6) [Compare Source](https://togithub.com/spring-projects/spring-boot/compare/v2.5.5...v2.5.6) #### :lady_beetle: Bug Fixes - Misleading failure analysis when jOOQ's DSLContext is unavailable due to R2DBC taking precedence over JDBC [#​28379](https://togithub.com/spring-projects/spring-boot/issues/28379) - When lazy initialization is enabled, JMX endpoints are not available [#​28371](https://togithub.com/spring-projects/spring-boot/issues/28371) - JarFileWrapper may cause many FinalReferences causing GC pressure [#​28356](https://togithub.com/spring-projects/spring-boot/issues/28356) - Flattened VCAP_SERVICES properties are not sanitized by default [#​28353](https://togithub.com/spring-projects/spring-boot/issues/28353) - MeterValue with "d" suffix not parsed as Duration for timer [#​28351](https://togithub.com/spring-projects/spring-boot/issues/28351) - CachingOperationInvoker cache can consume a significant amount of heap space [#​28347](https://togithub.com/spring-projects/spring-boot/issues/28347) - Devtools restart fails with in-memory R2DBC database and SQL initialization scripts [#​28345](https://togithub.com/spring-projects/spring-boot/issues/28345) - ActiveMQ starter depends on org.apache.geronimo.specs:geronimo-j2ee-management\_1.1\_spec [#​28340](https://togithub.com/spring-projects/spring-boot/issues/28340) - spring-boot-starter-oauth2-client has an unnecessary dependency on com.sun.mail:jakarta.mail [#​28333](https://togithub.com/spring-projects/spring-boot/issues/28333) - Layertools extract does not preserve last modified and last access times [#​28190](https://togithub.com/spring-projects/spring-boot/issues/28190) - NumberFormatException when configuring spring.rabbitmq.addresses with an IPv6 address [#​28134](https://togithub.com/spring-projects/spring-boot/issues/28134) - Broken content negotiation for OpenMetrics [#​28130](https://togithub.com/spring-projects/spring-boot/issues/28130) #### :notebook_with_decorative_cover: Documentation - Fix typo in EnvironmentPostProcessor's class-level javadoc [#​28382](https://togithub.com/spring-projects/spring-boot/issues/28382) - Remove obsolete info about Spring Integration's metrics support [#​28375](https://togithub.com/spring-projects/spring-boot/pull/28375) - Update docs to be explicit about dot notation being correctly mapped [#​28201](https://togithub.com/spring-projects/spring-boot/issues/28201) - Section 4.4 File Rotation mentions the wrong configuration file name for Log4j2 [#​28193](https://togithub.com/spring-projects/spring-boot/issues/28193) - Update Javadoc with note mentioning that class using ConstructorBinding must be enabled using annotations [#​28171](https://togithub.com/spring-projects/spring-boot/issues/28171) - Make it clearer that, when using `@AutoConfigureTestEntityManager` outside of `@DataJpaTest`, any tests using the test entity manager must be `@Transactional` [#​28159](https://togithub.com/spring-projects/spring-boot/issues/28159) #### :hammer: Dependency Upgrades - Upgrade to Dropwizard Metrics 4.1.26 [#​28280](https://togithub.com/spring-projects/spring-boot/issues/28280) - Upgrade to Ehcache3 3.9.7 [#​28394](https://togithub.com/spring-projects/spring-boot/issues/28394) - Upgrade to HttpCore5 5.1.2 [#​28281](https://togithub.com/spring-projects/spring-boot/issues/28281) - Upgrade to Jaybird 4.0.4.java8 [#​28282](https://togithub.com/spring-projects/spring-boot/issues/28282) - Upgrade to Jetty 9.4.44.v20210927 [#​28283](https://togithub.com/spring-projects/spring-boot/issues/28283) - Upgrade to Lombok 1.18.22 [#​28284](https://togithub.com/spring-projects/spring-boot/issues/28284) - Upgrade to Micrometer 1.7.5 [#​28242](https://togithub.com/spring-projects/spring-boot/issues/28242) - Upgrade to MySQL 8.0.27 [#​28395](https://togithub.com/spring-projects/spring-boot/issues/28395) - Upgrade to Netty 4.1.69.Final [#​28360](https://togithub.com/spring-projects/spring-boot/issues/28360) - Upgrade to Netty tcNative 2.0.44.Final [#​28285](https://togithub.com/spring-projects/spring-boot/issues/28285) - Upgrade to Postgresql 42.2.24 [#​28286](https://togithub.com/spring-projects/spring-boot/issues/28286) - Upgrade to R2DBC Bom Arabba-SR11 [#​28287](https://togithub.com/spring-projects/spring-boot/issues/28287) - Upgrade to Reactor 2020.0.12 [#​28240](https://togithub.com/spring-projects/spring-boot/issues/28240) - Upgrade to SendGrid 4.7.6 [#​28396](https://togithub.com/spring-projects/spring-boot/issues/28396) - Upgrade to Spring AMQP 2.3.11 [#​28245](https://togithub.com/spring-projects/spring-boot/issues/28245) - Upgrade to Spring Data 2021.0.6 [#​28244](https://togithub.com/spring-projects/spring-boot/issues/28244) - Upgrade to Spring Framework 5.3.12 [#​28241](https://togithub.com/spring-projects/spring-boot/issues/28241) - Upgrade to Spring HATEOAS 1.3.5 [#​28243](https://togithub.com/spring-projects/spring-boot/issues/28243) - Upgrade to Spring Integration 5.5.5 [#​28249](https://togithub.com/spring-projects/spring-boot/issues/28249) - Upgrade to Spring Kafka 2.7.8 [#​28246](https://togithub.com/spring-projects/spring-boot/issues/28246) - Upgrade to Spring Security 5.5.3 [#​28247](https://togithub.com/spring-projects/spring-boot/issues/28247) - Upgrade to Spring Session 2021.0.3 [#​28248](https://togithub.com/spring-projects/spring-boot/issues/28248) - Upgrade to Tomcat 9.0.54 [#​28288](https://togithub.com/spring-projects/spring-boot/issues/28288) - Upgrade to Undertow 2.2.12.Final [#​28289](https://togithub.com/spring-projects/spring-boot/issues/28289) - Upgrade to XmlUnit2 2.8.3 [#​28397](https://togithub.com/spring-projects/spring-boot/issues/28397) #### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​dreis2211](https://togithub.com/dreis2211) - [@​dvonsegg](https://togithub.com/dvonsegg) - [@​kandulsh](https://togithub.com/kandulsh) - [@​artembilan](https://togithub.com/artembilan) - [@​fml2](https://togithub.com/fml2) - [@​polarbear567](https://togithub.com/polarbear567) - [@​inomag](https://togithub.com/inomag) - [@​martin-v](https://togithub.com/martin-v) ### [`v2.5.5`](https://togithub.com/spring-projects/spring-boot/releases/tag/v2.5.5) [Compare Source](https://togithub.com/spring-projects/spring-boot/compare/v2.5.4...v2.5.5) #### :lady_beetle: Bug Fixes - Actuator endpoints do not sanitize SPRING_APPLICATION_JSON by default [#​28081](https://togithub.com/spring-projects/spring-boot/issues/28081) - Startup failure due to non-empty schema when using Flyway and Spring Integration's DataSource initialization [#​28079](https://togithub.com/spring-projects/spring-boot/issues/28079) - Web MVC metrics may have the wrong status when a filter throws an exception other than NestedServletException [#​28069](https://togithub.com/spring-projects/spring-boot/issues/28069) - Embedded Undertow throws MalformedURLException when archive filename contains characters that are reserved in a URL [#​28032](https://togithub.com/spring-projects/spring-boot/issues/28032) - Concurrent image builds cause error deleting builder image [#​27993](https://togithub.com/spring-projects/spring-boot/issues/27993) - War deployment in standalone Tomcat causes memory leak (Metaspace) [#​27987](https://togithub.com/spring-projects/spring-boot/issues/27987) - IndexOutOfBoundsException when running a Zip64 jar file larger than 4,294,967,295 bytes [#​27900](https://togithub.com/spring-projects/spring-boot/issues/27900) - Azure App Service is not correctly detected on Windows [#​27819](https://togithub.com/spring-projects/spring-boot/pull/27819) - `@MockBean` combined with `@Repeat` results in "the field cannot have an existing value" error [#​27798](https://togithub.com/spring-projects/spring-boot/issues/27798) - NullPointerException in RoutingDataSourceHealthContributor when a routing data source has a target with a null routing key [#​27698](https://togithub.com/spring-projects/spring-boot/pull/27698) #### :notebook_with_decorative_cover: Documentation - Document that devtools restart doesn't work when using AspectJ weaving [#​28083](https://togithub.com/spring-projects/spring-boot/issues/28083) - Default value for spring.data.elasticsearch.client.reactive.endpoints is not documented [#​28072](https://togithub.com/spring-projects/spring-boot/issues/28072) - Clarify Selenium auto-configuration requires HtmlUnit [#​27943](https://togithub.com/spring-projects/spring-boot/issues/27943) - Document that spring-boot-starter-parent configures Java compilation to use -parameters [#​27885](https://togithub.com/spring-projects/spring-boot/issues/27885) - Fix inconsistent devtools doc [#​27876](https://togithub.com/spring-projects/spring-boot/issues/27876) - Fix typo in javadoc [#​27873](https://togithub.com/spring-projects/spring-boot/issues/27873) - Document how to parameterize output directory for REST Docs with WebTestClient [#​27803](https://togithub.com/spring-projects/spring-boot/issues/27803) - Document support for Java 17 [#​26767](https://togithub.com/spring-projects/spring-boot/issues/26767) #### :hammer: Dependency Upgrades - Upgrade to Ehcache3 3.9.6 [#​27974](https://togithub.com/spring-projects/spring-boot/issues/27974) - Upgrade to Glassfish EL 3.0.4 [#​27975](https://togithub.com/spring-projects/spring-boot/issues/27975) - Upgrade to Groovy 3.0.9 [#​27976](https://togithub.com/spring-projects/spring-boot/issues/27976) - Upgrade to Gson 2.8.8 [#​27977](https://togithub.com/spring-projects/spring-boot/issues/27977) - Upgrade to Jackson Bom 2.12.5 [#​27978](https://togithub.com/spring-projects/spring-boot/issues/27978) - Upgrade to Jetty EL 9.0.52 [#​27979](https://togithub.com/spring-projects/spring-boot/issues/27979) - Upgrade to jOOQ 3.14.15 [#​28088](https://togithub.com/spring-projects/spring-boot/issues/28088) - Upgrade to Kotlin 1.5.31 [#​28089](https://togithub.com/spring-projects/spring-boot/issues/28089) - Upgrade to Kotlin Coroutines 1.5.2 [#​27982](https://togithub.com/spring-projects/spring-boot/issues/27982) - Upgrade to Lettuce 6.1.5.RELEASE [#​28031](https://togithub.com/spring-projects/spring-boot/issues/28031) - Upgrade to Logback 1.2.6 [#​27983](https://togithub.com/spring-projects/spring-boot/issues/27983) - Upgrade to Maven War Plugin 3.3.2 [#​27984](https://togithub.com/spring-projects/spring-boot/issues/27984) - Upgrade to Micrometer 1.7.4 [#​27916](https://togithub.com/spring-projects/spring-boot/issues/27916) - Upgrade to Netty 4.1.68.Final [#​27985](https://togithub.com/spring-projects/spring-boot/issues/27985) - Upgrade to Netty tcNative 2.0.43.Final [#​27986](https://togithub.com/spring-projects/spring-boot/issues/27986) - Upgrade to Reactor 2020.0.11 [#​27914](https://togithub.com/spring-projects/spring-boot/issues/27914) - Upgrade to SendGrid 4.7.5 [#​28109](https://togithub.com/spring-projects/spring-boot/issues/28109) - Upgrade to Spring Data 2021.0.5 [#​27917](https://togithub.com/spring-projects/spring-boot/issues/27917) - Upgrade to Spring Framework 5.3.10 [#​27915](https://togithub.com/spring-projects/spring-boot/issues/27915) - Upgrade to Spring HATEOAS 1.3.4 [#​27970](https://togithub.com/spring-projects/spring-boot/issues/27970) - Upgrade to Spring Integration 5.5.4 [#​27949](https://togithub.com/spring-projects/spring-boot/issues/27949) - Upgrade to Spring Kafka 2.7.7 [#​27918](https://togithub.com/spring-projects/spring-boot/issues/27918) - Upgrade to Tomcat 9.0.53 [#​27963](https://togithub.com/spring-projects/spring-boot/issues/27963) #### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​dreis2211](https://togithub.com/dreis2211) - [@​quaff](https://togithub.com/quaff) - [@​thegeekyasian](https://togithub.com/thegeekyasian) - [@​jdubois](https://togithub.com/jdubois) - [@​brneto](https://togithub.com/brneto) - [@​hpoettker](https://togithub.com/hpoettker) - [@​polarbear567](https://togithub.com/polarbear567) - [@​cdalexndr](https://togithub.com/cdalexndr) ### [`v2.5.4`](https://togithub.com/spring-projects/spring-boot/releases/tag/v2.5.4) [Compare Source](https://togithub.com/spring-projects/spring-boot/compare/v2.5.3...v2.5.4) #### :lady_beetle: Bug Fixes - spring-boot-configuration-metadata leaks enforced dependency constraints into consuming builds [#​27730](https://togithub.com/spring-projects/spring-boot/issues/27730) - Potential NPE in `TomcatMetricsBinder.findContext()` [#​27616](https://togithub.com/spring-projects/spring-boot/issues/27616) - Cyclic bean definition when a Spring Data repository is a dependency of a MeterBinder [#​27591](https://togithub.com/spring-projects/spring-boot/issues/27591) - spring-boot:build-image hangs when exceptions are thrown during upload [#​27535](https://togithub.com/spring-projects/spring-boot/issues/27535) - WebTestClientContextCustomizerFactory causes an IllegalStateException when WebClient is on the classpath without a supported HTTP client [#​27527](https://togithub.com/spring-projects/spring-boot/issues/27527) - spring.security.dispatcher-types is not applied to Spring Security's filter when running in a separate management context [#​27505](https://togithub.com/spring-projects/spring-boot/issues/27505) - A URI with non-alpha characters in its scheme is not sanitized [#​27488](https://togithub.com/spring-projects/spring-boot/issues/27488) #### :notebook_with_decorative_cover: Documentation - Mention productionRuntimeClasspath in Gradle plugin's documentation [#​27620](https://togithub.com/spring-projects/spring-boot/issues/27620) - Fix typo in javadoc [#​27618](https://togithub.com/spring-projects/spring-boot/issues/27618) #### :hammer: Dependency Upgrades - Upgrade to ActiveMQ 5.16.3 [#​27742](https://togithub.com/spring-projects/spring-boot/issues/27742) - Upgrade to AppEngine SDK 1.9.91 [#​27743](https://togithub.com/spring-projects/spring-boot/issues/27743) - Upgrade to Cassandra Driver 4.11.3 [#​27674](https://togithub.com/spring-projects/spring-boot/issues/27674) - Upgrade to Couchbase Client 3.1.7 [#​27675](https://togithub.com/spring-projects/spring-boot/issues/27675) - Upgrade to Ehcache3 3.9.5 [#​27676](https://togithub.com/spring-projects/spring-boot/issues/27676) - Upgrade to Glassfish JAXB 2.3.5 [#​27677](https://togithub.com/spring-projects/spring-boot/issues/27677) - Upgrade to Hazelcast 4.1.5 [#​27744](https://togithub.com/spring-projects/spring-boot/issues/27744) - Upgrade to Hazelcast Hibernate5 2.2.1 [#​27678](https://togithub.com/spring-projects/spring-boot/issues/27678) - Upgrade to Janino 3.1.6 [#​27679](https://togithub.com/spring-projects/spring-boot/issues/27679) - Upgrade to Logback 1.2.5 [#​27680](https://togithub.com/spring-projects/spring-boot/issues/27680) - Upgrade to MariaDB 2.7.4 [#​27681](https://togithub.com/spring-projects/spring-boot/issues/27681) - Upgrade to Maven Enforcer Plugin 3.0.0 [#​27682](https://togithub.com/spring-projects/spring-boot/issues/27682) - Upgrade to Micrometer 1.7.3 [#​27601](https://togithub.com/spring-projects/spring-boot/issues/27601) - Upgrade to MIMEPull 1.9.15 [#​27683](https://togithub.com/spring-projects/spring-boot/issues/27683) - Upgrade to Netty 4.1.67.Final [#​27745](https://togithub.com/spring-projects/spring-boot/issues/27745) - Upgrade to Nimbus JOSE JWT 9.10.1 [#​27701](https://togithub.com/spring-projects/spring-boot/issues/27701) - Upgrade to OAuth2 OIDC SDK 9.9.1 [#​27700](https://togithub.com/spring-projects/spring-boot/issues/27700) - Upgrade to Reactor 2020.0.10 [#​27600](https://togithub.com/spring-projects/spring-boot/issues/27600) - Upgrade to SendGrid 4.7.4 [#​27684](https://togithub.com/spring-projects/spring-boot/issues/27684) - Upgrade to Spring Data 2021.0.4 [#​27633](https://togithub.com/spring-projects/spring-boot/issues/27633) - Upgrade to Spring Integration 5.5.3 [#​27604](https://togithub.com/spring-projects/spring-boot/issues/27604) - Upgrade to Spring Kafka 2.7.6 [#​27602](https://togithub.com/spring-projects/spring-boot/issues/27602) - Upgrade to Spring Security 5.5.2 [#​27603](https://togithub.com/spring-projects/spring-boot/issues/27603) - Upgrade to Spring Session 2021.0.2 [#​27605](https://togithub.com/spring-projects/spring-boot/issues/27605) - Upgrade to Tomcat 9.0.52 [#​27685](https://togithub.com/spring-projects/spring-boot/issues/27685) - Upgrade to Undertow 2.2.10.Final [#​27686](https://togithub.com/spring-projects/spring-boot/issues/27686) #### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​billyto](https://togithub.com/billyto) - [@​izeye](https://togithub.com/izeye) - [@​dreis2211](https://togithub.com/dreis2211) - [@​wuwen5](https://togithub.com/wuwen5) - [@​hpoettker](https://togithub.com/hpoettker) ### [`v2.5.3`](https://togithub.com/spring-projects/spring-boot/releases/tag/v2.5.3) [Compare Source](https://togithub.com/spring-projects/spring-boot/compare/v2.5.2...v2.5.3) #### :star: New Features - Add Java 17 to JavaVersion enum [#​26769](https://togithub.com/spring-projects/spring-boot/pull/26769) #### :beetle: Bug Fixes - DataSourceBuilder throws an UnsupportedDataSourcePropertyException when trying to derive a DataSource from an unknown DataSource type [#​27453](https://togithub.com/spring-projects/spring-boot/pull/27453) - DatabaseInitializerDetector and DependsOnDatabaseInitializationDetector implementations may be instantiated with the wrong ClassLoader [#​27422](https://togithub.com/spring-projects/spring-boot/issues/27422) - YamlPropertySourceLoader may not use the right ClassLoader to check if SnakeYAML is present [#​27419](https://togithub.com/spring-projects/spring-boot/issues/27419) - Setting Gson as preferred mapper breaks controller methods returning JSON Strings [#​27361](https://togithub.com/spring-projects/spring-boot/issues/27361) - Dependency management for Prometheus's Pushgateway is incomplete [#​27349](https://togithub.com/spring-projects/spring-boot/issues/27349) - Exception thrown from /actuator/configprops endpoint when spring.config.import=configtree:xxxx is used [#​27346](https://togithub.com/spring-projects/spring-boot/issues/27346) - Layers configuration XSD is not available [#​27321](https://togithub.com/spring-projects/spring-boot/issues/27321) - Redis health indicators report that Redis is up when the cluster's state is fail [#​27304](https://togithub.com/spring-projects/spring-boot/issues/27304) - App fails to start when using Spring Batch with JDBC and lazy initialization is enabled [#​27221](https://togithub.com/spring-projects/spring-boot/issues/27221) - Spring Session JDBC does not work when lazy initialization is enabled [#​27220](https://togithub.com/spring-projects/spring-boot/issues/27220) - AbstractDataSourceInitializers are not detected as database initializers [#​27215](https://togithub.com/spring-projects/spring-boot/pull/27215) - Optional file search locations with pattern throws exception if not present [#​27211](https://togithub.com/spring-projects/spring-boot/issues/27211) - File named "config" in working directory causes IllegalStateException [#​27210](https://togithub.com/spring-projects/spring-boot/issues/27210) - Live Reload using Devtools no longer connects [#​27205](https://togithub.com/spring-projects/spring-boot/issues/27205) - Live Reload using Devtools no longer connects [#​27204](https://togithub.com/spring-projects/spring-boot/issues/27204) - DurationStyle.SIMPLE.print does not work correctly with ChronoUnit.MICROS [#​27154](https://togithub.com/spring-projects/spring-boot/issues/27154) - Since 2.5.1, a circular reference is created when one SpringLiquibase bean is configured to depend on another [#​27131](https://togithub.com/spring-projects/spring-boot/issues/27131) - Configuration property metadata has the wrong default value for spring.netty.leak-detection [#​27104](https://togithub.com/spring-projects/spring-boot/issues/27104) - "Cannot determine database's type as ConnectionFactory is not options-capable" error message doesn't provide enough detail [#​26977](https://togithub.com/spring-projects/spring-boot/issues/26977) - `@SpyBean` does not work when used to spy on a Spring Data Repository [#​7033](https://togithub.com/spring-projects/spring-boot/issues/7033) #### :notebook_with_decorative_cover: Documentation - Fix reference to a configuration property in cloud.adoc [#​27357](https://togithub.com/spring-projects/spring-boot/pull/27357) - Document auto-configured Jetty metrics [#​27301](https://togithub.com/spring-projects/spring-boot/issues/27301) - Document that hateoas starter is spring MVC specific [#​27139](https://togithub.com/spring-projects/spring-boot/issues/27139) - Improve javadoc of `@DefaultValue` [#​

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR has been generated by Mend Renovate. View repository job log here.