Bump spring-core from 3.0.7.RELEASE to 5.3.11 in /dev/cnf/dependabot/check_this_in_if_it_changes

[dependabot[bot]]

Bumps spring-core from 3.0.7.RELEASE to 5.3.11.

Release notes

Sourced from spring-core's releases.

v5.3.11

:star: New Features

• Enhance DefaultResponseErrorHandler to allow logging complete error response body #27552
• Include correct keyword in CookieAssertions failure messages #27550
• Use Arrays.hashCode() in ByteArrayResource.hashCode() #27544
• Allow default CacheAwareContextLoaderDelegate configuration via a system property #27540
• Invoke bean-derived (Auto)Closeable.close() method directly #27504
• Defensive reference to JNDI API for JDK 9+ (optional java.naming module) #27483
• DefaultMessageListenerContainer does not log an error/warning when consumer tasks have been rejected #27451
• Provide accessor on externallyManaged RootBeanDefinition attributes #27449
• Allow to avoid class validation in CglibAopProxy via ProxyFactory #27439
• Add support for non-public record declarations #27437
• Emit WebClientResponseException for malformed HTTP response #27262
• DatabasePopulatorUtils.execute should commit if the current Connection has auto-commit set to false #27008

:lady_beetle: Bug Fixes

• CronTrigger uses new Date() instead of context's Clock #27546
• Performance impact of con.getContentLengthLong() in AbstractFileResolvingResource.isReadable() downloading huge jars to check component length #27541
• Performance impact of ResourceUrlEncodingFilter on HttpServletResponse#encodeURL #27538
• UriTemplateRequestEntity doesn't override hashCode() and equals() #27531
• DataBufferUtils.write loses context #27517
• Avoid duplicate JCacheOperationSource bean registration in #27499
• Proxy generation with Java 17 fails with "Cannot invoke "Object.getClass()" because "cause" is null" #27490
• MediaType.sortBySpecificityAndQuality throws java.lang.IllegalArgumentException: Comparison method violates its general contract #27488
• Leading whitespaces are removed while reading SSE response #27473
• Non-escaped closing curly brace in RegEx results in initialization error on Android #27467
• ConcurrentReferenceHashMap's entrySet violates the Map contract #27454
• Avoid early ConversionService determination in StandardBeanExpressionResolver #27446
• Spring Framework >= 5.3.8 ASM ClassReader fails to parse class file due to InputStream optimization #27429
• StringUtils.collectionToDelimitedString(?) fails with NullPointerException when the collection contains null #27419
• Spring HATEOAS results in 406 with Kotlin Coroutine and ResponseEntity in WebFlux #27292

:notebook_with_decorative_cover: Documentation

• Remove remark about missing caching API. #27501

:hammer: Dependency Upgrades

• Upgrade to JUnit 5.8.1 #27450
• Upgrade to Reactor 2020.0.12 #27527
• Upgrade to SmallRye Mutiny 1.1.1 #27555

:heart: Contributors

We'd like to thank all the contributors who worked on this release!

• @​hantsy
• @​koenpunt

... (truncated)

Commits

• c9a55a3 Release v5.3.11
• 0705454 Fix typo in Javadoc
• a178bbe DefaultResponseErrorHandler shows full error details
• fcf4315 Indent with tabs instead of spaces
• 89c7797 Commit in DatabasePopulatorUtils if Connection has auto-commit=false
• 4dac833 Filter non-existing static resource locations
• 0436dd0 Correctly handle coroutine with ResponseEntity
• 1e3996e Upgrade SmallRye Mutiny to 1.1.1
• 50b9211 Include correct keyword in CookieAssertions failure messages
• b1c7f7d Polishing
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

Superseded by #277.