search

orange-cloudfoundry / sec-group-broker-filter

Dynamically opens security groups from creds returned by chained upstream broker
Apache License 2.0
12 stars 2 forks source link

Bump spring-boot-starter-parent from 2.3.3.RELEASE to 2.4.0 #221

Closed dependabot-preview[bot] closed 3 years ago

dependabot-preview[bot] commented 3 years ago

Bumps spring-boot-starter-parent from 2.3.3.RELEASE to 2.4.0.

Release notes

Sourced from spring-boot-starter-parent's releases.

v2.4.0

:star: New Features

  • Provide a property or environment variable to enable DevTools' restarter irrespective of how the application was launched #21424

:beetle: Bug Fixes

  • Using last modified for static resources in reproducible archives and images causes unwanted browser caching #24099
  • BootJar's afterResolve action causes resolution failures with the Versions plugin due to configurations being copied and made resolvable #24072
  • Configuration metadata annotation processor may use the wrong accessor for boolean properties #24059
  • When using Tomcat, key and trust store passwords set via javax.net.ssl system properties are overwritten with null when Spring Boot's equivalent properties have not been set #24053
  • Config files no longer loaded if they contain a hidden path element #24043
  • @DataJpaTest using H2 with schema.sql and spring.datasource.schema-username fails #24024
  • "java.lang.IllegalStateException: zip file closed" when call JarFileWrapper.stream() of spring-boot-loader #24017
  • JdbcStoreTypeConfiguration picks transaction of primary data source when Quartz data source is not the primary data source #24015
  • TestTypeExcludeFilter does not implement hashCode and equals as required by its super-class #24013
  • Our auto-configuration should not use @PostConstruct as it's ignored on Java 11+ without a dependency on jakarta-annotation-api #24010
  • @MockBean fields are not reset for JUnit 5 @Nested tests using @WebMvcTest #23984
  • ClasspathLoggingApplicationListener logs the classpath as unknown on Java 11 and later #23138

:notebook_with_decorative_cover: Documentation

  • Fix link to Flyway callback docs #24122
  • Fix deprecation warnings in javadoc comments #24120
  • Provide more details about overriding SpringPhysicalNamingStrategy's case insensitive flag #24062
  • Clarify documentation regarding relaxed binding of environment variables #24033
  • Enhance spring.datasource.initialization-mode property description #24030
  • Recommend disabling context path redirects when using proxy-terminated SSL with Tomcat #24026
  • Improve Spring Session back off documentation #24019
  • Clarify the javadoc of AutoConfigureTestDatabase to make it clearer that it only replaces the main DataSource #24007
  • Recommend that bean definitions provide as much type information as possible #24005
  • logging.file.* properties flagged with error level while they are still honoured #23995
  • Add missing default value for enum-based configuration properties #23992
  • Configuration property replacement metadata for spring.resources.cache.cachecontrol.stale-while-revalidate is invalid #23980

:hammer: Dependency Upgrades

  • Upgrade to AppEngine SDK 1.9.83 #24082
  • Upgrade to AssertJ 3.18.1 #24126
  • Upgrade to Byte Buddy 1.10.18 #24083
  • Upgrade to Couchbase Client 3.0.10 #24084
  • Upgrade to Hibernate 5.4.23.Final #24085
  • Upgrade to Infinispan 11.0.5.Final #24127
  • Upgrade to Jetty 9.4.34.v20201102 #24047
  • Upgrade to jOOQ 3.14.3 #24128
  • Upgrade to Kotlin Coroutines 1.4.1 #24087
  • Upgrade to Micrometer 1.6.1 #24051
  • Upgrade to Netty 4.1.54.Final #24129
  • Upgrade to Nimbus JOSE JWT 9.1.2 #24088
  • Upgrade to Pooled JMS 1.2.1 #24089
Commits
  • 72122c2 Release v2.4.0
  • 6df1084 Allow Devtools to be enabled irrespective of the launching ClassLoader
  • 30bc0ad Merge branch '2.3.x'
  • 5a5f5bc Next development version (v2.3.7.BUILD-SNAPSHOT)
  • bce2029 Merge branch '2.3.x'
  • 189046b Revert "Reduce scope of META-INF customizations to main, source, and javadoc ...
  • 5b311d8 Upgrade to Netty 4.1.54.Final
  • 62e5f2e Upgrade to jOOQ 3.14.3
  • 56ce2af Upgrade to Infinispan 11.0.5.Final
  • 20edba5 Upgrade to AssertJ 3.18.1
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)
dependabot-preview[bot] commented 3 years ago

Superseded by #223.