search

pferron / maven-pom

0 stars 0 forks source link

Update dependency org.springframework:spring-web to v5.3.20 (main) - autoclosed #12

Closed mend-for-github-com[bot] closed 1 year ago

mend-for-github-com[bot] commented 1 year ago

This PR contains the following updates:

Package Type Update Change
org.springframework:spring-web compile patch 5.3.14 -> 5.3.20

By merging this PR, the issue #3 will be automatically resolved and closed:

Severity CVSS Score CVE
High High 9.8 CVE-2022-22965
Medium Medium 5.3 CVE-2022-22970
Medium Medium 5.3 CVE-2022-22970

Release Notes

spring-projects/spring-framework ### [`v5.3.20`](https://togithub.com/spring-projects/spring-framework/releases/tag/v5.3.20) [Compare Source](https://togithub.com/spring-projects/spring-framework/compare/v5.3.19...v5.3.20) #### :star: New Features - Refine CachedIntrospectionResults property introspection [#​28445](https://togithub.com/spring-projects/spring-framework/issues/28445) - Improve tests and Javadoc on binding to a property of type javax.servlet.Part [#​27830](https://togithub.com/spring-projects/spring-framework/pull/27830) - WritableResource doesn't have parity with Resource in `@Value` etc. \[SPR-10656] [#​15284](https://togithub.com/spring-projects/spring-framework/issues/15284) #### :lady_beetle: Bug Fixes - Ignore invalid STOMP frame [#​28443](https://togithub.com/spring-projects/spring-framework/issues/28443) - `@ModelAttribute` name attribute is not supported in WebFlux [#​28423](https://togithub.com/spring-projects/spring-framework/issues/28423) - Fix BindingResult error when ModelAttribute has custom name in WebFlux [#​28422](https://togithub.com/spring-projects/spring-framework/pull/28422) - Request body deserialization failures are not captured by exception handlers in WebFlux [#​28155](https://togithub.com/spring-projects/spring-framework/issues/28155) #### :notebook_with_decorative_cover: Documentation - Remove Log4J initialization from package-info.java in spring-web [#​28420](https://togithub.com/spring-projects/spring-framework/pull/28420) - Remove Log4J configurer from package-info.java in spring-core [#​28411](https://togithub.com/spring-projects/spring-framework/pull/28411) - Fix github issue reference in RequestMappingHandlerMapping [#​28372](https://togithub.com/spring-projects/spring-framework/pull/28372) - Add Javadoc since tags for GraphQL constants [#​28369](https://togithub.com/spring-projects/spring-framework/pull/28369) - Fix method reference in Kotlin documentation [#​28340](https://togithub.com/spring-projects/spring-framework/pull/28340) #### :hammer: Dependency Upgrades - Upgrade to ASM 9.3 [#​28390](https://togithub.com/spring-projects/spring-framework/issues/28390) - Upgrade to Reactor 2020.0.19 [#​28437](https://togithub.com/spring-projects/spring-framework/issues/28437) #### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​izeye](https://togithub.com/izeye) - [@​koenpunt](https://togithub.com/koenpunt) - [@​missingdays](https://togithub.com/missingdays) - [@​zhangmingqi09](https://togithub.com/zhangmingqi09) - [@​binchoo](https://togithub.com/binchoo) - [@​gorisanson](https://togithub.com/gorisanson) - [@​jprinet](https://togithub.com/jprinet) - [@​nealshan](https://togithub.com/nealshan) - [@​bougar](https://togithub.com/bougar) ### [`v5.3.19`](https://togithub.com/spring-projects/spring-framework/releases/tag/v5.3.19) [Compare Source](https://togithub.com/spring-projects/spring-framework/compare/v5.3.18...v5.3.19) #### :star: New Features - Remove DNS lookups during websocket connection initiation [#​28280](https://togithub.com/spring-projects/spring-framework/issues/28280) - Add application/graphql+json Media type and MIME type constants [#​28271](https://togithub.com/spring-projects/spring-framework/issues/28271) - Fix debug log for no matching acceptableTypes [#​28116](https://togithub.com/spring-projects/spring-framework/pull/28116) - Provide support for post-processing a LocalValidatorFactoryBean's validator Configuration without requiring sub-classing [#​27956](https://togithub.com/spring-projects/spring-framework/issues/27956) #### :lady_beetle: Bug Fixes - Improve documentation and matching algorithm in data binders [#​28333](https://togithub.com/spring-projects/spring-framework/issues/28333) - NotWritablePropertyException when attempting to declaratively configure ClassLoader properties [#​28269](https://togithub.com/spring-projects/spring-framework/issues/28269) - BeanPropertyRowMapper's support for direct column name matches is missing in DataClassRowMapper [#​28243](https://togithub.com/spring-projects/spring-framework/issues/28243) - AbstractListenerReadPublisher does not call `ServletOutputStream::isReady()` when reading chunked data across network packets [#​28241](https://togithub.com/spring-projects/spring-framework/issues/28241) - ResponseEntity objects are accumulated in ConcurrentReferenceHashMap [#​28232](https://togithub.com/spring-projects/spring-framework/issues/28232) - Lambda proxy generation fix causes BeanNotOfRequiredTypeException [#​28209](https://togithub.com/spring-projects/spring-framework/issues/28209) - CodeGenerationException thrown when using AnnotationMBeanExporter on JDK 17 [#​28138](https://togithub.com/spring-projects/spring-framework/issues/28138) #### :hammer: Dependency Upgrades - Upgrade to Reactor 2020.0.18 [#​28329](https://togithub.com/spring-projects/spring-framework/issues/28329) #### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​GatinMI](https://togithub.com/GatinMI) ### [`v5.3.18`](https://togithub.com/spring-projects/spring-framework/releases/tag/v5.3.18) [Compare Source](https://togithub.com/spring-projects/spring-framework/compare/v5.3.17...v5.3.18) #### :star: New Features - Restrict access to property paths on Class references [#​28261](https://togithub.com/spring-projects/spring-framework/issues/28261) - Introduce cancel(boolean mayInterruptIfRunning) in ScheduledTask [#​28233](https://togithub.com/spring-projects/spring-framework/issues/28233) #### :lady_beetle: Bug Fixes - Move off deprecated API in `SessionTransactionData` [#​28234](https://togithub.com/spring-projects/spring-framework/issues/28234) #### :notebook_with_decorative_cover: Documentation - Introduce warnings in documentation of SerializationUtils [#​28246](https://togithub.com/spring-projects/spring-framework/issues/28246) - Update copyright date in reference manual [#​28237](https://togithub.com/spring-projects/spring-framework/issues/28237) - `@Transactional` test does not execute all JPA lifecycle callback methods [#​28228](https://togithub.com/spring-projects/spring-framework/issues/28228) #### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​izeye](https://togithub.com/izeye) - [@​quaff](https://togithub.com/quaff) ### [`v5.3.17`](https://togithub.com/spring-projects/spring-framework/releases/tag/v5.3.17) [Compare Source](https://togithub.com/spring-projects/spring-framework/compare/v5.3.16...v5.3.17) #### :star: New Features - Using DataClassRowMapper causes "No property found for column" debug messages in logs [#​28179](https://togithub.com/spring-projects/spring-framework/issues/28179) - Improve diagnostics in SpEL for large array creation [#​28145](https://togithub.com/spring-projects/spring-framework/issues/28145) - Support custom HTTP status in client-side REST testing support [#​28105](https://togithub.com/spring-projects/spring-framework/pull/28105) - AsyncRestTemplate logging too verbose [#​28049](https://togithub.com/spring-projects/spring-framework/issues/28049) #### :lady_beetle: Bug Fixes - java.lang.NoClassDefFoundError: org/springframework/cglib/beans/BeanMapEmitter [#​28110](https://togithub.com/spring-projects/spring-framework/issues/28110) - CronExpression fails to calculate properly next execution when running on the day of winter daylight saving time [#​28095](https://togithub.com/spring-projects/spring-framework/issues/28095) - Private init/destroy method may be invoked twice [#​28083](https://togithub.com/spring-projects/spring-framework/issues/28083) - MappingJacksonValue and Jackson2CodecSupport#registerObjectMappersForType do not work together [#​28045](https://togithub.com/spring-projects/spring-framework/issues/28045) - SpEL fails to recover from error during MIXED mode compilation [#​28043](https://togithub.com/spring-projects/spring-framework/issues/28043) - When returning a ResponseEntity with a Flux while the function is suspended, it fails to encode the body [#​27809](https://togithub.com/spring-projects/spring-framework/issues/27809) #### :notebook_with_decorative_cover: Documentation - Improve documentation for `@EnabledIf` and `@DisabledIf` test support [#​28157](https://togithub.com/spring-projects/spring-framework/issues/28157) - Links to Spring Security are broken in the reference guide [#​28135](https://togithub.com/spring-projects/spring-framework/issues/28135) - Document that transaction rollback rules may result in unintentional matches [#​28125](https://togithub.com/spring-projects/spring-framework/issues/28125) - Improve documentation for TestContext events [#​27757](https://togithub.com/spring-projects/spring-framework/issues/27757) - Clarify behavior for generics support in BeanUtils.copyProperties [#​27259](https://togithub.com/spring-projects/spring-framework/issues/27259) #### :hammer: Dependency Upgrades - Upgrade to Reactor 2020.0.17 [#​28064](https://togithub.com/spring-projects/spring-framework/issues/28064) #### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​gorisanson](https://togithub.com/gorisanson) - [@​danthonywalker](https://togithub.com/danthonywalker) - [@​AzZureman](https://togithub.com/AzZureman) ### [`v5.3.16`](https://togithub.com/spring-projects/spring-framework/releases/tag/v5.3.16) [Compare Source](https://togithub.com/spring-projects/spring-framework/compare/v5.3.15...v5.3.16) #### :star: New Features - Deprecate SocketUtils [#​28052](https://togithub.com/spring-projects/spring-framework/issues/28052) - Add convenience factory method for ManagedList, ManagedSet and ManagedMap [#​28026](https://togithub.com/spring-projects/spring-framework/issues/28026) - Synthesized annotation toString() doesn't match non-synthesized annotation on Java 9+ [#​28015](https://togithub.com/spring-projects/spring-framework/issues/28015) - Add support for strict JSON comparison in WebTestClient [#​27993](https://togithub.com/spring-projects/spring-framework/pull/27993) - Improve log message when searching for default executor for async processing [#​27983](https://togithub.com/spring-projects/spring-framework/issues/27983) - Inconsistent behaviour in spring-orm between EntityManagerFactoryUtils.closeEntityManager() and SessionFactoryUtils.closeSession() [#​27972](https://togithub.com/spring-projects/spring-framework/issues/27972) - Spring AOP cannot generate proxy for lambda on Java 16+ [#​27971](https://togithub.com/spring-projects/spring-framework/issues/27971) - RestTemplate reading Json prohibits JDK HttpClient connection reuse (keep-alive) [#​27969](https://togithub.com/spring-projects/spring-framework/issues/27969) - Deprecate AsyncTaskExecutor.execute(Runnable task, long startTimeout) [#​27959](https://togithub.com/spring-projects/spring-framework/issues/27959) - Add CacheErrorHandler implementation that logs exceptions rather than rethrowing them [#​27826](https://togithub.com/spring-projects/spring-framework/pull/27826) - Support for CGLIB BeanMap utility on JDK 17 [#​27802](https://togithub.com/spring-projects/spring-framework/issues/27802) - Avoid message listener recovery in case of persistence exceptions from external transaction manager [#​1807](https://togithub.com/spring-projects/spring-framework/pull/1807) #### :lady_beetle: Bug Fixes - Fix CronExpression fails to calculate next execution on the day of daylight saving time [#​28044](https://togithub.com/spring-projects/spring-framework/pull/28044) - CronExpression fails to calculate next execution on the day of daylight saving time [#​28038](https://togithub.com/spring-projects/spring-framework/issues/28038) - Using recursive annotations in Kotlin causes stack overflow [#​28012](https://togithub.com/spring-projects/spring-framework/issues/28012) - Add formatting for SockJS close GoAway frame to prevent infinite loop for xhr-polling and xhr-streaming transport [#​28000](https://togithub.com/spring-projects/spring-framework/pull/28000) - Reflective method invocation does not detect interface method when interface is declared in a subclass (e.g. HashMap.HashIterator.hasNext) [#​27995](https://togithub.com/spring-projects/spring-framework/issues/27995) - ReflectionUtils.USER_DECLARED_METHODS does not filter methods declared in java.lang.Object [#​27970](https://togithub.com/spring-projects/spring-framework/issues/27970) - CronExpression doesn't handle Quartz weekday of month expressions correctly [#​27966](https://togithub.com/spring-projects/spring-framework/issues/27966) - ServletServerHttpRequest getHeaders() throws IllegalArgumentException instead of ignoring invalid content type */* [#​27957](https://togithub.com/spring-projects/spring-framework/issues/27957) - PropertySourcesPlaceholderConfigurer ignores ignoreUnresolvablePlaceholders flag [#​27947](https://togithub.com/spring-projects/spring-framework/issues/27947) - Fix regression in BeanPropertyRowMapper regarding underscore name [#​27941](https://togithub.com/spring-projects/spring-framework/pull/27941) - WebClient corrupts binary data when trying to upload many files [#​27939](https://togithub.com/spring-projects/spring-framework/issues/27939) - Spring fails to determine XML is XSD-based if DOCTYPE appears in a comment [#​27915](https://togithub.com/spring-projects/spring-framework/issues/27915) - ResourceHttpRequestHandler with PathPatternParser cannot resolve resources with a jsessionid URL [#​27913](https://togithub.com/spring-projects/spring-framework/issues/27913) #### :notebook_with_decorative_cover: Documentation - Improve documentation for uri(URI) method in WebTestClient regarding base URI [#​28058](https://togithub.com/spring-projects/spring-framework/issues/28058) - Polish reference docs (core) [#​28004](https://togithub.com/spring-projects/spring-framework/pull/28004) - Fix ServletUriComponentsBuilder examples in ref docs [#​27984](https://togithub.com/spring-projects/spring-framework/pull/27984) - Improve documentation for implementing AspectJ around advice [#​27980](https://togithub.com/spring-projects/spring-framework/issues/27980) - Fix CaffeineCacheManager configuration in the documentation [#​27967](https://togithub.com/spring-projects/spring-framework/pull/27967) - Fix Javadoc links to JSR 305 annotations [#​27904](https://togithub.com/spring-projects/spring-framework/issues/27904) - Document how to register annotated classes with a GenericWebApplicationContext [#​27778](https://togithub.com/spring-projects/spring-framework/issues/27778) #### :hammer: Dependency Upgrades - Upgrade to Reactor 2020.0.16 [#​28039](https://togithub.com/spring-projects/spring-framework/issues/28039) #### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​wkwkhautbois](https://togithub.com/wkwkhautbois) - [@​arey](https://togithub.com/arey) - [@​izeye](https://togithub.com/izeye) - [@​elgleidson](https://togithub.com/elgleidson) - [@​An1s9n](https://togithub.com/An1s9n) - [@​drewtul](https://togithub.com/drewtul) - [@​Drezir](https://togithub.com/Drezir) - [@​mgmeiner](https://togithub.com/mgmeiner) - [@​vikeychen](https://togithub.com/vikeychen) - [@​zbykovskyi](https://togithub.com/zbykovskyi) - [@​mdeinum](https://togithub.com/mdeinum) - [@​shirohoo](https://togithub.com/shirohoo) ### [`v5.3.15`](https://togithub.com/spring-projects/spring-framework/releases/tag/v5.3.15) [Compare Source](https://togithub.com/spring-projects/spring-framework/compare/v5.3.14...v5.3.15) #### :star: New Features - PrintingResultHandler in MockMvc should infer UTF-8 encoding for JSON response [#​27926](https://togithub.com/spring-projects/spring-framework/issues/27926) - WebFlux request id should not contain internal IPs [#​27885](https://togithub.com/spring-projects/spring-framework/issues/27885) - Deprecate inappropriate getBeanFactory() method in AbstractBeanDefinitionReader [#​27875](https://togithub.com/spring-projects/spring-framework/issues/27875) - Make `H2SequenceMaxValueIncrementer` compatible with H2 database 2.0.x [#​27870](https://togithub.com/spring-projects/spring-framework/pull/27870) - Improve error message in ResolvableType.forClassWithGenerics() [#​27847](https://togithub.com/spring-projects/spring-framework/issues/27847) - Use of RequestPart with String leads to a file descriptor leak [#​27773](https://togithub.com/spring-projects/spring-framework/issues/27773) - Expose headers from native client request after request is committed [#​27768](https://togithub.com/spring-projects/spring-framework/pull/27768) #### :lady_beetle: Bug Fixes - Cannot read server-sent events without data (a.k.a. heartbeats) [#​27923](https://togithub.com/spring-projects/spring-framework/issues/27923) - ArrayIndexOutOfBoundsException with STOMP and Jetty 10 [#​27899](https://togithub.com/spring-projects/spring-framework/issues/27899) - ServerHttpResponseDecorator does not delegate methods for raw status code [#​27889](https://togithub.com/spring-projects/spring-framework/pull/27889) - Clear cache when clearing argument resolvers [#​27888](https://togithub.com/spring-projects/spring-framework/pull/27888) - Duplicated content-type response header on error response [#​27887](https://togithub.com/spring-projects/spring-framework/issues/27887) #### :notebook_with_decorative_cover: Documentation - Fix syntax in WebFlux Validation example [#​27907](https://togithub.com/spring-projects/spring-framework/pull/27907) - Add Section on Authorization to STOMP WebSocket documentation [#​27906](https://togithub.com/spring-projects/spring-framework/issues/27906) - Correct not compiling example code in Data Access docs [#​27886](https://togithub.com/spring-projects/spring-framework/pull/27886) #### :hammer: Dependency Upgrades - Upgrade to Reactor 2020.0.15 [#​27897](https://togithub.com/spring-projects/spring-framework/issues/27897) #### :heart: Contributors We'd like to thank all the contributors who worked on this release! - [@​izeye](https://togithub.com/izeye) - [@​justlikeliuen](https://togithub.com/justlikeliuen) - [@​waahhh](https://togithub.com/waahhh) - [@​kth496](https://togithub.com/kth496) - [@​sokomishalov](https://togithub.com/sokomishalov) - [@​hpoettker](https://togithub.com/hpoettker) - [@​wengertj](https://togithub.com/wengertj) - [@​figroc](https://togithub.com/figroc) - [@​springmonster](https://togithub.com/springmonster) - [@​demkom58](https://togithub.com/demkom58)