3 hours ago
spring-boot

v3.5.15

🐞 Bug Fixes

  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50743
  • MailSender auto-configuration does not enable hostname verification #50742
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50624
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50501
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50451
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50429
  • GraphQL WebSocket support does not configure allowed origins #50391
  • Buildpack module does not validate long-to-int casts #50382
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50373
  • Created StackTracePrinter instances have no access to the Environment #50303
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50301
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50292
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50273
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50254
  • Meter registries are not removed from the global registry when the context is closed #50235
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50225
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50205
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50118
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50095

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50641
  • Remove the use of Optional from Data Neo4j repository examples #50600
  • Fix typos in documentation #50593
  • Document Java 25 requirement for AOT cache #50482
  • Clarify dependency requirement for Bean Validation support #50290
  • Document SSL reloading with Let's Encrypt #50222
  • Polish InvalidConfigurationPropertyValueException constructor javadoc #50212
  • Document known testcontainers lifecycle issues #50210
  • Document configuring multiple connectors with Jetty #50206
  • Fix typo in Spring Security OAuth2 client registration documentation #50193

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@Abdlatif-nabgha, @DragonFSKY, @Kapil-chn7, @SJvaca30, @SebTardif, @ares333, @codingkiddo, @dlwldnjs1009, @henriquejsza, @igormukhin, @johnnypwong, @kwondh5217, @leestana01, @mheath, @ngocnhan-tran1996, @nosan, @quaff, @scordio, @vinhhieu21, @won-seoop, and @zxuhan

4 hours ago
spring-boot

v4.1.0

⭐ New Features

  • Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #50211
  • Reduce memory consumption when repeatedly calling WritableJson.toByteArray #49428

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50747
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50745
  • Embedded LDAP SSL should not be enabled when its bundle is empty #50700
  • InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 #50668
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50645
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50635
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50633
  • Configuration property metadata includes incorrect class references #50632
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50618
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50612
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50610
  • SpringJtaPlatform should have been deprecated since 4.1.0-M3 #50592
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50510
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50417
  • Created StackTracePrinter instances have no access to the Environment #50414
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50412
  • Buildpack module does not validate long-to-int casts #50410
  • Gradle gRPC support fails if protobuf-java dependency is used instead of protobuf-java-util #50405
  • GraphQL WebSocket support does not configure allowed origins #50394
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50298
  • Meter registries are not removed from the global registry when the context is closed #50287
  • DataSourceBuilder cannot derive a DataSource from a lazy connection proxy #50271
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50266
  • Bean definitions can be added with an initializer before setAllowBeanDefinitionOverriding is called #50264
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50261
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50258
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50234
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50228
  • Missing dependency management for spring-boot-web-server-test #50224
  • Spring Batch support for MongoDB modules are not included in dependency management #50223
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50216
  • GrpcServerHealthScheduler is not started in servlet environments #50209
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50204

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50647
  • Document SSL reloading with Let's Encrypt #50630
  • Remove the use of Optional from Data Neo4j repository examples #50622
  • Fix typos in documentation #50620
  • Clarify dependency requirement for Bean Validation support #50614
  • Document Java 25 requirement for AOT cache #50485
  • Add links for Java CAS Client Spring Boot Starter #50285
  • Document known testcontainers lifecycle issues #50220
  • Document adding multiple connectors for Jetty #50218
  • Polish InvalidConfigurationPropertyValueException constructor javadoc #50214
  • Fix typo in Spring Security OAuth2 client registration documentation #50199

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@Abdlatif-nabgha, @DragonFSKY, @Kapil-chn7, @Kimgyuilli, @SJvaca30, @SebTardif, @ares333, @codingkiddo, @dlwldnjs1009, @eddumelendez, @henriquejsza, @igormukhin, @johnnypwong, @kwondh5217, @leestana01, @mheath, @mmoayyed, @msridhar, @ngocnhan-tran1996, @nosan, @quaff, @scordio, @vinhhieu21, @vpavic, @won-seoop, and @zxuhan

4 hours ago
spring-boot

v4.0.7

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50746
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50744
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50640
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50634
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50617
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50611
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50609
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50602
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50509
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50416
  • Created StackTracePrinter instances have no access to the Environment #50413
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50411
  • Buildpack module does not validate long-to-int casts #50409
  • GraphQL WebSocket support does not configure allowed origins #50393
  • Configuration property metadata includes incorrect class references #50375
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50297
  • Meter registries are not removed from the global registry when the context is closed #50286
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50265
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50260
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50257
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50233
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50227
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50215
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50201

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50646
  • Document SSL reloading with Let's Encrypt #50629
  • Remove the use of Optional from Data Neo4j repository examples #50621
  • Fix typos in documentation #50619
  • Clarify dependency requirement for Bean Validation support #50613
  • Document Java 25 requirement for AOT cache #50484
  • Add links for Java CAS Client Spring Boot Starter #50281
  • Document known testcontainers lifecycle issues #50219
  • Document adding multiple connectors for Jetty #50217
  • Polish InvalidConfigurationPropertyValueException constructor javadoc #50213
  • Fix typo in Spring Security OAuth2 client registration documentation #50198

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@Abdlatif-nabgha, @DragonFSKY, @Kapil-chn7, @Kimgyuilli, @SJvaca30, @SebTardif, @ares333, @codingkiddo, @dlwldnjs1009, @henriquejsza, @igormukhin, @johnnypwong, @kwondh5217, @leestana01, @mheath, @mmoayyed, @msridhar, @ngocnhan-tran1996, @nosan, @quaff, @scordio, @vinhhieu21, @won-seoop, and @zxuhan

7 hours ago
Activiti

7.21.0-rc.325

What's Changed

🐛 Bug Fixes

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.324...7.21.0-rc.325

23 hours ago
spring-session

4.1.0

🔨 Dependency Upgrades

  • Bump ch.qos.logback:logback-core from 1.5.32 to 1.5.33 #3792
  • Bump ch.qos.logback:logback-core from 1.5.33 to 1.5.34 #3799
  • Bump com.github.ben-manes:gradle-versions-plugin from 0.53.0 to 0.54.0 #3745
  • Bump com.google.code.gson:gson from 2.13.2 to 2.14.0 #3756
  • Bump com.ibm.db2:jcc from 12.1.3.0 to 12.1.4.0 #3696
  • Bump com.mysql:mysql-connector-j from 9.6.0 to 9.7.0 #3754
  • Bump com.oracle.database.jdbc:ojdbc8 from 23.26.1.0.0 to 23.26.2.0.0 #3789
  • Bump commons-logging:commons-logging from 1.3.5 to 1.3.6 #3695
  • Bump io.projectreactor:reactor-bom from 2025.0.3 to 2025.0.5 #3743
  • Bump io.projectreactor:reactor-bom from 2025.0.5 to 2025.0.6 #3803
  • Bump io.projectreactor:reactor-core from 3.8.3 to 3.8.5 #3742
  • Bump io.projectreactor:reactor-core from 3.8.5 to 3.8.6 #3805
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.14 to 1.0.15 #3709
  • Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.11 to 0.0.13 #3740
  • Bump org.jfrog.buildinfo:build-info-extractor-gradle from 4.35.6 to 4.35.9 #3791
  • Bump org.mariadb.jdbc:mariadb-java-client from 3.5.7 to 3.5.8 #3734
  • Bump org.mockito:mockito-bom from 5.21.0 to 5.23.0 #3702
  • Bump org.postgresql:postgresql from 42.7.10 to 42.7.11 #3790
  • Bump org.springframework.boot:spring-boot-gradle-plugin from 4.1.0-M1 to 4.1.0-SNAPSHOT #3760
  • Bump org.springframework.data:spring-data-bom from 2025.1.3 to 2025.1.5 #3744
  • Bump org.springframework.data:spring-data-bom from 2025.1.5 to 2025.1.6 #3813
  • Bump org.springframework.security:spring-security-bom from 7.0.3 to 7.0.5 #3749
  • Bump org.springframework.security:spring-security-bom from 7.0.5 to 7.1.0 #3816
  • Bump org.springframework:spring-framework-bom from 7.0.4 to 7.0.7 #3746
  • Bump org.springframework:spring-framework-bom from 7.0.7 to 7.0.8 #3804
  • Bump org.testcontainers:testcontainers-bom from 2.0.3 to 2.0.5 #3750
  • Bump tools.jackson.core:jackson-databind from 3.0.4 to 3.1.3 #3780
  • Bump tools.jackson.core:jackson-databind from 3.1.3 to 3.1.4 #3796
  • Bump tools.jackson:jackson-bom from 3.0.4 to 3.1.3 #3772
  • Bump tools.jackson:jackson-bom from 3.1.3 to 3.1.4 #3797
1 days ago
spring-session

4.0.4

🔨 Dependency Upgrades

  • Bump ch.qos.logback:logback-core from 1.5.26 to 1.5.32 #3785
  • Bump ch.qos.logback:logback-core from 1.5.32 to 1.5.33 #3793
  • Bump ch.qos.logback:logback-core from 1.5.33 to 1.5.34 #3800
  • Bump com.ibm.db2:jcc from 12.1.3.0 to 12.1.4.0 #3779
  • Bump com.oracle.database.jdbc:ojdbc8 from 23.26.0.0.0 to 23.26.2.0.0 #3775
  • Bump commons-logging:commons-logging from 1.3.5 to 1.3.6 #3777
  • Bump io.projectreactor:reactor-bom from 2025.0.2 to 2025.0.5 #3774
  • Bump io.projectreactor:reactor-bom from 2025.0.5 to 2025.0.6 #3809
  • Bump io.projectreactor:reactor-core from 3.8.2 to 3.8.5 #3778
  • Bump io.projectreactor:reactor-core from 3.8.5 to 3.8.6 #3807
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.13 to 1.0.15 #3782
  • Bump org.jfrog.buildinfo:build-info-extractor-gradle from 4.35.6 to 4.35.9 #3784
  • Bump org.mariadb.jdbc:mariadb-java-client from 3.5.7 to 3.5.8 #3776
  • Bump org.postgresql:postgresql from 42.7.9 to 42.7.11 #3783
  • Bump org.springframework.boot:spring-boot-gradle-plugin from 4.0.2 to 4.0.6 #3781
  • Bump org.springframework.data:spring-data-bom from 2025.1.2 to 2025.1.5 #3771
  • Bump org.springframework.data:spring-data-bom from 2025.1.5 to 2025.1.6 #3812
  • Bump org.springframework.security:spring-security-bom from 7.0.2 to 7.0.5 #3773
  • Bump org.springframework.security:spring-security-bom from 7.0.5 to 7.0.6 #3810
  • Bump org.springframework:spring-framework-bom from 7.0.2 to 7.0.7 #3768
  • Bump org.springframework:spring-framework-bom from 7.0.7 to 7.0.8 #3808
  • Bump org.testcontainers:testcontainers-bom from 2.0.3 to 2.0.5 #3770
1 days ago
spring-session

3.5.7

🔨 Dependency Upgrades

  • Bump ch.qos.logback:logback-core from 1.5.32 to 1.5.34 #3815
  • Bump com.fasterxml.jackson.core:jackson-databind from 2.18.6 to 2.18.7 #3759
  • Bump com.fasterxml.jackson.core:jackson-databind from 2.18.7 to 2.18.8 #3811
  • Bump com.ibm.db2:jcc from 12.1.3.0 to 12.1.4.0 #3697
  • Bump io.projectreactor:reactor-bom from 2024.0.17 to 2024.0.18 #3819
  • Bump org.postgresql:postgresql from 42.7.10 to 42.7.11 #3761
  • Bump org.springframework.data:spring-data-bom from 2025.0.11 to 2025.0.12 #3814
  • Bump org.springframework.security:spring-security-bom from 6.5.10 to 6.5.11 #3817
  • Bump org.springframework:spring-framework-bom from 6.2.18 to 6.2.19 #3818