Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 16, 2024

Bumps the java group with 4 updates: org.apache.logging.log4j:log4j-core, org.springframework:spring-web, io.swagger.core.v3:swagger-annotations-jakarta and co.elastic.clients:elasticsearch-java.

Updates org.apache.logging.log4j:log4j-core from 2.24.2 to 2.24.3

Updates org.springframework:spring-web from 6.2.0 to 6.2.1

Release notes

Sourced from org.springframework:spring-web's releases.

v6.2.1

⭐ New Features

  • Implement toString() in TestBeanOverrideHandler #34072
  • Log alias removal in DefaultListableBeanFactory #34070
  • Log warning when one Bean Override overrides another Bean Override #34056
  • Introduce "unsafeAllocated" flag in TypeHint #34055
  • Cannot assert status reason phrase with MockMvcTester #34016
  • Improve toString for reactive ScheduledTask #34010
  • Optimize sending requests without a body in RestClient and WebClient with Reactor Netty #34003
  • Add missing @Contract annotation to ObjectUtils#isEmpty #33984
  • OptionalValidatorFactoryBean suppresses Hibernate Validator configuration failures too much #33979
  • Support Flux<ServerSentEvent<Fragment>> in WebFlux #33975
  • Update in FragmentsRendering to names of static methods #33974
  • Honor @Fallback semantics for Test Bean Overrides #33924
  • AdvisedSupport.MethodCacheKey should check for logical equality as well as identity #33915
  • Fail with full description for XML diff in XmlExpectationsHelper #33827
  • MapMethodProcessor should only resolve arguments of type Map or the ModelMap hierarchy #33160

🐞 Bug Fixes

  • Support binding from request headers via constructor args #34073
  • Unable to configure custom scheduler for @Scheduled annotation #34058
  • Identical Bean Overrides are silently allowed #34054
  • OOM due to NoTransactionInContextException in reactive pipeline #34048
  • Priority header causes binding exception after upgrade to Spring Framework 6.2.0 #34039
  • @MockitoBean incorrectly injects supertype into subtype field #34025
  • NestedPlaceholder are not recursively resolved if the fallback is a placeholder #34020
  • AOT no longer generates BeanInstanceSupplier signature for a CGLIB proxy with its public type #33998
  • Nested transaction support via savepoints is broken in Oracle database #33987
  • Proxy created with IntroductionInterceptor but without target always throws an exception #33985
  • ApplicationListener no longer invoked for generic ApplicationEvent with 6.2.0 #33982
  • Error handling override in DefaultResponseErrorHandler ignored after upgrade to 6.2.0 #33980
  • BeanCurrentlyInCreationException is thrown when multiple threads simultaneously try to create a FactoryBean #33972
  • HandshakeWebSocketService assumes jakarta websocket is present #33970
  • @Value cases SpringCGLIB$$0 required a bean of type java.lang.String that could not be found in Native compile when migrating to SB 3.4 #33960
  • PathMatchingResourcePatternResolver should not log directory-skip messages at info level #33956
  • Avoid infinite recursion in BeanValidationBeanRegistrationAotProcessor with recursive generics #33950
  • Skip runtime hint registration for validation constraint with missing dependencies #33949
  • Move Kotlin value class unboxing to InvocableHandlerMethod #33943
  • MockReset strategy is no longer honored for @MockitoBean and @MockitoSpyBean #33941
  • TypeDescriptor with recursive generics triggers infinite recursion in ResolvableType.equals/hashCode #33932
  • RestClient does not expose full URI template as attribute #33928
  • Bean Overrides like @MockitoBean and @TestBean should not be allowed on static fields #33922
  • Regression in duplicate beans with different method names #33920

📔 Documentation

  • Fix link to MockMvcBuilders in reference documentation #34031
  • Fix a typo in the filters documentation #33959

... (truncated)

Commits
  • b4f10d4 Release v6.2.1
  • 0aa721c Polishing
  • 63af572 Upgrade to Jackson 2.18.2, RxJava 3.1.10, Checkstyle 10.20.2
  • 72c2343 Avoid deprecated ListenableFuture name for internal class
  • 8aeced9 Support header filtering in web data binding
  • 70c326e Support headers in DataBinding via constructor args
  • 7b4e19c Make ExtendedServletRequestDataBinder public
  • 3b95d2c Support Flux<ServerSentEvent> in WebFlux
  • 640e570 Minor refactoring in ServerSentEvent
  • 66f33a8 MapMethodProcessor supportsParameter is more specific
  • Additional commits viewable in compare view

Updates io.swagger.core.v3:swagger-annotations-jakarta from 2.2.26 to 2.2.27

Updates co.elastic.clients:elasticsearch-java from 8.16.1 to 8.17.0

Commits
  • 0ae148d [codegen] update to latest spec
  • b31c9b5 bump version
  • e7cc65f [codegen] update to latest spec
  • 3c3db68 [codegen] update to latest spec
  • 73edf7e Parse ES|QL response body header more leniently (#903) (#911)
  • 45ffd8f Using matching docker container server version in unit tests (#904) (#908)
  • 8eeb5e8 [codegen] update to latest spec
  • 334323f Feature: option to retrieve original json body if parse exception occurred (#...
  • 164dca0 revert changes to build
  • 1249d19 bump version
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the java group with 4 updates: org.apache.logging.log4j:log4j-core, [org.springframework:spring-web](https://github.com/spring-projects/spring-framework), io.swagger.core.v3:swagger-annotations-jakarta and [co.elastic.clients:elasticsearch-java](https://github.com/elastic/elasticsearch-java).


Updates `org.apache.logging.log4j:log4j-core` from 2.24.2 to 2.24.3

Updates `org.springframework:spring-web` from 6.2.0 to 6.2.1
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.0...v6.2.1)

Updates `io.swagger.core.v3:swagger-annotations-jakarta` from 2.2.26 to 2.2.27

Updates `co.elastic.clients:elasticsearch-java` from 8.16.1 to 8.17.0
- [Release notes](https://github.com/elastic/elasticsearch-java/releases)
- [Changelog](https://github.com/elastic/elasticsearch-java/blob/main/CHANGELOG.md)
- [Commits](elastic/elasticsearch-java@v8.16.1...v8.17.0)

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.springframework:spring-web
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: io.swagger.core.v3:swagger-annotations-jakarta
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: co.elastic.clients:elasticsearch-java
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Dec 16, 2024
@alegauss alegauss merged commit 3704650 into 0.3.9 Dec 16, 2024
4 of 6 checks passed
@dependabot dependabot bot deleted the dependabot/maven/0.3.9/java-18b92b6b2b branch December 16, 2024 12:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant