Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 22, 2025

Bumps org.springframework.boot from 3.4.6 to 3.4.7.

Release notes

Sourced from org.springframework.boot's releases.

v3.4.7

⚠️ Noteworthy Changes

  • This release upgrades to Tomcat 10.1.42 which has introduced limits for part count and header size in multipart/form-data requests. These limits can be customized using server.tomcat.max-part-count and server.tomcat.max-part-header-size respectively.

🐞 Bug Fixes

  • Executable JAR application class encounters performance issues when classpath URLs reference a host #46027
  • Loading from spring.factories may fail with a ClassNotFoundException when the TCCL changes between calls #46018
  • Actuator heapdump endpoint is failing on modern OpenJ9 JVMs #46004
  • DataSouceBuilder can fail with a NPE when the driver is null #45991
  • JSON writer incorrectly escapes forward slash which can cause structure logging issues #45972
  • spring.couchbase.authentication.jks.private-key-password has no effect #45883
  • ConditionalOnAvailableEndpoint does not use the ConditionContext's ClassLoader to load exposure outcome contributors #45800
  • ManagementWebServerFactoryCustomizer and ManagementErrorPageCustomizer should not have the same order #45728
  • SAML2 autoconfiguration is not imported by @WebMvcTest #45650

📔 Documentation

  • Fix Docker security options links in Packaging OCI images sections #46020
  • Improve documentation for configuring Spring Security with '/error' #46008
  • Timestamps in Retrieving Audit Events examples do not match the accompanying text #45996
  • Update javadoc of test slice annotations to suggest MockitoBean rather than MockBean #45887
  • Include configuration classes from all modules in the "Auto-configuration Classes" appendix #45861
  • Links to Testcontainers javadoc for many classes not in the core testcontainers module do not work #45843
  • Add SSL response structure to actuator info endpoint documentation #45792
  • Gradle Shadow Plugin link in the reference guide is outdated #45739
  • Document use of git-commit-id-maven-plugin consistently #45682
  • Update javadoc of Configurer classes that apply sensible defaults to describe how they're typically used #45655
  • Clarify the situation with support for Prometheus PushGateway and the deprecated simpleclient #45649

🔨 Dependency Upgrades

  • Upgrade to Build Helper Maven Plugin 3.6.1 #45812
  • Upgrade to Git Commit ID Maven Plugin 9.0.2 #45813
  • Upgrade to Groovy 4.0.27 #45814
  • Upgrade to Hibernate 6.6.18.Final #45956
  • Upgrade to Infinispan 15.0.15.Final #45816
  • Upgrade to Jackson Bom 2.18.4.1 #45957
  • Upgrade to Jaybird 5.0.8.java11 #45817
  • Upgrade to Jetty 12.0.22 #45819
  • Upgrade to Jetty Reactive HTTPClient 4.0.10 #45818
  • Upgrade to Micrometer 1.14.8 #45763
  • Upgrade to Micrometer Tracing 1.4.7 #45764
  • Upgrade to Netty 4.1.122.Final #45820
  • Upgrade to Postgresql 42.7.6 #45821
  • Upgrade to Prometheus Client 1.3.8 #45822
  • Upgrade to Pulsar 3.3.7 #45823
  • Upgrade to Reactor Bom 2024.0.7 #45765
  • Upgrade to REST Assured 5.5.5 #45824
  • Upgrade to Spring Authorization Server 1.4.4 #45766

... (truncated)

Commits
  • 5bfbc62 Release v3.4.7
  • 50e5bfe Align our Lettuce version with that of Spring Data Redis
  • efb942e Merge branch '3.3.x' into 3.4.x
  • c63eba3 Revert "Publish releases using Central Portal"
  • aa4bf73 Merge branch '3.3.x' into 3.4.x
  • 206785f Only cache JarFile URL keys that are cheap to lookup
  • 29f09c9 Merge branch '3.3.x' into 3.4.x
  • 8681b94 Publish releases using Central Portal
  • 95a5699 Merge branch '3.3.x' into 3.4.x
  • 13d265c Merge pull request #46016 from davidlj95
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.springframework.boot](https://github.com/spring-projects/spring-boot) from 3.4.6 to 3.4.7.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.6...v3.4.7)

---
updated-dependencies:
- dependency-name: org.springframework.boot
  dependency-version: 3.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the type: dependency-upgrade A dependency upgrade label Jun 22, 2025
@artembilan artembilan added this to the 5.1.1 milestone Jun 23, 2025
@artembilan artembilan merged commit ccaf050 into main Jun 23, 2025
2 of 3 checks passed
@dependabot dependabot bot deleted the dependabot/gradle/samples/time-spel-log/org.springframework.boot-3.4.7 branch June 23, 2025 18:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type: dependency-upgrade A dependency upgrade
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant