Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 19, 2023

Bumps spring-boot-dependencies from 2.3.1.RELEASE to 2.7.7.

Release notes

Sourced from spring-boot-dependencies's releases.

v2.7.7

🐞 Bug Fixes

  • Fix typo in LocalDevToolsAutoConfiguration logging #33569
  • Web server fails to start due to "Resource location must not be null" when attempting to use a PKCS 11 KeyStore #32179

📔 Documentation

  • Improve gradle plugin tags documentation #33614
  • Improve maven plugin tags documentation #33609
  • Fix typo in tomcat accesslog checkExists doc #33460
  • Document that the shutdown endpoint is not intended for use when deploying a war to a servlet container #17398

🔨 Dependency Upgrades

  • Upgrade to Byte Buddy 1.12.20 #33570
  • Upgrade to Dropwizard Metrics 4.2.14 #33571
  • Upgrade to Elasticsearch 7.17.8 #33572
  • Upgrade to HttpClient 4.5.14 #33573
  • Upgrade to HttpCore 4.4.16 #33574
  • Upgrade to Infinispan 13.0.14.Final #33575
  • Upgrade to Jaybird 4.0.8.java8 #33576
  • Upgrade to Jetty 9.4.50.v20221201 #33577
  • Upgrade to MSSQL JDBC 10.2.2.jre8 #33578
  • Upgrade to Neo4j Java Driver 4.4.11 #33579
  • Upgrade to Netty 4.1.86.Final #33580
  • Upgrade to Reactor 2020.0.26 #33543
  • Upgrade to Spring Integration 5.5.16 #33581
  • Upgrade to Spring Security 5.7.6 #33544
  • Upgrade to Thymeleaf Extras SpringSecurity 3.0.5.RELEASE #33582
  • Upgrade to Tomcat 9.0.70 #33583
  • Upgrade to UnboundID LDAPSDK 6.0.7 #33584
  • Upgrade to Undertow 2.2.22.Final #33585

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Artur-, @​aksh1618, @​cdanger, @​currenjin, @​jprinet, and @​shekharAggarwal

v2.7.6

🐞 Bug Fixes

  • ScheduledBeanLazyInitializationExcludeFilter is auto-configured even when annotation-based scheduled has not been enabled #33283
  • SpringBootContextLoader prints banner twice when using a @ContextHierarchy #33262
  • Properties migrator causes an application to fail to start if it tries to map a property whose metadata data entry contains an invalid configuration property name #33249
  • Configuration property binding does not deal with bridge methods #33211
  • Configuring management.server.port via a config tree results in a ConverterNotFoundException when the management context is refreshed #33168
  • Dependency management for XMLUnit is incomplete #32999
  • Spring Boot's Lettuce metrics enable histrograms by default and it's hard to switch them off #32989

... (truncated)

Commits
  • d4f8fa3 Release v2.7.7
  • e4772cf Update copyright year of changed files
  • 60a75e3 Increase timeout for ApplicationRunner task
  • 5ba52d0 Polish formatting
  • df08eb8 Merge pull request #33614 from shekharAggarwal
  • a2a59dd Polish 'Improve gradle plugin tags documentation'
  • a1df607 Improve gradle plugin tags documentation
  • 2b886c1 Merge pull request #33609 from shekharAggarwal
  • c205ba0 Polish 'Improve maven plugin tags documentation'
  • 7955701 Improve maven plugin tags documentation
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [spring-boot-dependencies](https://github.com/spring-projects/spring-boot) from 2.3.1.RELEASE to 2.7.7.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.3.1.RELEASE...v2.7.7)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the type/dependencies Pull requests that update a dependency file label Jan 19, 2023
@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@codecov-commenter
Copy link

Codecov Report

Merging #11344 (4c53389) into 3.2 (e8f742a) will decrease coverage by 0.04%.
The diff coverage is n/a.

@@             Coverage Diff              @@
##                3.2   #11344      +/-   ##
============================================
- Coverage     64.86%   64.83%   -0.04%     
  Complexity       14       14              
============================================
  Files          1486     1486              
  Lines         62349    62349              
  Branches       9132     9132              
============================================
- Hits          40445    40424      -21     
- Misses        17705    17725      +20     
- Partials       4199     4200       +1     
Impacted Files Coverage Δ
...pache/dubbo/common/function/ThrowableFunction.java 71.42% <0.00%> (-28.58%) ⬇️
...gistrycenter/processor/ZookeeperUnixProcessor.java 60.71% <0.00%> (-17.86%) ⬇️
...ava/org/apache/dubbo/rpc/proxy/InvocationUtil.java 84.84% <0.00%> (-6.07%) ⬇️
...nt/metadata/ServiceInstanceHostPortCustomizer.java 63.63% <0.00%> (-6.07%) ⬇️
...bbo/common/concurrent/CallableSafeInitializer.java 61.90% <0.00%> (-4.77%) ⬇️
.../apache/dubbo/remoting/transport/AbstractPeer.java 63.04% <0.00%> (-4.35%) ⬇️
...bo/remoting/zookeeper/AbstractZookeeperClient.java 81.60% <0.00%> (-3.45%) ⬇️
...e/dubbo/registry/integration/DynamicDirectory.java 61.94% <0.00%> (-2.66%) ⬇️
.../dubbo/registry/integration/RegistryDirectory.java 51.55% <0.00%> (-1.39%) ⬇️
...bo/rpc/cluster/support/AbstractClusterInvoker.java 79.47% <0.00%> (-0.67%) ⬇️
... and 7 more

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

@AlbumenJ AlbumenJ merged commit 6e2a9ca into 3.2 Jan 19, 2023
@dependabot dependabot bot deleted the dependabot/maven/org.springframework.boot-spring-boot-dependencies-2.7.7 branch January 19, 2023 13:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type/dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants