Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 25, 2023

Bumps org.springframework.boot:spring-boot-dependencies from 2.7.15 to 2.7.16.

Release notes

Sourced from org.springframework.boot:spring-boot-dependencies's releases.

v2.7.16

⭐ New Features

  • Add TWENTY_ONE to JavaVersion enum #37362

🐞 Bug Fixes

  • Invalid Accept header produces HTTP 500 in WelcomePageHandlerMapping #37455
  • PrivateKeyParser doesn't support ed448, XDH and RSA-PSS keys #37237
  • Parsing OCI image names that are invalid due to the use of upper case letters is very slow #35657
  • Using https with elliptic curves other than secp384r1 fails #34232
  • Saml2RelyingPartyAutoConfiguration ignores sign-request when metadata-url is used #33747
  • Leaking file descriptor / socket within DomainSocket tooling #32423

📔 Documentation

  • Correct the description of spring.artemis.broker-url #37260
  • Add default value metadata for management.metrics.export.signalfx.published-histogram-type #37210
  • Document that PKCS8 PEM files should be used whenever possible #37170
  • Polish javadoc #37112

🔨 Dependency Upgrades

  • Upgrade to Elasticsearch 7.17.13 #37286
  • Upgrade to Jetty 9.4.52.v20230823 #37287
  • Upgrade to Lombok 1.18.30 #37486
  • Upgrade to Micrometer 1.9.15 #37245
  • Upgrade to Reactor Bom 2020.0.36 #37246
  • Upgrade to Spring AMQP 2.4.16 #37247
  • Upgrade to Spring Data Bom 2021.2.16 #37248
  • Upgrade to Spring Framework 5.3.30 #37249
  • Upgrade to Spring GraphQL 1.0.6 #37250
  • Upgrade to Spring Integration 5.5.19 #37251
  • Upgrade to Spring Security 5.7.11 #37414
  • Upgrade to Spring WS 3.1.7 #37415
  • Upgrade to Tomcat 9.0.80 #37288

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​dependabot[bot], @​hakan-krgn, @​izeye, @​mdeinum, and @​quaff

Commits
  • 01caff4 Release v2.7.16
  • b83e7b4 Update copyright year of changed files
  • e10ac76 Polish
  • d28982f Upgrade to Spring Integration 5.5.19
  • 94478c2 Upgrade to Lombok 1.18.30
  • 0ed455b Apply SAML2 sign-request even if metadata url is set
  • 4a6dd95 Upgrade to Spring GraphQL 1.0.6
  • 6805a33 Close file handle on exceptions during connect
  • 95690f7 Fall back to all media types if encountering invalid Accept header
  • 1f527c3 Upgrade to Spring WS 3.1.7
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) from 2.7.15 to 2.7.16.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.7.15...v2.7.16)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the type/dependencies Pull requests that update a dependency file label Sep 25, 2023
@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@CrazyHZM CrazyHZM merged commit d10faf0 into 3.2 Sep 25, 2023
@CrazyHZM CrazyHZM deleted the dependabot/maven/org.springframework.boot-spring-boot-dependencies-2.7.16 branch September 25, 2023 08:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type/dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant