Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 19, 2025

Bumps org.springframework.vault:spring-vault-core from 3.2.0 to 4.0.0.

Release notes

Sourced from org.springframework.vault:spring-vault-core's releases.

4.0.0

📗 Links

⭐ New Features

  • Add support for RestClient #941
  • Propagate failure to detect MountInfo #929
  • Upgrade to Jackson 3 #919
  • Remove deprecated code #904
  • Use JSpecify to indicate nullness #902
  • Add support for Reactor, Jetty, and JDK ClientHttpRequestFactory implementations #901
  • Remove OkHttp support #900
  • Upgrade to Kotlin 2.2 #899
  • Upgrade to Spring Framework 7.0 #898

🐞 Bug Fixes

  • LeaseAwareVaultPropertySource assertion mixup between variables and text #928

📔 Documentation

  • Broken link to Spring Framework reference documentation #955
  • Document relative and absolute Vault path behavior #926

🔨 Dependency Upgrades

  • Upgrade to Project Reactor 2025.0.0 #954
  • Upgrade to Spring Security 7.0 #952
  • Upgrade to Spring Data 2025.1.0 #951
  • Upgrade to Spring Framework 7.0 #950
  • Upgrade to Spring Data 2025.1.0-RC2 #946
  • Upgrade build to Java 25 #944
  • Upgrade to JUnit 6.0 #943
  • Upgrade to Jackson 3.0 #940
  • Upgrade to Spring Data 2025.1.0-RC1 #939
  • Upgrade to Spring Framework 7.0 RC1 #938
  • Upgrade to Maven 3.9.11 #936
  • Upgrade to Spring Framework 7.0 M9 #934
  • Upgrade to Kotlin 2.2.0 #931
  • Bump com.nimbusds:nimbus-jose-jwt from 9.37.2 to 10.0.2 in /spring-vault-core #930
  • Upgrade to Spring Framework 7.0.0-M7 #927
  • Upgrade to Spring Security 6.5.0 #924
  • Upgrade to Kotlin 2.2.0-RC2 #923
  • Upgrade to Spring Framework 7.0 M6 #922
  • Upgrade to Spring Data 2025.1.0-M3 #921
  • Upgrade to Reactor 2025.0.0-M4 and Netty 4.2 #920

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

... (truncated)

Commits
  • 13895db Release Spring Vault 4.0.0.
  • 57263e0 Bump optional dependencies.
  • 76db600 Upgrade to Spring Security 7.0.
  • 36e958a Fix broken link to Spring Framework reference documentation.
  • 4f947c1 Upgrade to Project Reactor 2025.0.0.
  • 74a93ce Upgrade to Spring Data 2025.1.0.
  • de7a3b7 Upgrade to Spring Framework 7.0.
  • a9d48e9 Polishing.
  • 3f8d1a4 Adapt to Spring Framework 7 changes.
  • 6e6a216 Refine Deploy docs triggers.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.springframework.vault:spring-vault-core](https://github.com/spring-projects/spring-vault) from 3.2.0 to 4.0.0.
- [Release notes](https://github.com/spring-projects/spring-vault/releases)
- [Commits](spring-projects/spring-vault@3.2.0...4.0.0)

---
updated-dependencies:
- dependency-name: org.springframework.vault:spring-vault-core
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 19, 2025
@dependabot dependabot bot requested a review from a team as a code owner November 19, 2025 08:00
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 19, 2025
@coderabbitai
Copy link

coderabbitai bot commented Nov 19, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant