Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dependency org.springframework:spring-web to v5.3.20 #161

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update dependency org.springframework:spring-web to v5.3.20 #161

wants to merge 1 commit into from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Oct 5, 2021 •
edited
Loading

This PR contains the following updates:

Package Update Change
org.springframework:spring-web minor 5.2.2.RELEASE -> 5.3.20

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 9.8 CVE-2016-1000027 #78
High 9.8 CVE-2016-1000027 #13
High 9.8 CVE-2022-22965 #205
High 7.8 CVE-2021-22118 #73
High 7.8 CVE-2021-22118 #8
High 7.5 CVE-2020-5398 #91
High 7.5 CVE-2020-5398 #26
Medium 6.5 CVE-2020-5421 #126
Medium 6.5 CVE-2020-5421 #61
Medium 5.3 CVE-2020-5397 #89
Medium 5.3 CVE-2020-5397 #24
Medium 5.3 CVE-2022-22970 #221
Medium 4.3 CVE-2021-22060 #183
Medium 4.3 CVE-2021-22096 #171

Release Notes

spring-projects/spring-framework

v5.3.20

⭐ New Features
  • Refine CachedIntrospectionResults property introspection #​28445
  • Improve tests and Javadoc on binding to a property of type javax.servlet.Part #​27830
  • WritableResource doesn't have parity with Resource in @Value etc. [SPR-10656] #​15284
🐞 Bug Fixes
  • Ignore invalid STOMP frame #​28443
  • @ModelAttribute name attribute is not supported in WebFlux #​28423
  • Fix BindingResult error when ModelAttribute has custom name in WebFlux #​28422
  • Request body deserialization failures are not captured by exception handlers in WebFlux #​28155
📔 Documentation
  • Remove Log4J initialization from package-info.java in spring-web #​28420
  • Remove Log4J configurer from package-info.java in spring-core #​28411
  • Fix github issue reference in RequestMappingHandlerMapping #​28372
  • Add Javadoc since tags for GraphQL constants #​28369
  • Fix method reference in Kotlin documentation #​28340
🔨 Dependency Upgrades
❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v5.3.19

⭐ New Features

  • Remove DNS lookups during websocket connection initiation #​28280
  • Add application/graphql+json Media type and MIME type constants #​28271
  • Fix debug log for no matching acceptableTypes #​28116
  • Provide support for post-processing a LocalValidatorFactoryBean's validator Configuration without requiring sub-classing #​27956

🐞 Bug Fixes

  • Improve documentation and matching algorithm in data binders #​28333
  • NotWritablePropertyException when attempting to declaratively configure ClassLoader properties #​28269
  • BeanPropertyRowMapper's support for direct column name matches is missing in DataClassRowMapper #​28243
  • AbstractListenerReadPublisher does not call ServletOutputStream::isReady() when reading chunked data across network packets #​28241
  • ResponseEntity objects are accumulated in ConcurrentReferenceHashMap #​28232
  • Lambda proxy generation fix causes BeanNotOfRequiredTypeException #​28209
  • CodeGenerationException thrown when using AnnotationMBeanExporter on JDK 17 #​28138

🔨 Dependency Upgrades

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v5.3.18

⭐ New Features

  • Restrict access to property paths on Class references #​28261
  • Introduce cancel(boolean mayInterruptIfRunning) in ScheduledTask #​28233

🐞 Bug Fixes

  • Move off deprecated API in SessionTransactionData #​28234

📔 Documentation

  • Introduce warnings in documentation of SerializationUtils #​28246
  • Update copyright date in reference manual #​28237
  • @Transactional test does not execute all JPA lifecycle callback methods #​28228

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v5.3.17

⭐ New Features

  • Using DataClassRowMapper causes "No property found for column" debug messages in logs #​28179
  • Improve diagnostics in SpEL for large array creation #​28145
  • Support custom HTTP status in client-side REST testing support #​28105
  • AsyncRestTemplate logging too verbose #​28049

🐞 Bug Fixes

  • java.lang.NoClassDefFoundError: org/springframework/cglib/beans/BeanMapEmitter #​28110
  • CronExpression fails to calculate properly next execution when running on the day of winter daylight saving time #​28095
  • Private init/destroy method may be invoked twice #​28083
  • MappingJacksonValue and Jackson2CodecSupport#registerObjectMappersForType do not work together #​28045
  • SpEL fails to recover from error during MIXED mode compilation #​28043
  • When returning a ResponseEntity with a Flux while the function is suspended, it fails to encode the body #​27809

📔 Documentation

  • Improve documentation for @EnabledIf and @DisabledIf test support #​28157
  • Links to Spring Security are broken in the reference guide #​28135
  • Document that transaction rollback rules may result in unintentional matches #​28125
  • Improve documentation for TestContext events #​27757
  • Clarify behavior for generics support in BeanUtils.copyProperties #​27259

🔨 Dependency Upgrades

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v5.3.16

⭐ New Features

  • Deprecate SocketUtils #​28052
  • Add convenience factory method for ManagedList, ManagedSet and ManagedMap #​28026
  • Synthesized annotation toString() doesn't match non-synthesized annotation on Java 9+ #​28015
  • Add support for strict JSON comparison in WebTestClient #​27993
  • Improve log message when searching for default executor for async processing #​27983
  • Inconsistent behaviour in spring-orm between EntityManagerFactoryUtils.closeEntityManager() and SessionFactoryUtils.closeSession() #​27972
  • Spring AOP cannot generate proxy for lambda on Java 16+ #​27971
  • RestTemplate reading Json prohibits JDK HttpClient connection reuse (keep-alive) #​27969
  • Deprecate AsyncTaskExecutor.execute(Runnable task, long startTimeout) #​27959
  • Add CacheErrorHandler implementation that logs exceptions rather than rethrowing them #​27826
  • Support for CGLIB BeanMap utility on JDK 17 #​27802
  • Avoid message listener recovery in case of persistence exceptions from external transaction manager #​1807

🐞 Bug Fixes

  • Fix CronExpression fails to calculate next execution on the day of daylight saving time #​28044
  • CronExpression fails to calculate next execution on the day of daylight saving time #​28038
  • Using recursive annotations in Kotlin causes stack overflow #​28012
  • Add formatting for SockJS close GoAway frame to prevent infinite loop for xhr-polling and xhr-streaming transport #​28000
  • Reflective method invocation does not detect interface method when interface is declared in a subclass (e.g. HashMap.HashIterator.hasNext) #​27995
  • ReflectionUtils.USER_DECLARED_METHODS does not filter methods declared in java.lang.Object #​27970
  • CronExpression doesn't handle Quartz weekday of month expressions correctly #​27966
  • ServletServerHttpRequest getHeaders() throws IllegalArgumentException instead of ignoring invalid content type / #​27957
  • PropertySourcesPlaceholderConfigurer ignores ignoreUnresolvablePlaceholders flag #​27947
  • Fix regression in BeanPropertyRowMapper regarding underscore name #​27941
  • WebClient corrupts binary data when trying to upload many files #​27939
  • Spring fails to determine XML is XSD-based if DOCTYPE appears in a comment #​27915
  • ResourceHttpRequestHandler with PathPatternParser cannot resolve resources with a jsessionid URL #​27913

📔 Documentation

  • Improve documentation for uri(URI) method in WebTestClient regarding base URI #​28058
  • Polish reference docs (core) #​28004
  • Fix ServletUriComponentsBuilder examples in ref docs #​27984
  • Improve documentation for implementing AspectJ around advice #​27980
  • Fix CaffeineCacheManager configuration in the documentation #​27967
  • Fix Javadoc links to JSR 305 annotations #​27904
  • Document how to register annotated classes with a GenericWebApplicationContext #​27778

🔨 Dependency Upgrades

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v5.3.15

⭐ New Features

  • PrintingResultHandler in MockMvc should infer UTF-8 encoding for JSON response #​27926
  • WebFlux request id should not contain internal IPs #​27885
  • Deprecate inappropriate getBeanFactory() method in AbstractBeanDefinitionReader #​27875
  • Make H2SequenceMaxValueIncrementer compatible with H2 database 2.0.x #​27870
  • Improve error message in ResolvableType.forClassWithGenerics() #​27847
  • Use of RequestPart with String leads to a file descriptor leak #​27773
  • Expose headers from native client request after request is committed #​27768

🐞 Bug Fixes

  • Cannot read server-sent events without data (a.k.a. heartbeats) #​27923
  • ArrayIndexOutOfBoundsException with STOMP and Jetty 10 #​27899
  • ServerHttpResponseDecorator does not delegate methods for raw status code #​27889
  • Clear cache when clearing argument resolvers #​27888
  • Duplicated content-type response header on error response #​27887

📔 Documentation

  • Fix syntax in WebFlux Validation example #​27907
  • Add Section on Authorization to STOMP WebSocket documentation #​27906
  • Correct not compiling example code in Data Access docs #​27886

🔨 Dependency Upgrades

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v5.3.14

⭐ New Features

  • Add default methods to CachingConfigurer #​27811
  • Provide a variant of ListableBeanFactory.findAnnotationOnBean(String, Class) that does not initialize factory beans #​27796
  • Convert single null argument to Optional.empty() in SpEL varargs expression #​27795
  • Declare serialVersionUID on DefaultAopProxyFactory #​27784
  • The ReactorClientHttpConnector must apply mapper before tcpConfiguration() #​27749
  • Add getter for RequestMappingInfo builder config #​27723
  • Give warning when using capturing patterns with the AntPathMatcher #​27688
  • Support for customization of 404 response when RouterFunctionWebHandler finds no routes #​25358
  • ModelAndView.status does not work with RedirectView #​25092
  • ThreadPoolExecutorFactoryBean add ability to prestart threads #​1246
  • Support empty attributes in TagWriter #​910

🐞 Bug Fixes

  • AsyncConfigurer implementations are loaded too early #​27808
  • Possible NPE in Spring MVC LogFormatUtils #​27782
  • Extending CachingConfigurerSupport results in at least one log message about not being eligible for full post-processing #​27751
  • WebFlux ServerResponse does not overwrite already present response headers #​27741
  • Passing single null value in varargs SpEL expression results in NullPointerException #​27719
  • UriUtils::extractFileExtension does not properly handle empty file names #​27639
  • References of CountingBeforeAdvice target its previous location #​22246
  • ProxyFactoryBean getObject called before setInterceptorNames, silently creating an invalid proxy [SPR-7582] #​12238

📔 Documentation

  • Remove references to AsyncConfigurerSupport as AsyncConfigurer should be used instead #​27812
  • Fix javadoc reference to ThrowsAdvice #​27804
  • Suggested WebSocket config causes circular bean reference #​27746
  • Document the difference in generics resolution between @Autowired and beanFactory.getBeanProvider #​27727
  • Clarify that interface-level cache annotations work for target-class proxies as well #​27726
  • SchedulerFactoryBean no longer sets the job store's DataSource when the job store class has been customized #​27709
  • Fix typo #​27699
  • Fix incorrect example of error handling in WebClient Javadoc #​27645
  • Missing reference documentation for WebSocketScope #​25172
  • Clarify behaviour of AnnotationBeanNameGenerator with acronyms #​2030
  • Fix simple data format in appendix #​1025
  • Update StoredProcedure.java declareParameter method JavaDoc #​1000
  • Document @Bean definitions via default methods #​767
  • Improved DataBinder Javadoc for xxx*yyy pattern matching. #​699

🔨 Dependency Upgrades

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v5.3.13

⭐ New Features

  • Use ByteArrayDecoder in DefaultClientResponse::createException #​27666
  • Improve the efficiency of UrlPathHelper.getSanitizedPath() #​27623
  • Add option to cleanup multipart temp files #​27613
  • Add support for custom expression parsing in CachedExpressionEvaluator #​27604
  • Use LocalDataSourceJobStore only if one is not specified via Quartz properties #​27560
  • Introduce TypeFilterUtils for processing @ComponentScan.Filter #​27553
  • Improve mapping function in ExtendedEntityManagerCreator.createProxy() #​27456

🐞 Bug Fixes

  • Static resources are missing when jar does not have a directory entry #​27624
  • MultipartParser emits DataBufferLimitException about "Part headers exceeded the memory usage limit" unexpectedly #​27612
  • UndertowHeadersAdapter's remove() method violates Map contract #​27592
  • SpEL vararg method invocation fails if string literal contains a comma #​27582

📔 Documentation

  • Fix grammar in webflux-webclient.adoc #​27657
  • Lazy annotation throws exception if non-required bean does not exist #​27649
  • Clarify LogFormatUtils limitLength vs replaceNewlines parameters #​27632
  • PersistenceExceptionTranslationInterceptor attempting to instantiate prototype PersistenceExceptionTranslator beans #​26412

🔨 Dependency Upgrades

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v5.3.12

🐞 Bug Fixes
  • Update warn log message for empty static resource locations #​27575
  • Default content type of response changed in v5.3.11 #​27573
  • Fix assertion failure messages in DefaultDataBuffer.checkIndex() #​27567
📔 Documentation
  • Incorrect Javadoc in [NamedParameter]JdbcOperations.queryForObject methods regarding exceptions #​27559
❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v5.3.11

⭐ New Features

  • Enhance DefaultResponseErrorHandler to allow logging complete error response body #​27552
  • Include correct keyword in CookieAssertions failure messages #​27550
  • Use Arrays.hashCode() in ByteArrayResource.hashCode() #​27544
  • Allow default CacheAwareContextLoaderDelegate configuration via a system property #​27540
  • Invoke bean-derived (Auto)Closeable.close() method directly #​27504
  • Defensive reference to JNDI API for JDK 9+ (optional java.naming module) #​27483
  • DefaultMessageListenerContainer does not log an error/warning when consumer tasks have been rejected #​27451
  • Provide accessor on externallyManaged RootBeanDefinition attributes #​27449
  • Allow to avoid class validation in CglibAopProxy via ProxyFactory #​27439
  • Add support for non-public record declarations #​27437
  • Emit WebClientResponseException for malformed HTTP response #​27262
  • DatabasePopulatorUtils.execute should commit if the current Connection has auto-commit set to false #​27008

🐞 Bug Fixes

  • CronTrigger uses new Date() instead of context's Clock #​27546
  • Performance impact of con.getContentLengthLong() in AbstractFileResolvingResource.isReadable() downloading huge jars to check component length #​27541
  • Performance impact of ResourceUrlEncodingFilter on HttpServletResponse#encodeURL #​27538
  • UriTemplateRequestEntity doesn't override hashCode() and equals() #​27531
  • DataBufferUtils.write loses context #​27517
  • Avoid duplicate JCacheOperationSource bean registration in <cache:annotation-driven /> #​27499
  • Proxy generation with Java 17 fails with "Cannot invoke "Object.getClass()" because "cause" is null" #​27490
  • MediaType.sortBySpecificityAndQuality throws java.lang.IllegalArgumentException: Comparison method violates its general contract #​27488
  • Leading whitespaces are removed while reading SSE response #​27473
  • Non-escaped closing curly brace in RegEx results in initialization error on Android #​27467
  • ConcurrentReferenceHashMap's entrySet violates the Map contract #​27454
  • Avoid early ConversionService determination in StandardBeanExpressionResolver #​27446
  • Spring Framework >= 5.3.8 ASM ClassReader fails to parse class file due to InputStream optimization #​27429
  • StringUtils.collectionToDelimitedString(?) fails with NullPointerException when the collection contains null #​27419
  • Spring HATEOAS results in 406 with Kotlin Coroutine and ResponseEntity in WebFlux #​27292

📔 Documentation

  • Remove remark about missing caching API. #​27501

🔨 Dependency Upgrades

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v5.3.10

⭐ New Features

  • Invalid JavaBean property 'logoutHandlers' being accessed (warning in the logs for Spring Security's ConcurrentSessionFilter) #​27372
  • Convenient configuration of type permissions for XStream 1.4.18 #​27343
  • Add SmallRye Mutiny support to ReactiveAdapterRegistry #​27331
  • Introduce ExceptionCollector testing utility #​27316
  • Support TimeUnit in the @Scheduled annotation #​27309
  • Make it possible to determine if circular references are prohibited or if the cycle just couldn't be broken #​27289
  • Support Charset for character encoding in MockMvc #​27231
  • Support default character encoding for response in MockMvc #​27230
  • Introduce setDefaultCharacterEncoding() in MockHttpServletResponse #​27214
  • Use MessageSource for @ExceptionHandler methods #​27203
  • ResponseStatusException.initCause always throws IllegalStateException #​27196
  • Introduce soft assertions for WebTestClient #​26969
  • Introduce soft assertions for MockMvc #​26917
  • Blockhound flags a blocking call when WebFlux serves a static resource #​26631
  • Optimize memory allocations in StringUtils#cleanPath #​26316
  • InvocableHandlerMethod calls makeAccessible(getBridgedMethod()) on every call [SPR-15230] #​19795

🐞 Bug Fixes

  • Support char, float, and double primitive default values in BeanUtils.instantiateClass() #​27390
  • Fix memory leak on AOP Proxy class definition cache #​27375
  • Fix response body missing 1st byte inside UnknownContentTypeException #​27374
  • CommonsMultipartResolver and DEBUG logging lead to empty fileMap in MultipartHttpServletRequest #​27350
  • Fix UrlPathHelper#shouldRemoveSemicolonContent() #​27303
  • CompositeUriComponentsContributor#hasContributors: method name is not compliant with its intention #​27271
  • Error with formatMapping method in AbstractMethodMessageHandler.java #​27247
  • Apply default ResultHandlers before default ResultMatchers in MockMvc #​27225
  • MockHttpServletResponse.characterEncoding should not be @Nullable #​27219
  • WebSocketMessageBrokerStats.getExecutorStatsInfo() throws exception if Executor is not a ThreadPoolExecutor #​27209
  • HtmlUnitRequestBuilder ignores file uploaded via HtmlFileInput.setData() #​27199

📔 Documentation

  • Fix wording in Javadoc of ClientResponse.mutate() #​27389
  • Fix some typos and mistakes in docs #​27388
  • Fix misplaced comma in AOP doc #​27387
  • Fix Kotlin example for filtering handler functions #​27337
  • Document when prepareTestInstance() is invoked when using the SpringMethodRule #​27305
  • Fix duplicated "the" occurrences in Javadoc and XSD #​27291
  • Fix typo in DefaultPartHttpMessageReader #​27260
  • Fix reference to Optional.isPresent() in ObjectUtils.isEmpty() #​27223
  • Clarify that ClientRequest.from(..) also copies body #​27220
  • @Cacheable caches empty Optionals but documentation states otherwise #​27184
  • Reference docs missing left-hand side navigation #​27177

🔨 Dependency Upgrades

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v5.3.9

⭐ New Features
  • Configure CommonsMultipartResolver to support specific HTTP methods #​27161
  • Allow BeanDefinitionBuilder to set an instance supplier with a ResolvableType #​27160
  • Reason of @ResponseStatus on handler method is not resolved by MessageSource #​27156
  • ResourceHandlerRegistry#getHandlerMapping should initialize handler once in outer loop #​27153
  • Set synthetic flag using BeanDefinitionBuilder #​27141
  • BeanCreationException error message should always include declaring class of constructor (or factory method) #​27139
  • Improve Jetty 10 check in JettyClientHttpResponse #​27136
  • Jetty10RequestUpgradeStrategy use an old jetty 9 class HandshakeRFC6455 #​27121
  • ClassNotFoundException using Jetty 10 and its reactive client #​27112
  • Use StringBuilder.append(char) where possible #​27098
  • Consider "wss" and "https" for secure flag in Forwarded header checks #​27097
  • SynchronossPartHttpMessageReader should only create temp directory when needed #​27092
  • Implement equals, hashCode, & toString in BeanMethod and *Metadata types #​27076
  • Remove logging dependency in BeanUtils #​27070
  • Exclude sealed interfaces from auto-proxying (for JDK 17 compatibility) #​27027
  • Blockhound error when running with transaction with a TransactionOperator #​26955
  • Configure StandardServletMultipartResolver to only support multipart/form-data #​26826
  • Add a way to set executeExistingDelayedTasksAfterShutdown from ThreadPoolTaskScheduler #​26719
  • Apply dynamic changes in ThreadPoolTaskExecutor before setting local value #​26700
🪲 Bug Fixes
  • JettyHttpHandlerAdapter is not aware of Server[Request|Response]Wrapper #​27146
  • {*path} pattern (CaptureTheRestPathElement) includes undocumented leading slash in @PathVariable path #​27132
  • NoSuchMethodError when invoke JettyWebSocketSession.getRemoteAddress in jetty 10 #​27120
  • CronExpression is still broken on spring-context-5.3.8 #​27117
  • SimpleMethodMetadataReadingVisitor.Source.toString() omits separator for method arguments #​27095
  • DefaultPathSegment allows shared empty parameters map to be mutated #​27064
  • AOP auto-proxying with proxyTargetClass=true and introduction advice does not work for JDK proxy targets #​27044
  • ServletRequestDataBinder assumes Standard servlet multipart handling #​26999
  • DataClassRowMapper should not override Kotlin init properties #​26569
📔 Documentation
  • Add Javadoc @since to BeanDefinitionBuilder.setSynthetic() #​27155
  • Fix link to Javadoc API #​27151
  • Added description for HandlerInterceptor #​27122
  • Fix typo in core-beans.adoc #​27113
  • Fix typo in BeanDefinitionDsl.kt #​27105
  • Improve docs for getContentAsByteArray method of ContentCachingRequestWrapper #​27068
  • Fix explanation on default settings for content negotiation in reference doc #​27067
  • Document that any @Valid* annotation triggers validation in the reference manual #​27050
  • Improve RequestPartMethodArgumentResolver Javadoc #​27043
  • Improve RequestResponseBodyMethodProcessor Javadoc #​27042
  • Clarify that baseName in ResourceBundleMessageSource does not support multiple locations #​27038
  • Link alternate documentation formats #​27015
🔨 Dependency Upgrades
❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v5.3.8

⭐ New Features
  • HttpComponentsClientHttpConnector should close underlying resources #​27032
  • Default value of StandaloneMockMvcBuilder.useSuffixPatternMatch differs from the same property in RequestMappingHandlerMapping #​27030
  • Lookup method autowiring ignores method's generic info #​26998
  • Set BEST_MATCHING_PATTERN_ATTRIBUTE on requests with WebMvc.fn #​26963
  • Remove jackson-module-kotlin warning #​26962
  • Switch back to parallel thread after WebSession id is generated #​26958
  • Introduce ResponseEntity.internalServerError() #​26952
  • Polish PORT_PATTERN in UriComponentsBuilder #​26951
  • Deprecate/Remove internal APIs in ScriptUtils implementations #​26947
  • Consider returning static DefaultApplicationStartup step #​26939
  • Exception in Tomcat when SockJS top URL is a WebSocket upgrade #​26933
  • Improve support for port numbers in allowedOriginPattern of CorsConfiguration #​26927
  • Add ApplicationEvent constructor for specifying timestamp #​26871
  • Add awaitExchangeOrNull extension function to reactive webclient #​26778
🪲 Bug Fixes
  • Revisit fix for gh-26905 in UriComponentsBuilder #​27039
  • MultipartHttpMessageWriter in WebClient doesn't use custom Jackson Encoder since 5.3.3 #​27017
  • PartFile name lost when building a MultiPart #​27007
  • No replacement of deprecated CronSequenceGenerator.isValidExpression #​26996
  • NPE if StompEndpointRegistry has allowedOrigins with null #​26987
  • CronExpression is broken on spring-context-5.3.6 #​26964
  • FlightRecorderApplicationStartup is not thread safe #​26941
  • Ignore delimiter enclosed in double quotes in ScriptUtils #​26935
  • Ignore comments when searching for SQL statement delimiter in ScriptUtils #​26911
📔 Documentation
  • spring-framework-main-code attribute has not been expanded in docs #​27041
  • Document that class-level @ResponseStatus is inherited by @ExceptionHandler methods #​27031
  • Improve @Transactional docs regarding method visibility #​27003
  • Fix @Transactional examples regarding method visibility #​27001
  • Fix typo in code example [

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Oct 5, 2021
@mend-for-github-com mend-for-github-com bot changed the title Update dependency org.springframework:spring-web to v5.3.0 Update dependency org.springframework:spring-web to v5.3.12 Dec 1, 2021
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/org.springframework-spring-web-5.x branch from 62ae102 to c91da72 Compare December 1, 2021 01:06
@mend-for-github-com mend-for-github-com bot changed the title Update dependency org.springframework:spring-web to v5.3.12 Update dependency org.springframework:spring-web to v5.3.14 Mar 7, 2022
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/org.springframework-spring-web-5.x branch from c91da72 to c1885b7 Compare March 7, 2022 17:23
@mend-for-github-com mend-for-github-com bot changed the title Update dependency org.springframework:spring-web to v5.3.14 Update dependency org.springframework:spring-web to v5.3.0 Apr 18, 2022
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/org.springframework-spring-web-5.x branch from c1885b7 to 43f7ee3 Compare April 18, 2022 04:31
@mend-for-github-com mend-for-github-com bot changed the title Update dependency org.springframework:spring-web to v5.3.0 Update dependency org.springframework:spring-web to v5.3.14 Apr 18, 2022
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/org.springframework-spring-web-5.x branch from 43f7ee3 to cc260c1 Compare April 18, 2022 17:40
@mend-for-github-com mend-for-github-com bot changed the title Update dependency org.springframework:spring-web to v5.3.14 Update dependency org.springframework:spring-web to v5.3.0 Apr 19, 2022
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/org.springframework-spring-web-5.x branch from cc260c1 to 289e249 Compare April 19, 2022 08:14
@mend-for-github-com mend-for-github-com bot changed the title Update dependency org.springframework:spring-web to v5.3.0 Update dependency org.springframework:spring-web to v5.3.14 Apr 20, 2022
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/org.springframework-spring-web-5.x branch from 289e249 to ded22ae Compare April 20, 2022 00:02
@mend-for-github-com mend-for-github-com bot changed the title Update dependency org.springframework:spring-web to v5.3.14 Update dependency org.springframework:spring-web to v5.3.0 May 4, 2022
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/org.springframework-spring-web-5.x branch from ded22ae to 1527489 Compare May 4, 2022 23:11
@mend-for-github-com mend-for-github-com bot changed the title Update dependency org.springframework:spring-web to v5.3.0 Update dependency org.springframework:spring-web to v5.3.5 May 8, 2022
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/org.springframework-spring-web-5.x branch from 1527489 to c8253cf Compare May 8, 2022 20:06
@mend-for-github-com mend-for-github-com bot changed the title Update dependency org.springframework:spring-web to v5.3.5 Update dependency org.springframework:spring-web to v5.3.0 May 11, 2022
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/org.springframework-spring-web-5.x branch from c8253cf to 08e600a Compare May 11, 2022 05:42
@mend-for-github-com mend-for-github-com bot changed the title Update dependency org.springframework:spring-web to v5.3.0 Update dependency org.springframework:spring-web to v5.3.5 May 11, 2022
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/org.springframework-spring-web-5.x branch from 08e600a to be50f59 Compare May 11, 2022 21:38
@mend-for-github-com mend-for-github-com bot changed the title Update dependency org.springframework:spring-web to v5.3.5 Update dependency org.springframework:spring-web to v5.3.0 May 12, 2022
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/org.springframework-spring-web-5.x branch from be50f59 to f091bd3 Compare May 12, 2022 03:26
@mend-for-github-com mend-for-github-com bot changed the title Update dependency org.springframework:spring-web to v5.3.0 Update dependency org.springframework:spring-web to v5.3.20 May 21, 2022
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/org.springframework-spring-web-5.x branch from f091bd3 to 4b36a7d Compare May 21, 2022 00:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants