Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency org.springframework.boot:spring-boot-starter-web to v3.2.5 #266

Conversation

mend-for-github-com[bot]
Copy link
Contributor

This PR contains the following updates:

Package Type Update Change
org.springframework.boot:spring-boot-starter-web (source) dependencies patch 3.2.4 -> 3.2.5

By merging this PR, the issue #261 will be automatically resolved and closed:

Severity CVSS Score CVE
High High 8.1 CVE-2024-22262

Release Notes

spring-projects/spring-boot (org.springframework.boot:spring-boot-starter-web)

v3.2.5

🐞 Bug Fixes

  • BindValidationFailureAnalyzer uses wrong target #​40364
  • Log4j2LoggingSystem pollutes Log4j2's environment with a SpringEnvironmentPropertySource that is never removed #​40326
  • When using Maven, configuring the spring-boot.excludes or spring-boot-includes user properties causes the build to fail with "Cannot find default setter" #​40323
  • @ServletComponentScan does not register servlet components in a mock web environment #​40321
  • Loading of custom deny-all filter can cause a StackOverflowError when deploying to Tomcat with Log4j2 configured to use a single JVM-wide logger context #​40312
  • Jetty support doesn't set virtual thread name #​40152
  • Executable JAR application startup is slower after 3.2.0 when Hibernate scanner is not disabled #​40125
  • NoClassDefFoundError can be thrown from LaunchedClassLoader when threads are interrupted #​40096

📔 Documentation

  • Producible's javadoc has the wrong link text for @WriteOperation and @DeleteOperation #​40386
  • Clarify requirements for -parameters and constructor binding #​40157

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​FelixDes, @​dependabot[bot], @​izeye, @​mstahv, @​ppkarwasz, @​snicoll, and @​spencergibb


  • If you want to rebase/retry this PR, check this box

Sorry, something went wrong.

@mend-for-github-com mend-for-github-com bot requested a review from dblock as a code owner April 22, 2024 13:06
@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Apr 22, 2024
@dblock dblock merged commit 182d673 into main Apr 22, 2024
10 checks passed
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/org.springframework.boot-spring-boot-starter-web-3.x branch April 22, 2024 18:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants