dependabot[bot] opened a new pull request, #2462: URL: https://github.com/apache/cxf/pull/2462
Bumps [org.springframework:spring-web](https://github.com/spring-projects/spring-framework) from 6.2.7 to 6.2.8. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-framework/releases";>org.springframework:spring-web's releases</a>.</em></p> <blockquote> <h2>v6.2.8</h2> <h2>:star: New Features</h2> <ul> <li>Nullability <code>@Contract</code> declaration for <code>CodeFlow.isIntegerForNumericOp()</code> is unnecessary <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34985";>#34985</a></li> <li>Serializer hint registration is broken for some Kotlin classes <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34979";>#34979</a></li> <li>Clients created using JdkClientHttpRequestFactory set content-length for GET, DELETE and HEAD requests <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34971";>#34971</a></li> <li>Support registration of non-public <code>BeanDefinitionReader</code> via <code>@ImportResource</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34928";>#34928</a></li> <li>Make max size for pattern cache in <code>PathPatternMatchableHandlerMapping</code> configurable <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34918";>#34918</a></li> <li>Add optimized DataBufferInputStream overrides <a href="https://redirect.github.com/spring-projects/spring-framework/pull/34799";>#34799</a></li> </ul> <h2>:lady_beetle: Bug Fixes</h2> <ul> <li>Encode non-printable character in Content-Disposition parameter <a href="https://redirect.github.com/spring-projects/spring-framework/issues/35034";>#35034</a></li> <li>Allow update of existing <code>WebSession</code> after max sessions limit is reached <a href="https://redirect.github.com/spring-projects/spring-framework/pull/35013";>#35013</a></li> <li>Fix support for collections in <code>AbstractKotlinSerializationHttpMessageConverter</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34992";>#34992</a></li> <li>PathPattern#combine throws StringIndexOutOfBoundsException <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34986";>#34986</a></li> <li>Fix AOT code generation for autowired inner class constructor <a href="https://redirect.github.com/spring-projects/spring-framework/pull/34974";>#34974</a></li> <li>AbstractFileResolvingResource.exists closes JAR resource input streams with v6.2.7 <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34955";>#34955</a></li> <li>Enhanced configuration class fails to call package-visible superclass constructor on WebSphere <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34950";>#34950</a></li> <li>Fix <code>REPLY_CHANNEL</code> header check in <code>MessageHeaderAccessor</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/34949";>#34949</a></li> <li><code>MockEnvironment</code> does not accept <code>Object</code> property values <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34947";>#34947</a></li> <li><code>PropertySourcesPlaceholderConfigurer</code> no longer uses <code>ConversionService</code> from <code>Environment</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/34936";>#34936</a></li> <li><code>@Contract</code> for <code>StreamUtils.drain()</code> incorrectly declares <code>null</code> results in an exception <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34933";>#34933</a></li> <li>Inconsistent behavior injecting null <code>@Bean</code> factory parameter <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34929";>#34929</a></li> <li>MockHttpServletRequest.addHeader duplicates "Content-Type" header <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34913";>#34913</a></li> <li>BeanUtils.getParameterNames fails for Kotlin data classes <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34760";>#34760</a></li> <li>JAXB message converters ignore Content-Type charset <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34745";>#34745</a></li> <li>Aspect Not Triggered After Restart in Spring Boot 3.4.x (But Works in 3.3.10) <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34735";>#34735</a></li> <li>Add caching headers to unmodified static resources <a href="https://redirect.github.com/spring-projects/spring-framework/pull/34614";>#34614</a></li> </ul> <h2>:notebook_with_decorative_cover: Documentation</h2> <ul> <li>Apply <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34856";>gh-34856</a> to MockClientHttpRequest in testfixture package <a href="https://redirect.github.com/spring-projects/spring-framework/pull/35031";>#35031</a></li> <li>Fix <code>ResourceHttpRequestHandler#setHeaders</code> JavaDoc <a href="https://redirect.github.com/spring-projects/spring-framework/pull/35004";>#35004</a></li> <li>Remove reference to AspectJ Eclipse Javadoc <a href="https://redirect.github.com/spring-projects/spring-framework/issues/35000";>#35000</a></li> <li>Mention CompletableFuture in Spring MVC "Asynchronous Requests" section of reference manual <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34991";>#34991</a></li> <li>Fix exception name in ModelAttribute docs <a href="https://redirect.github.com/spring-projects/spring-framework/pull/34980";>#34980</a></li> <li>Fix syntax in <code>@SqlGroup</code> example <a href="https://redirect.github.com/spring-projects/spring-framework/pull/34972";>#34972</a></li> <li>Update X-Forwarded-Proto doc to say https / http <a href="https://redirect.github.com/spring-projects/spring-framework/pull/34959";>#34959</a></li> <li>Update Guidance on Best Practices To Test Code That Uses RestClient and RestTemplate <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34892";>#34892</a></li> <li>Add a section for WebAsyncTask in mvc-ann-async.adoc <a href="https://redirect.github.com/spring-projects/spring-framework/pull/34885";>#34885</a></li> <li>Clarify what <code>@RestControllerAdvice</code> vs <code>@ControllerAdvice</code> apply to by default <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34866";>#34866</a></li> <li>Improve Javadoc for <code>@ExceptionHandler</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/34554";>#34554</a></li> </ul> <h2>:hammer: Dependency Upgrades</h2> <ul> <li>Upgrade to HttpComponents HttpClient 5.5 <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34941";>#34941</a></li> <li>Upgrade to Micrometer 1.14.8 <a href="https://redirect.github.com/spring-projects/spring-framework/issues/35020";>#35020</a></li> <li>Upgrade to Reactor 2024.0.7 <a href="https://redirect.github.com/spring-projects/spring-framework/issues/35021";>#35021</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-framework/commit/502b31a7f2b9710571bf973249ccb90c413982d0";><code>502b31a</code></a> Release v6.2.8</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/f0e7b42704e6b33958f242d91bd690d6ef7ada9c";><code>f0e7b42</code></a> Encode non-printable character in Content-Disposition parameter</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/e86dc9ad95204e71f93e1338cb7ccf379e3fbd70";><code>e86dc9a</code></a> Apply <a href="https://redirect.github.com/spring-projects/spring-framework/issues/34856";>gh-34856</a> to MockClientHttpRequest in testfixture package</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/05c3f56ec7e0c9c7ad27b87341fd48e5ac310b0e";><code>05c3f56</code></a> Rely on default retention in <code>@Contract</code></li> <li><a href="https://github.com/spring-projects/spring-framework/commit/dee80ab1daba4fc7fe813c2a4798808a8889e2e3";><code>dee80ab</code></a> Upgrade to Reactor 2024.0.7</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/07fd835ea983a910e696bd7d6c0f88c807998126";><code>07fd835</code></a> Upgrade to Micrometer 1.14.8</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/0d6c6eb2d542a6ebebac15f28b6c246707728024";><code>0d6c6eb</code></a> Use Micrometer BOM for Context Propagation dependency</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/4d2cc4ae9720ae70f6a2eacad14fb31cd2edf7dd";><code>4d2cc4a</code></a> Polish contribution</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/c04902fefbe54e89d423addbf8d724870cf09213";><code>c04902f</code></a> Allow update of existing WebSession after max sessions limit is reached</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/3c265e104476d7c2ea18a36ce326febc1f3613f7";><code>3c265e1</code></a> Fix InMemoryWebSessionStoreTests.startsSessionImplicitly() test</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-framework/compare/v6.2.7...v6.2.8";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/cxf/network/alerts). </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
