dependabot[bot] opened a new pull request, #3289: URL: https://github.com/apache/servicecomb-java-chassis/pull/3289
Bumps [spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) from 2.7.0 to 2.7.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-boot/releases";>spring-boot-maven-plugin's releases</a>.</em></p> <blockquote> <h2>v2.7.3</h2> <h2>:lady_beetle: Bug Fixes</h2> <ul> <li>Misleading error message when using JarMode Layertools and the source is not an archive <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32097";>#32097</a></li> <li>ClassNotFoundException can be thrown for classes in nested jars when under GC pressure <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32085";>#32085</a></li> <li>Flyway auto-configuration fails with Flyway 9 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32034";>#32034</a></li> <li>BasicJsonParser does not protect against deeply nested maps <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32031";>#32031</a></li> <li>OptionalLiveReloadServer logs the wrong port number when it is configured to use an ephemeral port <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31984";>#31984</a></li> <li>Servlet WebServerStartStopLifecycle doesn't set running to false on stop <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31967";>#31967</a></li> <li>JUL-based logging performed during close of application context is lost <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31963";>#31963</a></li> <li>The hash of spring-boot-jarmode-layertools.jar that's added to a fat jar doesn't match the hash of the equivalent published artifact <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31949";>#31949</a></li> <li>management.endpoint.health.probes.add-additional-paths has no effect when configuration properties have already created the liveness and/or readiness groups <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31926";>#31926</a></li> <li>UnsupportedDataSourcePropertyException is thrown when attempting to set jdbcUrl for C3P0 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31921";>#31921</a></li> <li>Dev Tools restart failures caused by a too short quiet period are hard to diagnose <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31906";>#31906</a></li> <li>HealthContributor beans managed by a CompositeHealthContributor are recreated on each call <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31879";>#31879</a></li> <li>Dependency management for REST Assured is incomplete <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31877";>#31877</a></li> <li>Jar Handler never clears PROTOCOL_HANDLER system property <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31875";>#31875</a></li> <li>BasicJsonParser can fail with a timeout or stackoverflow with malformed map JSON <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31873";>#31873</a></li> <li>BasicJsonParser can fail with a stackoverflow exception <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31871";>#31871</a></li> </ul> <h2>:notebook_with_decorative_cover: Documentation</h2> <ul> <li>Review Git contribution documentation <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32099";>#32099</a></li> <li>Documentation for Maven Plugin classifier has an unresolved external reference <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32043";>#32043</a></li> <li>Update Static Content reference documentation to reflect the DefaultServlet no longer being enabled by default <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32026";>#32026</a></li> <li>Example log output is out-of-date and inconsistent <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31987";>#31987</a></li> <li>Document that Undertow's record-request-start-time server option must be enabled for %D to work in access logging <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31976";>#31976</a></li> <li>Update documentation on using H2C to consider running behind a proxy that's performing TLS termination <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31974";>#31974</a></li> <li>Some properties in the Common Application Properties appendix have no description <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31971";>#31971</a></li> <li>Fix links in documentations <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31951";>#31951</a></li> <li>External configuration documentation uses incorrect placeholder syntax <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31943";>#31943</a></li> <li>server.reactive.session.cookie properties are not listed in the application properties appendix <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31914";>#31914</a></li> <li>Remove documentation and metadata references to ConfigFileApplicationListener <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31901";>#31901</a></li> <li>Metadata for 'spring.beaninfo.ignore' has incorrect SourceType <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31899";>#31899</a></li> <li>Remove reference to nitrite-spring-boot-starter <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31893";>#31893</a></li> <li>Remove reference to Azure Application Insights <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31890";>#31890</a></li> <li>Fix typos in code and documentation <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31865";>#31865</a></li> </ul> <h2>:hammer: Dependency Upgrades</h2> <ul> <li>Upgrade to Byte Buddy 1.12.13 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32013";>#32013</a></li> <li>Upgrade to Couchbase Client 3.3.3 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32014";>#32014</a></li> <li>Upgrade to Dependency Management Plugin 1.0.13.RELEASE <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32056";>#32056</a></li> <li>Upgrade to Dropwizard Metrics 4.2.11 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32015";>#32015</a></li> <li>Upgrade to Embedded Mongo 3.4.8 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32016";>#32016</a></li> <li>Upgrade to GraphQL Java 18.3 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31945";>#31945</a></li> <li>Upgrade to Groovy 3.0.12 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32017";>#32017</a></li> <li>Upgrade to Gson 2.9.1 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32018";>#32018</a></li> <li>Upgrade to Hazelcast 5.1.3 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32019";>#32019</a></li> <li>Upgrade to Hibernate Validator 6.2.4.Final <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32020";>#32020</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-boot/commit/bff9b3924ffb042c67612d8617110edd6f680917";><code>bff9b39</code></a> Release v2.7.3</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/60e1cc510cd2f32013d70c90299df4f903025159";><code>60e1cc5</code></a> Merge branch '2.6.x' into 2.7.x</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/13bd61b6feeefe58cd082fbef4c170fac7e3b12f";><code>13bd61b</code></a> Revert nested jar fixes</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/bd74344025c1302c6700aa6b20f3e3951aeca32f";><code>bd74344</code></a> Revert "Don't close jar files early"</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/674022d4014a668f9ff3f2f7837b716667ff6e30";><code>674022d</code></a> Revert "Don't close nested jars or wrapper when parent is closed"</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/3fcfcc4a3b8b06d38765ee3576b2d307036672ad";><code>3fcfcc4</code></a> Merge branch '2.6.x' into 2.7.x</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/3b01325c6b17e4853bdb4efd7c4ae78418ee9509";><code>3b01325</code></a> Use asList consistently</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/ca63a6e9ad225966cad1820ec77b3db943b7ba68";><code>ca63a6e</code></a> Merge branch '2.6.x' into 2.7.x</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/191593cf15eac5d722266bfdfc071826b04a350d";><code>191593c</code></a> Review Git contribution documentation</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/1c6624db4441bab29b9e9c2e195454361debb109";><code>1c6624d</code></a> Merge branch '2.6.x' into 2.7.x</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-boot/compare/v2.7.0...v2.7.3";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
