dependabot[bot] opened a new pull request, #2933: URL: https://github.com/apache/shiro/pull/2933
Bumps the maven-dependencies group with 18 updates: | Package | From | To | | --- | --- | --- | | [org.aspectj:aspectjtools](https://github.com/eclipse/org.aspectj) | `1.9.25.1` | `1.9.26` | | [org.aspectj:aspectjrt](https://github.com/eclipse/org.aspectj) | `1.9.25.1` | `1.9.26` | | [org.aspectj:aspectjweaver](https://github.com/eclipse/org.aspectj) | `1.9.25.1` | `1.9.26` | | [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.18.15` | `1.18.16` | | [net.bytebuddy:byte-buddy-agent](https://github.com/raphw/byte-buddy) | `1.18.15` | `1.18.16` | | [org.owasp.encoder:encoder](https://github.com/OWASP/owasp-java-encoder) | `1.5.1` | `1.6.0` | | [org.springframework:spring-context](https://github.com/spring-projects/spring-framework) | `7.0.9` | `7.0.10` | | [org.springframework:spring-web](https://github.com/spring-projects/spring-framework) | `7.0.9` | `7.0.10` | | [org.springframework:spring-jdbc](https://github.com/spring-projects/spring-framework) | `7.0.9` | `7.0.10` | | [org.springframework:spring-orm](https://github.com/spring-projects/spring-framework) | `7.0.9` | `7.0.10` | | [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) | `7.0.9` | `7.0.10` | | [org.springframework:spring-test](https://github.com/spring-projects/spring-framework) | `7.0.9` | `7.0.10` | | [org.omnifaces:omnifaces](https://github.com/omnifaces/omnifaces) | `5.5.5` | `5.5.6` | | [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` | | [org.springframework.boot:spring-boot-autoconfigure](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` | | [org.springframework.boot:spring-boot-configuration-processor](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` | | [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` | | [org.springframework.boot:spring-boot-starter-thymeleaf](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` | Updates `org.aspectj:aspectjtools` from 1.9.25.1 to 1.9.26 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eclipse/org.aspectj/releases";>org.aspectj:aspectjtools's releases</a>.</em></p> <blockquote> <h2>1.9.26</h2> <p>AspectJ 1.9.26 supporting Java 26</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/eclipse/org.aspectj/commits";>compare view</a></li> </ul> </details> <br /> Updates `org.aspectj:aspectjrt` from 1.9.25.1 to 1.9.26 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eclipse/org.aspectj/releases";>org.aspectj:aspectjrt's releases</a>.</em></p> <blockquote> <h2>1.9.26</h2> <p>AspectJ 1.9.26 supporting Java 26</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/eclipse/org.aspectj/commits";>compare view</a></li> </ul> </details> <br /> Updates `org.aspectj:aspectjweaver` from 1.9.25.1 to 1.9.26 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eclipse/org.aspectj/releases";>org.aspectj:aspectjweaver's releases</a>.</em></p> <blockquote> <h2>1.9.26</h2> <p>AspectJ 1.9.26 supporting Java 26</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/eclipse/org.aspectj/commits";>compare view</a></li> </ul> </details> <br /> Updates `net.bytebuddy:byte-buddy` from 1.18.15 to 1.18.16 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/raphw/byte-buddy/releases";>net.bytebuddy:byte-buddy's releases</a>.</em></p> <blockquote> <h2>Byte Buddy 1.18.16</h2> <ul> <li>Correct detection of a dropped implicit <code>this</code> frame in constructors with <code>long</code> or <code>double</code> parameters when using <code>Advice</code>.</li> <li>Detect a dropped uninitialized <code>this</code> frame in constructors after full frames when using <code>Advice</code> with copied arguments.</li> <li>Update ASM to version 9.11.1 and the ASM to Class File API bridge to version 0.0.14.</li> <li>Use a valid tag for the Gradle plugin portal.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md";>net.bytebuddy:byte-buddy's changelog</a>.</em></p> <blockquote> <h3>23. October 2026: version 1.18.16</h3> <ul> <li>Correct detection of a dropped implicit <code>this</code> frame in constructors with <code>long</code> or <code>double</code> parameters when using <code>Advice</code>.</li> <li>Detect a dropped uninitialized <code>this</code> frame in constructors after full frames when using <code>Advice</code> with copied arguments.</li> <li>Update ASM to version 9.11.1 and the ASM to Class File API bridge to version 0.0.14.</li> <li>Use a valid tag for the Gradle plugin portal.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/raphw/byte-buddy/commit/0229449c940b4e5d7624b4453c711dc187f51527";><code>0229449</code></a> [publish] Releasing Byte Buddy 1.18.16</li> <li><a href="https://github.com/raphw/byte-buddy/commit/29c1a2956a29eaa98121dc3e3c64925c743d8e9d";><code>29c1a29</code></a> [release] Complete failed release from where it failed.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/2f7c4ed41b71c4b6e367363e70320e0fda583e61";><code>2f7c4ed</code></a> Change tag which was rejected.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/6ade5784e54121a3f74f8fb39cde4046d2baa6d3";><code>6ade578</code></a> [release] Release new version</li> <li><a href="https://github.com/raphw/byte-buddy/commit/7d6ad7843ef61e83f549e68ef16e1d825fdf2f03";><code>7d6ad78</code></a> Update checksums</li> <li><a href="https://github.com/raphw/byte-buddy/commit/d7bf69f3b59c5aa58ba440b78831b82918684da5";><code>d7bf69f</code></a> Detect dropped uninitialized 'this' frame in constructors after full frames.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/2901502f795695afe91494e9176c402fb0760760";><code>2901502</code></a> Compare constructor frame divergence in frame entries rather than slots.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/8ade117d85107d243fd169abe677c5146ec17168";><code>8ade117</code></a> Update ASM and bridge.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/4e259420075d9df93d5849ac44da82222d71777a";><code>4e25942</code></a> [publish] Start next development iteration 1.18.16-SNAPSHOT</li> <li>See full diff in <a href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.15...byte-buddy-1.18.16";>compare view</a></li> </ul> </details> <br /> Updates `net.bytebuddy:byte-buddy-agent` from 1.18.15 to 1.18.16 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/raphw/byte-buddy/releases";>net.bytebuddy:byte-buddy-agent's releases</a>.</em></p> <blockquote> <h2>Byte Buddy 1.18.16</h2> <ul> <li>Correct detection of a dropped implicit <code>this</code> frame in constructors with <code>long</code> or <code>double</code> parameters when using <code>Advice</code>.</li> <li>Detect a dropped uninitialized <code>this</code> frame in constructors after full frames when using <code>Advice</code> with copied arguments.</li> <li>Update ASM to version 9.11.1 and the ASM to Class File API bridge to version 0.0.14.</li> <li>Use a valid tag for the Gradle plugin portal.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md";>net.bytebuddy:byte-buddy-agent's changelog</a>.</em></p> <blockquote> <h3>23. October 2026: version 1.18.16</h3> <ul> <li>Correct detection of a dropped implicit <code>this</code> frame in constructors with <code>long</code> or <code>double</code> parameters when using <code>Advice</code>.</li> <li>Detect a dropped uninitialized <code>this</code> frame in constructors after full frames when using <code>Advice</code> with copied arguments.</li> <li>Update ASM to version 9.11.1 and the ASM to Class File API bridge to version 0.0.14.</li> <li>Use a valid tag for the Gradle plugin portal.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/raphw/byte-buddy/commit/0229449c940b4e5d7624b4453c711dc187f51527";><code>0229449</code></a> [publish] Releasing Byte Buddy 1.18.16</li> <li><a href="https://github.com/raphw/byte-buddy/commit/29c1a2956a29eaa98121dc3e3c64925c743d8e9d";><code>29c1a29</code></a> [release] Complete failed release from where it failed.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/2f7c4ed41b71c4b6e367363e70320e0fda583e61";><code>2f7c4ed</code></a> Change tag which was rejected.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/6ade5784e54121a3f74f8fb39cde4046d2baa6d3";><code>6ade578</code></a> [release] Release new version</li> <li><a href="https://github.com/raphw/byte-buddy/commit/7d6ad7843ef61e83f549e68ef16e1d825fdf2f03";><code>7d6ad78</code></a> Update checksums</li> <li><a href="https://github.com/raphw/byte-buddy/commit/d7bf69f3b59c5aa58ba440b78831b82918684da5";><code>d7bf69f</code></a> Detect dropped uninitialized 'this' frame in constructors after full frames.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/2901502f795695afe91494e9176c402fb0760760";><code>2901502</code></a> Compare constructor frame divergence in frame entries rather than slots.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/8ade117d85107d243fd169abe677c5146ec17168";><code>8ade117</code></a> Update ASM and bridge.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/4e259420075d9df93d5849ac44da82222d71777a";><code>4e25942</code></a> [publish] Start next development iteration 1.18.16-SNAPSHOT</li> <li>See full diff in <a href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.15...byte-buddy-1.18.16";>compare view</a></li> </ul> </details> <br /> Updates `net.bytebuddy:byte-buddy-agent` from 1.18.15 to 1.18.16 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/raphw/byte-buddy/releases";>net.bytebuddy:byte-buddy-agent's releases</a>.</em></p> <blockquote> <h2>Byte Buddy 1.18.16</h2> <ul> <li>Correct detection of a dropped implicit <code>this</code> frame in constructors with <code>long</code> or <code>double</code> parameters when using <code>Advice</code>.</li> <li>Detect a dropped uninitialized <code>this</code> frame in constructors after full frames when using <code>Advice</code> with copied arguments.</li> <li>Update ASM to version 9.11.1 and the ASM to Class File API bridge to version 0.0.14.</li> <li>Use a valid tag for the Gradle plugin portal.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md";>net.bytebuddy:byte-buddy-agent's changelog</a>.</em></p> <blockquote> <h3>23. October 2026: version 1.18.16</h3> <ul> <li>Correct detection of a dropped implicit <code>this</code> frame in constructors with <code>long</code> or <code>double</code> parameters when using <code>Advice</code>.</li> <li>Detect a dropped uninitialized <code>this</code> frame in constructors after full frames when using <code>Advice</code> with copied arguments.</li> <li>Update ASM to version 9.11.1 and the ASM to Class File API bridge to version 0.0.14.</li> <li>Use a valid tag for the Gradle plugin portal.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/raphw/byte-buddy/commit/0229449c940b4e5d7624b4453c711dc187f51527";><code>0229449</code></a> [publish] Releasing Byte Buddy 1.18.16</li> <li><a href="https://github.com/raphw/byte-buddy/commit/29c1a2956a29eaa98121dc3e3c64925c743d8e9d";><code>29c1a29</code></a> [release] Complete failed release from where it failed.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/2f7c4ed41b71c4b6e367363e70320e0fda583e61";><code>2f7c4ed</code></a> Change tag which was rejected.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/6ade5784e54121a3f74f8fb39cde4046d2baa6d3";><code>6ade578</code></a> [release] Release new version</li> <li><a href="https://github.com/raphw/byte-buddy/commit/7d6ad7843ef61e83f549e68ef16e1d825fdf2f03";><code>7d6ad78</code></a> Update checksums</li> <li><a href="https://github.com/raphw/byte-buddy/commit/d7bf69f3b59c5aa58ba440b78831b82918684da5";><code>d7bf69f</code></a> Detect dropped uninitialized 'this' frame in constructors after full frames.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/2901502f795695afe91494e9176c402fb0760760";><code>2901502</code></a> Compare constructor frame divergence in frame entries rather than slots.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/8ade117d85107d243fd169abe677c5146ec17168";><code>8ade117</code></a> Update ASM and bridge.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/4e259420075d9df93d5849ac44da82222d71777a";><code>4e25942</code></a> [publish] Start next development iteration 1.18.16-SNAPSHOT</li> <li>See full diff in <a href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.15...byte-buddy-1.18.16";>compare view</a></li> </ul> </details> <br /> Updates `org.aspectj:aspectjrt` from 1.9.25.1 to 1.9.26 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eclipse/org.aspectj/releases";>org.aspectj:aspectjrt's releases</a>.</em></p> <blockquote> <h2>1.9.26</h2> <p>AspectJ 1.9.26 supporting Java 26</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/eclipse/org.aspectj/commits";>compare view</a></li> </ul> </details> <br /> Updates `org.aspectj:aspectjweaver` from 1.9.25.1 to 1.9.26 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eclipse/org.aspectj/releases";>org.aspectj:aspectjweaver's releases</a>.</em></p> <blockquote> <h2>1.9.26</h2> <p>AspectJ 1.9.26 supporting Java 26</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/eclipse/org.aspectj/commits";>compare view</a></li> </ul> </details> <br /> Updates `org.owasp.encoder:encoder` from 1.5.1 to 1.6.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/OWASP/owasp-java-encoder/releases";>org.owasp.encoder:encoder's releases</a>.</em></p> <blockquote> <h2>OWASP Java Encoder 1.6.0</h2> <p>OWASP Java Encoder <strong>1.6.0</strong> reduces unnecessary JavaScript letter escaping while retaining recognized HTML-token protection across trusted fragments. It resolves <a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/243";>#243</a> through <a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/247";>#247</a>. This is a minor release because emitted bytes and streaming behavior change.</p> <h3>Changes and migration</h3> <ul> <li><code>forJavaScript</code> and <code>forJavaScriptBlock</code> keep interior script-name letters readable. A final C, I, P, R, S, or T in either case still receives an escape. Punctuation and whitespace escapes remain.</li> <li><code>http://google.com</code> now produces <code>http:\/\/google.com</code>; <code>script</code> becomes <code>scrip\x74</code>; <code>i</code> remains <code>\x69</code>. The rule is conservative: <code>cat</code> becomes <code>ca\x74</code>.</li> <li>HTML does not remove whitespace inside tag names. Escaping <code><</code> in a complete value addresses the HTML tag delimiter concern, but a fragment may have its <code><</code> supplied by trusted text. The terminal escape preserves that supported protection.</li> <li>General/block <code>EncodedWriter</code> callers must flush before writing directly to the wrapped writer. Explicit flushes safely emit pending letters/surrogates and can add escapes while preserving the JavaScript UTF-16 value. Low-level callers must retain unread input after UNDERFLOW and supply more input or mark end-of-input.</li> <li>Review snapshots, signatures and cache keys that depend on encoded bytes. Source and attribute-only methods are unchanged.</li> </ul> <p>Public APIs, Java 8 support, runtime dependencies and module/bundle identities are unchanged. No new encoder security fix is introduced. The 1.5.0 protections remain; users of older versions should follow the <a href="https://github.com/OWASP/owasp-java-encoder/security/advisories/GHSA-g8p6-7r8f-qrpv";>security advisory</a>. See the <a href="https://github.com/OWASP/owasp-java-encoder/blob/v1.6.0/docs/compatibility-decisions.md#javascript-output-refinement-in-160-243";>migration record</a>.</p> <h3>Maven Central</h3> <p>Version <strong>1.6.0</strong> is published under <code>org.owasp.encoder</code>:</p> <ul> <li><a href="https://repo.maven.apache.org/maven2/org/owasp/encoder/encoder/1.6.0/";>encoder</a></li> <li><a href="https://repo.maven.apache.org/maven2/org/owasp/encoder/encoder-jsp/1.6.0/";>encoder-jsp</a></li> <li><a href="https://repo.maven.apache.org/maven2/org/owasp/encoder/encoder-jakarta-jsp/1.6.0/";>encoder-jakarta-jsp</a></li> <li><a href="https://repo.maven.apache.org/maven2/org/owasp/encoder/encoder-parent/1.6.0/";>encoder-parent</a></li> </ul> <p>Keep core and adapter versions aligned. Do not combine javax and Jakarta adapters. The retired ESAPI adapter and optional test WAR are not included. Javadoc JARs are attached; hosted javadoc.io indexing can lag publication.</p> <h3>Verification</h3> <p>Exact tested source: <code>d9b0fd62497fb9276429a9ea972f4449ab320f2d</code>; signed tag: <code>v1.6.0</code>.</p> <p>All 26 downloaded Central payload/signature files matched the retained originals byte for byte. All 13 payload signatures and both checksum-manifest signatures verify with project fingerprint <strong><code>1C5F632B86809F2F5DB25092BEA0075F94074A9B</code></strong>. Attached bundle SHA-256: <strong><code>8d860714634ae3b53f19bb3ea326f639b74df96c0e82bc956d53f237b5804c16</code></strong>.</p> <p>The clean unsigned and signed builds, Docker/browser/WAR gate, packaged Java 17 consumers and repository checks passed. All thirteen unsigned payloads match two independent clean builds using Temurin 17.0.20.1+1 and Maven 3.10.0. Required CI passed, including Java 8/11/17/21/25 consumers, Java 8 tests and Java/Actions/Python CodeQL. Model-assisted review followed MODELS.md; no Daybreak review was completed before release. The documented maintainer review bypass was authorized; required CI/security checks were not bypassed.</p> <p><strong>Correction — 2026-10-18:</strong> The original review record described Daybreak access as unavailable, but the explicit picker-route probe had not been attempted. A subsequent probe succeeded, as recorded in [PR <a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/251";>#251</a>](<a href="https://redirect.github.com/OWASP/owasp-java-encoder/pull/251";>OWASP/owasp-java-encoder#251</a>). This establishes later access, not a pre-release review. The release tag and signed artifacts retain their original bytes.</p> <p>Verify the attached signatures and signed checksum manifests with <code>KEYS</code>, <code>SHA256SUMS</code>, <code>SHA512SUMS</code> and <a href="https://github.com/OWASP/owasp-java-encoder/blob/v1.6.0/VERIFYING.md";>VERIFYING.md</a>. The immutable source retains preparation-stage notices; this release confirms publication without changing those sources or signatures.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/OWASP/owasp-java-encoder/blob/main/CHANGELOG.md";>org.owasp.encoder:encoder's changelog</a>.</em></p> <blockquote> <h2>1.6.0 — 2026-10-18 UTC</h2> <p>Publication is verified; see the <a href="https://github.com/OWASP/owasp-java-encoder/blob/main/releases/1.6.0.md";>release record</a>.</p> <ul> <li>Reduce unnecessary script-letter escaping in <code>forJavaScript</code> and <code>forJavaScriptBlock</code> (<a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/243";>#243</a>). Interior letters remain readable; the input's last character is escaped if it is C, I, P, R, S, or T (either case). Existing punctuation escapes and protection against recognized HTML tokens across trusted-text boundaries are preserved. Encoded bytes change, while JavaScript string values do not. Streaming encoders may retain one trailing letter; <code>EncodedWriter.flush()</code> safely emits it as a hex escape and any pending high surrogate as a Unicode escape. Explicit flushes can add safe escapes while preserving UTF-16 values. Direct <code>Encoder.encode</code> callers must retain unread input after underflow and supply more input or mark end-of-input, including for a pending ASCII letter.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/OWASP/owasp-java-encoder/commit/d9b0fd62497fb9276429a9ea972f4449ab320f2d";><code>d9b0fd6</code></a> release: prepare Java Encoder 1.6.0</li> <li><a href="https://github.com/OWASP/owasp-java-encoder/commit/300ef20c1bfff8c3d4c68216d68f3fe742b0a559";><code>300ef20</code></a> Merge pull request <a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/247";>#247</a> from OWASP/fix/issue-243-script-letter-escaping</li> <li><a href="https://github.com/OWASP/owasp-java-encoder/commit/da8b7a0d298c952aee9064f67dec75e0ab16a32f";><code>da8b7a0</code></a> Merge remote-tracking branch 'origin/main' into fix/issue-243-script-letter-e...</li> <li><a href="https://github.com/OWASP/owasp-java-encoder/commit/2c5bf4bd75c7eaf53a07745d92f92147208a0807";><code>2c5bf4b</code></a> Clarify issue 243 fragment protection and unreleased usage</li> <li><a href="https://github.com/OWASP/owasp-java-encoder/commit/caa8aa43314a789787b5ceb607eafd474a08962d";><code>caa8aa4</code></a> Merge pull request <a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/248";>#248</a> from OWASP/docs/model-review-workflow</li> <li><a href="https://github.com/OWASP/owasp-java-encoder/commit/9ea2823860eb138141a523b993ea37232bb9abae";><code>9ea2823</code></a> Make model review guidance first-party project instructions</li> <li><a href="https://github.com/OWASP/owasp-java-encoder/commit/00d0eb2a45f7567b0ecbd8acdbe143a992650062";><code>00d0eb2</code></a> Document model-assisted Java Encoder review workflow</li> <li><a href="https://github.com/OWASP/owasp-java-encoder/commit/a596740c6957412f3964f0580a50c6f8e2f27151";><code>a596740</code></a> Reduce interior JavaScript letter escaping while preserving boundary safety</li> <li><a href="https://github.com/OWASP/owasp-java-encoder/commit/1d0e9f23a984880c5b27cd738d429ca717abbc7b";><code>1d0e9f2</code></a> Merge pull request <a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/246";>#246</a> from OWASP/release/1.5.1-published</li> <li><a href="https://github.com/OWASP/owasp-java-encoder/commit/5ce32da32e00876d4022631eb93a536d2e28ed21";><code>5ce32da</code></a> Record verified 1.5.1 publication and resume 1.5.2 development</li> <li>Additional commits viewable in <a href="https://github.com/OWASP/owasp-java-encoder/compare/v1.5.1...v1.6.0";>compare view</a></li> </ul> </details> <br /> Updates `org.springframework:spring-context` from 7.0.9 to 7.0.10 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-framework/releases";>org.springframework:spring-context's releases</a>.</em></p> <blockquote> <h2>v7.0.10</h2> <h2>:star: New Features</h2> <ul> <li>Align <code>DelegatingMessageSource</code> fallback implementation with <code>AbstractMessageSource</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37383";>#37383</a></li> <li><code>HttpEntity(T, MultiValueMap)</code> stores an <code>HttpHeaders</code> unchecked, causing <code>IncompatibleClassChangeError</code> inside <code>RestTemplate</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37358";>#37358</a></li> <li>Recognize relocated Mockito <code>MockAccess</code> interface in <code>ProxyProcessorSupport</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37342";>#37342</a></li> <li>Runtime compatibility with JPA 4.0 M7 and corresponding Hibernate 8.0 snapshots <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37315";>#37315</a></li> <li>Avoid Kotlin reflection in MethodParameter for non-suspending functions <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37300";>#37300</a></li> <li>Revise underscore naming fallback in SimplePropertyRowMapper <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37297";>#37297</a></li> <li>Avoid useless queue ops in <code>ConcurrentLruCache.clear()</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37292";>#37292</a></li> <li><code>PathMatchingResourcePatternResolver</code> misses jars on <code>java.class.path</code> whose path contains <code>%</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37280";>#37280</a></li> <li>Remove redundant whitespace in exception messages <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37277";>#37277</a></li> <li>OpenInView does no longer work with HibernateTransactionManager <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37273";>#37273</a></li> <li>Lazily handle setClientInfo/setNetworkTimeout in LazyConnectionDataSourceProxy <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37261";>#37261</a></li> <li>Avoid redundant filtering in FilteredMap.size() <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37256";>#37256</a></li> <li>Support NaN and inifinite float values in <code>toString()</code> for synthesized annotations <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37244";>#37244</a></li> <li>Use <code>ArrayList</code> instead of <code>LinkedList</code> in <code>CompositeRetryListener</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37231";>#37231</a></li> <li><code>redirectedUrl()</code> argument in <code>MockMvcResultMatchers</code> should be <code>@Nullable</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37230";>#37230</a></li> <li>Published Gradle module file is missing <code>javadocElements</code> and <code>sourcesElements</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37209";>#37209</a></li> <li>Introduce a builder for <code>SpelParserConfiguration</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37187";>#37187</a></li> <li>Protobuf support classes all implement getMessageBuilder() <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37147";>#37147</a></li> <li>Allow null contextPath in ServerHttpRequest.Builder <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37099";>#37099</a></li> <li>Log broker availability events as String messages <a href="https://redirect.github.com/spring-projects/spring-framework/pull/36856";>#36856</a></li> </ul> <h2>:lady_beetle: Bug Fixes</h2> <ul> <li>Avoid unnecessary dependent-bean registration for autowire-by-type <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37424";>#37424</a></li> <li>Handle zero readTimeout in JdkClientHttpConnector <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37412";>#37412</a></li> <li>Race condition in PartGenerator.CreateFileState can lose the completion signal <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37409";>#37409</a></li> <li>Paused executor with late shutdown leaks its worker thread (and the closed context) after close <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37406";>#37406</a></li> <li>Fix hanging retries for Flux-returning methods with caching <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37403";>#37403</a></li> <li>Avoid serving stale values after failed refill in <code>AbstractIdentityColumnMaxValueIncrementer</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37402";>#37402</a></li> <li>Copy cookies in <code>RenderingResponse.from()</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37378";>#37378</a></li> <li>Avoid phantom keys in <code>LinkedCaseInsensitiveMap.computeIfAbsent</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37351";>#37351</a></li> <li>Fix single-value adaptation for primitive array types in <code>TypeMappedAnnotation</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37349";>#37349</a></li> <li>CssLinkResourceTransformer fails for invalid CSS links <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37336";>#37336</a></li> <li>Fix cached ID reuse after commit failure in MySQLMaxValueIncrementer <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37322";>#37322</a></li> <li>Fix connection leak in MySQLMaxValueIncrementer <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37321";>#37321</a></li> <li><code>@CacheEvict</code> truncates <code>Flux</code> results to the first element <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37309";>#37309</a></li> <li><code>ConcurrentLruCache.clear()</code> can miss entries added while it's running <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37287";>#37287</a></li> <li>Enforce disk usage limit when spilling part to disk <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37285";>#37285</a></li> <li>Prevent double size decrement in <code>ConcurrentLruCache</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37268";>#37268</a></li> <li>LogAccessor.debug(CharSequence) eagerly renders LogMessage since spring-core 7 switched from spring-jcl to commons-logging <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37266";>#37266</a></li> <li>WebFlux loses empty multipart file when the file part is not last. <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37264";>#37264</a></li> <li>Complete empty Uni instances from the Mutiny reactive adapter <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37259";>#37259</a></li> <li>DefaultAsyncServerResponse.writeAsync() discards previously configured AsyncWebRequest timeout <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37257";>#37257</a></li> <li>Provide missing native image hints for proxied hibernate 8 query types <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37251";>#37251</a></li> <li>Provide missing native image hint for StatelessSession proxy created by SharedEntityManagerCreator. <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37249";>#37249</a></li> <li>Provide missing native image reflection hint for hibernate PersistenceUnitInfoDescriptor. <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37247";>#37247</a></li> <li>Sort duplicate key codes in <code>SQLErrorCodes</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37235";>#37235</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-framework/commit/33a85b0bec67adb759aa898e3b80d603786be082";><code>33a85b0</code></a> Release Spring Framework 7.0.10</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/ac5eb2ae4e7fbe4e67f011ca6edca9eda281aba0";><code>ac5eb2a</code></a> Upgrade to Micrometer 1.16.8</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/f2d32220696e75ab1376ccb9264bd5f9aabdcc1e";><code>f2d3222</code></a> Upgrade to Reactor 2025.0.8</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/884b3b2ea1c718b7d79976c0504b184593d5bd20";><code>884b3b2</code></a> Switch to Micrometer INTERNAL SNAPSHOT</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/ed94dc42a89e79407ac3a7669b07e66e093d15a6";><code>ed94dc4</code></a> Build against Reactor SNAPSHOTs</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/005807bcabe176b2d840ce0946a21bd1c3bfd8a0";><code>005807b</code></a> Switch to INTERNAL-SNAPSHOT</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/e2688e866d108668486a8cd9496ae2adcc1c865c";><code>e2688e8</code></a> Move ApplicationContextExpressionBenchmark to support package</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/76323308d1dd550eb971aee2fee434ac5299dafd";><code>7632330</code></a> Avoid web.util.SeeUtils dependency through package-local copy</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/44f93a62adf51c12a316b160eff241fdf3ff737d";><code>44f93a6</code></a> Update release orchestration workflows to 0.0.7</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/53404f55b0daeac72c5243af534fb02dd5a9b975";><code>53404f5</code></a> Reduce ConcurrentMap declarations to plain Map</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-framework/compare/v7.0.9...v7.0.10";>compare view</a></li> </ul> </details> <br /> Updates `org.springframework:spring-web` from 7.0.9 to 7.0.10 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-framework/releases";>org.springframework:spring-web's releases</a>.</em></p> <blockquote> <h2>v7.0.10</h2> <h2>:star: New Features</h2> <ul> <li>Align <code>DelegatingMessageSource</code> fallback implementation with <code>AbstractMessageSource</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37383";>#37383</a></li> <li><code>HttpEntity(T, MultiValueMap)</code> stores an <code>HttpHeaders</code> unchecked, causing <code>IncompatibleClassChangeError</code> inside <code>RestTemplate</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37358";>#37358</a></li> <li>Recognize relocated Mockito <code>MockAccess</code> interface in <code>ProxyProcessorSupport</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37342";>#37342</a></li> <li>Runtime compatibility with JPA 4.0 M7 and corresponding Hibernate 8.0 snapshots <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37315";>#37315</a></li> <li>Avoid Kotlin reflection in MethodParameter for non-suspending functions <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37300";>#37300</a></li> <li>Revise underscore naming fallback in SimplePropertyRowMapper <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37297";>#37297</a></li> <li>Avoid useless queue ops in <code>ConcurrentLruCache.clear()</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37292";>#37292</a></li> <li><code>PathMatchingResourcePatternResolver</code> misses jars on <code>java.class.path</code> whose path contains <code>%</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37280";>#37280</a></li> <li>Remove redundant whitespace in exception messages <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37277";>#37277</a></li> <li>OpenInView does no longer work with HibernateTransactionManager <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37273";>#37273</a></li> <li>Lazily handle setClientInfo/setNetworkTimeout in LazyConnectionDataSourceProxy <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37261";>#37261</a></li> <li>Avoid redundant filtering in FilteredMap.size() <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37256";>#37256</a></li> <li>Support NaN and inifinite float values in <code>toString()</code> for synthesized annotations <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37244";>#37244</a></li> <li>Use <code>ArrayList</code> instead of <code>LinkedList</code> in <code>CompositeRetryListener</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37231";>#37231</a></li> <li><code>redirectedUrl()</code> argument in <code>MockMvcResultMatchers</code> should be <code>@Nullable</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37230";>#37230</a></li> <li>Published Gradle module file is missing <code>javadocElements</code> and <code>sourcesElements</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37209";>#37209</a></li> <li>Introduce a builder for <code>SpelParserConfiguration</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37187";>#37187</a></li> <li>Protobuf support classes all implement getMessageBuilder() <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37147";>#37147</a></li> <li>Allow null contextPath in ServerHttpRequest.Builder <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37099";>#37099</a></li> <li>Log broker availability events as String messages <a href="https://redirect.github.com/spring-projects/spring-framework/pull/36856";>#36856</a></li> </ul> <h2>:lady_beetle: Bug Fixes</h2> <ul> <li>Avoid unnecessary dependent-bean registration for autowire-by-type <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37424";>#37424</a></li> <li>Handle zero readTimeout in JdkClientHttpConnector <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37412";>#37412</a></li> <li>Race condition in PartGenerator.CreateFileState can lose the completion signal <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37409";>#37409</a></li> <li>Paused executor with late shutdown leaks its worker thread (and the closed context) after close <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37406";>#37406</a></li> <li>Fix hanging retries for Flux-returning methods with caching <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37403";>#37403</a></li> <li>Avoid serving stale values after failed refill in <code>AbstractIdentityColumnMaxValueIncrementer</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37402";>#37402</a></li> <li>Copy cookies in <code>RenderingResponse.from()</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37378";>#37378</a></li> <li>Avoid phantom keys in <code>LinkedCaseInsensitiveMap.computeIfAbsent</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37351";>#37351</a></li> <li>Fix single-value adaptation for primitive array types in <code>TypeMappedAnnotation</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37349";>#37349</a></li> <li>CssLinkResourceTransformer fails for invalid CSS links <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37336";>#37336</a></li> <li>Fix cached ID reuse after commit failure in MySQLMaxValueIncrementer <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37322";>#37322</a></li> <li>Fix connection leak in MySQLMaxValueIncrementer <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37321";>#37321</a></li> <li><code>@CacheEvict</code> truncates <code>Flux</code> results to the first element <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37309";>#37309</a></li> <li><code>ConcurrentLruCache.clear()</code> can miss entries added while it's running <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37287";>#37287</a></li> <li>Enforce disk usage limit when spilling part to disk <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37285";>#37285</a></li> <li>Prevent double size decrement in <code>ConcurrentLruCache</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37268";>#37268</a></li> <li>LogAccessor.debug(CharSequence) eagerly renders LogMessage since spring-core 7 switched from spring-jcl to commons-logging <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37266";>#37266</a></li> <li>WebFlux loses empty multipart file when the file part is not last. <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37264";>#37264</a></li> <li>Complete empty Uni instances from the Mutiny reactive adapter <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37259";>#37259</a></li> <li>DefaultAsyncServerResponse.writeAsync() discards previously configured AsyncWebRequest timeout <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37257";>#37257</a></li> <li>Provide missing native image hints for proxied hibernate 8 query types <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37251";>#37251</a></li> <li>Provide missing native image hint for StatelessSession proxy created by SharedEntityManagerCreator. <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37249";>#37249</a></li> <li>Provide missing native image reflection hint for hibernate PersistenceUnitInfoDescriptor. <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37247";>#37247</a></li> <li>Sort duplicate key codes in <code>SQLErrorCodes</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37235";>#37235</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-framework/commit/33a85b0bec67adb759aa898e3b80d603786be082";><code>33a85b0</code></a> Release Spring Framework 7.0.10</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/ac5eb2ae4e7fbe4e67f011ca6edca9eda281aba0";><code>ac5eb2a</code></a> Upgrade to Micrometer 1.16.8</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/f2d32220696e75ab1376ccb9264bd5f9aabdcc1e";><code>f2d3222</code></a> Upgrade to Reactor 2025.0.8</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/884b3b2ea1c718b7d79976c0504b184593d5bd20";><code>884b3b2</code></a> Switch to Micrometer INTERNAL SNAPSHOT</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/ed94dc42a89e79407ac3a7669b07e66e093d15a6";><code>ed94dc4</code></a> Build against Reactor SNAPSHOTs</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/005807bcabe176b2d840ce0946a21bd1c3bfd8a0";><code>005807b</code></a> Switch to INTERNAL-SNAPSHOT</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/e2688e866d108668486a8cd9496ae2adcc1c865c";><code>e2688e8</code></a> Move ApplicationContextExpressionBenchmark to support package</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/76323308d1dd550eb971aee2fee434ac5299dafd";><code>7632330</code></a> Avoid web.util.SeeUtils dependency through package-local copy</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/44f93a62adf51c12a316b160eff241fdf3ff737d";><code>44f93a6</code></a> Update release orchestration workflows to 0.0.7</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/53404f55b0daeac72c5243af534fb02dd5a9b975";><code>53404f5</code></a> Reduce ConcurrentMap declarations to plain Map</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-framework/compare/v7.0.9...v7.0.10";>compare view</a></li> </ul> </details> <br /> Updates `org.springframework:spring-jdbc` from 7.0.9 to 7.0.10 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-framework/releases";>org.springframework:spring-jdbc's releases</a>.</em></p> <blockquote> <h2>v7.0.10</h2> <h2>:star: New Features</h2> <ul> <li>Align <code>DelegatingMessageSource</code> fallback implementation with <code>AbstractMessageSource</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37383";>#37383</a></li> <li><code>HttpEntity(T, MultiValueMap)</code> stores an <code>HttpHeaders</code> unchecked, causing <code>IncompatibleClassChangeError</code> inside <code>RestTemplate</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37358";>#37358</a></li> <li>Recognize relocated Mockito <code>MockAccess</code> interface in <code>ProxyProcessorSupport</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37342";>#37342</a></li> <li>Runtime compatibility with JPA 4.0 M7 and corresponding Hibernate 8.0 snapshots <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37315";>#37315</a></li> <li>Avoid Kotlin reflection in MethodParameter for non-suspending functions <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37300";>#37300</a></li> <li>Revise underscore naming fallback in SimplePropertyRowMapper <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37297";>#37297</a></li> <li>Avoid useless queue ops in <code>ConcurrentLruCache.clear()</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37292";>#37292</a></li> <li><code>PathMatchingResourcePatternResolver</code> misses jars on <code>java.class.path</code> whose path contains <code>%</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37280";>#37280</a></li> <li>Remove redundant whitespace in exception messages <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37277";>#37277</a></li> <li>OpenInView does no longer work with HibernateTransactionManager <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37273";>#37273</a></li> <li>Lazily handle setClientInfo/setNetworkTimeout in LazyConnectionDataSourceProxy <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37261";>#37261</a></li> <li>Avoid redundant filtering in FilteredMap.size() <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37256";>#37256</a></li> <li>Support NaN and inifinite float values in <code>toString()</code> for synthesized annotations <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37244";>#37244</a></li> <li>Use <code>ArrayList</code> instead of <code>LinkedList</code> in <code>CompositeRetryListener</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37231";>#37231</a></li> <li><code>redirectedUrl()</code> argument in <code>MockMvcResultMatchers</code> should be <code>@Nullable</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37230";>#37230</a></li> <li>Published Gradle module file is missing <code>javadocElements</code> and <code>sourcesElements</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37209";>#37209</a></li> <li>Introduce a builder for <code>SpelParserConfiguration</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37187";>#37187</a></li> <li>Protobuf support classes all implement getMessageBuilder() <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37147";>#37147</a></li> <li>Allow null contextPath in ServerHttpRequest.Builder <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37099";>#37099</a></li> <li>Log broker availability events as String messages <a href="https://redirect.github.com/spring-projects/spring-framework/pull/36856";>#36856</a></li> </ul> <h2>:lady_beetle: Bug Fixes</h2> <ul> <li>Avoid unnecessary dependent-bean registration for autowire-by-type <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37424";>#37424</a></li> <li>Handle zero readTimeout in JdkClientHttpConnector <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37412";>#37412</a></li> <li>Race condition in PartGenerator.CreateFileState can lose the completion signal <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37409";>#37409</a></li> <li>Paused executor with late shutdown leaks its worker thread (and the closed context) after close <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37406";>#37406</a></li> <li>Fix hanging retries for Flux-returning methods with caching <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37403";>#37403</a></li> <li>Avoid serving stale values after failed refill in <code>AbstractIdentityColumnMaxValueIncrementer</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37402";>#37402</a></li> <li>Copy cookies in <code>RenderingResponse.from()</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37378";>#37378</a></li> <li>Avoid phantom keys in <code>LinkedCaseInsensitiveMap.computeIfAbsent</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37351";>#37351</a></li> <li>Fix single-value adaptation for primitive array types in <code>TypeMappedAnnotation</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37349";>#37349</a></li> <li>CssLinkResourceTransformer fails for invalid CSS links <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37336";>#37336</a></li> <li>Fix cached ID reuse after commit failure in MySQLMaxValueIncrementer <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37322";>#37322</a></li> <li>Fix connection leak in MySQLMaxValueIncrementer <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37321";>#37321</a></li> <li><code>@CacheEvict</code> truncates <code>Flux</code> results to the first element <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37309";>#37309</a></li> <li><code>ConcurrentLruCache.clear()</code> can miss entries added while it's running <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37287";>#37287</a></li> <li>Enforce disk usage limit when spilling part to disk <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37285";>#37285</a></li> <li>Prevent double size decrement in <code>ConcurrentLruCache</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37268";>#37268</a></li> <li>LogAccessor.debug(CharSequence) eagerly renders LogMessage since spring-core 7 switched from spring-jcl to commons-logging <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37266";>#37266</a></li> <li>WebFlux loses empty multipart file when the file part is not last. <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37264";>#37264</a></li> <li>Complete empty Uni instances from the Mutiny reactive adapter <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37259";>#37259</a></li> <li>DefaultAsyncServerResponse.writeAsync() discards previously configured AsyncWebRequest timeout <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37257";>#37257</a></li> <li>Provide missing native image hints for proxied hibernate 8 query types <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37251";>#37251</a></li> <li>Provide missing native image hint for StatelessSession proxy created by SharedEntityManagerCreator. <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37249";>#37249</a></li> <li>Provide missing native image reflection hint for hibernate PersistenceUnitInfoDescriptor. <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37247";>#37247</a></li> <li>Sort duplicate key codes in <code>SQLErrorCodes</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37235";>#37235</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-framework/commit/33a85b0bec67adb759aa898e3b80d603786be082";><code>33a85b0</code></a> Release Spring Framework 7.0.10</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/ac5eb2ae4e7fbe4e67f011ca6edca9eda281aba0";><code>ac5eb2a</code></a> Upgrade to Micrometer 1.16.8</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/f2d32220696e75ab1376ccb9264bd5f9aabdcc1e";><code>f2d3222</code></a> Upgrade to Reactor 2025.0.8</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/884b3b2ea1c718b7d79976c0504b184593d5bd20";><code>884b3b2</code></a> Switch to Micrometer INTERNAL SNAPSHOT</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/ed94dc42a89e79407ac3a7669b07e66e093d15a6";><code>ed94dc4</code></a> Build against Reactor SNAPSHOTs</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/005807bcabe176b2d840ce0946a21bd1c3bfd8a0";><code>005807b</code></a> Switch to INTERNAL-SNAPSHOT</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/e2688e866d108668486a8cd9496ae2adcc1c865c";><code>e2688e8</code></a> Move ApplicationContextExpressionBenchmark to support package</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/76323308d1dd550eb971aee2fee434ac5299dafd";><code>7632330</code></a> Avoid web.util.SeeUtils dependency through package-local copy</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/44f93a62adf51c12a316b160eff241fdf3ff737d";><code>44f93a6</code></a> Update release orchestration workflows to 0.0.7</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/53404f55b0daeac72c5243af534fb02dd5a9b975";><code>53404f5</code></a> Reduce ConcurrentMap declarations to plain Map</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-framework/compare/v7.0.9...v7.0.10";>compare view</a></li> </ul> </details> <br /> Updates `org.springframework:spring-orm` from 7.0.9 to 7.0.10 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-framework/releases";>org.springframework:spring-orm's releases</a>.</em></p> <blockquote> <h2>v7.0.10</h2> <h2>:star: New Features</h2> <ul> <li>Align <code>DelegatingMessageSource</code> fallback implementation with <code>AbstractMessageSource</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37383";>#37383</a></li> <li><code>HttpEntity(T, MultiValueMap)</code> stores an <code>HttpHeaders</code> unchecked, causing <code>IncompatibleClassChangeError</code> inside <code>RestTemplate</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37358";>#37358</a></li> <li>Recognize relocated Mockito <code>MockAccess</code> interface in <code>ProxyProcessorSupport</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37342";>#37342</a></li> <li>Runtime compatibility with JPA 4.0 M7 and corresponding Hibernate 8.0 snapshots <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37315";>#37315</a></li> <li>Avoid Kotlin reflection in MethodParameter for non-suspending functions <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37300";>#37300</a></li> <li>Revise underscore naming fallback in SimplePropertyRowMapper <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37297";>#37297</a></li> <li>Avoid useless queue ops in <code>ConcurrentLruCache.clear()</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37292";>#37292</a></li> <li><code>PathMatchingResourcePatternResolver</code> misses jars on <code>java.class.path</code> whose path contains <code>%</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37280";>#37280</a></li> <li>Remove redundant whitespace in exception messages <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37277";>#37277</a></li> <li>OpenInView does no longer work with HibernateTransactionManager <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37273";>#37273</a></li> <li>Lazily handle setClientInfo/setNetworkTimeout in LazyConnectionDataSourceProxy <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37261";>#37261</a></li> <li>Avoid redundant filtering in FilteredMap.size() <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37256";>#37256</a></li> <li>Support NaN and inifinite float values in <code>toString()</code> for synthesized annotations <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37244";>#37244</a></li> <li>Use <code>ArrayList</code> instead of <code>LinkedList</code> in <code>CompositeRetryListener</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37231";>#37231</a></li> <li><code>redirectedUrl()</code> argument in <code>MockMvcResultMatchers</code> should be <code>@Nullable</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37230";>#37230</a></li> <li>Published Gradle module file is missing <code>javadocElements</code> and <code>sourcesElements</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37209";>#37209</a></li> <li>Introduce a builder for <code>SpelParserConfiguration</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37187";>#37187</a></li> <li>Protobuf support classes all implement getMessageBuilder() <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37147";>#37147</a></li> <li>Allow null contextPath in ServerHttpRequest.Builder <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37099";>#37099</a></li> <li>Log broker availability events as String messages <a href="https://redirect.github.com/spring-projects/spring-framework/pull/36856";>#36856</a></li> </ul> <h2>:lady_beetle: Bug Fixes</h2> <ul> <li>Avoid unnecessary dependent-bean registration for autowire-by-type <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37424";>#37424</a></li> <li>Handle zero readTimeout in JdkClientHttpConnector <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37412";>#37412</a></li> <li>Race condition in PartGenerator.CreateFileState can lose the completion signal <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37409";>#37409</a></li> <li>Paused executor with late shutdown leaks its worker thread (and the closed context) after close <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37406";>#37406</a></li> <li>Fix hanging retries for Flux-returning methods with caching <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37403";>#37403</a></li> <li>Avoid serving stale values after failed refill in <code>AbstractIdentityColumnMaxValueIncrementer</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37402";>#37402</a></li> <li>Copy cookies in <code>RenderingResponse.from()</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37378";>#37378</a></li> <li>Avoid phantom keys in <code>LinkedCaseInsensitiveMap.computeIfAbsent</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37351";>#37351</a></li> <li>Fix single-value adaptation for primitive array types in <code>TypeMappedAnnotation</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37349";>#37349</a></li> <li>CssLinkResourceTransformer fails for invalid CSS links <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37336";>#37336</a></li> <li>Fix cached ID reuse after commit failure in MySQLMaxValueIncrementer <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37322";>#37322</a></li> <li>Fix connection leak in MySQLMaxValueIncrementer <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37321";>#37321</a></li> <li><code>@CacheEvict</code> truncates <code>Flux</code> results to the first element <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37309";>#37309</a></li> <li><code>ConcurrentLruCache.clear()</code> can miss entries added while it's running <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37287";>#37287</a></li> <li>Enforce disk usage limit when spilling part to disk <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37285";>#37285</a></li> <li>Prevent double size decrement in <code>ConcurrentLruCache</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37268";>#37268</a></li> <li>LogAccessor.debug(CharSequence) eagerly renders LogMessage since spring-core 7 switched from spring-jcl to commons-logging <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37266";>#37266</a></li> <li>WebFlux loses empty multipart file when the file part is not last. <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37264";>#37264</a></li> <li>Complete empty Uni instances from the Mutiny reactive adapter <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37259";>#37259</a></li> <li>DefaultAsyncServerResponse.writeAsync() discards previously configured AsyncWebRequest timeout <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37257";>#37257</a></li> <li>Provide missing native image hints for proxied hibernate 8 query types <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37251";>#37251</a></li> <li>Provide missing native image hint for StatelessSession proxy created by SharedEntityManagerCreator. <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37249";>#37249</a></li> <li>Provide missing native image reflection hint for hibernate PersistenceUnitInfoDescriptor. <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37247";>#37247</a></li> <li>Sort duplicate key codes in <code>SQLErrorCodes</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37235";>#37235</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-framework/commit/33a85b0bec67adb759aa898e3b80d603786be082";><code>33a85b0</code></a> Release Spring Framework 7.0.10</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/ac5eb2ae4e7fbe4e67f011ca6edca9eda281aba0";><code>ac5eb2a</code></a> Upgrade to Micrometer 1.16.8</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/f2d32220696e75ab1376ccb9264bd5f9aabdcc1e";><code>f2d3222</code></a> Upgrade to Reactor 2025.0.8</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/884b3b2ea1c718b7d79976c0504b184593d5bd20";><code>884b3b2</code></a> Switch to Micrometer INTERNAL SNAPSHOT</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/ed94dc42a89e79407ac3a7669b07e66e093d15a6";><code>ed94dc4</code></a> Build against Reactor SNAPSHOTs</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/005807bcabe176b2d840ce0946a21bd1c3bfd8a0";><code>005807b</code></a> Switch to INTERNAL-SNAPSHOT</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/e2688e866d108668486a8cd9496ae2adcc1c865c";><code>e2688e8</code></a> Move ApplicationContextExpressionBenchmark to support package</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/76323308d1dd550eb971aee2fee434ac5299dafd";><code>7632330</code></a> Avoid web.util.SeeUtils dependency through package-local copy</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/44f93a62adf51c12a316b160eff241fdf3ff737d";><code>44f93a6</code></a> Update release orchestration workflows to 0.0.7</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/53404f55b0daeac72c5243af534fb02dd5a9b975";><code>53404f5</code></a> Reduce ConcurrentMap declarations to plain Map</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-framework/compare/v7.0.9...v7.0.10";>compare view</a></li> </ul> </details> <br /> Updates `org.springframework:spring-webmvc` from ... _Description has been truncated_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
