fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
com.google.guava:guava	32.0.1-jre -> 32.1.3-jre
org.sonarqube	4.2.1.3168 -> 4.4.1.3373
org.springframework:spring-web	6.0.10 -> 6.1.2
org.springframework:spring-test	6.0.10 -> 6.1.2
net.bytebuddy:byte-buddy	1.14.9 -> 1.14.10
org.apache.groovy:groovy-all (source)	4.0.13 -> 4.0.16
org.projectlombok:lombok (source)	1.18.28 -> 1.18.30
com.fasterxml.jackson.core:jackson-databind (source)	2.15.2 -> 2.16.0
org.slf4j:slf4j-simple (source)	2.0.7 -> 2.0.9
org.slf4j:slf4j-api (source)	2.0.7 -> 2.0.9
com.fasterxml.jackson.datatype:jackson-datatype-jdk8	2.15.2 -> 2.16.0
com.fasterxml.jackson.core:jackson-annotations (source)	2.15.2 -> 2.16.0
com.fasterxml.jackson.core:jackson-core	2.15.2 -> 2.16.0
com.graphql-java:graphql-java	21.0 -> 21.3

---

Release Notes

spring-projects/spring-framework (org.springframework:spring-web)

v6.1.2

Compare Source

⭐ New Features

• Optimize ContentCachingRequestWrapper allocation for known request size #​31834
• Inherit parent context in coRouter DSL #​31831
• Declare isStatic and releaseTarget as default methods on TargetSource #​31820
• Delegation support for JDBC 4.3 ConnectionBuilder and ShardingKeyBuilder #​31795
• Support for a read-only DataSource in LazyConnectionDataSourceProxy #​31785
• Add MySQLIdentityColumnMaxValueIncrementer #​31784
• Introduce overloaded MockPart constructor that accepts the Content-Type #​31757
• Introduce toString(Charset) in FastByteArrayOutputStream #​31737
• Avoid byte array copy in getContentAsString #​31731
• Improve "active" metrics handling in WebClient observations #​31702
• Make ResourceArrayPropertyEditor supports comma delimited location patterns #​31700
• Consistently log exceptions from TestExecutionListeners at WARN level #​31688
• Document need for -parameters flag in exception messages #​31675
• Improve @RegisterReflectionForBinding for enums #​31570
• Support direct shard database operation routing in Spring JDBC #​31506
• Log test aborted/skipped exceptions at INFO level in the TestContext framework #​31479
• Avoid double proxying for @Resource @Lazy fallback autowiring #​31447
• Add support for tuning the code generation for bean property values #​31427
• Avoid race condition in ConcurrentReferenceHashMap #​31008
• Allow functional bean registration to set bean order (equivalent to @Order) #​30849
• Allow AOT generated classes to be excluded from code analyzer tools #​30824
• Error page does not utilize forwarded prefix #​30828
• Fix SimpleJdbcCall named parameter binding for Sybase ASE #​30231
• DefaultWebClient ignores baseUrl when setting URI_TEMPLATE_ATTRIBUTE #​30027
• Avoid eager checkDefaultConnectionProperties call in LazyConnectionDataSourceProxy #​29931
• Allow TransactionAwareDataSourceProxy to eagerly fetch the connection #​29423
• Extract common value generator out of BeanDefinitionPropertyValueCodeGenerator #​28999
• PostgresCallMetaDataProvider should detect current schema as indicated by the JDBC Connection #​28723
• Implement setMaxTextMessageSize and setMaxBinaryMessageSize in JettyWebSocketSession #​28325
• Optimize cache used in AutowiredAnnotationBeanPostProcessor #​28293
• @Async aspect should clear cached executors when different BeanFactory set #​28201
• Component scanning should be able to ignore encrypted classes with invalid class version #​27691
• Property to control URL decoding in ServletCookieValueMethodArgumentResolver #​26989
• Support Predicate- based mappedHandler config in AbstractHandlerExceptionResolver #​26772
• SimpleJdbcCall with namedBinding=true for MS SQL Server #​26072
• Improve default setNull performance on PostgreSQL and MS SQL Server (e.g. for NamedParameterJdbcTemplate batch updates) #​25679

🐞 Bug Fixes

• <replaced-method /> unnecessarily requires explicit arg-type since 6.0 #​31826
• Avoid nested constructor data binding if there are no request parameters #​31821
• Custom Init or Destroy method from an interface cannot be invoked in a native image #​31819
• Avoid potential refresh deadlock with AbstractApplicationContext#registerShutdownHook #​31811
• Classes proxied by CGLIB produces NPE with coroutine async job on Springboot 3.2.0 #​31809
• Fix Comparators.nullsLow and Comporators.nullsHigh behavior #​31808
• MergedAnnotations finds duplicate annotations on method in multi-level interface hierarchy #​31803
• Pickup coroutineContext saved by CoWebFilter in coRouter #​31793
• Support for multiple CoWebFilters that change CoroutineContext #​31792
• TestCompiler should not discover annotation processors on the classpath by default #​31791
• @Cacheable key generator is called after invoking the cached method in case of a miss #​31789
• Encountered NotSerializableException for HttpComponentsHeadersAdapter when serializing HttpClientErrorException #​31787
• Exclude Part from nested constructor binding in WebFlux #​31778
• Fix condition for "Too many elements" in MimeTypeUtils.sortBySpecificity() #​31769
• AnnotatedTypeMetadata's getMergedRepeatableAnnotationAttributes() method ignores classValuesAsString #​31768
• SimpleAsyncTaskScheduler: task with fixed delay stops working after unhandled exception #​31749
• Spring unable to decode aggregated JSON content #​31747
• cannot resolve ServerRequest::pathVariable in nested RequestPredicate again #​31732
• @NotNull on JPA entity not respected in schema generation #​31726
• @Cacheable throws NullPointerException when encountering cached null value for empty Mono #​31722
• RestClient ResponseSpec.body() throws an exception instead of returning null if no response body is available #​31719
• UrlResource getFilename() suddenly returns null for certain paths #​31718
• DisconnectedClientHelper is missing "AbortedException" #​31717
• Constructor binding fails for Duration argument if request parameter is not present #​31709
• TraceId is missing in WebFlux controller handlers #​31706
• Wrong observation status tag when a Not Found in a webflux application #​31703
• Correct conversion from Resource[] with length 1 to Collection #​31699
• @ComponentScan added directly and via a meta-annotation leads to multiple scanning #​31704
• Unable to use kotlin value classes as function arguments to functions mapping web endpoints #​31698
• @DisabledInAotMode does not work in native image #​31705
• GenericTypeResolver does not resolve nested generics - causes issues with Jackson & Spring MVC #​31690
• DefaultManagedTaskScheduler created manually now throws a NPE if the scheduled executor is not configured #​31751
• Include Hibernate's Query.scroll() in SharedEntityManagerCreator's queryTerminatingMethods set #​31682
• TypeDescriptor does not check generics in equals method (for ConversionService caching) #​31672
• DataBinder fails with "No primary or single unique constructor found for interface MultipartFile" #​31669
• SpEL expression on a reloadable type can no longer be resolved #​31668
• Programmatic registration of RequestMappingInfo leads to "IllegalArgumentException: Expected lookup path" #​31662
• Current Observation.Context missing from WebClient request #​31609
• Multipart messages with empty parts are not correctly parsed in WebFlux #​30953
• Always fall back to original method if annotation pointcut used #​30534
• PathEditor cannot handle absolute Windows paths with forward slashes #​29881
• @Resource dependency injection fails with AOT/native #​29614
• Reactor Netty can only get the first cookie value when multiple cookies with the same name exist #​28490
• Slow SpEL performance due to method sorting in ReflectiveMethodResolver #​28377
• Cache-busting does not work when lazy-initialization is enabled #​25488
• Fail to register MBean with bean name containing invalid character #​23608
• Use of DatabaseMetadata#getProcedures (and functions) should take search string escape into account #​22725

📔 Documentation

• Fix link text in WebFlux @HttpExchange section of reference docs #​31796
• Improve documentation for custom exception requirements for RestClient #​31783
• Java-based Container Configuration section contains duplicated Section Summary #​31777
• SpEL Language Reference section contains duplicated Section Summary #​31776
• Incorrect #this and #root variable examples in SpEL documentation #​31770
• Document explicit @ModelAttribute is required for reflection hints inference #​31765
• Fix Javadoc for MockRestServiceServer.bindTo(RestClient.Builder) #​31741
• Document -Dspring.context.exit=onRefresh for Project CRaC testing purpose #​31724
• Link to spring.factories used in the TestContext framework in the reference manual #​31723
• Clarify that DI is a type of IoC #​31679
• Polish GenericTypeResolver Javadoc #​31663
• RestClient documentation improvements #​31659
• Add Javadoc to MvcResult getResponse().getErrorMessage() #​31386
• Review Default Profile section in the reference documentation #​30319
• Documentation needs to be updated with instructions for STOMP Client #​28409
• Document LazyConnectionDataSourceProxy setup for routing datasource to act on transaction definition read-only flag #​21415
• Document LazyConnectionDataSourceProxy for IsolationLevelDataSourceRouter usage with DataSourceTransactionManager #​19688

🔨 Dependency Upgrades

• Upgrade to Kotlin 1.9.21 #​31667
• Upgrade to Micrometer 1.12.1 #​31813
• Upgrade to Reactor 2023.0.1 #​31814

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​HeartPattern, @​HyeongMokJeong, @​Johannes-Rost, @​JuHyun419, @​Nijco, @​cdalexndr, @​dogglezz, @​freesme, @​giuseppemilicia, @​hpoettker, @​izeye, @​kilink, @​lugaramirez, @​mathieu-amblard, @​meedbek, @​perlun, @​quaff, @​reda-alaoui, @​shin-mallang, and @​tylerbertrand

v6.1.1

Compare Source

⭐ New Features

• Skip buffer allocation in StreamUtils.copy(String) #​31621
• Caching and Event Listening support do not reuse internal delegates for their evaluation contexts #​31617
• Java 17: resource.isReadable() with concurrency leaks large amounts of non-heap memory #​30955

🐞 Bug Fixes

• Spring MVC: Unexpected bytes added to the HTTP response for kotlin.Unit return type in controller methods #​31648
• Spring Data Redis Cache implementation is not compatible with Cache.retrieve(key) semantics #​31637
• GeneratedFiles#addSourceFile should not allow to add a source in the default package #​31628
• <jee:local-slsb> no longer works with a business-interface attribute #​31627
• Non-blocking @Cacheable method does not support condition with #result #​31626
• PathResourceResolver.getResource() does not log warning if Resource#getURL() throws exception #​31623
• Jackson encoder releases resources in wrong order #​30493
• WebSocketMessageBrokerStats has null stats for stompSubProtocolHandler since 5.3.2 #​26536

📔 Documentation

• Fix links related to Spring WebFlux #​31632
• Extract recurring asciidoc links to attributes #​31619
• Improve STOMP WebSocket documentation for input message buffer size #​31616
• Document support for AppCDS #​31497

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​7fantasy7, @​Star-ho, and @​quaff

v6.1.0

Compare Source

⭐ New Features

• When using Oracle, JdbcClient.update(KeyHolder) does not work without explicit key column names #​31607
• Introduce way to convert ClientHttpResponse to desired type #​31597
• Property-driven onRefresh exit for AppCDS purpose #​31595
• No Micrometer traceId in JMS listener container errorHandler #​31559
• Register Hibernate @EmbeddableInstantiators registered on JPA embeddables for reflection #​31534
• Improve method validation support for errors on elements within a container #​31530
• Support pattern matching for method names in ControlFlowPointcut #​31435
• Review reachability metadata contributions after GraalVM changes #​31213
• handleEmptyBody of RequestBodyAdvice should apply also when content-type is not set #​30522

🐞 Bug Fixes

• Regression with @EnableJpaAuditing using Spring Boot 3.2-RC2 in native image #​31575
• Retrieving the response body as a List of POJOs fails with RestClient but passes with WebTestClient #​31574
• ExecutorLifecycleDelegate should call ExecutorService.isTerminated() in ?.isRunning() #​31549
• RestTemplate POST to endpoint using Digest Auth no longer works in 6.1 #​31516
• Code generation for constructor arguments must cast null indexed argument value #​31508
• \n in form model when using Jetty 12 client and multipart/form-data #​31361
• Add status handler to recognize unknown status codes outside of 4xx/5? #​31202

📔 Documentation

• Document how to log @Sql scripts and statements #​31589
• Link to KDoc API documentation from Javadoc overview #​31587
• Fix link in Javadoc of ConfigurableMockMvcBuilder #​31542
• Add note about @[Enabled|Disabled]InNativeImage in reference manual #​31438
• Document @DisabledInAotMode in the reference manual #​31437
• Document @Sql class-level execution phase support in the reference manual #​31377
• Document that Micrometer's "error" tag should be preferred vs. legacy "exception" tag #​31514

🔨 Dependency Upgrades

• Upgrade to Context Propagation 1.1.0 #​31599
• Upgrade to Kotlin 1.9.20 #​31539
• Upgrade to Micrometer 1.12.0 #​31556
• Upgrade to Reactor 2023.0.0 #​31557

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Young-Zen, @​duesenklipper, @​izeye, @​k-seth, and @​wakingrufus

v6.0.15

Compare Source

⭐ New Features

• Skip buffer allocation in StreamUtils.copy(String) #​31631

🐞 Bug Fixes

• <replaced-method /> unnecessarily requires explicit arg-type since 6.0 #​31828
• MergedAnnotations finds duplicate annotations on method in multi-level interface hierarchy #​31824
• Fix condition for "Too many elements" in MimeTypeUtils.sortBySpecificity() #​31773
• Spring unable to decode aggregated JSON content #​31772
• Multipart messages with empty parts are not correctly parsed in WebFlux #​31766
• PathEditor cannot handle absolute Windows paths with forward slashes #​31727
• TraceId is missing in WebFlux controller handlers #​31716
• Wrong observation status tag when a Not Found in a webflux application #​31715
• Fail to register MBean with bean name containing invalid character #​31708
• Include Hibernate's Query.scroll() in SharedEntityManagerCreator's queryTerminatingMethods set #​31683
• TypeDescriptor does not check generics in equals method (for ConversionService caching) #​31673
• SpEL expression on a reloadable type can no longer be resolved #​31670
• Slow SpEL performance due to method sorting in ReflectiveMethodResolver #​31664
• Jackson encoder releases resources in wrong order #​31656
• Current Observation.Context missing from WebClient request #​31646
• WebSocketMessageBrokerStats has null stats for stompSubProtocolHandler since 5.3.2 #​31641
• <jee:local-slsb> no longer works with a business-interface attribute #​31630
• GeneratedFiles#addSourceFile should not allow to add a source in the default package #​31629
• PathResourceResolver.getResource() does not log warning if Resource#getURL() throws exception #​31624

📔 Documentation

• Document explicit @ModelAttribute is required for reflection hints inference #​31767
• Documentation needs to be updated with instructions for STOMP Client #​31678
• Improve STOMP WebSocket documentation for input message buffer size #​31654

🔨 Dependency Upgrades

• Upgrade to Reactor 2022.0.14 #​31815

v6.0.14

Compare Source

⭐ New Features

• Provide caching for HandlerMappingIntrospector lookups #​31588
• Log4jLog needs to re-resolve ExtendedLogger on deserialization (for compatibility with Log4J 2.21) #​31582
• Optimize StandardTypeLocator for hotspot when the same classes are resolved #​31579
• Add duplicate key exception error code for SAP HANA database #​31554
• Do not delegate TRACE to HttpServlet on ERROR dispatch #​31457
• Add properties setter to ProblemDetail #​31430

🐞 Bug Fixes

• GeneratedFiles#addSource does not provide proper context if the specified class name is invalid #​31612
• MessageBuilder#createMessage should not define the payload as @Nullable #​31610
• Default Mixin added by Jackson2ObjectMapperBuilder are missing required runtime hints #​31606
• NettyDataBuffer#toByteBuffer fails if readPosition > 0 #​31605
• Avoid duplicate JAR resources in PathMatchingResourcePatternResolver on MS Windows #​31598
• NamedParameterUtils broken parsing related to square brackets #​31596
• Multipart cleanup is done too eagerly #​31567
• Jakarta validation field constraints in superclass are ignored in native image #​31552
• Function column out doesn't resolve to SqlOutParameter #​31550
• Restore support for recursive annotations in Kotlin #​31518
• Resolve to empty MultiValueMap when no matrix variables are provided #​31483
• ProxyFactoryBean declaration may lead to unexpected non-fatal "FactoryBean threw exception from getObjectType" stacktrace output #​31473
• Use of @Value in compact constructor of a record should not register method injection #​31433
• Prevent duplicate HTTP server observations for cancelled exchanges #​31417
• Spring MVC raises MissingPathVariableException resulting in 500 instead of 400 error when path segment is u001F or u00D and cannot be converted to target type UUID #​31382
• Ensure consistent value count in ConcurrentReferenceHashMap#Segment #​31373
• HeaderContentNegotiationStrategy.resolveMediaTypes throws unexpected IllegalArgumentException #​31254
• Session Cookie in Reactive WebSession is not deleted if maxAge is set through cookie initializer (e.g. via Boot application property) #​31214
• DefaultWebClient logs URI without the port number #​30519
• CGLIB BeanCopier falls back to ClassLoader.defineClass for public target #​28699
• BeanUtils.copyProperties() consumes large amount of memory #​27246

📔 Documentation

• RestTemplate initialization documentation in 6.0.x mentions Netty, yet no ClientHttpRequestFactory is present in the package. #​31526
• Correct typo in annotations.adoc #​31519
• Document X-Forwarded-* Headers #​31491
• Improve support and documentation for the "default" bean definition profile name #​29071
• Document that pertypewithin is supported by Spring AOP #​25887
• Document alternatives of using multiple PropertyPlaceholderConfigurers [SPR-9989] #​14623

🔨 Dependency Upgrades

• Upgrade to Micrometer 1.10.13 #​31586
• Upgrade to Reactor 2022.0.13 #​31585

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​CrotchBurnt, @​GVictorG7, @​PiotrFLEURY, @​baratrax, @​bernie-schelberg-invicara, @​huyachigege, @​izeye, @​lorenzsimon, @​martin-lukas, and @​rwinch

v6.0.13

Compare Source

⭐ New Features

• Improve diagnostics for negative repeated text count in SpEL #​31342
• Improve diagnostics when repeated text size calculation results in overflow in SpEL #​31341
• UnknownContentTypeException is not Serializable #​31283
• Reintroduce FastClass in CGLIB class names for @Configuration classes #​31272

🐞 Bug Fixes

• HibernateJpaDialect and HibernateExceptionTranslator throw SQLExceptionTranslator-provided exception instead of returning it #​31409
• AnnotationScanner scanning leads to StackOverflowError with recursive annotation #​31400
• NamedParameterJdbcTemplate throws unexpected exception for null query #​31391
• HTTP server exchange observations have incorrect UNKNOWN status tag if the client disconnected #​31388
• Breaking change from 6.0.11 to 6.0.12 if you expect query parameters in @RequestBody #​31327
• SpEL's CompoundExpression.toStringAST() omits ? for null-safe navigation #​31326
• ConcurrentLruCache no longer supports capacity = 0 #​31317
• Using R2dbc transactional and non transactional on a database connection pool will fail for Oracle. #​31268
• AOT-generated code no longer set bean class for beans created from a @Bean method #​31242
• CGLIB proxy classes are no longer cached properly #​31238
• Illegal reflective access in ContextOverridingClassLoader.isEligibleForOverriding #​31232
• Fix RuntimeHintsPredicates matching rules for public/declared elements #​31224
• MultipartParser should respect read position #​31110
• WebClient reports 'Host is not specified' for URI with hostname and port, but without scheme #​31033
• R2DBC Connection is closed during transaction when using TransactionAwareConnectionFactoryProxy #​28133
• SpEL cannot evaluate or compile expression with null-safe void method invocation #​27421
• LazyResolutionMessage does not implement proper toString #​21265

📔 Documentation

• Document Kotlin declaration site variance subtleties #​31370
• Add missing conversionService field in doc example #​31330
• Clarify documentation on Spring Web MVC pattern comparison #​31294
• Improved documentation for MethodParameter#getAnnotatedElement #​30397
• Javadoc for BeanPropertyRowMapper.getColumnValue(ResultSet, int, Class) is inconsistent with code #​29285
• Referencing a @Bean method in a @Configuration class' @PostConstruct method leads to circular reference #​27876
• Incorrect reference information about CGLIB supported method visibility #​25001
• Clarify documentation for @Transactional on interfaces #​23538

🔨 Dependency Upgrades

• Upgrade to Micrometer 1.10.12 #​31404
• Upgrade to Reactor 2022.0.12 #​31405

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​jihuayu and @​wfouche

v6.0.12

Compare Source

⭐ New Features

• ArithmeticException: long overflow on @Scheduled(fixedDelay = Long.MAX_VALUE, timeUnit = TimeUnit.MINUTES) #​31210
• Polish resolveArgument method in RequestResponseBodyMethodProcessor #​31175
• Update logging level in BeanValidationBeanRegistrationAotProcessor for validation exceptions #​31147
• Skip searching of nonexistent directory in PathMatchingResourcePatternResolver #​31111
• Add @Nullable to argValue in doSetValue() in Argument[Type]PreparedStatementSetter #​31086
• Optimize whitespace checks in StringUtils #​31067
• Missing proxy hint when using a simple JPARepository #​31050
• Register an override for an existing adapter in ReactiveAdapterRegistry #​31047
• DefaultListableBeanFactory#getBeanNamesForType does not take target type into account for FactoryBean resolution #​30987
• Give spring-core access to org.jboss.vfs for VfsUtils support on WildFly #​30973
• Use readNBytes in StringHttpMessageConverter when contentLength is available #​30942
• Skip array sort when the length of array not greater than 1 #​30934
• Avoid flushing for each SseEventBuilder entry #​30912
• Make DefaultGenerationContext(DefaultGenerationContext, String) constructor protected #​30895
• Add missing @Nullable annotations in AbstractResourceResolver subclasses in Spring MVC #​30893
• Performance bottlenecks while creating scoped bean instances #​30883
• Make bean initialization deterministic for multiple @Autowired methods on same bean class #​30359
• Optimize ClassUtils#getMostSpecificMethod #​30272
• Missing native hints for Hibernate Native Query proxy #​29603
• Check exception cause for @PropertySource(ignoreResourceNotFound) support #​22276
• Align validation metadata handling in PayloadMethodArgumentResolver #​21852

🐞 Bug Fixes

• Spring Boot fails with "does not reside in the file system: manifoldclass://622488023/.../" #​31216
• WebClientResponseException.getResponseBodyAs throws exception instead of returning null for empty body #​31179
• Possible classloader leak through incomplete clearing of annotation caches #​31170
• Spring LogFactory implementation deviates from original Apache LogFactory in terms of abstract method declarations #​31166
• graalvm native image feature PreComputeFieldFeature disable all netty native transports #​31141
• Bean injection fails due to nullSafeConciseToString() invoking isEmpty() on a Map/Collection proxy #​31138
• R2DBC: Skip release connection after nested with existing transaction #​31133
• SpelExpressionParser throws IllegalStateException instead of ParseException for invalid expression #​31097
• @DynamicPropertySource in @Nested test class cannot override dynamic properties from enclosing class #​31083
• Spring Boot WebFlux validation of invalid inputs [#​31045

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

[sonarqubecloud]

Quality Gate passed

Kudos, no new issues were introduced!

0 New issues
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud