Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 7, 2025

This PR contains the following updates:

Package Change Age Confidence
org.aspectj:aspectjweaver (source) 1.9.241.9.25.1 age confidence
org.springframework:spring-instrument 6.2.126.2.15 age confidence
io.zonky.test:embedded-database-spring-test 2.6.02.7.1 age confidence
io.sentry:sentry-spring-boot-starter-jakarta 8.25.08.31.0 age confidence
org.flywaydb:flyway-database-postgresql (source) 11.15.011.20.3 age confidence
org.flywaydb:flyway-core (source) 11.15.011.20.3 age confidence
io.nats:jnats 2.23.02.25.1 age confidence
org.springdoc:springdoc-openapi-starter-webmvc-ui (source) 2.8.132.8.15 age confidence
org.flywaydb.flyway 11.15.011.20.3 age confidence
org.openapi.generator 7.16.07.19.0 age confidence
org.postgresql:postgresql (source) 42.7.842.7.9 age confidence

Release Notes

spring-projects/spring-framework (org.springframework:spring-instrument)

v6.2.15

⭐ New Features
  • Avoid package cycle caused by use of UriComponentsBuilder in ServletServerHttpRequest #​35954
  • DefaultHandshakeHandler should not log client faults on error level #​35948
  • Use concurrent set behind reactive TransactionSynchronizationManager#registerSynchronization #​35922
  • Expose Collection on FragmentsRendering to facilitate Unit Tests #​35912
  • Different ReactorNettyWebSocketSession call getId() may return the same value #​35911
  • Enhance handleTypeMismatch error message in ResponseEntityExceptionHandler #​35878
🐞 Bug Fixes
  • NullPointerException thrown from JdkClientHttpRequestFactory for null request header value #​35998
  • State inconsistency in LazyConnectionDataSourceProxy when connection settings fail #​35981
  • SubscriberInputStream#resume misuses parked thread reference #​35979
  • PathMatchingResourcePatternResolver fails with URI in JAR manifest Class-Path entries #​35967
  • Strong locking in ConcurrentReferenceHashMap#computeIfAbsent may cause context initialisation deadlock #​35945
  • BridgeMethodResolver change in 6.2.13 breaks Spring Data entity introspection #​35941
  • DefaultMessageListenerContainer does not clear Session and MessageConsumer for paused invokers #​35935
  • Tighten cacheable decision behind @Lazy injection point #​35918
  • Use provided ReactiveAdapterRegistry in BindingContext constructor #​35914
  • Accidental fallback match for Collection-type beans due to @Bean-level qualifier annotation #​35909
  • SortedResourcesFactoryBean does not accept non-existent resources anymore #​35896
📔 Documentation
  • Document that annotations are ignored if attributes reference types not present in the classpath #​35973
  • Fix broken Javadoc links to methods #​35904
  • Refer to "Spring Tools" instead of "Spring Tools for Eclipse" in reference manual #​35902
  • Clarify JMS sessionTransacted flag for local versus global transaction #​35898
  • Reference docs should not use obsolete "junit5" links #​35893
  • Testing chapter references nonexistent Dependency Management documentation #​35891
🔨 Dependency Upgrades

v6.2.14

⭐ New Features
  • Add resetCaches() method to Caffeine/ConcurrentMapCacheManager #​35841
  • Fix single-check idiom in UnmodifiableMultiValueMap #​35831
  • Fix Spliterator characteristics in ConcurrentReferenceHashMap #​35828
🐞 Bug Fixes
  • MissingPathVariableException produces wrong status code in ProblemDetail #​35856
  • Fix getCacheNames() concurrent access in NoOpCacheManager #​35844
  • Annotation discovery regression for interfaces extending BeanNameAware and co. #​35838
  • Fix HtmlUtils unescape for supplementary chars #​35832
📔 Documentation
  • Fix cross-reference links in HtmlUnit sections #​35857
  • Remove @see Javadoc references to deprecated PropertiesBeanDefinitionReader #​35854

v6.2.13

⭐ New Features
  • Support response encoding in select and options JSP form tags #​35783
  • Preserve Connection readOnly state for DataSource with defaultReadOnly configuration #​35743
  • Optimize resource URL resolution in SortedResourcesFactoryBean #​35687
  • Relax multiple segment matching constraints in PathPattern #​35686
  • Support wildcard path elements at the start of path patterns #​35679
  • Validating byte[]s may produce OutOfMemoryError #​35675
  • Update in FragmentsRendering to names of static methods #​33974
🐞 Bug Fixes
  • ConcurrentReferenceHashMap misses dedicated computeIfAbsent, computeIfPresent, compute, merge implementations #​35794
  • Avoid unnecessary bridge method resolution around getMostSpecificMethod #​35780
  • Fix multi-release JAR issue with VirtualThreadDelegate #​35773
  • ContentNegotiationManager not finding media type when request includes quality parameter #​35754
  • Race condition in BufferingClientHttpResponseWrapper.getBody() #​35745
  • Deprecate setConnectTimeout on HttpComponentsClientHttpRequestFactory #​35748
  • Fix PathMatchingResourcePatternResolver to handle absolute paths in JAR manifests #​35732
  • BeanDefinitionBuilder.addAutowiredProperty causes error during AOT processing #​35731
  • Improve HttpServiceMethod support for Kotlin suspending functions returning Flow #​35718
  • Exception translation does not expose original BatchUpdateException anymore #​35717
  • Add hints for entities package-private methods #​35711
  • Fix concurrency permit leak causing deadlock in SimpleAsyncTaskExecutor #​35708
  • Remove jibx-marshaller element from spring-oxm.xsd #​35699
  • NullPointerException When Handling 407 with JdkClientHttpConnector in WebClient #​35692
  • Method-based Map injection fails against target Map with incomplete generics despite bean name or qualifier match #​35690
  • JUnit Jupiter TEST_METHOD ExtensionContextScope is not fully supported #​35680
  • Introduce isAutowirableConstructor(Executable, PropertyProvider) in TestConstructorUtils and deprecate existing variants #​35676
  • Reflection on java.sql.Types without runtime hints #​35674
  • getPubliclyAccessibleMethodIfPossible() returns hidden static method #​35667
  • RestClient hangs during upload with ReactorClientHttpRequestFactory #​34707
📔 Documentation
  • Correct formatting for Mono type #​35786
  • Improve Java Bean Validation documentation for controller methods #​35759
  • Fix typo in @NumberFormat Javadoc #​35742
  • Javadoc of AsyncConfigurer does not match runtime behavior #​35736
  • Document PathPattern behavior difference between */{name} and **/{*path} #​35727
  • Fix minor typo in RestClient documentation #​35723
  • Document test-method scoped TestContext semantics #​35716
  • Improve docs on AbstractStreamingClientHttpRequest for streaming vs buffering mode #​35700
  • Fix minor typo in JDBC Core Classes documentation #​35684
  • Fix typos #​35656
  • Improve spring-web filter documentation #​30454
🔨 Dependency Upgrades
❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Anxton, @​Artur-, @​HJC96, @​MoadElfatihi, @​NYgomets, @​cbsingh1, @​dmitrysulman, @​ekcom, and @​scordio

zonkyio/embedded-database-spring-test (io.zonky.test:embedded-database-spring-test)

v2.7.1

Compare Source

Bugfix Release

This release fixes a critical issue in version 2.7.0 where the library failed at runtime with ClassNotFoundException: io.zonky.test.db.shaded.com.google.common.util.concurrent.internal.InternalFutureFailureAccess.

Fixed:
  • Fixed missing dependency issue that caused ClassNotFoundException (#​310)
Changes from 2.7.0:
  • Added support for Spring Framework 7 (#​298)
  • Added support for database initialization using SQL scripts (#​275)
  • Fixed connection closing issue when using JDBC streams with try-with-resources (#​301)
  • Added support for advanced PostgreSQL configuration via data directory customizer (#​307)
    • Can be used to configure shared_preload_libraries for extensions (#​235)
    • Can be used to set database timezone and other server settings (#​233)

v2.7.0

Compare Source

⚠️ Important Notice

This version contains a critical bug and should not be used. Please upgrade to version 2.7.1.

The library fails at runtime with ClassNotFoundException for InternalFutureFailureAccess due to a missing dependency. This has been fixed in version 2.7.1.

See issue #​310 for details.


Changes:
  • Added support for Spring Framework 7 (#​298)
  • Added support for database initialization using SQL scripts (#​275)
  • Fixed connection closing issue when using JDBC streams with try-with-resources (#​301)
  • Added support for advanced PostgreSQL configuration via data directory customizer (#​307)
    • Can be used to configure shared_preload_libraries for extensions (#​235)
    • Can be used to set database timezone and other server settings (#​233)
getsentry/sentry-java (io.sentry:sentry-spring-boot-starter-jakarta)

v8.31.0

Compare Source

Features
  • Added io.sentry.ndk.sdk-name Android manifest option to configure the native SDK's name (#​5027)
  • Replace sentry.trace.parent_span_id attribute with spanId property on SentryLogEvent (#​5040)
Fixes
  • Only attach user attributes to logs if sendDefaultPii is enabled (#​5036)
  • Reject new logs if LoggerBatchProcessor is shutting down (#​5041)
  • Downgrade protobuf-javalite dependency from 4.33.1 to 3.25.8 (#​5044)
Dependencies

v8.30.0

Compare Source

Fixes
  • Fix ANRs when collecting device context (#​4970)
    • IMPORTANT: This disables collecting external storage size (total/free) by default, to enable it back
      use options.isCollectExternalStorageContext = true or <meta-data android:name="io.sentry.external-storage-context" android:value="true" />
  • Fix NullPointerException when reading ANR marker (#​4979)
  • Report discarded log in batch processor as log_byte (#​4971)
Improvements
  • Expose MAX_EVENT_SIZE_BYTES constant in SentryOptions (#​4962)
  • Discard envelopes on 4xx and 5xx response (#​4950)
    • This aims to not overwhelm Sentry after an outage or load shedding (including HTTP 429) where too many events are sent at once
Feature
  • Add a Tombstone integration that detects native crashes without relying on the NDK integration, but instead using ApplicationExitInfo.REASON_CRASH_NATIVE on Android 12+. (#​4933)
    • Currently exposed via options as an internal API only.
    • If enabled alongside the NDK integration, crashes will be reported as two separate events. Users should enable only one; deduplication between both integrations will be added in a future release.
  • Add Sentry Metrics to Java SDK (#​5026)
    • Metrics are enabled by default
    • APIs are namespaced under Sentry.metrics()
    • We offer the following APIs:
      • count: A metric that increments counts
      • gauge: A metric that tracks a value that can go up or down
      • distribution: A metric that tracks the statistical distribution of values
    • For more details, see the Metrics documentation: https://docs.sentry.io/product/explore/metrics/getting-started/

v8.29.0

Compare Source

Fixes
  • Support serialization of primitive arrays (boolean[], byte[], short[], char[], int[], long[], float[], double[]) (#​4968)
  • Session Replay: Improve network body parsing and truncation handling (#​4958)
Internal
  • Support metric envelope item type (#​4956)

v8.28.0

Compare Source

Features
  • Android: Flush logs when app enters background (#​4951)
  • Add option to capture additional OkHttp network request/response details in session replays (#​4919)
    • Depends on SentryOkHttpInterceptor to intercept the request and extract request/response bodies
    • To enable, add url regexes via the io.sentry.session-replay.network-detail-allow-urls metadata tag in AndroidManifest (code sample)
      • Or you can manually specify SentryReplayOptions via SentryAndroid#init:
        (Make sure you disable the auto init via manifest meta-data: io.sentry.auto-init=false)
Kotlin
SentryAndroid.init(
    this,
    options -> {
      // options.dsn = "https://examplePublicKey@o0.ingest.sentry.io/0"
      // options.sessionReplay.sessionSampleRate = 1.0
      // options.sessionReplay.onErrorSampleRate = 1.0
      // ..

      options.sessionReplay.networkDetailAllowUrls = listOf(".*")
      options.sessionReplay.networkDetailDenyUrls = listOf(".*deny.*")
      options.sessionReplay.networkRequestHeaders = listOf("Authorization", "X-Custom-Header", "X-Test-Request")
      options.sessionReplay.networkResponseHeaders = listOf("X-Response-Time", "X-Cache-Status", "X-Test-Response")
    });
Java
SentryAndroid.init(
    this,
    options -> {
        options.getSessionReplay().setNetworkDetailAllowUrls(Arrays.asList(".*"));
        options.getSessionReplay().setNetworkDetailDenyUrls(Arrays.asList(".*deny.*"));
        options.getSessionReplay().setNetworkRequestHeaders(
            Arrays.asList("Authorization", "X-Custom-Header", "X-Test-Request"));
        options.getSessionReplay().setNetworkResponseHeaders(
            Arrays.asList("X-Response-Time", "X-Cache-Status", "X-Test-Response"));
    });
Improvements
  • Avoid forking rootScopes for Reactor if current thread has NoOpScopes (#​4793)
    • This reduces the SDKs overhead by avoiding unnecessary scope forks
Fixes
  • Fix missing thread stacks for ANRv1 events (#​4918)
  • Fix handling of unparseable mime-type on request filter (#​4939)
Internal
  • Support span envelope item type (#​4935)
Dependencies

v8.27.1

Compare Source

Fixes
  • Do not log if sentry.properties in rundir has not been found (#​4929)

v8.27.0

Compare Source

Features
  • Implement OpenFeature Integration that tracks Feature Flag evaluations (#​4910)
    • To make use of it, add the sentry-openfeature dependency and register the the hook using: openFeatureApiInstance.addHooks(new SentryOpenFeatureHook());
  • Implement LaunchDarkly Integrations that track Feature Flag evaluations (#​4917)
    • For Android, please add sentry-launchdarkly-android as a dependency and register the SentryLaunchDarklyAndroidHook
    • For Server / JVM, please add sentry-launchdarkly-server as a dependency and register the SentryLaunchDarklyServerHook
  • Detect oversized events and reduce their size (#​4903)
    • You can opt into this new behaviour by setting enableEventSizeLimiting to true (sentry.enable-event-size-limiting=true for Spring Boot application.properties)
    • You may optionally register an onOversizedEvent callback to implement custom logic that is executed in case an oversized event is detected
      • This is executed first and if event size was reduced sufficiently, no further truncation is performed
    • In case we detect an oversized event, we first drop breadcrumbs and if that isn't sufficient we also drop stack frames in order to get an events size down
Improvements
  • Do not send manual log origin (#​4897)
Dependencies

v8.26.0

Compare Source

Features
  • Add feature flags API (#​4812) and (#​4831)
    • You may now keep track of your feature flag evaluations and have them show up in Sentry.
    • Top level API (Sentry.addFeatureFlag("my-feature-flag", true);) writes to scopes and the current span (if there is one)
    • It is also possible to use API on IScope, IScopes, ISpan and ITransaction directly
    • Feature flag evaluations tracked on scope(s) will be added to any errors reported to Sentry.
      • The SDK keeps the latest 100 evaluations from scope(s), replacing old entries as new evaluations are added.
    • For feature flag evaluations tracked on spans:
      • Only 10 evaluations are tracked per span, existing flags are updated but new ones exceeding the limit are ignored
      • Spans do not inherit evaluations from their parent
  • Drop log events once buffer hits hard limit (#​4889)
    • If we have 1000 log events queued up, we drop any new logs coming in to prevent OOM
  • Remove vendored code and upgrade to async profiler 4.2 (#​4856)
    • This adds support for JDK 23+
Fixes
  • Removed SentryExecutorService limit for delayed scheduled tasks (#​4846)
  • Fix visual artifacts for the Canvas strategy on some devices (#​4861)
  • [Config] Trim whitespace on properties path (#​4880)
  • Only set DefaultReplayBreadcrumbConverter if replay is available (#​4888)
  • Session Replay: Cache connection status instead of using blocking calls (#​4891)
  • Fix log count in client reports (#​4869)
  • Fix profilerId propagation (#​4833)
  • Fix profiling init for Spring and Spring Boot w Agent auto-init (#​4815)
  • Copy active span on scope clone (#​4878)
Improvements
  • Fallback to distinct-id as user.id logging attribute when user is not set (#​4847)
  • Report Timber.tag() as timber.tag log attribute (#​4845)
  • Session Replay: Add screenshot strategy serialization to RRWeb events (#​4851)
  • Report discarded log bytes (#​4871)
  • Log why a properties file was not loaded (#​4879)
Dependencies
flyway/flyway (org.flywaydb:flyway-database-postgresql)

v11.20.3

v11.20.2

v11.20.1

v11.20.0

v11.19.1

v11.19.0

nats-io/nats.java (io.nats:jnats)

v2.25.1

Compare Source

Core
Object Store
Miscellaneous

v2.25.0

Compare Source

v2.24.1

Compare Source

Build
Core

v2.24.0

Compare Source

Core
JetStream
Docs
Test
Build
springdoc/springdoc-openapi (org.springdoc:springdoc-openapi-starter-webmvc-ui)

v2.8.15

Added
  • #​3122 – Add log notifications when SpringDocs / Scalar are enabled by default
  • #​3123 – Add support for serving static resources
  • #​3151 – Add @Order to ApplicationReadyEvent listener
  • #​3158 – Add support for API groups in Scalar
  • #​3187 – Add Scalar WebMVC and WebFlux support
  • #​3185 – Disable creation of blank GitHub issues (GitHub settings & workflow)
  • #​3186 – Decouple Web Server APIs following Spring Boot modularization
  • #​3131 - Improve warning messages when documentation is explicitly enabled
  • #​3183 - Remove unused operations consumer from route builder methods
  • #​3141 - Change handling so useReturnTypeSchema is evaluated at HTTP status code level instead of method level
Changed
  • Upgrade Spring Boot to version 3.5.9
  • Upgrade swagger-core to version 2.2.41
  • Upgrade swagger-ui to version 5.31.0
  • Upgrade Scalar to version 0.4.3
Fixed
  • #​3133 – Fix regression where content type from Swagger @RequestBody did not take precedence
  • #​3146 – Fix WebJar resource handler mappings for Swagger UI resources
  • #​3168 – Support @Schema annotations on Kotlin value classes
  • #​3178 – Fix regression when generating documentation for Kotlin LinkedHashSet
  • #​3170 – Fix warnings when setting title and description in application.yml
  • #​3187 – Add scalar scalar-webmvc and scalar-webflux support

v2.8.14

Added
  • #​3090 - Add logs to notify when SpringDocs/Scalar is enabled because SpringDocs/Scalar is enabled by default
Changed
  • Upgrade swagger-ui to v5.30.1
  • Upgrade swagger-core to v2.2.38
  • Upgrade spring-boot to v3.5.7
  • Upgrade commons-lang3 to v3.18.0
  • Upgrade scalar to v0.3.12
Fixed
  • #​3107 - Fix:compatible with lower version of getOpenApi().
  • #​3121 - NPE in KotlinDeprecatedPropertyCustomizer - resolvedSchema is null
pgjdbc/pgjdbc (org.postgresql:postgresql)

v42.7.9

Added
  • feat: query timeout property PR #​3705
  • feat: Add PEMKeyManager to handle PEM based certs and keys PR #​3700
Changed
  • perf: optimize PGInterval.getValue() by replacing String.format with StringBuilder
  • doc: update property quoteReturningIdentifiers default value PR #​3847
  • security: Use a static method forName to load all user supplied classes. Use the Class.forName 3 parameter method and do not initilize it unless it is a subclass of the expected class
Fixed
  • fix: incorrect pg_stat_replication.reply_time calculation PR #​3906
  • fix: close temporary lob descriptors that are used internally in PreparedStatement#setBlob
  • fix: PGXAConnection.prepare(Xid) should return XA_RDONLY if the connection is read only PR #​3897
  • fix: make all Calendar instances proleptic Gregorian PR #​3837
  • fix: Simplify concurrency guards on QueryExecutorBase#transaction and QueryExecutorBase#standardConformingStrings PR #​3897
  • fix: avoid memory leaks in Java <= 21 caused by Thread.inheritedAccessControlContext PR #​3886
  • fix: Issue #​3784 pgjdbc can't decode numeric arrays containing special numbers like NaN PR #​3838
  • fix: use ssl_is_used() to check for ssl connection PR #​3867
  • fix: the classloader is nullable PR #​3907

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@codacy-production
Copy link

codacy-production bot commented Nov 7, 2025

Coverage summary from Codacy

See diff coverage on Codacy

Coverage variation Diff coverage
+0.00% (target: -1.00%)
Coverage variation details
Coverable lines Covered lines Coverage
Common ancestor commit (fef0700) 7926 2126 26.82%
Head commit (0aa262c) 7926 (+0) 2126 (+0) 26.82% (+0.00%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details
Coverable lines Covered lines Diff coverage
Pull request (#823) 0 0 ∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

See your quality gate settings    Change summary preferences

@renovate renovate bot force-pushed the renovate/all-minor-patch-application-server branch 5 times, most recently from fa12bab to 857f355 Compare November 14, 2025 23:58
@renovate renovate bot force-pushed the renovate/all-minor-patch-application-server branch 6 times, most recently from 286f6fb to b60cd2d Compare November 25, 2025 15:04
@renovate renovate bot force-pushed the renovate/all-minor-patch-application-server branch from b60cd2d to 53faa4a Compare November 27, 2025 13:38
@renovate renovate bot force-pushed the renovate/all-minor-patch-application-server branch 3 times, most recently from cfd6051 to 88a970f Compare December 11, 2025 13:00
@renovate renovate bot force-pushed the renovate/all-minor-patch-application-server branch 6 times, most recently from 1ff19ff to df9a8ae Compare December 22, 2025 18:43
@renovate renovate bot force-pushed the renovate/all-minor-patch-application-server branch 2 times, most recently from 7352ee1 to f4c7b15 Compare December 30, 2025 12:51
@renovate renovate bot force-pushed the renovate/all-minor-patch-application-server branch 4 times, most recently from a249a31 to f482c44 Compare January 1, 2026 18:06
@renovate renovate bot force-pushed the renovate/all-minor-patch-application-server branch 7 times, most recently from 2750a0e to a9cef99 Compare January 15, 2026 10:36
@renovate renovate bot force-pushed the renovate/all-minor-patch-application-server branch 5 times, most recently from 70d7458 to fcb614c Compare January 21, 2026 14:07
@renovate renovate bot force-pushed the renovate/all-minor-patch-application-server branch 2 times, most recently from c32397d to 449f3cb Compare January 23, 2026 23:04
@renovate renovate bot force-pushed the renovate/all-minor-patch-application-server branch from 449f3cb to 0aa262c Compare January 26, 2026 15:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant