Skip to content

chore(deps): update all patch dependencies (alauda-81.1) (patch) #7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
alaudaa-renovate wants to merge 2 commits into
base: alauda-81.1
Choose a base branch
from
Open

chore(deps): update all patch dependencies (alauda-81.1) (patch) #7

alaudaa-renovate wants to merge 2 commits into from

Conversation

@alaudaa-renovate
Copy link

@alaudaa-renovate alaudaa-renovate bot commented Oct 31, 2025

This PR contains the following updates:

Package Change Age Confidence
bc-fips 2.1.1 -> 2.1.2 age confidence
netty-codec (source) 4.1.125.Final -> 4.1.128.Final age confidence
netty-codec-http (source) 4.1.125.Final -> 4.1.128.Final age confidence
netty-codec-http2 (source) 4.1.125.Final -> 4.1.128.Final age confidence
reactor-netty-http 1.2.8 -> 1.2.11 age confidence
spring-boot (source) 3.3.11 -> 3.3.13 age confidence
spring-core 6.2.11 -> 6.2.12 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

reactor/reactor-netty (reactor-netty-http)

v1.2.11

Compare Source

Reactor Netty 1.2.11 is part of 2024.0.11 Release Train.

What's Changed

✨ New features and improvements
🐞 Bug fixes
  • Ensure ResponseTimeoutHandler is added as one of the first handlers in the pipeline by @​violetagg in #​3916
  • Do not try to send the file when Content-Length:0 by @​violetagg in #​3936
  • Ensure the HTTP/2 upgrade stream inherits the proper state from the original HTTP/1.1 connection when successful upgrade from HTTP/1.1 to HTTP/2 by @​violetagg in #​3957
  • Fix HttpClientConfig copying issue in MonoHttpConnect by @​violetagg in #​3964

Full Changelog: reactor/reactor-netty@v1.2.10...v1.2.11

v1.2.10

Compare Source

Reactor Netty 1.2.10 is part of 2024.0.10 Release Train.

What's Changed

✨ New features and improvements
🐞 Bug fixes

Full Changelog: reactor/reactor-netty@v1.2.9...v1.2.10

v1.2.9

Compare Source

Reactor Netty 1.2.9 is part of 2024.0.9 Release Train.

What's Changed

✨ New features and improvements
🐞 Bug fixes

New Contributors

Full Changelog: reactor/reactor-netty@v1.2.8...v1.2.9

spring-projects/spring-boot (spring-boot)

v3.3.13

Compare Source

⚠️ Noteworthy Changes

  • This release upgrades to Tomcat 10.1.42 which has introduced limits for part count and header size in multipart/form-data requests. These limits can be customized using server.tomcat.max-part-count and server.tomcat.max-part-header-size respectively.

🐞 Bug Fixes

  • Executable JAR application class encounters performance issues when classpath URLs reference a host #​46015
  • Loading from spring.factories may fail with a ClassNotFoundException when the TCCL changes between calls #​45984
  • DataSouceBuilder can fail with a NPE when the driver is null #​45976
  • Actuator heapdump endpoint is failing on modern OpenJ9 JVMs #​45973

📔 Documentation

  • Fix Docker security options links in Packaging OCI images sections #​46016
  • Timestamps in Retrieving Audit Events examples do not match the accompanying text #​45995
  • Links to Testcontainers javadoc for many classes not in the core testcontainers module do not work #​45802
  • Gradle Shadow Plugin link in the reference guide is outdated #​45720
  • Document use of git-commit-id-maven-plugin consistently #​45677
  • Improve documentation for configuring Spring Security with '/error' #​45663
  • Clarify the situation with support for Prometheus PushGateway and the deprecated simpleclient #​44392
  • Update javadoc of Configurer classes that apply sensible defaults to describe how they're typically used #​42878

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​chanbinme, @​davidlj95, @​ngocnhan-tran1996, @​nicolasgarea, @​nosan, @​quaff, and @​wonyongg

v3.3.12

Compare Source

🐞 Bug Fixes

  • Micrometer "enable" annotations property does not cover observed aspect #​45601
  • SpringApplication.setEnvironmentPrefix is ignored when reading SPRING_PROFILES_ACTIVE #​45387
  • IllegalStateException when extracting using layers a module with no code of its own #​45385
  • Custom default units declared on a field are ignored when binding properties in a native image #​45343
  • Suggested values for spring.jpa.hibernate.ddl-auto are not aligned with Hibernate #​45336
  • JerseyWebApplicationInitializer always gets loaded, setting a ServletContext initParameter #​45289

📔 Documentation

  • Document that bean methods should be static when annotated with @ConfigurationPropertiesBinding #​45621
  • Document typical spring.application.name use #​45597
  • Document the process info contribution #​45567
  • Document the java info contribution #​45566
  • Document the os info contribution #​45565
  • Improve "profile" reference documentation with additional admonitions #​45522
  • Improve setEnvironmentPrefix(...) reference documentation #​45370
  • Document when a spring.config.import value is relative and when it is fixed #​45349
  • Update link to "Parameter Name Retention" section of Spring Framework's release notes #​45286
  • Document the way that primary Kotlin constructors are used when binding #​44849
  • Document all the available Testcontainers integrations #​44187

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​ahrytsiuk, @​izeye, @​ngocnhan-tran1996, @​nosan, @​quaff, @​thecooldrop, and @​yybmion

spring-projects/spring-framework (spring-core)

v6.2.12

Compare Source

⭐ New Features

  • Add "forEachByte" variant to DataBuffer for efficient traversing #​35623
  • Nested transaction support via savepoints is broken in HSQLDB database [followup] #​35618
  • Improve exception handling in ConfigurationClassBeanDefinitionReader #​35631
  • Add MySQL/MariaDB to TableMetaDataProviderFactory for correct generated-keys support #​35593
  • Optimize state management in StompSubProtocolHandler #​35591
  • ServletServerHttpRequest.getRemoteAddress() may perform DNS lookup #​35589
  • Emit log message when multiple primary beans are detected #​35550
  • Duplicate key error is mapped to TransientDataAccessException by SQLStateSQLExceptionTranslator for BatchUpdateException #​35547
  • Remove redundant object allocation in cglib proxy method calls #​35543
  • Remove deprecation on CandidateComponentsIndex and CandidateComponentsIndexLoader #​35472
  • Processing response with no Content-Length header and no body raises EOFException #​35361

🐞 Bug Fixes

  • DefaultListableBeanFactory::getBeanNamesForType does not always return all bean names #​35634
  • Consider defaultCandidate for scoped proxies #​35627
  • Release data buffer in AbstractCharSequenceDecoder even when String creation fails #​35625
  • PathMatchingResourcePatternResolver is not able to resolve file in SpringBoot Packaged JAR #​35617
  • Prevent NoClassDefFoundError when Jetty Reactive HttpClient is not available #​35608
  • Performance regression with Property Placeholder Resolution #​35594
  • Retain order of produces media types in @ExceptionHandler #​35587
  • Nested transaction support via savepoints is broken in HSQLDB database #​35564
  • SpEL expression parser uses more CPU after upgrade to 6.2.9 #​35556
  • Thread race during FactoryBean instantiations starting with 6.2 due to lenient locks #​35545
  • Update parsed path handling in UrlHandlerFilter #​35538
  • ResourceHttpMessageWriter.write has unexpected error handling for invalid range requests (offset > content length) #​35536
  • AbstractTestNGSpringContextTests is not thread-safe regarding tracked exceptions #​35528
  • UrlHandlerFilter breaks RequestDispatcher.forward() on Tomcat #​35509
  • AbstractMockHttpServletRequestBuilder#buildRequest is not idempotent #​35493
  • Add support for JvmDefault (default in Kotlin 2.2.20+) #​35487
  • InstanceSupplierCodeGenerator fails to detect deprecated type on package private factory method #​35486
  • Fix synchronization in ResponseBodyEmitter #​35466
  • useCaches option in PathMatchingResourcePatternResolver not applied in special case #​35465
  • Deadlock during context initialization due to EntityManager lock #​35398

📔 Documentation

  • Improve guidance in WebFlux on how to join inbound and outbound streams in WebSocketHandler #​35572
  • Fix idref example in reference manual #​35560
  • Fix URI Patterns docs in WebMVC and WebFlux Request Mapping #​35551
  • Allow event listener method declared with multiple event classes to take a single parameter that is assignable from all of those event classes #​35506
  • Improve Task Javadoc about Runnable wrapping #​35394

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Entea, @​IMurzich, @​hosea, @​maziyarbahramian, @​mlichtblau, @​nstdio, @​reckart, and @​reda-alaoui

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@alaudaa-renovate
Copy link
Author

alaudaa-renovate bot commented Oct 31, 2025

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@alaudabot
Copy link

alaudabot commented Dec 8, 2025

🚨 Stale Pull Request Warning

This pull request has been inactive for 34 days.

Automated Actions Schedule:

  • ⚠️ Warning: After 30 days (now)
  • 🔒 Auto-close: After 60 days
  • 🗑️ Branch deletion: After 90 days (if not protected)

To keep this PR active:

  • Add new commits
  • Reply to this comment
  • Request reviews

Protected branches (won't be deleted): main,release-*,alauda-*

This is an automated message. Reply to this comment to reset the inactivity timer.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@kycheng kycheng kycheng approved these changes

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@alaudabot @kycheng