Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 15, 2025

Bumps org.springframework:spring-framework-bom from 6.2.8 to 6.2.10.

Release notes

Sourced from org.springframework:spring-framework-bom's releases.

v6.2.10

⭐ New Features

  • Optimize NIO path resolution in PathEditor #35304
  • Make type in ProblemDetail nullable #35294
  • Refine UriUtils#decode and StringUtils#uriDecode implementation and documentation #35253
  • Provide configurable useCaches option for URLConnection usage in UrlResource (avoiding jar file leak) #35218

🐞 Bug Fixes

  • @Scheduled tasks running in SimpleAsyncTaskScheduler are interrupted immediately on context close #35254
  • ScriptUtils.executeSqlScript() does not support multiple results per statement #35248
  • Successful Autowiring Dependent on Configuration ordering and Primary Bean flag #35239
  • Locale parameter in MessageSource#getMessage methods should be nullable #35230
  • Allow any @Transactional propagation for @TransactionalEventListener with BEFORE_COMMIT phase #35150
  • Catalog name should be handled with the provided case #35064
  • Accept support for generated keys column name array on HSQLDB and Derby as well #34790
  • Handle direct CanncelationException on timeout in JdkClientHttpRequest #34721

📔 Documentation

  • Add documentation of RequestMapping about SpEL #35232
  • Document SqlBinaryValue behaviour with PostgreSQL #34786

🔨 Dependency Upgrades

  • Upgrade to Micrometer 1.14.10 #35313
  • Upgrade to Reactor 2024.0.9 #35312

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Allan-QLB, @​carsago, @​cw-dimedis, and @​giampa91

v6.2.9

⭐ New Features

  • OncePerRequestFilter cannot be CGLib-proxied #35198
  • Consistently catch InaccessibleObjectException next to IllegalAccessException #35190
  • Introduce Date-to-Instant and Instant-to-Date converters #35175
  • Consistent nullability and exception declarations in AbstractMessagingTemplate hierarchy #35159
  • Register runtime hints for Instant-to-Timestamp conversion #35156
  • Improve handling of ResponseEntity<?> in Spring MVC #35153
  • Support @CacheConfig("myCacheName") declarations for simplified configuration #35152
  • Declare messageSelector parameters in JmsOperations as @Nullable #35151
  • Add getter for OverflowStrategy in ConcurrentWebSocketSessionDecorator #35132
  • Use preset Content-Type for streaming and reactive responses in Spring MVC #35130
  • Leniently tolerate null @Aspect bean #35074
  • DataAccessResourceFailureException thrown when transaction times out on PostgreSQL #35073

... (truncated)

Commits
  • 8f64480 Release v6.2.10
  • edda473 Build against Java 24
  • 9fa2d7d Upgrade to Jackson 2.18.4.1
  • c30427f Upgrade to Netty 4.1.124.Final
  • 1d908f1 Upgrade to Reactor 2024.0.9 and Micrometer 1.14.10
  • 37b076b Support multiple result sets in ScriptUtils.executeSqlScript()
  • a9453a5 Polishing
  • 3781ba2 Optimize NIO path resolution in PathEditor
  • f11a1e6 Polish tests
  • ffc7854 Fix checkstyle error
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

This change is Reviewable

Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 6.2.8 to 6.2.10.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.8...v6.2.10)

---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
  dependency-version: 6.2.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 15, 2025
Copy link

coderabbitai bot commented Aug 15, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Support

Need help? Join our Discord community for assistance with any issues or questions.

CodeRabbit Commands (Invoked using PR/Issue comments)

Type @coderabbitai help to get the list of available commands.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Status, Documentation and Community

  • Visit our Status Page to check the current availability of CodeRabbit.
  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants