From 59d457f70572a0d255389405b22cf2381ce86ed6 Mon Sep 17 00:00:00 2001 From: Yanming Zhou Date: Wed, 27 May 2026 09:40:42 +0800 Subject: [PATCH 01/52] Remove unnecessary null check See gh-50504 Signed-off-by: Yanming Zhou --- .../redis/LettuceConnectionConfiguration.java | 16 +++++++--------- 1 file changed, 7 insertions(+), 9 deletions(-) diff --git a/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/data/redis/LettuceConnectionConfiguration.java b/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/data/redis/LettuceConnectionConfiguration.java index da72b63bfcbb..fc14d701bde4 100644 --- a/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/data/redis/LettuceConnectionConfiguration.java +++ b/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/data/redis/LettuceConnectionConfiguration.java @@ -155,15 +155,13 @@ private void applyProperties(LettuceClientConfigurationBuilder builder, SslBundl if (getProperties().getTimeout() != null) { builder.commandTimeout(getProperties().getTimeout()); } - if (getProperties().getLettuce() != null) { - RedisProperties.Lettuce lettuce = getProperties().getLettuce(); - if (lettuce.getShutdownTimeout() != null && !lettuce.getShutdownTimeout().isZero()) { - builder.shutdownTimeout(getProperties().getLettuce().getShutdownTimeout()); - } - String readFrom = lettuce.getReadFrom(); - if (readFrom != null) { - builder.readFrom(getReadFrom(readFrom)); - } + RedisProperties.Lettuce lettuce = getProperties().getLettuce(); + if (lettuce.getShutdownTimeout() != null && !lettuce.getShutdownTimeout().isZero()) { + builder.shutdownTimeout(getProperties().getLettuce().getShutdownTimeout()); + } + String readFrom = lettuce.getReadFrom(); + if (readFrom != null) { + builder.readFrom(getReadFrom(readFrom)); } if (StringUtils.hasText(getProperties().getClientName())) { builder.clientName(getProperties().getClientName()); From f7343398d4cb7621d6ee1dadc321b71d3f6b256e Mon Sep 17 00:00:00 2001 From: Dongliang Xie Date: Tue, 26 May 2026 02:05:16 +0800 Subject: [PATCH 02/52] Handle root output directory when extracting layers Use canonical Path containment checks so layer directories under the filesystem root are accepted while entries and layer names that escape the output directory remain rejected. See gh-50501 Signed-off-by: Dongliang Xie --- .../boot/jarmode/tools/ExtractCommand.java | 18 ++++++---- .../jarmode/tools/ExtractCommandTests.java | 35 +++++++++++++++++++ 2 files changed, 47 insertions(+), 6 deletions(-) diff --git a/spring-boot-project/spring-boot-tools/spring-boot-jarmode-tools/src/main/java/org/springframework/boot/jarmode/tools/ExtractCommand.java b/spring-boot-project/spring-boot-tools/spring-boot-jarmode-tools/src/main/java/org/springframework/boot/jarmode/tools/ExtractCommand.java index 29f68219f5e1..7103fcc3d5a8 100644 --- a/spring-boot-project/spring-boot-tools/spring-boot-jarmode-tools/src/main/java/org/springframework/boot/jarmode/tools/ExtractCommand.java +++ b/spring-boot-project/spring-boot-tools/spring-boot-jarmode-tools/src/main/java/org/springframework/boot/jarmode/tools/ExtractCommand.java @@ -26,6 +26,7 @@ import java.io.PrintStream; import java.io.UncheckedIOException; import java.nio.file.Files; +import java.nio.file.Path; import java.nio.file.attribute.BasicFileAttributeView; import java.nio.file.attribute.BasicFileAttributes; import java.nio.file.attribute.FileTime; @@ -55,6 +56,7 @@ * The {@code 'extract'} tools command. * * @author Moritz Halbritter + * @author Dongliang Xie */ class ExtractCommand extends Command { @@ -363,14 +365,18 @@ private static void withJarEntries(File file, ManfiestWriter manfiestWriter, Thr } private static File assertFileIsContainedInDirectory(File directory, File file, String name) throws IOException { - String canonicalOutputPath = directory.getCanonicalPath() + File.separator; - String canonicalEntryPath = file.getCanonicalPath(); - Assert.state(canonicalEntryPath.startsWith(canonicalOutputPath), + Path canonicalOutputPath = directory.getCanonicalFile().toPath(); + Path canonicalEntryPath = file.getCanonicalFile().toPath(); + Assert.state(isFileContainedInDirectory(canonicalOutputPath, canonicalEntryPath), () -> "Entry '%s' would be written to '%s'. This is outside the output location of '%s'. Verify the contents of your archive." .formatted(name, canonicalEntryPath, canonicalOutputPath)); return file; } + private static boolean isFileContainedInDirectory(Path canonicalOutputPath, Path canonicalFilePath) { + return !canonicalFilePath.equals(canonicalOutputPath) && canonicalFilePath.startsWith(canonicalOutputPath); + } + @FunctionalInterface private interface EntryNameTransformer { @@ -515,9 +521,9 @@ private boolean shouldExtractLayer(String layer) { } private File assertLayerDirectoryLocation(File layerDirectory, String layerName) throws IOException { - String canonicalOutputPath = this.directory.getCanonicalPath() + File.separator; - String canonicalLayerPath = layerDirectory.getCanonicalPath(); - Assert.state(canonicalLayerPath.startsWith(canonicalOutputPath), + Path canonicalOutputPath = this.directory.getCanonicalFile().toPath(); + Path canonicalLayerPath = layerDirectory.getCanonicalFile().toPath(); + Assert.state(isFileContainedInDirectory(canonicalOutputPath, canonicalLayerPath), () -> "Layer '%s' would be written to '%s'. This is outside the output location of '%s'. Verify the contents of your archive." .formatted(layerName, canonicalLayerPath, canonicalOutputPath)); return layerDirectory; diff --git a/spring-boot-project/spring-boot-tools/spring-boot-jarmode-tools/src/test/java/org/springframework/boot/jarmode/tools/ExtractCommandTests.java b/spring-boot-project/spring-boot-tools/spring-boot-jarmode-tools/src/test/java/org/springframework/boot/jarmode/tools/ExtractCommandTests.java index 490ab506059a..a1a6003cd002 100644 --- a/spring-boot-project/spring-boot-tools/spring-boot-jarmode-tools/src/test/java/org/springframework/boot/jarmode/tools/ExtractCommandTests.java +++ b/spring-boot-project/spring-boot-tools/spring-boot-jarmode-tools/src/test/java/org/springframework/boot/jarmode/tools/ExtractCommandTests.java @@ -20,11 +20,13 @@ import java.io.FileWriter; import java.io.IOException; import java.nio.file.Files; +import java.nio.file.Path; import java.nio.file.attribute.BasicFileAttributeView; import java.nio.file.attribute.BasicFileAttributes; import java.time.Instant; import java.time.temporal.ChronoUnit; import java.util.Enumeration; +import java.util.Iterator; import java.util.List; import java.util.Map; import java.util.jar.Manifest; @@ -45,6 +47,7 @@ * Tests for {@link ExtractCommand}. * * @author Moritz Halbritter + * @author Dongliang Xie */ class ExtractCommandTests extends AbstractJarModeTests { @@ -370,6 +373,38 @@ void extractsOnlySelectedLayers() throws IOException { .doesNotContain("test/spring-boot-loader/org/springframework/boot/loader/launch/JarLauncher.class"); } + @Test + void extractWhenDestinationIsFileSystemRoot() throws IOException { + Path layerDirectory = ExtractCommandTests.this.tempDir.toPath() + .resolve("root-output") + .resolve("dependencies") + .toAbsolutePath() + .normalize(); + Path outputRoot = layerDirectory.getRoot(); + String layerName = outputRoot.relativize(layerDirectory).toString().replace(File.separatorChar, '/'); + Layers layers = new Layers() { + + @Override + public Iterator iterator() { + return List.of(layerName).iterator(); + } + + @Override + public String getLayer(String entryName) { + return layerName; + } + + @Override + public String getApplicationLayerName() { + return layerName; + } + + }; + runCommand((context) -> new ExtractCommand(context, layers), ExtractCommandTests.this.archive, + "--destination", outputRoot.toString(), "--force", "--launcher", "--layers"); + assertThat(layerDirectory.resolve("BOOT-INF/lib/dependency-1.jar")).exists(); + } + } } From db1ebf59ba83026601117b91d4a6571a4fcc8401 Mon Sep 17 00:00:00 2001 From: Moritz Halbritter Date: Wed, 27 May 2026 10:33:19 +0200 Subject: [PATCH 03/52] Polish "Handle root output directory when extracting layers" See gh-50501 --- .../springframework/boot/jarmode/tools/ExtractCommand.java | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/spring-boot-project/spring-boot-tools/spring-boot-jarmode-tools/src/main/java/org/springframework/boot/jarmode/tools/ExtractCommand.java b/spring-boot-project/spring-boot-tools/spring-boot-jarmode-tools/src/main/java/org/springframework/boot/jarmode/tools/ExtractCommand.java index 7103fcc3d5a8..c2d0bb0ad9c1 100644 --- a/spring-boot-project/spring-boot-tools/spring-boot-jarmode-tools/src/main/java/org/springframework/boot/jarmode/tools/ExtractCommand.java +++ b/spring-boot-project/spring-boot-tools/spring-boot-jarmode-tools/src/main/java/org/springframework/boot/jarmode/tools/ExtractCommand.java @@ -373,8 +373,8 @@ private static File assertFileIsContainedInDirectory(File directory, File file, return file; } - private static boolean isFileContainedInDirectory(Path canonicalOutputPath, Path canonicalFilePath) { - return !canonicalFilePath.equals(canonicalOutputPath) && canonicalFilePath.startsWith(canonicalOutputPath); + private static boolean isFileContainedInDirectory(Path directory, Path file) { + return !file.equals(directory) && file.startsWith(directory); } @FunctionalInterface From 0cc3a7b9eed91587cdeab01b7e97267271a33659 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:19:40 +0100 Subject: [PATCH 04/52] Start building against Micrometer 1.15.12 snapshots See gh-50511 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index b0bbcbdd5075..c5d3da0d774d 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1589,7 +1589,7 @@ bom { releaseNotes("https://github.com/apache/maven-war-plugin/releases/tag/maven-war-plugin-{version}") } } - library("Micrometer", "1.15.11") { + library("Micrometer", "1.15.12-SNAPSHOT") { considerSnapshots() group("io.micrometer") { modules = [ From 3574cc4c67de08e789d6722cb77953450ee3bb4c Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:19:44 +0100 Subject: [PATCH 05/52] Start building against Micrometer Tracing 1.5.12 snapshots See gh-50512 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index c5d3da0d774d..26bd6336d9db 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1611,7 +1611,7 @@ bom { releaseNotes("https://github.com/micrometer-metrics/micrometer/releases/tag/v{version}") } } - library("Micrometer Tracing", "1.5.11") { + library("Micrometer Tracing", "1.5.12-SNAPSHOT") { considerSnapshots() alignWith { dependencyManagementDeclaredIn("io.micrometer:micrometer-tracing-bom") { From f56b7f3525020e48d8efed5933451a44aa7f5abb Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:19:49 +0100 Subject: [PATCH 06/52] Start building against Reactor Bom 2024.0.18 snapshots See gh-50513 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 26bd6336d9db..79c1b350c9f6 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2029,7 +2029,7 @@ bom { ] } } - library("Reactor Bom", "2024.0.17") { + library("Reactor Bom", "2024.0.18-SNAPSHOT") { considerSnapshots() calendarName = "Reactor" group("io.projectreactor") { From 7710250bbd867aec5664537ac9057789da14bbbb Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:19:54 +0100 Subject: [PATCH 07/52] Start building against Spring AMQP 3.2.11 snapshots See gh-50514 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 79c1b350c9f6..c59685c8e024 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2232,7 +2232,7 @@ bom { ] } } - library("Spring AMQP", "3.2.10") { + library("Spring AMQP", "3.2.11-SNAPSHOT") { considerSnapshots() group("org.springframework.amqp") { bom("spring-amqp-bom") From 7a6272a039bad6ddf2bd4a7cf45bd88f7fd2bd81 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:19:58 +0100 Subject: [PATCH 08/52] Start building against Spring Authorization Server 1.5.8 snapshots See gh-50515 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index c59685c8e024..7446d062e795 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2247,7 +2247,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-amqp/releases/tag/v{version}") } } - library("Spring Authorization Server", "1.5.7") { + library("Spring Authorization Server", "1.5.8-SNAPSHOT") { considerSnapshots() group("org.springframework.security") { modules = [ From b1f122ff4a2e6bc36b692058e855c518b5311ceb Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:20:02 +0100 Subject: [PATCH 09/52] Start building against Spring Batch 5.2.6 snapshots See gh-50516 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 7446d062e795..8fee1a5872e0 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2264,7 +2264,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-authorization-server/releases/tag/{version}") } } - library("Spring Batch", "5.2.5") { + library("Spring Batch", "5.2.6-SNAPSHOT") { considerSnapshots() group("org.springframework.batch") { bom("spring-batch-bom") From 4b9eac13cb8de1b4cc4fd7d3f26e25f65809e3ee Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:20:07 +0100 Subject: [PATCH 10/52] Start building against Spring Data Bom 2025.0.12 snapshots See gh-50517 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 8fee1a5872e0..d0c83fd35ad3 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2279,7 +2279,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-batch/releases/tag/v{version}") } } - library("Spring Data Bom", "2025.0.11") { + library("Spring Data Bom", "2025.0.12-SNAPSHOT") { prohibit { versionRange "[2025.1.0-M1,)" because "it exceeds our baseline" From 0f612ca066d204ee5519de799eacc21ffd267c02 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:20:12 +0100 Subject: [PATCH 11/52] Start building against Spring Framework 6.2.19 snapshots See gh-50518 --- gradle.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle.properties b/gradle.properties index 3c399301cea8..02c45df7a7aa 100644 --- a/gradle.properties +++ b/gradle.properties @@ -19,7 +19,7 @@ mavenVersion=3.9.13 mockitoVersion=5.17.0 nativeBuildToolsVersion=0.10.6 snakeYamlVersion=2.4 -springFrameworkVersion=6.2.18 +springFrameworkVersion=6.2.19-SNAPSHOT springFramework60xVersion=6.0.23 tomcatVersion=10.1.54 From 2e75a4452b68823e5be11e5a24723fce2b594374 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:20:16 +0100 Subject: [PATCH 12/52] Start building against Spring HATEOAS 2.5.3 snapshots See gh-50519 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index d0c83fd35ad3..e6afd5744a8d 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2335,7 +2335,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-graphql/releases/tag/v{version}") } } - library("Spring HATEOAS", "2.5.2") { + library("Spring HATEOAS", "2.5.3-SNAPSHOT") { prohibit { versionRange "[3.0.0-M1,)" because "it exceeds our baseline" From 4a02ee1f52e5647473f09ffb55de29da8fe617b5 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:20:20 +0100 Subject: [PATCH 13/52] Start building against Spring Integration 6.5.9 snapshots See gh-50520 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index e6afd5744a8d..a411e6f5f4e4 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2356,7 +2356,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-hateoas/releases/tag/{version}") } } - library("Spring Integration", "6.5.8") { + library("Spring Integration", "6.5.9-SNAPSHOT") { considerSnapshots() group("org.springframework.integration") { bom("spring-integration-bom") From 012f7bf9077acdba1e96e60decfb425fc6c5608a Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:20:25 +0100 Subject: [PATCH 14/52] Start building against Spring Kafka 3.3.16 snapshots See gh-50521 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index a411e6f5f4e4..00bb4186c05f 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2371,7 +2371,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-integration/releases/tag/v{version}") } } - library("Spring Kafka", "3.3.15") { + library("Spring Kafka", "3.3.16-SNAPSHOT") { considerSnapshots() group("org.springframework.kafka") { modules = [ From b44ffb7c2e165f055cdd9bc3dc0255afb16c28b8 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:20:30 +0100 Subject: [PATCH 15/52] Start building against Spring LDAP 3.3.8 snapshots See gh-50522 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 00bb4186c05f..6f8c4f39ed36 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2389,7 +2389,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-kafka/releases/tag/v{version}") } } - library("Spring LDAP", "3.3.7") { + library("Spring LDAP", "3.3.8-SNAPSHOT") { considerSnapshots() group("org.springframework.ldap") { modules = [ From 99793feaf67b07e6ae36fc94f35a7feb15f72769 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:20:34 +0100 Subject: [PATCH 16/52] Start building against Spring Pulsar 1.2.18 snapshots See gh-50523 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 6f8c4f39ed36..1223ec5bff99 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2409,7 +2409,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-ldap/releases/tag/{version}") } } - library("Spring Pulsar", "1.2.17") { + library("Spring Pulsar", "1.2.18-SNAPSHOT") { considerSnapshots() group("org.springframework.pulsar") { bom("spring-pulsar-bom") From 6baa007d905922dc38e39f4e71aad6fe79b51539 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:20:39 +0100 Subject: [PATCH 17/52] Start building against Spring RESTDocs 3.0.6 snapshots See gh-50524 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 1223ec5bff99..c5aac8bc6754 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2424,7 +2424,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-pulsar/releases/tag/v{version}") } } - library("Spring RESTDocs", "3.0.5") { + library("Spring RESTDocs", "3.0.6-SNAPSHOT") { considerSnapshots() group("org.springframework.restdocs") { bom("spring-restdocs-bom") From dfad5d47770177bd16c647658e36f88824d9d036 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:20:44 +0100 Subject: [PATCH 18/52] Start building against Spring Retry 2.0.13 snapshots See gh-50525 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index c5aac8bc6754..bf6c562058d9 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2439,7 +2439,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-restdocs/releases/tag/v{version}") } } - library("Spring Retry", "2.0.12") { + library("Spring Retry", "2.0.13-SNAPSHOT") { considerSnapshots() group("org.springframework.retry") { modules = [ From 20031a79277b4560267a6d0e0aaa346f416d95cf Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:20:48 +0100 Subject: [PATCH 19/52] Start building against Spring Security 6.5.11 snapshots See gh-50526 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index bf6c562058d9..46758d85db5a 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2452,7 +2452,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-retry/releases/tag/v{version}") } } - library("Spring Security", "6.5.10") { + library("Spring Security", "6.5.11-SNAPSHOT") { considerSnapshots() group("org.springframework.security") { bom("spring-security-bom") From 4e1c7aaa2fc0bd2ce91458d98de2fcd180bb141b Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:20:53 +0100 Subject: [PATCH 20/52] Start building against Spring Session 3.5.7 snapshots See gh-50527 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 46758d85db5a..9da5779bd394 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2467,7 +2467,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-security/releases/tag/{version}") } } - library("Spring Session", "3.5.6") { + library("Spring Session", "3.5.7-SNAPSHOT") { considerSnapshots() prohibit { startsWith(["Apple-", "Bean-", "Corn-", "Dragonfruit-"]) From 12bb70253fecc8d5feaeb6809d5951dbfc205f5c Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:20:58 +0100 Subject: [PATCH 21/52] Start building against Spring WS 4.1.4 snapshots See gh-50528 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 9da5779bd394..aa8fc4e91f56 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2490,7 +2490,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-session/releases/tag/{version}") } } - library("Spring WS", "4.1.3") { + library("Spring WS", "4.1.4-SNAPSHOT") { considerSnapshots() group("org.springframework.ws") { bom("spring-ws-bom") From e9df8c3a075be12304b2c1205d43999638b32782 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:26:27 +0100 Subject: [PATCH 22/52] Upgrade to Hibernate 6.6.51.Final Closes gh-50529 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index aa8fc4e91f56..528ea9326793 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -557,7 +557,7 @@ bom { releaseNotes("https://github.com/hazelcast/hazelcast/releases/tag/v{version}") } } - library("Hibernate", "6.6.50.Final") { + library("Hibernate", "6.6.51.Final") { prohibit { versionRange "[7.0.0.Alpha1,)" because "it exceeds our Jakarta EE 10 baseline" From 7e16d2ca04c694acf01c717691ab7f66df044cb2 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:26:31 +0100 Subject: [PATCH 23/52] Upgrade to Jaxen 2.0.3 Closes gh-50530 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 528ea9326793..73e6a8cb9594 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -988,7 +988,7 @@ bom { ] } } - library("Jaxen", "2.0.1") { + library("Jaxen", "2.0.3") { group("jaxen") { modules = [ "jaxen" From 9dfa40344a63a6fe85fa0ebc0e9af481edca18b3 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:26:39 +0100 Subject: [PATCH 24/52] Upgrade to jOOQ 3.19.34 Closes gh-50531 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 73e6a8cb9594..8249516389eb 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1096,7 +1096,7 @@ bom { ] } } - library("jOOQ", "3.19.33") { + library("jOOQ", "3.19.34") { prohibit { versionRange "[3.20.0,)" because "it requires Java 21" From 9f189ca2453a66a24656a6592b8289b446855bc8 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:26:46 +0100 Subject: [PATCH 25/52] Upgrade to Netty 4.1.134.Final Closes gh-50532 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 8249516389eb..b9696f2757bd 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1736,7 +1736,7 @@ bom { releaseNotes("https://github.com/neo4j/neo4j-java-driver/releases/tag/{version}") } } - library("Netty", "4.1.133.Final") { + library("Netty", "4.1.134.Final") { prohibit { contains ".Alpha" contains ".Beta" From 9300366a55b4f52c47d08dcecbafdc634292bb0b Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:26:50 +0100 Subject: [PATCH 26/52] Upgrade to SLF4J 2.0.18 Closes gh-50533 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index b9696f2757bd..845f2593adab 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2204,7 +2204,7 @@ bom { releaseNotes("https://github.com/sendgrid/sendgrid-java/releases/tag/{version}") } } - library("SLF4J", "2.0.17") { + library("SLF4J", "2.0.18") { prohibit { contains "-alpha" because "we don't want alphas" From 76d56ab109e535ef391bb66dfe8e5ae51bc24496 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 10:26:55 +0100 Subject: [PATCH 27/52] Upgrade to Tomcat 10.1.55 Closes gh-50534 --- gradle.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle.properties b/gradle.properties index 02c45df7a7aa..d8e8033b449e 100644 --- a/gradle.properties +++ b/gradle.properties @@ -21,6 +21,6 @@ nativeBuildToolsVersion=0.10.6 snakeYamlVersion=2.4 springFrameworkVersion=6.2.19-SNAPSHOT springFramework60xVersion=6.0.23 -tomcatVersion=10.1.54 +tomcatVersion=10.1.55 kotlin.stdlib.default.dependency=false From 04f578545979aa1e0c04eaa3daaa1908aeef101b Mon Sep 17 00:00:00 2001 From: Moritz Halbritter Date: Wed, 27 May 2026 11:55:01 +0200 Subject: [PATCH 28/52] Disable Homebrew sandbox for the verification tests --- .github/workflows/verify.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml index 644c8b642689..a31b4a93e970 100644 --- a/.github/workflows/verify.yml +++ b/.github/workflows/verify.yml @@ -76,6 +76,7 @@ jobs: RVT_RELEASE_TYPE: ${{ vars.COMMERCIAL && 'commercial' || 'oss' }} RVT_STAGING: ${{ inputs.staging }} RVT_VERSION: ${{ inputs.version }} + HOMEBREW_NO_SANDBOX_LINUX: "1" run: ./gradlew spring-boot-release-verification-tests:test - name: Upload Build Reports on Failure if: failure() From d0018a3cb47a16df0bb32f666d162da3e2641307 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:03:21 +0100 Subject: [PATCH 29/52] Start building against Micrometer 1.16.6 snapshots See gh-50535 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index beb44c080470..da0b1b22fab1 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1544,7 +1544,7 @@ bom { releaseNotes("https://github.com/apache/maven-war-plugin/releases/tag/maven-war-plugin-{version}") } } - library("Micrometer", "1.16.5") { + library("Micrometer", "1.16.6-SNAPSHOT") { considerSnapshots() group("io.micrometer") { modules = [ From b605872c07ac673e1384c0a3e56fb1ebd63975a8 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:03:26 +0100 Subject: [PATCH 30/52] Start building against Micrometer Tracing 1.6.6 snapshots See gh-50536 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index da0b1b22fab1..38f793a3d212 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1567,7 +1567,7 @@ bom { releaseNotes("https://github.com/micrometer-metrics/micrometer/releases/tag/v{version}") } } - library("Micrometer Tracing", "1.6.5") { + library("Micrometer Tracing", "1.6.6-SNAPSHOT") { considerSnapshots() alignWith { dependencyManagementDeclaredIn("io.micrometer:micrometer-tracing-bom") { From 9e079a51bea99982c5e4920f87968ba050e3074d Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:03:30 +0100 Subject: [PATCH 31/52] Start building against Reactor Bom 2025.0.6 snapshots See gh-50537 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 38f793a3d212..376510530260 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1977,7 +1977,7 @@ bom { ] } } - library("Reactor Bom", "2025.0.5") { + library("Reactor Bom", "2025.0.6-SNAPSHOT") { considerSnapshots() calendarName = "Reactor" group("io.projectreactor") { From 78b9fc4abebee369bc7ae21ef0f56ec558af76c5 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:03:35 +0100 Subject: [PATCH 32/52] Start building against Spring AMQP 4.0.4 snapshots See gh-50538 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 376510530260..ee71e9bde5a4 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -2396,7 +2396,7 @@ bom { ] } } - library("Spring AMQP", "4.0.3") { + library("Spring AMQP", "4.0.4-SNAPSHOT") { considerSnapshots() group("org.springframework.amqp") { bom("spring-amqp-bom") From 8d0cc0d76abe6f90b30adfa223b363a3a57e9479 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:03:40 +0100 Subject: [PATCH 33/52] Start building against Spring Batch 6.0.4 snapshots See gh-50539 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index ee71e9bde5a4..2f1f0f5bbde4 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -2411,7 +2411,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-amqp/releases/tag/v{version}") } } - library("Spring Batch", "6.0.3") { + library("Spring Batch", "6.0.4-SNAPSHOT") { considerSnapshots() group("org.springframework.batch") { bom("spring-batch-bom") From 6c932394ae0dce565aa9d136dfd8c792084a6e6f Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:03:45 +0100 Subject: [PATCH 34/52] Start building against Spring Data Bom 2025.1.6 snapshots See gh-50540 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 2f1f0f5bbde4..56057b4f4f2e 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -2426,7 +2426,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-batch/releases/tag/v{version}") } } - library("Spring Data Bom", "2025.1.5") { + library("Spring Data Bom", "2025.1.6-SNAPSHOT") { considerSnapshots() calendarName = "Spring Data Release" group("org.springframework.data") { From 169282ea31e6d30881f67ad0b87fc4df4d88fdce Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:03:49 +0100 Subject: [PATCH 35/52] Start building against Spring Framework 7.0.8 snapshots See gh-50541 --- gradle.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle.properties b/gradle.properties index 5e1fae0f03c5..6c4e23724ea6 100644 --- a/gradle.properties +++ b/gradle.properties @@ -21,7 +21,7 @@ mockitoVersion=5.20.0 nativeBuildToolsVersion=0.11.5 nullabilityPluginVersion=0.0.11 snakeYamlVersion=2.5 -springFrameworkVersion=7.0.7 +springFrameworkVersion=7.0.8-SNAPSHOT springFramework60xVersion=6.0.23 tomcatVersion=11.0.22 From 578fe31db62a0f205c2800d68d816393b4d4786b Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:03:54 +0100 Subject: [PATCH 36/52] Start building against Spring HATEOAS 3.0.4 snapshots See gh-50542 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 56057b4f4f2e..165f6307ea8c 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -2474,7 +2474,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-graphql/releases/tag/v{version}") } } - library("Spring HATEOAS", "3.0.3") { + library("Spring HATEOAS", "3.0.4-SNAPSHOT") { considerSnapshots() group("org.springframework.hateoas") { modules = [ From 8a92c75d7c44d317720510477eba2bd1a29ec51d Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:03:59 +0100 Subject: [PATCH 37/52] Start building against Spring Integration 7.0.5 snapshots See gh-50543 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 165f6307ea8c..dec28338da23 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -2491,7 +2491,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-hateoas/releases/tag/{version}") } } - library("Spring Integration", "7.0.4") { + library("Spring Integration", "7.0.5-SNAPSHOT") { considerSnapshots() group("org.springframework.integration") { bom("spring-integration-bom") From a65f2bb8955e4010d9f51541c481f8c1cf7c3222 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:04:03 +0100 Subject: [PATCH 38/52] Start building against Spring Kafka 4.0.6 snapshots See gh-50544 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index dec28338da23..063b7e1ec560 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -2506,7 +2506,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-integration/releases/tag/v{version}") } } - library("Spring Kafka", "4.0.5") { + library("Spring Kafka", "4.0.6-SNAPSHOT") { considerSnapshots() group("org.springframework.kafka") { modules = [ From 6e55dab9252a7e880ecf3fdd880a6b7f35369873 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:04:08 +0100 Subject: [PATCH 39/52] Start building against Spring LDAP 4.0.4 snapshots See gh-50545 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 063b7e1ec560..f457f4837e5a 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -2524,7 +2524,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-kafka/releases/tag/v{version}") } } - library("Spring LDAP", "4.0.3") { + library("Spring LDAP", "4.0.4-SNAPSHOT") { considerSnapshots() group("org.springframework.ldap") { modules = [ From 51765d2a346ef95c9a4de12373c0692f61c2d6f8 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:04:13 +0100 Subject: [PATCH 40/52] Start building against Spring Pulsar 2.0.6 snapshots See gh-50546 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index f457f4837e5a..ccc60f195cb6 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -2544,7 +2544,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-ldap/releases/tag/{version}") } } - library("Spring Pulsar", "2.0.5") { + library("Spring Pulsar", "2.0.6-SNAPSHOT") { considerSnapshots() group("org.springframework.pulsar") { bom("spring-pulsar-bom") From 2a9f3206dbd319915f6f437f5bfe5806f4431527 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:04:18 +0100 Subject: [PATCH 41/52] Start building against Spring RESTDocs 4.0.1 snapshots See gh-50547 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index ccc60f195cb6..1de58dbf720d 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -2559,7 +2559,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-pulsar/releases/tag/v{version}") } } - library("Spring RESTDocs", "4.0.0") { + library("Spring RESTDocs", "4.0.1-SNAPSHOT") { considerSnapshots() group("org.springframework.restdocs") { bom("spring-restdocs-bom") From dc5fea7b0f7ed8aeda71c1ef0e93cef11a7f7ece Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:04:22 +0100 Subject: [PATCH 42/52] Start building against Spring Security 7.0.6 snapshots See gh-50548 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 1de58dbf720d..7bd986dec727 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -2574,7 +2574,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-restdocs/releases/tag/v{version}") } } - library("Spring Security", "7.0.5") { + library("Spring Security", "7.0.6-SNAPSHOT") { considerSnapshots() group("org.springframework.security") { bom("spring-security-bom") From 88bae1d5107678e2b122b45c078ff8a333614c07 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:04:27 +0100 Subject: [PATCH 43/52] Start building against Spring Session 4.0.4 snapshots See gh-50549 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 7bd986dec727..8610421a8936 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -2589,7 +2589,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-security/releases/tag/{version}") } } - library("Spring Session", "4.0.3") { + library("Spring Session", "4.0.4-SNAPSHOT") { considerSnapshots() prohibit { startsWith(["Apple-", "Bean-", "Corn-", "Dragonfruit-"]) From 245775566d8e4c85c315f339d8998261303c6435 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:04:32 +0100 Subject: [PATCH 44/52] Start building against Spring WS 5.0.2 snapshots See gh-50550 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 8610421a8936..b7724c0f55c5 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -2612,7 +2612,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-session/releases/tag/{version}") } } - library("Spring WS", "5.0.1") { + library("Spring WS", "5.0.2-SNAPSHOT") { considerSnapshots() group("org.springframework.ws") { bom("spring-ws-bom") From 3e0a37220291a582beee9951898067dd36a5273c Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:08:06 +0100 Subject: [PATCH 45/52] Upgrade to Hibernate 7.2.16.Final Closes gh-50551 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index b7724c0f55c5..4e85e523a842 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -563,7 +563,7 @@ bom { releaseNotes("https://github.com/hazelcast/hazelcast/releases/tag/v{version}") } } - library("Hibernate", "7.2.13.Final") { + library("Hibernate", "7.2.16.Final") { group("org.hibernate.orm") { modules = [ "hibernate-agroal", From cf660ce64e583427070bea3aaeab588c71ead4ed Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:08:11 +0100 Subject: [PATCH 46/52] Upgrade to Jaxen 2.0.3 Closes gh-50552 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 4e85e523a842..bed656c44e05 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -962,7 +962,7 @@ bom { ] } } - library("Jaxen", "2.0.1") { + library("Jaxen", "2.0.3") { group("jaxen") { modules = [ "jaxen" From 91064dcc1d92e3ee8cce195d9a51d5a064e5a0bd Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:08:17 +0100 Subject: [PATCH 47/52] Upgrade to jOOQ 3.19.34 Closes gh-50553 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index bed656c44e05..4b1b66b4668d 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1070,7 +1070,7 @@ bom { ] } } - library("jOOQ", "3.19.33") { + library("jOOQ", "3.19.34") { prohibit { versionRange "[3.20.0,)" because "it requires Java 21" From 309505c0016b82a28be6bcf450a30398a6c81c10 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:08:22 +0100 Subject: [PATCH 48/52] Upgrade to Liquibase 5.0.3 Closes gh-50554 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 4b1b66b4668d..e26b69c6dec1 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1271,7 +1271,7 @@ bom { releaseNotes("https://github.com/redis/lettuce/releases/tag/{version}") } } - library("Liquibase", "5.0.2") { + library("Liquibase", "5.0.3") { group("org.liquibase") { modules = [ "liquibase-cdi", From 96ae19bca7a1e0c5e0d46f31c6df997b51d7c746 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:08:27 +0100 Subject: [PATCH 49/52] Upgrade to Maven Enforcer Plugin 3.6.3 Closes gh-50555 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index e26b69c6dec1..e6214e7b46c5 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1411,7 +1411,7 @@ bom { releaseNotes("https://github.com/apache/maven-deploy-plugin/releases/tag/maven-deploy-plugin-{version}") } } - library("Maven Enforcer Plugin", "3.6.2") { + library("Maven Enforcer Plugin", "3.6.3") { group("org.apache.maven.plugins") { plugins = [ "maven-enforcer-plugin" From 2ea88adb3c9b18756c77104e784b781102ac66bd Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:08:32 +0100 Subject: [PATCH 50/52] Upgrade to Neo4j Java Driver 6.1.0 Closes gh-50556 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index e6214e7b46c5..6aa4851fff11 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1674,7 +1674,7 @@ bom { ] } } - library("Neo4j Java Driver", "6.0.5") { + library("Neo4j Java Driver", "6.1.0") { alignWith { version { of "org.neo4j.driver:neo4j-java-driver" From de55473ab8c73692f9913e75d2529538f9407c3c Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:08:38 +0100 Subject: [PATCH 51/52] Upgrade to Netty 4.2.14.Final Closes gh-50557 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 6aa4851fff11..85488e9a5fa0 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1697,7 +1697,7 @@ bom { releaseNotes("https://github.com/neo4j/neo4j-java-driver/releases/tag/{version}") } } - library("Netty", "4.2.13.Final") { + library("Netty", "4.2.14.Final") { prohibit { contains ".Alpha" contains ".Beta" From 1ea8641ccfcca53ec7fde96b47514a9fa5b45049 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Wed, 27 May 2026 11:08:44 +0100 Subject: [PATCH 52/52] Upgrade to SLF4J 2.0.18 Closes gh-50558 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 85488e9a5fa0..73a092233a44 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -2368,7 +2368,7 @@ bom { releaseNotes("https://github.com/sendgrid/sendgrid-java/releases/tag/{version}") } } - library("SLF4J", "2.0.17") { + library("SLF4J", "2.0.18") { prohibit { contains "-alpha" because "we don't want alphas"