Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 21, 2025

Bumps org.springframework:spring-framework-bom from 6.2.12 to 6.2.14.

Release notes

Sourced from org.springframework:spring-framework-bom's releases.

v6.2.14

⭐ New Features

  • Add resetCaches() method to Caffeine/ConcurrentMapCacheManager #35841
  • Fix single-check idiom in UnmodifiableMultiValueMap #35831
  • Fix Spliterator characteristics in ConcurrentReferenceHashMap #35828

🐞 Bug Fixes

  • MissingPathVariableException produces wrong status code in ProblemDetail #35856
  • Fix getCacheNames() concurrent access in NoOpCacheManager #35844
  • Annotation discovery regression for interfaces extending BeanNameAware and co. #35838
  • Fix HtmlUtils unescape for supplementary chars #35832

📔 Documentation

  • Fix cross-reference links in HtmlUnit sections #35857
  • Remove @see Javadoc references to deprecated PropertiesBeanDefinitionReader #35854

v6.2.13

⭐ New Features

  • Support response encoding in select and options JSP form tags #35783
  • Preserve Connection readOnly state for DataSource with defaultReadOnly configuration #35743
  • Optimize resource URL resolution in SortedResourcesFactoryBean #35687
  • Relax multiple segment matching constraints in PathPattern #35686
  • Support wildcard path elements at the start of path patterns #35679
  • Validating byte[]s may produce OutOfMemoryError #35675
  • Update in FragmentsRendering to names of static methods #33974

🐞 Bug Fixes

  • ConcurrentReferenceHashMap misses dedicated computeIfAbsent, computeIfPresent, compute, merge implementations #35794
  • Avoid unnecessary bridge method resolution around getMostSpecificMethod #35780
  • Fix multi-release JAR issue with VirtualThreadDelegate #35773
  • ContentNegotiationManager not finding media type when request includes quality parameter #35754
  • Race condition in BufferingClientHttpResponseWrapper.getBody() #35745
  • Deprecate setConnectTimeout on HttpComponentsClientHttpRequestFactory #35748
  • Fix PathMatchingResourcePatternResolver to handle absolute paths in JAR manifests #35732
  • BeanDefinitionBuilder.addAutowiredProperty causes error during AOT processing #35731
  • Improve HttpServiceMethod support for Kotlin suspending functions returning Flow #35718
  • Exception translation does not expose original BatchUpdateException anymore #35717
  • Add hints for entities package-private methods #35711
  • Fix concurrency permit leak causing deadlock in SimpleAsyncTaskExecutor #35708
  • Remove jibx-marshaller element from spring-oxm.xsd #35699
  • NullPointerException When Handling 407 with JdkClientHttpConnector in WebClient #35692
  • Method-based Map injection fails against target Map with incomplete generics despite bean name or qualifier match #35690
  • JUnit Jupiter TEST_METHOD ExtensionContextScope is not fully supported #35680
  • Introduce isAutowirableConstructor(Executable, PropertyProvider) in TestConstructorUtils and deprecate existing variants #35676
  • Reflection on java.sql.Types without runtime hints #35674

... (truncated)

Commits
  • 1ab9f7a Release v6.2.14
  • 59025c5 Lazily initialize ProblemDetail for picking up actual status code
  • e5de8b9 Fix link to MockMvc test in HtmlUnit section
  • e146e80 Polishing
  • ff62e73 Fix cross-reference links in HtmlUnit sections
  • 4e97013 Polishing
  • bd10b7a Remove javadoc references to deprecated PropertiesBeanDefinitionReader
  • e428817 Fix getCacheNames() concurrent access in NoOpCacheManager
  • 8545a75 Add resetCaches() method to Caffeine/ConcurrentMapCacheManager
  • f94645d Narrow Aware interface exclusion check to BeanFactoryAware only
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 6.2.12 to 6.2.14.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.12...v6.2.14)

---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
  dependency-version: 6.2.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type: dependency-upgrade A dependency upgrade

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant