Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 10, 2025

Bumps org.springframework:spring-webmvc from 5.3.32 to 6.2.10.

Release notes

Sourced from org.springframework:spring-webmvc's releases.

v6.2.10

⭐ New Features

  • Optimize NIO path resolution in PathEditor #35304
  • Make type in ProblemDetail nullable #35294
  • Refine UriUtils#decode and StringUtils#uriDecode implementation and documentation #35253
  • Provide configurable useCaches option for URLConnection usage in UrlResource (avoiding jar file leak) #35218

🐞 Bug Fixes

  • @Scheduled tasks running in SimpleAsyncTaskScheduler are interrupted immediately on context close #35254
  • ScriptUtils.executeSqlScript() does not support multiple results per statement #35248
  • Successful Autowiring Dependent on Configuration ordering and Primary Bean flag #35239
  • Locale parameter in MessageSource#getMessage methods should be nullable #35230
  • Allow any @Transactional propagation for @TransactionalEventListener with BEFORE_COMMIT phase #35150
  • Catalog name should be handled with the provided case #35064
  • Accept support for generated keys column name array on HSQLDB and Derby as well #34790
  • Handle direct CanncelationException on timeout in JdkClientHttpRequest #34721

📔 Documentation

  • Add documentation of RequestMapping about SpEL #35232
  • Document SqlBinaryValue behaviour with PostgreSQL #34786

🔨 Dependency Upgrades

  • Upgrade to Micrometer 1.14.10 #35313
  • Upgrade to Reactor 2024.0.9 #35312

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Allan-QLB, @​carsago, @​cw-dimedis, and @​giampa91

v6.2.9

⭐ New Features

  • OncePerRequestFilter cannot be CGLib-proxied #35198
  • Consistently catch InaccessibleObjectException next to IllegalAccessException #35190
  • Introduce Date-to-Instant and Instant-to-Date converters #35175
  • Consistent nullability and exception declarations in AbstractMessagingTemplate hierarchy #35159
  • Register runtime hints for Instant-to-Timestamp conversion #35156
  • Improve handling of ResponseEntity<?> in Spring MVC #35153
  • Support @CacheConfig("myCacheName") declarations for simplified configuration #35152
  • Declare messageSelector parameters in JmsOperations as @Nullable #35151
  • Add getter for OverflowStrategy in ConcurrentWebSocketSessionDecorator #35132
  • Use preset Content-Type for streaming and reactive responses in Spring MVC #35130
  • Leniently tolerate null @Aspect bean #35074
  • DataAccessResourceFailureException thrown when transaction times out on PostgreSQL #35073

... (truncated)

Commits
  • 8f64480 Release v6.2.10
  • edda473 Build against Java 24
  • 9fa2d7d Upgrade to Jackson 2.18.4.1
  • c30427f Upgrade to Netty 4.1.124.Final
  • 1d908f1 Upgrade to Reactor 2024.0.9 and Micrometer 1.14.10
  • 37b076b Support multiple result sets in ScriptUtils.executeSqlScript()
  • a9453a5 Polishing
  • 3781ba2 Optimize NIO path resolution in PathEditor
  • f11a1e6 Polish tests
  • ffc7854 Fix checkstyle error
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) from 5.3.32 to 6.2.10.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v5.3.32...v6.2.10)

---
updated-dependencies:
- dependency-name: org.springframework:spring-webmvc
  dependency-version: 6.2.10
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 10, 2025
Copy link
Contributor

github-actions bot commented Oct 2, 2025

Hello there 👋

We noticed that it's been some time since activity occurred on your pull request 🤔. In order to keep things moving forward, we're marking this PR as stale and giving you 7 days to respond before it's automatically closed ⏰.

Please take a moment to review your pull request and make any necessary updates or changes 👨‍💻. If you need more time or have any questions, please don't hesitate to let us know 💬.

Thank you for your contributions to our project, and we look forward to hearing back from you soon 🙏.

@github-actions github-actions bot added the stale Marks pull requests that are classified as `stale` by our bot. label Oct 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code stale Marks pull requests that are classified as `stale` by our bot.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants