Skip to content

Bump spring-boot-dependencies from 2.5.9 to 2.5.14 - #33

Open
dependabot[bot] wants to merge 1 commit into
2.xfrom
dependabot/maven/2.x/org.springframework.boot-spring-boot-dependencies-2.5.14
Open

Bump spring-boot-dependencies from 2.5.9 to 2.5.14#33
dependabot[bot] wants to merge 1 commit into
2.xfrom
dependabot/maven/2.x/org.springframework.boot-spring-boot-dependencies-2.5.14

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 19, 2022

Copy link
Copy Markdown

Bumps spring-boot-dependencies from 2.5.9 to 2.5.14.

Release notes

Sourced from spring-boot-dependencies's releases.

v2.5.14

🐞 Bug Fixes

  • Dependency management for Artemis is incomplete #31077
  • Default properties configured on SpringApplication have higher precedence than properties configured with @PropertySource #31068
  • A failure when an instrumented WebClient records metrics causes the request to fail #30978
  • Configuration properties for Statsd's buffered and step properties are missing #30898
  • Debug logging for requests to WebFlux-based Actuator endpoints does not identify the endpoint #30880
  • Event handling in JobExecutionExitCodeGenerator is not thread-safe #30705
  • SearchStrategy argument of MethodValidationExcludeFilter byAnnotation(Class, SearchStrategy) is not used #30631
  • @ConditionalOnProperty meta annotation with @AliasFor does not work #30505
  • Hibernate service loading logs HHH000505 warnings for ServiceConfigurationError with Gradle-built jars since 2.5.10 when using Java 11 or later #30413
  • Cryptic startup failure with bare LOGGING_LEVEL environment variable #30281

📔 Documentation

  • Fix link to Upgrading From 1.x in multi-page documentation #30890
  • Extend documentation on Datadog metrics #30879
  • Document support for Java 18 #30548

🔨 Dependency Upgrades

  • Upgrade to ActiveMQ 5.16.5 #30906
  • Upgrade to Hazelcast 4.1.9 #30907
  • Upgrade to Jaybird 4.0.6.java8 #30908
  • Upgrade to Johnzon 1.2.18 #30909
  • Upgrade to Micrometer 1.7.12 #31001
  • Upgrade to MySQL 8.0.29 #30910
  • Upgrade to Netty 4.1.77.Final #30911
  • Upgrade to Netty tcNative 2.0.52.Final #30912
  • Upgrade to Reactor Bom 2020.0.19 #30913
  • Upgrade to Spring Batch 4.3.6 #31003
  • Upgrade to Spring Framework 5.3.20 #31002
  • Upgrade to Spring Integration 5.5.12 #31060
  • Upgrade to Spring Kafka 2.7.14 #31004
  • Upgrade to Spring LDAP 2.3.8.RELEASE #31039
  • Upgrade to Spring Security 5.5.8 #31096
  • Upgrade to Tomcat 9.0.63 #31069

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

... (truncated)

Commits
  • 93b52f7 Release v2.5.14
  • d20f94e Upgrade CI to Docker 20.10.16
  • e82def0 Upgrade to Spring Security 5.5.8
  • 7f60c67 Upgrade to Spring Batch 4.3.6
  • 5e78bef Test security dialect auto-config without Spring Security
  • 4eb778d Upgrade to Spring Integration 5.5.12
  • 7d2f1ba Update copyright year of changed files
  • 7da42d7 Allow tests to pass when a NAME environment variable exists
  • 44c979b Reorder default property sources after @​PropertySource processing
  • 350d27f Polish code to use method references when possible
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [spring-boot-dependencies](https://github.com/spring-projects/spring-boot) from 2.5.9 to 2.5.14.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.5.9...v2.5.14)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github May 19, 2022

Copy link
Copy Markdown
Author

The following labels could not be found: 2.x dependencies.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants