dependabot[bot] opened a new pull request, #3822: URL: https://github.com/apache/causeway/pull/3822
Bumps [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) from 4.2.0-M1 to 4.2.0-M2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-boot/releases";>org.springframework.boot:spring-boot-starter-parent's releases</a>.</em></p> <blockquote> <h2>v4.2.0-M2</h2> <h2>:star: New Features</h2> <ul> <li>Deprecate AppOptics as it has retired <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51810";>#51810</a></li> <li>Improve classpath entry lookup performance during jar creation and extraction <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51787";>#51787</a></li> <li>Add spring.kafka.listener.await-async-results-on-stop property <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51774";>#51774</a></li> <li>Rationalize Kafka configuration outside of KafkaProperties <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51769";>#51769</a></li> <li>Make the active Observation LongTaskTimer on the auto-configured DefaultMeterObservationHandler opt-in <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51762";>#51762</a></li> <li>Configure allowed HTTP methods in GraphQL transports <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51732";>#51732</a></li> <li>Allow to use Mongo JobRepository with any PlatformTransactionManager <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51725";>#51725</a></li> <li>Resolve property placeholders in constructor binding default values <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51661";>#51661</a></li> <li>Add auto-configured BaggageTaggingSpanProcessor for OpenTelemetry tag fields <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51656";>#51656</a></li> <li>Improve the performance of layer index creation <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51654";>#51654</a></li> <li>Speed up layer lookups when extracting a layered jar <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51653";>#51653</a></li> <li>Move Tomcat's servlet-specific properties beneath server.tomcat.servlet <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51603";>#51603</a></li> <li>Align handling of null and empty values in SPRING_APPLICATION_JSON with YAML processing <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51583";>#51583</a></li> <li>Remove Dependency Management for Janino <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51567";>#51567</a></li> <li>Add jarmode tools command to print / export the SBOM <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51505";>#51505</a></li> <li>Pick up all <code>@TypeExcludeFilters</code> annotations on test classes <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51489";>#51489</a></li> <li>Make it easier to map MessageSourceProperties onto a user-provided AbstractResourceBasedMessageSource <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51484";>#51484</a></li> <li>Support multi-segment additional health endpoint paths <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51470";>#51470</a></li> <li>Honor spring.ldap.* properties in the Embedded LDAP server <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51465";>#51465</a></li> <li>Add a configuration property for configuring embedded LDAP operation types that require authentication <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51461";>#51461</a></li> <li>Add TWENTY_SEVEN to JavaVersion enum <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51427";>#51427</a></li> <li>Automatically filter additional configuration metadata from Spring Boot-built archives <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51386";>#51386</a></li> <li>Add SSL bundle support to LDAP auto-configuration <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51382";>#51382</a></li> <li>Align the default for server.tomcat.use-relative-redirects with Tomcat's default <a href="https://redirect.github.com/spring-projects/spring-boot/pull/51173";>#51173</a></li> <li>Allow configuring Micrometer Tracing MDC keys <a href="https://redirect.github.com/spring-projects/spring-boot/pull/50595";>#50595</a></li> <li>Add common OTLP configuration for endpoint, compression and headers <a href="https://redirect.github.com/spring-projects/spring-boot/pull/50461";>#50461</a></li> <li>Retain probe defaults when configuring other properties on probe health groups <a href="https://redirect.github.com/spring-projects/spring-boot/pull/50296";>#50296</a></li> <li>Include security error body in WebFlux Cloud Foundry endpoint responses <a href="https://redirect.github.com/spring-projects/spring-boot/pull/50256";>#50256</a></li> <li>Provide a configuration property to switch from Micrometer to OpenTelemetry semantic conventions <a href="https://redirect.github.com/spring-projects/spring-boot/pull/49241";>#49241</a></li> <li>Support listener and template specific Kafka Admin properties <a href="https://redirect.github.com/spring-projects/spring-boot/issues/38830";>#38830</a></li> </ul> <h2>:lady_beetle: Bug Fixes</h2> <ul> <li>spring.http.clients.cookie-handling has no effect when using a reactive client backed by an HttpComponents connector <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51767";>#51767</a></li> <li>NullPointerException can be thrown when using uber jars due to a race condition in NestedJarFileResources <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51746";>#51746</a></li> <li>Connection fails when rabbitmq Docker Compose service is configured to use SSL <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51668";>#51668</a></li> <li>SBOM-related manifest attributes are missing from Maven-packaged wars <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51652";>#51652</a></li> <li>When server.reactive.session.cookie.same-site is not set, session cookies have no SameSite attribute <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51640";>#51640</a></li> <li>OAuth2 resource server ignores authorities-claim-delimiter when set on its own <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51631";>#51631</a></li> <li>developmentOnly and testAndDevelopmentOnly configurations do not specify any attributes causing potential resolution problems <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51624";>#51624</a></li> <li>In a reactive web application, Cloud Foundry security integration returns a 500 rather than a 503 when the cloud controller URL is unavailable <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51615";>#51615</a></li> <li>ReactiveOAuth2ResourceServerWebSecurityAutoConfiguration annotated with wrong condition <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51588";>#51588</a></li> <li>WritableJson.toByteArray() may corrupt supplementary characters <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51586";>#51586</a></li> <li>Layer temp file is not deleted when layer creation fails <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51582";>#51582</a></li> <li>Docker Compose integration for RabbitMQ skips credential fallbacks when an environment variable has no value <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51579";>#51579</a></li> <li>Some assertion messages name the wrong parameter <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51575";>#51575</a></li> <li>OAuth2ResourceServerProperties.Jwt has a setter that does not match its getter <a href="https://redirect.github.com/spring-projects/spring-boot/issues/51566";>#51566</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-boot/commit/599ec55d0dede60b4dd6bda8233d24b4a2609865";><code>599ec55</code></a> Release 4.2.0-M2</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/a52645de17de8a3f989e357412f188682d53f687";><code>a52645d</code></a> Upgrade to Spring Session 4.2.0-M1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/7b2c9b42cfafba90ac4973aef76427c5e8744a4a";><code>7b2c9b4</code></a> Upgrade to Spring Security 7.2.0-M2</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/220b5bd3166d65f7ec12ef38ff5b08a3a00c64c4";><code>220b5bd</code></a> Upgrade to Spring LDAP 4.2.0-M1</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/3e9d67ece4ef91f5763ad0b4927c621031b1e24d";><code>3e9d67e</code></a> Upgrade to Spring HATEOAS 3.2.0-M2</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/042378ee7eaef89fb83d80ed971d5c3da490387d";><code>042378e</code></a> Upgrade to Spring Batch 6.1.0-M2</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/68c5367137452cda1d9111ccfd887de17a8d07a5";><code>68c5367</code></a> Upgrade to Micrometer Tracing 1.8.0-M2</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/2e36ab0337d06ae987be0173e117e39e7378a4ec";><code>2e36ab0</code></a> Upgrade to Micrometer 1.18.0-M2</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/ce60302c2753093a72cebe41da2e02d8c43df804";><code>ce60302</code></a> Upgrade to Spring Data Bom 2026.1.0-M2</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/3c637ed2d83f35f0f509566faed80bf2a9d8a6c4";><code>3c637ed</code></a> Upgrade to Spring GraphQL 2.1.0-M1</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-boot/compare/v4.2.0-M1...v4.2.0-M2";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
