dependabot[bot] opened a new pull request #870: URL: https://github.com/apache/myfaces-tobago/pull/870
Bumps `spring-boot.version` from 2.4.5 to 2.5.0. Updates `spring-boot-dependencies` from 2.4.5 to 2.5.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-boot/releases";>spring-boot-dependencies's releases</a>.</em></p> <blockquote> <h2>v2.5.0</h2> <p>For full <a href="https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.5-Release-Notes#upgrading-from-spring-boot-24";>upgrade instructions</a> and <a href="https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.5-Release-Notes#new-and-noteworthy";>new and noteworthy features</a> please see the <a href="https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.5-Release-Notes";>release notes</a>.</p> <h2>:beetle: Bug Fixes</h2> <ul> <li>Auto-configured resource handlers don't get applied to child contexts <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26623";>#26623</a></li> <li>Actuator doesn't use the CORS Configuration with default security configuration and Spring Webflux <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26614";>#26614</a></li> <li>Actuator doesn't use the CORS Configuration with default security configuration and Spring MVC <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26612";>#26612</a></li> <li>SpringApplication additional profiles and active profiles ordering changed with Spring Boot 2.4 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26610";>#26610</a></li> <li>An active request delays Jetty's shutdown by 30 seconds <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26608";>#26608</a></li> <li>SmartInitializingSingleton beans are not working with lazy initialization <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26606";>#26606</a></li> <li>MVC and WebFlux metrics filters adversely affect the response when metrics recording fails <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26596";>#26596</a></li> <li>ConfigDataResolvers cannot signal that they should be skipped <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26585";>#26585</a></li> <li>Remote devtools endpoint cannot be accessed if actuator and spring security are on the classpath <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26584";>#26584</a></li> <li>The error message when a wildcard directory location does not match any files is misleading <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26583";>#26583</a></li> <li>Mandatory locations with pattern fail with exception <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26582";>#26582</a></li> <li>Non-optional locations with wildcards fail if no files are contributed <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26581";>#26581</a></li> <li>Profiles programmatically set on the Envionment are no longer merged with active profile properties <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26580";>#26580</a></li> <li>Use of spring.profiles.include in a profile-specific document is not detected when it's configured as a YAML list <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26575";>#26575</a></li> <li>ConfigurationProperties is retrieved via classpath scanning but does not indicate it should be indexed <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26463";>#26463</a></li> <li>BufferingApplicationStartup fails with NoSuchElementException <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26458";>#26458</a></li> <li>Building an image fails when using a custom buildpack image with long file names <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26445";>#26445</a></li> <li>Additional profiles are processed too late when legacy processing is used <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26434";>#26434</a></li> <li>Config data location does not exist error can be thrown if a profile-specific properties file is directly imported <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26402";>#26402</a></li> <li>StandardConfigDataLoader can import profile specific files in incorrect order <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26401";>#26401</a></li> <li>Resolvability and consumability of productionRuntimeClasspath are not aligned with runtimeClasspath <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26365";>#26365</a></li> <li>ObjectMapper provided by JacksonAutoConfiguration via JacksonClusterEnvironmentBuilderCustomizer breaks Couchbase driver <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26363";>#26363</a></li> <li>Empty value in spring.config.import causes NullPointerException <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26346";>#26346</a></li> <li><code>@DataRedisTest</code> does not consider <code>RedisReactiveAutoConfiguration</code> <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26328";>#26328</a></li> <li>When a single bean causes a dependency cycle the failure analysis does not clearly illustrate the cycle <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26323";>#26323</a></li> <li>SpringBootConfiguration is retrieved via classpath scanning but does not indicate it should be indexed <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26318";>#26318</a></li> <li>Maven spring-boot:build-image ignores ZIP layout <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26313";>#26313</a></li> <li>bootBuildImage does not pick up targetCompatibility when it's configured after task is customised <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26301";>#26301</a></li> <li>Configuration item metadata ordering is not consistent <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26277";>#26277</a></li> <li><code>@EnableAutoConfiguration</code> and <code>@ImportAutoConfiguration</code> use different class loaders to find candidate configurations <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26237";>#26237</a></li> <li>'spring.web.resources.cache.use-last-modified=false' doesn't work with Spring MVC <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26233";>#26233</a></li> <li>Restore support for binding configuration properties from RandomValuePropertySource <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26201";>#26201</a></li> <li><code>@Scheduled</code> method not triggered when spring.main.lazy-initialization=true <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26156";>#26156</a></li> <li>When classes in spring-core and spring-boot are loaded by different ClassLoaders, spring-boot cannot find its own config data location resolvers <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26155";>#26155</a></li> <li>ConfigFileApplicationListener#loadPostProcessors can not load EnvironmentPostProcessor in child classLoader <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26126";>#26126</a></li> </ul> <h2>:notebook_with_decorative_cover: Documentation</h2> <ul> <li>Info endpoint in reference doc has outdated defaults <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/pull/26591";>#26591</a></li> <li>Update documentation following the release of Spock Framework 2.0 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/pull/26586";>#26586</a></li> <li>Update Gradle docs to use module replacement rather than dependency substitution <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26526";>#26526</a></li> <li>Improve documentation of TestRestTemplate's fault tolerance <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26522";>#26522</a></li> <li>Document that the heap dump endpoint requires a HotSpot JVM <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26474";>#26474</a></li> <li>Suggest enabling the default servlet when using Jersey as a filter <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26452";>#26452</a></li> <li>Document support for Gradle 6.9 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26409";>#26409</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-boot/commit/d34007879cc337444d4a8669453cb74db85bc375";><code>d340078</code></a> Release v2.5.0</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/0548f90b2b256673f67932dcf05a34fbf23c0dd0";><code>0548f90</code></a> Set LATEST_GA flag to true</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/3da3f27f14d744c716066babd26f7829044fc839";><code>3da3f27</code></a> Merge branch '2.4.x' into main</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/b25497c45c0a04ce394150be6d50d59860ca1b8f";><code>b25497c</code></a> Set LATEST_GA flag to false</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/15042e27108c3340237d92886ec7408d371417e0";><code>15042e2</code></a> Merge branch '2.4.x'</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/6bf069d9e0544b085d59a92fc4411222773f6c31";><code>6bf069d</code></a> Merge branch '2.3.x' into 2.4.x</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/004363ceaf89ba329bcbb9bc613b4768dbb2134f";><code>004363c</code></a> Use WebMvcConfigurer to add resource handlers</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/c380f06b2c343c106bfcd378e7af317b7b49d4b4";><code>c380f06</code></a> Merge branch '2.4.x'</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/8b24a80fa8c96e583024a7450667652dc971427f";><code>8b24a80</code></a> Merge branch '2.3.x' into 2.4.x</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/0fa1fa5230ba4a060a9585fdc2cf820868e98e28";><code>0fa1fa5</code></a> Next development version (v2.4.7-SNAPSHOT)</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-boot/compare/v2.4.5...v2.5.0";>compare view</a></li> </ul> </details> <br /> Updates `spring-boot-maven-plugin` from 2.4.5 to 2.5.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-boot/releases";>spring-boot-maven-plugin's releases</a>.</em></p> <blockquote> <h2>v2.5.0</h2> <p>For full <a href="https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.5-Release-Notes#upgrading-from-spring-boot-24";>upgrade instructions</a> and <a href="https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.5-Release-Notes#new-and-noteworthy";>new and noteworthy features</a> please see the <a href="https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.5-Release-Notes";>release notes</a>.</p> <h2>:beetle: Bug Fixes</h2> <ul> <li>Auto-configured resource handlers don't get applied to child contexts <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26623";>#26623</a></li> <li>Actuator doesn't use the CORS Configuration with default security configuration and Spring Webflux <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26614";>#26614</a></li> <li>Actuator doesn't use the CORS Configuration with default security configuration and Spring MVC <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26612";>#26612</a></li> <li>SpringApplication additional profiles and active profiles ordering changed with Spring Boot 2.4 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26610";>#26610</a></li> <li>An active request delays Jetty's shutdown by 30 seconds <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26608";>#26608</a></li> <li>SmartInitializingSingleton beans are not working with lazy initialization <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26606";>#26606</a></li> <li>MVC and WebFlux metrics filters adversely affect the response when metrics recording fails <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26596";>#26596</a></li> <li>ConfigDataResolvers cannot signal that they should be skipped <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26585";>#26585</a></li> <li>Remote devtools endpoint cannot be accessed if actuator and spring security are on the classpath <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26584";>#26584</a></li> <li>The error message when a wildcard directory location does not match any files is misleading <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26583";>#26583</a></li> <li>Mandatory locations with pattern fail with exception <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26582";>#26582</a></li> <li>Non-optional locations with wildcards fail if no files are contributed <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26581";>#26581</a></li> <li>Profiles programmatically set on the Envionment are no longer merged with active profile properties <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26580";>#26580</a></li> <li>Use of spring.profiles.include in a profile-specific document is not detected when it's configured as a YAML list <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26575";>#26575</a></li> <li>ConfigurationProperties is retrieved via classpath scanning but does not indicate it should be indexed <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26463";>#26463</a></li> <li>BufferingApplicationStartup fails with NoSuchElementException <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26458";>#26458</a></li> <li>Building an image fails when using a custom buildpack image with long file names <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26445";>#26445</a></li> <li>Additional profiles are processed too late when legacy processing is used <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26434";>#26434</a></li> <li>Config data location does not exist error can be thrown if a profile-specific properties file is directly imported <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26402";>#26402</a></li> <li>StandardConfigDataLoader can import profile specific files in incorrect order <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26401";>#26401</a></li> <li>Resolvability and consumability of productionRuntimeClasspath are not aligned with runtimeClasspath <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26365";>#26365</a></li> <li>ObjectMapper provided by JacksonAutoConfiguration via JacksonClusterEnvironmentBuilderCustomizer breaks Couchbase driver <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26363";>#26363</a></li> <li>Empty value in spring.config.import causes NullPointerException <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26346";>#26346</a></li> <li><code>@DataRedisTest</code> does not consider <code>RedisReactiveAutoConfiguration</code> <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26328";>#26328</a></li> <li>When a single bean causes a dependency cycle the failure analysis does not clearly illustrate the cycle <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26323";>#26323</a></li> <li>SpringBootConfiguration is retrieved via classpath scanning but does not indicate it should be indexed <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26318";>#26318</a></li> <li>Maven spring-boot:build-image ignores ZIP layout <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26313";>#26313</a></li> <li>bootBuildImage does not pick up targetCompatibility when it's configured after task is customised <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26301";>#26301</a></li> <li>Configuration item metadata ordering is not consistent <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26277";>#26277</a></li> <li><code>@EnableAutoConfiguration</code> and <code>@ImportAutoConfiguration</code> use different class loaders to find candidate configurations <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26237";>#26237</a></li> <li>'spring.web.resources.cache.use-last-modified=false' doesn't work with Spring MVC <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26233";>#26233</a></li> <li>Restore support for binding configuration properties from RandomValuePropertySource <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26201";>#26201</a></li> <li><code>@Scheduled</code> method not triggered when spring.main.lazy-initialization=true <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26156";>#26156</a></li> <li>When classes in spring-core and spring-boot are loaded by different ClassLoaders, spring-boot cannot find its own config data location resolvers <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26155";>#26155</a></li> <li>ConfigFileApplicationListener#loadPostProcessors can not load EnvironmentPostProcessor in child classLoader <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26126";>#26126</a></li> </ul> <h2>:notebook_with_decorative_cover: Documentation</h2> <ul> <li>Info endpoint in reference doc has outdated defaults <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/pull/26591";>#26591</a></li> <li>Update documentation following the release of Spock Framework 2.0 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/pull/26586";>#26586</a></li> <li>Update Gradle docs to use module replacement rather than dependency substitution <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26526";>#26526</a></li> <li>Improve documentation of TestRestTemplate's fault tolerance <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26522";>#26522</a></li> <li>Document that the heap dump endpoint requires a HotSpot JVM <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26474";>#26474</a></li> <li>Suggest enabling the default servlet when using Jersey as a filter <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26452";>#26452</a></li> <li>Document support for Gradle 6.9 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/26409";>#26409</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-boot/commit/d34007879cc337444d4a8669453cb74db85bc375";><code>d340078</code></a> Release v2.5.0</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/0548f90b2b256673f67932dcf05a34fbf23c0dd0";><code>0548f90</code></a> Set LATEST_GA flag to true</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/3da3f27f14d744c716066babd26f7829044fc839";><code>3da3f27</code></a> Merge branch '2.4.x' into main</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/b25497c45c0a04ce394150be6d50d59860ca1b8f";><code>b25497c</code></a> Set LATEST_GA flag to false</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/15042e27108c3340237d92886ec7408d371417e0";><code>15042e2</code></a> Merge branch '2.4.x'</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/6bf069d9e0544b085d59a92fc4411222773f6c31";><code>6bf069d</code></a> Merge branch '2.3.x' into 2.4.x</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/004363ceaf89ba329bcbb9bc613b4768dbb2134f";><code>004363c</code></a> Use WebMvcConfigurer to add resource handlers</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/c380f06b2c343c106bfcd378e7af317b7b49d4b4";><code>c380f06</code></a> Merge branch '2.4.x'</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/8b24a80fa8c96e583024a7450667652dc971427f";><code>8b24a80</code></a> Merge branch '2.3.x' into 2.4.x</li> <li><a href="https://github.com/spring-projects/spring-boot/commit/0fa1fa5230ba4a060a9585fdc2cf820868e98e28";><code>0fa1fa5</code></a> Next development version (v2.4.7-SNAPSHOT)</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-boot/compare/v2.4.5...v2.5.0";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
