dependabot[bot] opened a new pull request, #1291: URL: https://github.com/apache/axis-axis2-java-core/pull/1291
Bumps the development-dependencies group with 2 updates: [org.springframework:spring-test](https://github.com/spring-projects/spring-framework) and [com.icegreen:greenmail](https://github.com/greenmail-mail-test/greenmail). Updates `org.springframework:spring-test` from 7.0.8 to 7.0.9 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-framework/releases";>org.springframework:spring-test's releases</a>.</em></p> <blockquote> <h2>v7.0.9</h2> <h2>:warning: Attention Required</h2> <ul> <li>In Spring Framework 7.0.9, <code>ForwardedHeaderFilter</code> (Spring MVC) and <code>ForwardedHeaderTransformer</code> (WebFlux) each provide a boolean constructor argument whether to use the standard "Forwarded" header or the "X-Forwarded" alternative headers. A separate property turns on and off use of "X-Forwarded-Prefix". While the default constructor preserves the existing behavior, we recommend to use the new constructor to explicitly specify which forwarded headers to use to make the processing more deterministic and aligned with what is expected from the proxy. Please, see the updated <a href="https://docs.spring.io/spring-framework/reference/7.0.9-SNAPSHOT/web/webmvc/filters.html#filters-forwarded-headers-security";>Security Considerations</a> section for details. In 7.1 with <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37072";>#37072</a> the default constructor is deprecated and marked for removal. <a href=" https://redirect.github.com/spring-projects/spring-framework/issues/37090";>#37090</a></li> <li>In Spring Framework 7.0.9, <code>SimpleEvaluationContext</code> no longer supports expression compilation by default, regardless of the compiler mode configured via <code>SpelParserConfiguration</code> or the <code>spring.expression.compiler.mode</code> system property or Spring property. Applications that intentionally use <code>SimpleEvaluationContext</code> with trusted expressions and require compilation for performance reasons can opt in by calling <code>withCompilationSupported()</code> on the <code>SimpleEvaluationContext</code> builder. Care should be taken when opting in to compilation, as doing so removes the safety guards applied during interpreted evaluation. <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37035";>#37035</a></li> </ul> <h2>:star: New Features</h2> <ul> <li>Ignore an empty port value in URI parsing <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37117";>#37117</a></li> <li>Avoid retaining class files in annotation metadata <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37112";>#37112</a></li> <li>Add <code>@Nullable</code> annotations when treating <code>Map.remove()</code> as returning <code>@Nullable</code> <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37067";>#37067</a></li> <li>Revisit SSE view fragments handling <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37061";>#37061</a></li> <li>Check list index after auto-grow in <code>AbstractNestablePropertyAccessor</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37036";>#37036</a></li> <li>Disable SpEL expression compilation by default in <code>SimpleEvaluationContext</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37035";>#37035</a></li> <li>Limit result size of <code>BigDecimal</code>/<code>BigInteger</code> power operations in SpEL <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37034";>#37034</a></li> <li>Refactor redirect handling in UrlHandlerFilter <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37030";>#37030</a></li> <li>Revise stylesheet source handling in XsltView <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37029";>#37029</a></li> <li>Revise view name handling in UrlFilenameViewController <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37027";>#37027</a></li> <li>Handle pre-flight requests in functional endpoint setup without DispatcherHandler <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37024";>#37024</a></li> <li>Improve WebSocket handshake error logging <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37023";>#37023</a></li> <li>Fix missing nullability in JdbcTemplate.batchUpdate <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37012";>#37012</a></li> <li>Timeout property in RetryPolicy does not have a default constant <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36983";>#36983</a></li> <li>Write native configuration files as UTF-8 <a href="https://redirect.github.com/spring-projects/spring-framework/pull/36972";>#36972</a></li> <li>DefaultServerRequest.ServletParametersMap.entrySet() does not retain HttpServletRequest.getParameterMap() order <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36966";>#36966</a></li> <li>Perform nextKey within synchronization for SQLite as well <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36959";>#36959</a></li> <li>Add support for custom ObjectInputFilter on DefaultDeserializer <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36958";>#36958</a></li> <li>Revise resource bundle caching for common locales <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36957";>#36957</a></li> <li>Improve nullability for <code>getSession(*)</code> in <code>MockHttpServletRequest</code> <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36926";>#36926</a></li> <li>Improve fallback logic in ParameterContentNegotiationStrategy and ParameterContentTypeResolver <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36925";>#36925</a></li> <li>Improve ambiguous match check on preflight request <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36903";>#36903</a></li> <li>Improve Groovy markup template loading <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36902";>#36902</a></li> <li>Improve request path handling on a Reactor Netty server <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36893";>#36893</a></li> <li>Improve JettyWebSocketSession error handling <a href="https://redirect.github.com/spring-projects/spring-framework/issues/36891";>#36891</a></li> </ul> <h2>:lady_beetle: Bug Fixes</h2> <ul> <li>EclipseLinkJpaDialect singleton lock in EclipseLinkConnectionHandle.getConnection() serializes all JDBC connection acquisitions under load <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37085";>#37085</a></li> <li>MetadataReader fails to read byte[] array from annotation <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37083";>#37083</a></li> <li>Ensure parsing/tostring symmetry in ContentDisposition <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37064";>#37064</a></li> <li>Character outside of permitted range in Content Disposition <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37062";>#37062</a></li> <li>Release Jackson BufferRecycler to its pool in encoders <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37059";>#37059</a></li> <li>Ensure consistent error escaping <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37055";>#37055</a></li> <li>Refine template name processing <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37054";>#37054</a></li> <li>Reset TwoByteMatcher partial match on mismatching byte <a href="https://redirect.github.com/spring-projects/spring-framework/pull/37053";>#37053</a></li> <li>Refactor async XML parsing limit checks <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37031";>#37031</a></li> <li>Fix part constraint checks in PartEventHttpMessageReader <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37028";>#37028</a></li> <li>Fix buffer leak in RSocket SETUP frame handling <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37026";>#37026</a></li> <li>Ensure correct Jetty core response cookie handling <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37025";>#37025</a></li> <li>Align <code>domainToAscii</code> with current WhatWG spec <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37018";>#37018</a></li> <li>Ensure consistent <code>ButtonTag</code> value attribute processing <a href="https://redirect.github.com/spring-projects/spring-framework/issues/37017";>#37017</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-framework/commit/82a6b40b9366ec181ededdad282b307ee5381a52";><code>82a6b40</code></a> Release Spring Framework 7.0.9</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/a7b1b59cbd79175ed79b0f4aa967be70288bb2ee";><code>a7b1b59</code></a> Upgrade to Reactor 2025.0.7</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/996e3d3f18dbb13d92a2eaf988abfe77b06928d4";><code>996e3d3</code></a> Upgrade to Micrometer 1.16.7</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/73f5ddddcd4278580c9c879b2effdac29aa3bff5";><code>73f5ddd</code></a> Refactor maxInMemory limit handling for async XML parsing</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/675f25de72e7ac31db1ffe0dc324381d7cc1a308";><code>675f25d</code></a> Leading slash handling in UrlHandlerFilter</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/692dbc9160de3b5de50ccedeee014716d0cedb7b";><code>692dbc9</code></a> Apply ResourceHandlerUtils checks in XsltView</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/8647e90bc7b2da9b299566296f2b253a6fd9c128";><code>8647e90</code></a> Consistent maxPartSize check in PartEventHttpMessageReader</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/b9379e33d52b491e227715776a072d07bcccddab";><code>b9379e3</code></a> Check viewName for special prefixes in UrlFilenameViewController</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/a784dbe286beaa70e5a88638b6af7f58f458c07e";><code>a784dbe</code></a> Ensure Payload release on early error in createHeaders</li> <li><a href="https://github.com/spring-projects/spring-framework/commit/3b492f3908df3fe0adc639b7da98f737d1ff7a02";><code>3b492f3</code></a> Return sameSite cookie value in Jetty response</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-framework/compare/v7.0.8...v7.0.9";>compare view</a></li> </ul> </details> <br /> Updates `com.icegreen:greenmail` from 2.1.12 to 2.1.13 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/greenmail-mail-test/greenmail/releases";>com.icegreen:greenmail's releases</a>.</em></p> <blockquote> <h2>2.1.13</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>Bugfixes</h3> <ul> <li>Avoid NPE when forcing IMAP close without an active response by <a href="https://github.com/kalayciburak";><code>@kalayciburak</code></a> in <a href="https://redirect.github.com/greenmail-mail-test/greenmail/pull/1047";>greenmail-mail-test/greenmail#1047</a></li> <li>Byte-stuff bare-lf dot lines in POP3 RETR response by <a href="https://github.com/netliomax25-code";><code>@netliomax25-code</code></a> in <a href="https://redirect.github.com/greenmail-mail-test/greenmail/pull/1049";>greenmail-mail-test/greenmail#1049</a></li> <li>Fix array index in SaslXoauth2Message.parse on separator-less input by <a href="https://github.com/netliomax25-code";><code>@netliomax25-code</code></a> in <a href="https://redirect.github.com/greenmail-mail-test/greenmail/pull/1051";>greenmail-mail-test/greenmail#1051</a></li> <li>Reject malformed SEARCH criteria with BAD instead of closing connection by <a href="https://github.com/netliomax25-code";><code>@netliomax25-code</code></a> in <a href="https://redirect.github.com/greenmail-mail-test/greenmail/pull/1053";>greenmail-mail-test/greenmail#1053</a></li> <li>Reject malformed message set with BAD instead of closing connection by <a href="https://github.com/netliomax25-code";><code>@netliomax25-code</code></a> in <a href="https://redirect.github.com/greenmail-mail-test/greenmail/pull/1054";>greenmail-mail-test/greenmail#1054</a></li> </ul> <h3>Dependencies</h3> <ul> <li>Bump org.bouncycastle:bc-jdk18on-bom from 1.85 to 1.85.2 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/greenmail-mail-test/greenmail/pull/1048";>greenmail-mail-test/greenmail#1048</a></li> <li>Bump com.fasterxml.jackson:jackson-bom from 2.22.1 to 2.22.2 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/greenmail-mail-test/greenmail/pull/1055";>greenmail-mail-test/greenmail#1055</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/greenmail-mail-test/greenmail/compare/release-2.1.12...release-2.1.13";>https://github.com/greenmail-mail-test/greenmail/compare/release-2.1.12...release-2.1.13</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/greenmail-mail-test/greenmail/commit/cd4d14ff26fca905dae8e250c29879402287d32d";><code>cd4d14f</code></a> [maven-release-plugin] prepare release release-2.1.13</li> <li><a href="https://github.com/greenmail-mail-test/greenmail/commit/1d7d3ddb0f0d84e8376738638e0f42c2c1ea222c";><code>1d7d3dd</code></a> Chore: Updating docs for 2.1.13 release</li> <li><a href="https://github.com/greenmail-mail-test/greenmail/commit/f5ca3e31d2d44d947654c8ff340cb1cc83365bc2";><code>f5ca3e3</code></a> Minor fixes (spelling, code style, ...)</li> <li><a href="https://github.com/greenmail-mail-test/greenmail/commit/99d18fd8153c0deda037c0bac18996c6c0885b21";><code>99d18fd</code></a> reject malformed message set with protocol exception</li> <li><a href="https://github.com/greenmail-mail-test/greenmail/commit/659cd219e9730e58077c68045b646f2ea17e5535";><code>659cd21</code></a> Build(deps): Bump com.fasterxml.jackson:jackson-bom</li> <li><a href="https://github.com/greenmail-mail-test/greenmail/commit/1377a54d7d290018296ac2f1ac5b19bf12eb7147";><code>1377a54</code></a> Build: Remove deprecated finbbugs plugin</li> <li><a href="https://github.com/greenmail-mail-test/greenmail/commit/c7fbba6b6ba641f29539e68e161a76292a830c9b";><code>c7fbba6</code></a> Build: Fix scm tag and added jakarta.ee javadoc links</li> <li><a href="https://github.com/greenmail-mail-test/greenmail/commit/b21a84b8859a2c402c6eea542b73e3d5342bcf4e";><code>b21a84b</code></a> Renamed Copilot instructions to more generic AGENTS.md</li> <li><a href="https://github.com/greenmail-mail-test/greenmail/commit/a4b56562b5a5ad4e8e705f86751ec76deee1763c";><code>a4b5656</code></a> reject malformed SEARCH criteria with BAD instead of closing connection</li> <li><a href="https://github.com/greenmail-mail-test/greenmail/commit/517c7d3354316af22007160730cd3290e6d233ff";><code>517c7d3</code></a> guard xoauth2 part count before indexing in SaslXoauth2Message</li> <li>Additional commits viewable in <a href="https://github.com/greenmail-mail-test/greenmail/compare/release-2.1.12...release-2.1.13";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
