Skip to content

Bump org.springframework:spring-beans from 5.3.23 to 6.2.12#25

Open
dependabot[bot] wants to merge 14 commits into
mainfrom
dependabot/gradle/org.springframework-spring-beans-6.2.12
Open

Bump org.springframework:spring-beans from 5.3.23 to 6.2.12#25
dependabot[bot] wants to merge 14 commits into
mainfrom
dependabot/gradle/org.springframework-spring-beans-6.2.12

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2025

Copy link
Copy Markdown

Bumps org.springframework:spring-beans from 5.3.23 to 6.2.12.

Release notes

Sourced from org.springframework:spring-beans's releases.

v6.2.12

⭐ New Features

  • Add "forEachByte" variant to DataBuffer for efficient traversing #35623
  • Nested transaction support via savepoints is broken in HSQLDB database [followup] #35618
  • Improve exception handling in ConfigurationClassBeanDefinitionReader #35631
  • Add MySQL/MariaDB to TableMetaDataProviderFactory for correct generated-keys support #35593
  • Optimize state management in StompSubProtocolHandler #35591
  • ServletServerHttpRequest.getRemoteAddress() may perform DNS lookup #35589
  • Emit log message when multiple primary beans are detected #35550
  • Duplicate key error is mapped to TransientDataAccessException by SQLStateSQLExceptionTranslator for BatchUpdateException #35547
  • Remove redundant object allocation in cglib proxy method calls #35543
  • Remove deprecation on CandidateComponentsIndex and CandidateComponentsIndexLoader #35472
  • Processing response with no Content-Length header and no body raises EOFException #35361

🐞 Bug Fixes

  • DefaultListableBeanFactory::getBeanNamesForType does not always return all bean names #35634
  • Consider defaultCandidate for scoped proxies #35627
  • Release data buffer in AbstractCharSequenceDecoder even when String creation fails #35625
  • PathMatchingResourcePatternResolver is not able to resolve file in SpringBoot Packaged JAR #35617
  • Prevent NoClassDefFoundError when Jetty Reactive HttpClient is not available #35608
  • Performance regression with Property Placeholder Resolution #35594
  • Retain order of produces media types in @ExceptionHandler #35587
  • Nested transaction support via savepoints is broken in HSQLDB database #35564
  • SpEL expression parser uses more CPU after upgrade to 6.2.9 #35556
  • Thread race during FactoryBean instantiations starting with 6.2 due to lenient locks #35545
  • Update parsed path handling in UrlHandlerFilter #35538
  • ResourceHttpMessageWriter.write has unexpected error handling for invalid range requests (offset > content length) #35536
  • AbstractTestNGSpringContextTests is not thread-safe regarding tracked exceptions #35528
  • UrlHandlerFilter breaks RequestDispatcher.forward() on Tomcat #35509
  • AbstractMockHttpServletRequestBuilder#buildRequest is not idempotent #35493
  • Add support for JvmDefault (default in Kotlin 2.2.20+) #35487
  • InstanceSupplierCodeGenerator fails to detect deprecated type on package private factory method #35486
  • Fix synchronization in ResponseBodyEmitter #35466
  • useCaches option in PathMatchingResourcePatternResolver not applied in special case #35465
  • Deadlock during context initialization due to EntityManager lock #35398

📔 Documentation

  • Improve guidance in WebFlux on how to join inbound and outbound streams in WebSocketHandler #35572
  • Fix idref example in reference manual #35560
  • Fix URI Patterns docs in WebMVC and WebFlux Request Mapping #35551
  • Allow event listener method declared with multiple event classes to take a single parameter that is assignable from all of those event classes #35506
  • Improve Task Javadoc about Runnable wrapping #35394

🔨 Dependency Upgrades

  • Upgrade to Micrometer 1.14.12 #35640
  • Upgrade to Reactor 2024.0.11 #35638

... (truncated)

Commits
  • e354390 Release v6.2.12
  • c53132e Polishing
  • 03c3ec1 Fall back on remoteHost if remoteAddress is null
  • c88bfc5 Refactor state management in StompSubProtocolHandler
  • a96558c Revise commit 01acb805018da643a3c4320ff0e032aa998beda8
  • 1612b7c Remove test prefixes
  • 01acb80 Improve exception handling in ConfigurationClassBeanDefinitionReader
  • f4438ce Upgrade to Reactor 2024.0.11 and Micrometer 1.14.12
  • 5033b9d Reset by-type cache for Object after registering a new singleton
  • d733023 Consistently apply fallback attribute to proxy definition as well
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

gradle-update-robot and others added 14 commits February 26, 2025 01:07
Signed-off-by: gradle-update-robot <gradle-update-robot@regolo.cc>
…on 69

Signed-off-by: Manfred Hanke <Manfred.Hanke@tngtech.com>
https://github.com/google/guava/releases/tag/v33.4.4 has
- removed the dependency on JSR-305
  [google/guava@04bf030]
- migrated from Checker Framework annotations to (JSpecify)[https://jspecify.dev/] annotations
  [google/guava@2cc8c5e]
- removed the dependency on Checker Framework annotations
  [google/guava@800b3d4]

compare
- https://repo1.maven.org/maven2/com/google/guava/guava/33.3.1-jre/guava-33.3.1-jre.pom
- https://repo1.maven.org/maven2/com/google/guava/guava/33.4.8-jre/guava-33.4.8-jre.pom

Signed-off-by: Manfred Hanke <Manfred.Hanke@tngtech.com>
* org.apache.logging.log4j:log4j-{api,core,slf4j2-impl}
  2.24.1 → 2.24.3

* org.assertj:assertj-{core,guava}
  3.26.3 → 3.27.3

Signed-off-by: Manfred Hanke <Manfred.Hanke@tngtech.com>
  junit-jupiter
= junit-jupiter-api
+ junit-jupiter-params
+ junit-jupiter-engine (runtime)

Signed-off-by: Manfred Hanke <Manfred.Hanke@tngtech.com>
Without the `junit-platform-launcher` dependency,
test execution in `archunit-3rd-party-test` fails with
```
Caused by: org.junit.platform.commons.JUnitException: TestEngine with ID 'junit-jupiter' failed to discover tests
	at app//org.junit.platform.launcher.core.EngineDiscoveryOrchestrator.discoverEngineRoot(EngineDiscoveryOrchestrator.java:160)
	at app//org.junit.platform.launcher.core.EngineDiscoveryOrchestrator.discoverSafely(EngineDiscoveryOrchestrator.java:134)
	at app//org.junit.platform.launcher.core.EngineDiscoveryOrchestrator.discover(EngineDiscoveryOrchestrator.java:108)
	at app//org.junit.platform.launcher.core.EngineDiscoveryOrchestrator.discover(EngineDiscoveryOrchestrator.java:80)
	at app//org.junit.platform.launcher.core.DefaultLauncher.discover(DefaultLauncher.java:110)
	at app//org.junit.platform.launcher.core.DefaultLauncher.execute(DefaultLauncher.java:86)
	at app//org.junit.platform.launcher.core.DefaultLauncherSession$DelegatingLauncher.execute(DefaultLauncherSession.java:86)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor$CollectAllTestClassesExecutor.processAllTestClasses(JUnitPlatformTestClassProcessor.java:124)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor$CollectAllTestClassesExecutor.access$000(JUnitPlatformTestClassProcessor.java:99)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor.stop(JUnitPlatformTestClassProcessor.java:94)
	at org.gradle.api.internal.tasks.testing.SuiteTestClassProcessor.stop(SuiteTestClassProcessor.java:63)
	... 16 more
Caused by: org.junit.platform.commons.JUnitException: OutputDirectoryProvider not available; probably due to unaligned versions of the junit-platform-engine and junit-platform-launcher jars on the classpath/module path.
	at app//org.junit.platform.engine.EngineDiscoveryRequest.getOutputDirectoryProvider(EngineDiscoveryRequest.java:94)
	at app//org.junit.jupiter.engine.JupiterTestEngine.discover(JupiterTestEngine.java:67)
	at app//org.junit.platform.launcher.core.EngineDiscoveryOrchestrator.discoverEngineRoot(EngineDiscoveryOrchestrator.java:152)
	... 26 more
```

Signed-off-by: Manfred Hanke <Manfred.Hanke@tngtech.com>
resolves TNG#1446

The CI build has recently often failed on `ubuntu` and `macos` with Java 8,
due to `java.lang.OutOfMemoryError: GC overhead limit exceeded`.

This is due to `ClassFileImporterSlowTest` importing the full classpath in some tests,
which gives more than 20k classes on Java 8,
which contains 7k classes in `com.sun` and 4k classes in `sun` packages
that can easily be ignored.

Signed-off-by: Manfred Hanke <Manfred.Hanke@tngtech.com>
Signed-off-by: Manfred Hanke <Manfred.Hanke@tngtech.com>
`it` in the `exclude(dependency { /*...*/ })` closure of
[DependencyFilter](https://github.com/GradleUp/shadow/blob/8.3.6/src/main/groovy/com/github/jengelman/gradle/plugins/shadow/internal/DependencyFilter.groovy)
is a [`org.gradle.api.artifacts.ResolvedDependency`](https://docs.gradle.org/current/javadoc/org/gradle/api/artifacts/ResolvedDependency.html),
whose [`name`](https://github.com/gradle/gradle/blob/v8.13.0/platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/DefaultResolvedDependency.java#L76-L78) is a `String`.

When the comparison `it.name != dependency.guava` was introduced with 18c5d18,
`dependency.guava` was String that could be compared against `it.name`,
but 82d61ad has changed this those to a `Map`.

However `dependency.guava` is relocated anyway – and hence removed by the `removeDuplicateThirdParty` task (as it is transitively available in `archunit.jar`),
so we can simply drop `dependency.guava` from not being excluded in the `shadowJar`.

Signed-off-by: Manfred Hanke <Manfred.Hanke@tngtech.com>
Signed-off-by: Manfred Hanke <Manfred.Hanke@tngtech.com>
Update Gradle Wrapper from 8.12.1 to 8.13
Bumps [org.springframework:spring-beans](https://github.com/spring-projects/spring-framework) from 5.3.23 to 6.2.12.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v5.3.23...v6.2.12)

---
updated-dependencies:
- dependency-name: org.springframework:spring-beans
  dependency-version: 6.2.12
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 16, 2025
@hankem hankem force-pushed the main branch 4 times, most recently from 0740662 to 1a0cfac Compare May 15, 2026 06:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants