fix(deps): update dependency org.springframework:spring-context to v5 [security]#112
Open
renovate[bot] wants to merge 1 commit intomasterfrom
Open
fix(deps): update dependency org.springframework:spring-context to v5 [security]#112renovate[bot] wants to merge 1 commit intomasterfrom
renovate[bot] wants to merge 1 commit intomasterfrom
Conversation
d434f53 to
4855764
Compare
4855764 to
858edbd
Compare
858edbd to
e60bfbf
Compare
e60bfbf to
f1e1ccd
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
4.3.30.RELEASE→5.2.21.RELEASEGitHub Vulnerability Alerts
CVE-2022-22968
In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and lower case for the first character of the field, including upper and lower case for the first character of all nested fields within the property path. Versions 5.3.19 and 5.2.21 contain a patch for this issue.
Release Notes
spring-projects/spring-framework (org.springframework:spring-context)
v5.2.21.RELEASECompare Source
⭐ New Features
🐞 Bug Fixes
v5.2.20.RELEASECompare Source
⭐ New Features
v5.2.19.RELEASECompare Source
⭐ New Features
🐞 Bug Fixes
📔 Documentation
🔨 Dependency Upgrades
v5.2.18.RELEASECompare Source
⭐ New Features
🐞 Bug Fixes
🔨 Dependency Upgrades
v5.2.17.RELEASECompare Source
⭐ New Features
🐞 Bug Fixes
📔 Documentation
prepareTestInstance()is invoked when using theSpringMethodRule#27312🔨 Dependency Upgrades
v5.2.16.RELEASECompare Source
⭐ New Features
🪲 Bug Fixes
📔 Documentation
@Transactionalexamples regarding method visibility #27005@Transactionaldocs regarding method visibility #27004@TransactionalEventListenerafter completion methods #26979🔨 Dependency Upgrades
v5.2.15.RELEASECompare Source
⭐ New Features
🪲 Bug Fixes
@ModelAttribute(binding=false)is not honored with WebFlux #26888📔 Documentation
🔨 Dependency Upgrades
v5.2.14.RELEASECompare Source
⭐ New Features
🪲 Bug Fixes
@DirtiesContextnot applied when class-level@EnabledIfevaluates to false #26697@CrossOriginmaxAge value should override global value #26620@Component#26584🔨 Dependency Upgrades
v5.2.13.RELEASECompare Source
⭐ New Features
🪲 Bug Fixes
@Nullablevalue but throws NullPointerException #26277📔 Documentation
🔨 Dependency Upgrades
v5.2.12.RELEASECompare Source
⭐ New Features
🪲 Bug Fixes
📔 Documentation
@Transactionaldoes not propagate to new threads #26102🔨 Dependency Upgrades
v5.2.11.RELEASECompare Source
⭐ New Features
🪲 Bug Fixes
📔 Documentation
v5.2.10.RELEASECompare Source
⭐ New Features
@RequestPartmultipart controllers with Servlet MockPart #25829🪲 Bug Fixes
@ActiveProfileswith same profiles but different order results in duplicate ApplicationContext #25973📔 Documentation
🔨 Dependency Upgrades
v5.2.9.RELEASECompare Source
⭐ New Features
@FunctionalInterface#25571🪲 Bug Fixes
@RestControllerAdviceannotation attributes #25520@Beanmethod with name mismatch causes bean to be created twice (in case of ASM processing) #25263📔 Documentation
@RestControllerand Webflux #25596@Beanjavadoc and ConfigurationClassEnhancer #25590@RequestMapping#params #25482🔨 Dependency Upgrades
❤️ Contributors
We'd like to thank all the contributors who worked on this release!
v5.2.8.RELEASECompare Source
⭐ New Features
🪲 Bug fixes
📔 Documentation
🔨 Dependency upgrades
❤️ Contributors
We’d like to thank all the contributors who worked on our current release!
v5.2.7.RELEASECompare Source
⭐ New Features
@Aspect#25186🪲 Bug Fixes
📔 Documentation
@Lookupannotation #25044@PathVariabledeclarations in examples in webmvc.adoc #25006🔨 Dependency Upgrades
❤️ Contributors
We'd like to thank all the contributors who worked on this release!
v5.2.6.RELEASECompare Source
⭐ New Features
@Nullable#24839🪲 Bug Fixes
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.