Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the maven-dependencies group with 13 updates #491

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 20, 2024

Bumps the maven-dependencies group with 13 updates:

Package From To
org.mockito:mockito-junit-jupiter 4.11.0 5.0.0
org.mockito:mockito-core 4.11.0 5.0.0
org.apache.logging.log4j:log4j-slf4j-impl 2.24.0 2.24.1
org.apache.logging.log4j:log4j-core 2.24.0 2.24.1
org.springframework.boot:spring-boot-configuration-processor 2.7.18 3.0.0
org.springframework.boot:spring-boot-starter 2.7.18 3.0.0
org.springframework.boot:spring-boot-starter-test 2.7.18 3.0.0
org.springframework.boot:spring-boot-test-autoconfigure 2.7.18 3.0.0
org.springframework.boot:spring-boot-maven-plugin 2.7.18 3.0.0
io.projectreactor:reactor-core 3.6.10 3.6.11
io.projectreactor:reactor-test 3.6.10 3.6.11
org.apache.maven.plugins:maven-failsafe-plugin 3.5.0 3.5.1
org.apache.maven.plugins:maven-javadoc-plugin 3.10.0 3.10.1

Updates org.mockito:mockito-junit-jupiter from 4.11.0 to 5.0.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.0.0

Mockito 5: prepare for future JDK versions

For a while now, we have seen an increase in problems/incompatibilities with recent versions of the JDK due to our usage of JVM-internal API. Most notably, JDK 17 made some changes which are incompatible with the current subclass mockmaker. Therefore, to prepare for the future of JDK, we are making some core changes to ensure Mockito keeps on working.

Switch the default mockmaker to mockito-inline

Back in Mockito 2.7.6, we published a new mockmaker based on the "inline bytecode" principle. This mockmaker creates mocks manipulating bytecode equivalent within the original class such that its method implementations hook into the normal Mockito machinery. As a comparison, the subclass mockmaker generates "real" subclasses for mocks, to mimic the same behavior. While the approaches are similar, the inline mockmaker avoids certain restrictions that the JDK imposes. For example, it does not violate module boundaries (introduced in JDK 9, but more heavily used in JDK 17) and avoids the leaking of the creation of the subclass.

Massive thanks to community member @​reta who implemented this change.

Note: this does not affect mockito-android nor testing on Android.

When should I still be using the subclass mockmaker?

There are legitimate remaining use cases for the subclass mockmaker. For example, on the Graal VM's native image, the inline mockmaker will not work and the subclass mockmaker is the appropriate choice. Additionally, if you would like to avoid mocking final classes, using the subclass mockmaker is a possibibility. Note however that if you solely want to use the subclass mockmaker to avoid mocking final, you will run into the above mentioned issues on JDK 17+. We want to leave this choice up to our users, which is why we will keep on supporting the subclass mockmaker.

If you want to use the subclass mockmaker instead, you can use the new mockito-subclass artifact (published on Maven Central along with all our other artifacts).

Update the minimum supported Java version to 11

Mockito 4 supports Java 8 and above. Similar to other open source projects, we are moving away from JDK 8 and to newer versions. The primary reason for moving away from JDK 8 is the increasing maintenance costs with keeping our own infrastructure working. Lately we have been running into more and more JDK 8 breakages. Additionally, while we want to support the newest JDK API's, our current solution to support both JDK 8 and newer versions causes issues with the SecurityManager. Since we want Mockito to work on the newest version and more and more businesses adopting JDK 11, we have decided to make the switch as well.

Massive thanks to community member @​reta who implemented this change.

What should I do if I still run JDK 8?

For JDK 8 and below, you can keep on using Mockito 4. This is similar to if you are using JDK 6, for which you can keep on using Mockito 2. The changes in Mockito 5 (for now) are primarily focused on the latest JDK versions, which means the API differences between Mockito 4 and 5 are minimal. However, over time this will most likely widen, so we do recommend adopting JDK 11 in the future.

New type() method on ArgumentMatcher

One of our most used public API's for customizing Mockito is the ArgumentMatcher interface.

... (truncated)

Commits
  • adf528d Bump versions.bytebuddy from 1.12.21 to 1.12.22 (#2864)
  • 2418419 Bump versions.junitJupiter from 5.9.1 to 5.9.2 (#2858)
  • 3d40cd5 Bump junit-platform-launcher from 1.9.1 to 1.9.2 (#2859)
  • 9bec8e3 Bump versions.errorprone from 2.17.0 to 2.18.0 (#2857)
  • a9595f5 Switch the default mockmaker to the inline mockmaker on JDK 17+ (#2834)
  • c5d7fbc Bump assertj-core from 3.23.1 to 3.24.1 (#2854)
  • dbd7f2f Bump versions.bytebuddy from 1.12.20 to 1.12.21 (#2852)
  • 4d62fa7 Bump junit from 1.1.4 to 1.1.5 (#2850)
  • b1b6d6a Bump espresso-core from 3.5.0 to 3.5.1 (#2849)
  • 7b5b8dd Remove use case for non-existent method VerificationWithTimeout#never (#2848)
  • Additional commits viewable in compare view

Updates org.mockito:mockito-core from 4.11.0 to 5.0.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.0.0

Mockito 5: prepare for future JDK versions

For a while now, we have seen an increase in problems/incompatibilities with recent versions of the JDK due to our usage of JVM-internal API. Most notably, JDK 17 made some changes which are incompatible with the current subclass mockmaker. Therefore, to prepare for the future of JDK, we are making some core changes to ensure Mockito keeps on working.

Switch the default mockmaker to mockito-inline

Back in Mockito 2.7.6, we published a new mockmaker based on the "inline bytecode" principle. This mockmaker creates mocks manipulating bytecode equivalent within the original class such that its method implementations hook into the normal Mockito machinery. As a comparison, the subclass mockmaker generates "real" subclasses for mocks, to mimic the same behavior. While the approaches are similar, the inline mockmaker avoids certain restrictions that the JDK imposes. For example, it does not violate module boundaries (introduced in JDK 9, but more heavily used in JDK 17) and avoids the leaking of the creation of the subclass.

Massive thanks to community member @​reta who implemented this change.

Note: this does not affect mockito-android nor testing on Android.

When should I still be using the subclass mockmaker?

There are legitimate remaining use cases for the subclass mockmaker. For example, on the Graal VM's native image, the inline mockmaker will not work and the subclass mockmaker is the appropriate choice. Additionally, if you would like to avoid mocking final classes, using the subclass mockmaker is a possibibility. Note however that if you solely want to use the subclass mockmaker to avoid mocking final, you will run into the above mentioned issues on JDK 17+. We want to leave this choice up to our users, which is why we will keep on supporting the subclass mockmaker.

If you want to use the subclass mockmaker instead, you can use the new mockito-subclass artifact (published on Maven Central along with all our other artifacts).

Update the minimum supported Java version to 11

Mockito 4 supports Java 8 and above. Similar to other open source projects, we are moving away from JDK 8 and to newer versions. The primary reason for moving away from JDK 8 is the increasing maintenance costs with keeping our own infrastructure working. Lately we have been running into more and more JDK 8 breakages. Additionally, while we want to support the newest JDK API's, our current solution to support both JDK 8 and newer versions causes issues with the SecurityManager. Since we want Mockito to work on the newest version and more and more businesses adopting JDK 11, we have decided to make the switch as well.

Massive thanks to community member @​reta who implemented this change.

What should I do if I still run JDK 8?

For JDK 8 and below, you can keep on using Mockito 4. This is similar to if you are using JDK 6, for which you can keep on using Mockito 2. The changes in Mockito 5 (for now) are primarily focused on the latest JDK versions, which means the API differences between Mockito 4 and 5 are minimal. However, over time this will most likely widen, so we do recommend adopting JDK 11 in the future.

New type() method on ArgumentMatcher

One of our most used public API's for customizing Mockito is the ArgumentMatcher interface.

... (truncated)

Commits
  • adf528d Bump versions.bytebuddy from 1.12.21 to 1.12.22 (#2864)
  • 2418419 Bump versions.junitJupiter from 5.9.1 to 5.9.2 (#2858)
  • 3d40cd5 Bump junit-platform-launcher from 1.9.1 to 1.9.2 (#2859)
  • 9bec8e3 Bump versions.errorprone from 2.17.0 to 2.18.0 (#2857)
  • a9595f5 Switch the default mockmaker to the inline mockmaker on JDK 17+ (#2834)
  • c5d7fbc Bump assertj-core from 3.23.1 to 3.24.1 (#2854)
  • dbd7f2f Bump versions.bytebuddy from 1.12.20 to 1.12.21 (#2852)
  • 4d62fa7 Bump junit from 1.1.4 to 1.1.5 (#2850)
  • b1b6d6a Bump espresso-core from 3.5.0 to 3.5.1 (#2849)
  • 7b5b8dd Remove use case for non-existent method VerificationWithTimeout#never (#2848)
  • Additional commits viewable in compare view

Updates org.apache.logging.log4j:log4j-slf4j-impl from 2.24.0 to 2.24.1

Updates org.apache.logging.log4j:log4j-core from 2.24.0 to 2.24.1

Updates org.apache.logging.log4j:log4j-core from 2.24.0 to 2.24.1

Updates org.springframework.boot:spring-boot-configuration-processor from 2.7.18 to 3.0.0

Release notes

Sourced from org.springframework.boot:spring-boot-configuration-processor's releases.

v3.0.0

See the Release notes for 3.0 for upgrade instructions and details of new features.

⭐ New Features

  • Provide a configuration property for the observation patterns of Spring Integration components #33099

🐞 Bug Fixes

  • io.micrometer.tracing.Tracer on the classpath breaks AOT processing for tests #33298
  • Tracer library HTTP instrumentation is auto-configured unnecessarily #33287
  • Auto-configuration ignores user-provided ObservationConventions #33285
  • ScheduledBeanLazyInitializationExcludeFilter is auto-configured even when annotation-based scheduled has not been enabled #33284
  • SpringBootContextLoader prints banner twice when using a @ContextHierarchy #33263
  • Properties migrator causes an application to fail to start if it tries to map a property whose metadata data entry contains an invalid configuration property name #33250
  • Wavefront MeterRegistryCustomizer is not applying application tags from application.properties #33244
  • Actuator responses no longer format timestamps as ISO-8601 #33236
  • Configuration property is not bound in a native image when property has get, set, and is methods #33232
  • Configuration property binding does not deal with bridge methods #33212
  • Contribute missing resource hints for GraphQL schema files and GraphiQL HTML page #33208
  • Hints for ClientHttpRequestFactory should only be generated for matching methods #33203
  • Native profile should configure execution in pluginManagement #33184
  • Configuring management.server.port via a config tree results in a ConverterNotFoundException when the management context is refreshed #33169
  • JBoss logging does not route directly to SLF4J when using Logback #33155
  • Test with UseMainMethod.Always do not work with Kotlin main functions #33114
  • Maven process-aot does not specify source and target release when compiling generated sources #33112
  • Some Actuator beans are ineligible for post-processing #33110
  • AOT-generated source fails to compile when Actuator is enabled on a WebFlux project #33106
  • @ContextHierarchy should never be used with main method #33078
  • Maven process-aot fails when compiler plugin has been configured with --enable-preview #33012
  • Wavefront application tags differ from those used in a Spring Boot 2.x application #32844
  • Maven goal spring-boot:build-image runs package phase twice #26455

📔 Documentation

  • Document observation for R2DBC #33335
  • Align Tomcat multiple connectors example with recommendation to configure SSL declaratively #33333
  • Actuator document is misleading about k8s startup probe #33327
  • Update documented for @Timed to reflect narrower support #33282
  • Update reference documentation to replace mentions of tags providers and contributors with their Observation-based equivalents #33281
  • Link to Micrometer's @Timed documentation #33266
  • Clarify use of the spring.cache.type property with Hazelcast #33258
  • Example git.commit.time in the Actuator API documentation is thousands of years in the future #33256
  • Update Spring Security filter dispatcher types docs to reflect change in default value #33252
  • Documentation for nested configuration properties in a native image uses @NestedConfigurationProperty too widely #33239
  • Document that the jar task should not be disabled when building a native image #33238
  • Document nesting configuration properties using records or Kotlin data classes and how and when to use @NestedConfigurationProperty #33235
  • Links to Features describes sections that have moved elsewhere #33214
  • Fix broken links in docs #33209
  • Document the need for compilation with -parameters when targeting a native image #33182

... (truncated)

Commits
  • c9c359f Release v3.0.0
  • fb2cc73 Work around Thymeleaf's dependency on spring-security-bom:6.0.0-RC2
  • 355b428 Merge branch '2.7.x'
  • 7ea5881 Update LATEST_GA to false to prepare for 3.0.0's release
  • 1de09f4 Merge branch '2.6.x' into 2.7.x
  • e922650 Upgrade to Spring Framework 6.0.2
  • 4b8a28a Next development version (v2.7.7-SNAPSHOT)
  • 14ba9b1 Start building against Spring Framework 6.0.2 snapshots
  • d4a9100 Next development version (v2.6.15-SNAPSHOT)
  • 28cb225 Merge branch '2.7.x'
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter from 2.7.18 to 3.0.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter's releases.

v3.0.0

See the Release notes for 3.0 for upgrade instructions and details of new features.

⭐ New Features

  • Provide a configuration property for the observation patterns of Spring Integration components #33099

🐞 Bug Fixes

  • io.micrometer.tracing.Tracer on the classpath breaks AOT processing for tests #33298
  • Tracer library HTTP instrumentation is auto-configured unnecessarily #33287
  • Auto-configuration ignores user-provided ObservationConventions #33285
  • ScheduledBeanLazyInitializationExcludeFilter is auto-configured even when annotation-based scheduled has not been enabled #33284
  • SpringBootContextLoader prints banner twice when using a @ContextHierarchy #33263
  • Properties migrator causes an application to fail to start if it tries to map a property whose metadata data entry contains an invalid configuration property name #33250
  • Wavefront MeterRegistryCustomizer is not applying application tags from application.properties #33244
  • Actuator responses no longer format timestamps as ISO-8601 #33236
  • Configuration property is not bound in a native image when property has get, set, and is methods #33232
  • Configuration property binding does not deal with bridge methods #33212
  • Contribute missing resource hints for GraphQL schema files and GraphiQL HTML page #33208
  • Hints for ClientHttpRequestFactory should only be generated for matching methods #33203
  • Native profile should configure execution in pluginManagement #33184
  • Configuring management.server.port via a config tree results in a ConverterNotFoundException when the management context is refreshed #33169
  • JBoss logging does not route directly to SLF4J when using Logback #33155
  • Test with UseMainMethod.Always do not work with Kotlin main functions #33114
  • Maven process-aot does not specify source and target release when compiling generated sources #33112
  • Some Actuator beans are ineligible for post-processing #33110
  • AOT-generated source fails to compile when Actuator is enabled on a WebFlux project #33106
  • @ContextHierarchy should never be used with main method #33078
  • Maven process-aot fails when compiler plugin has been configured with --enable-preview #33012
  • Wavefront application tags differ from those used in a Spring Boot 2.x application #32844
  • Maven goal spring-boot:build-image runs package phase twice #26455

📔 Documentation

  • Document observation for R2DBC #33335
  • Align Tomcat multiple connectors example with recommendation to configure SSL declaratively #33333
  • Actuator document is misleading about k8s startup probe #33327
  • Update documented for @Timed to reflect narrower support #33282
  • Update reference documentation to replace mentions of tags providers and contributors with their Observation-based equivalents #33281
  • Link to Micrometer's @Timed documentation #33266
  • Clarify use of the spring.cache.type property with Hazelcast #33258
  • Example git.commit.time in the Actuator API documentation is thousands of years in the future #33256
  • Update Spring Security filter dispatcher types docs to reflect change in default value #33252
  • Documentation for nested configuration properties in a native image uses @NestedConfigurationProperty too widely #33239
  • Document that the jar task should not be disabled when building a native image #33238
  • Document nesting configuration properties using records or Kotlin data classes and how and when to use @NestedConfigurationProperty #33235
  • Links to Features describes sections that have moved elsewhere #33214
  • Fix broken links in docs #33209
  • Document the need for compilation with -parameters when targeting a native image #33182

... (truncated)

Commits
  • c9c359f Release v3.0.0
  • fb2cc73 Work around Thymeleaf's dependency on spring-security-bom:6.0.0-RC2
  • 355b428 Merge branch '2.7.x'
  • 7ea5881 Update LATEST_GA to false to prepare for 3.0.0's release
  • 1de09f4 Merge branch '2.6.x' into 2.7.x
  • e922650 Upgrade to Spring Framework 6.0.2
  • 4b8a28a Next development version (v2.7.7-SNAPSHOT)
  • 14ba9b1 Start building against Spring Framework 6.0.2 snapshots
  • d4a9100 Next development version (v2.6.15-SNAPSHOT)
  • 28cb225 Merge branch '2.7.x'
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-test from 2.7.18 to 3.0.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-test's releases.

v3.0.0

See the Release notes for 3.0 for upgrade instructions and details of new features.

⭐ New Features

  • Provide a configuration property for the observation patterns of Spring Integration components #33099

🐞 Bug Fixes

  • io.micrometer.tracing.Tracer on the classpath breaks AOT processing for tests #33298
  • Tracer library HTTP instrumentation is auto-configured unnecessarily #33287
  • Auto-configuration ignores user-provided ObservationConventions #33285
  • ScheduledBeanLazyInitializationExcludeFilter is auto-configured even when annotation-based scheduled has not been enabled #33284
  • SpringBootContextLoader prints banner twice when using a @ContextHierarchy #33263
  • Properties migrator causes an application to fail to start if it tries to map a property whose metadata data entry contains an invalid configuration property name #33250
  • Wavefront MeterRegistryCustomizer is not applying application tags from application.properties #33244
  • Actuator responses no longer format timestamps as ISO-8601 #33236
  • Configuration property is not bound in a native image when property has get, set, and is methods #33232
  • Configuration property binding does not deal with bridge methods #33212
  • Contribute missing resource hints for GraphQL schema files and GraphiQL HTML page #33208
  • Hints for ClientHttpRequestFactory should only be generated for matching methods #33203
  • Native profile should configure execution in pluginManagement #33184
  • Configuring management.server.port via a config tree results in a ConverterNotFoundException when the management context is refreshed #33169
  • JBoss logging does not route directly to SLF4J when using Logback #33155
  • Test with UseMainMethod.Always do not work with Kotlin main functions #33114
  • Maven process-aot does not specify source and target release when compiling generated sources #33112
  • Some Actuator beans are ineligible for post-processing #33110
  • AOT-generated source fails to compile when Actuator is enabled on a WebFlux project #33106
  • @ContextHierarchy should never be used with main method #33078
  • Maven process-aot fails when compiler plugin has been configured with --enable-preview #33012
  • Wavefront application tags differ from those used in a Spring Boot 2.x application #32844
  • Maven goal spring-boot:build-image runs package phase twice #26455

📔 Documentation

  • Document observation for R2DBC #33335
  • Align Tomcat multiple connectors example with recommendation to configure SSL declaratively #33333
  • Actuator document is misleading about k8s startup probe #33327
  • Update documented for @Timed to reflect narrower support #33282
  • Update reference documentation to replace mentions of tags providers and contributors with their Observation-based equivalents #33281
  • Link to Micrometer's @Timed documentation #33266
  • Clarify use of the spring.cache.type property with Hazelcast #33258
  • Example git.commit.time in the Actuator API documentation is thousands of years in the future #33256
  • Update Spring Security filter dispatcher types docs to reflect change in default value #33252
  • Documentation for nested configuration properties in a native image uses @NestedConfigurationProperty too widely #33239
  • Document that the jar task should not be disabled when building a native image #33238
  • Document nesting configuration properties using records or Kotlin data classes and how and when to use @NestedConfigurationProperty #33235
  • Links to Features describes sections that have moved elsewhere #33214
  • Fix broken links in docs #33209
  • Document the need for compilation with -parameters when targeting a native image #33182

... (truncated)

Commits
  • c9c359f Release v3.0.0
  • fb2cc73 Work around Thymeleaf's dependency on spring-security-bom:6.0.0-RC2
  • 355b428 Merge branch '2.7.x'
  • 7ea5881 Update LATEST_GA to false to prepare for 3.0.0's release
  • 1de09f4 Merge branch '2.6.x' into 2.7.x
  • e922650 Upgrade to Spring Framework 6.0.2
  • 4b8a28a Next development version (v2.7.7-SNAPSHOT)
  • 14ba9b1 Start building against Spring Framework 6.0.2 snapshots
  • d4a9100 Next development version (v2.6.15-SNAPSHOT)
  • 28cb225 Merge branch '2.7.x'
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-test-autoconfigure from 2.7.18 to 3.0.0

Release notes

Sourced from org.springframework.boot:spring-boot-test-autoconfigure's releases.

v3.0.0

See the Release notes for 3.0 for upgrade instructions and details of new features.

⭐ New Features

  • Provide a configuration property for the observation patterns of Spring Integration components #33099

🐞 Bug Fixes

  • io.micrometer.tracing.Tracer on the classpath breaks AOT processing for tests #33298
  • Tracer library HTTP instrumentation is auto-configured unnecessarily #33287
  • Auto-configuration ignores user-provided ObservationConventions #33285
  • ScheduledBeanLazyInitializationExcludeFilter is auto-configured even when annotation-based scheduled has not been enabled #33284
  • SpringBootContextLoader prints banner twice when using a @ContextHierarchy #33263
  • Properties migrator causes an application to fail to start if it tries to map a property whose metadata data entry contains an invalid configuration property name #33250
  • Wavefront MeterRegistryCustomizer is not applying application tags from application.properties #33244
  • Actuator responses no longer format timestamps as ISO-8601 #33236
  • Configuration property is not bound in a native image when property has get, set, and is methods #33232
  • Configuration property binding does not deal with bridge methods #33212
  • Contribute missing resource hints for GraphQL schema files and GraphiQL HTML page #33208
  • Hints for ClientHttpRequestFactory should only be generated for matching methods #33203
  • Native profile should configure execution in pluginManagement #33184
  • Configuring management.server.port via a config tree results in a ConverterNotFoundException when the management context is refreshed #33169
  • JBoss logging does not route directly to SLF4J when using Logback #33155
  • Test with UseMainMethod.Always do not work with Kotlin main functions #33114
  • Maven process-aot does not specify source and target release when compiling generated sources #33112
  • Some Actuator beans are ineligible for post-processing #33110
  • AOT-generated source fails to compile when Actuator is enabled on a WebFlux project #33106
  • @ContextHierarchy should never be used with main method #33078
  • Maven process-aot fails when compiler plugin has been configured with --enable-preview #33012
  • Wavefront application tags differ from those used in a Spring Boot 2.x application #32844
  • Maven goal spring-boot:build-image runs package phase twice #26455

📔 Documentation

  • Document observation for R2DBC #33335
  • Align Tomcat multiple connectors example with recommendation to configure SSL declaratively #33333
  • Actuator document is misleading about k8s startup probe #33327
  • Update documented for @Timed to reflect narrower support #33282
  • Update reference documentation to replace mentions of tags providers and contributors with their Observation-based equivalents #33281
  • Link to Micrometer's @Timed documentation #33266
  • Clarify use of the spring.cache.type property with Hazelcast #33258
  • Example git.commit.time in the Actuator API documentation is thousands of years in the future #33256
  • Update Spring Security filter dispatcher types docs to reflect change in default value #33252
  • Documentation for nested configuration properties in a native image uses @NestedConfigurationProperty too widely #33239
  • Document that the jar task should not be disabled when building a native image #33238
  • Document nesting configuration properties using records or Kotlin data classes and how and when to use @NestedConfigurationProperty #33235
  • Links to Features describes sections that have moved elsewhere #33214
  • Fix broken links in docs #33209
  • Document the need for compilation with -parameters when targeting a native image #33182

... (truncated)

Commits
  • c9c359f Release v3.0.0
  • fb2cc73 Work around Thymeleaf's dependency on spring-security-bom:6.0.0-RC2
  • 355b428 Merge branch '2.7.x'
  • 7ea5881 Update LATEST_GA to false to prepare for 3.0.0's release
  • 1de09f4 Merge branch '2.6.x' into 2.7.x
  • e922650 Upgrade to Spring Framework 6.0.2
  • 4b8a28a Next development version (v2.7.7-SNAPSHOT)
  • 14ba9b1 Start building against Spring Framework 6.0.2 snapshots
  • d4a9100 Next development version (v2.6.15-SNAPSHOT)
  • 28cb225 Merge branch '2.7.x'
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-maven-plugin from 2.7.18 to 3.0.0

Release notes

Sourced from org.springframework.boot:spring-boot-maven-plugin's releases.

v3.0.0

See the Release notes for 3.0 for upgrade instructions and details of new features.

⭐ New Features

  • Provide a configuration property for the observation patterns of Spring Integration components #33099

🐞 Bug Fixes

  • io.micrometer.tracing.Tracer on the classpath breaks AOT processing for tests #33298
  • Tracer library HTTP instrumentation is auto-configured unnecessarily #33287
  • Auto-configuration ignores user-provided ObservationConventions #33285
  • ScheduledBeanLazyInitializationExcludeFilter is auto-configured even when annotation-based scheduled has not been enabled #33284
  • SpringBootContextLoader prints banner twice when using a @ContextHierarchy #33263
  • Properties migrator causes an application to fail to start if it tries to map a property whose metadata data entry contains an invalid configuration property name #33250
  • Wavefront MeterRegistryCustomizer is not applying application tags from application.properties #33244
  • Actuator responses no longer format timestamps as ISO-8601 #33236
  • Configuration property is not bound in a native image when property has get, set, and is methods #33232
  • Configuration property binding does not deal with bridge methods #33212
  • Contribute missing resource hints for GraphQL schema files and GraphiQL HTML page #33208
  • Hints for ClientHttpRequestFactory should only be generated for matching methods #33203
  • Native profile should configure execution in pluginManagement #33184
  • Configuring management.server.port via a config tree results in a ConverterNotFoundException when the management context is refreshed #33169
  • JBoss logging does not route directly to SLF4J when using Logback #33155
  • Test with UseMainMethod.Always do not work with Kotlin main functions #33114
  • Maven process-aot does not specify source and target release when compiling generated sources #33112
  • Some Actuator beans are ineligible for post-processing #33110
  • AOT-generated source fails to compile when Actuator is enabled on a WebFlux project #33106
  • @ContextHierarchy should never be used with main method #33078
  • Maven process-aot fails when compiler plugin has been configured with --enable-preview #33012
  • Wavefront application tags differ from those used in a Spring Boot 2.x application #32844
  • Maven goal spring-boot:build-image runs package phase twice #26455

📔 Documentation

  • Document observation for R2DBC #33335
  • Align Tomcat multiple connectors example with recommendation to configure SSL declaratively #33333
  • Actuator document is misleading about k8s startup probe #33327
  • Update documented for @Timed to reflect narrower support #33282
  • Update reference documentation to replace mentions of tags providers and contributors with their Observation-based equivalents #33281
  • Link to Micrometer's @Timed documentation #33266
  • Clarify use of the spring.cache.type property with Hazelcast #33258
  • Example git.commit.time in the Actuator API documentation is thousands of years in the future #33256
  • Update Spring Security filter dispatcher types docs to reflect change in default value #33252
  • Documentation for nested configuration properties in a native image uses @NestedConfigurationProperty too widely #33239
  • Document that the jar task should not be disabled when building a native image #33238
  • Document nesting configuration properties using records or Kotlin data classes and how and when to use @NestedConfigurationProperty #33235
  • Links to Features describes sections that have moved elsewhere #33214
  • Fix broken links in docs #33209
  • Document the need for compilation with -parameters when targeting a native image #33182

... (truncated)

Commits
  • c9c359f Release v3.0.0
  • fb2cc73 Work around Thymeleaf's dependency on spring-security-bom:6.0.0-RC2
  • 355b428 Merge branch '2.7.x'
  • 7ea5881 Update LATEST_GA to false to prepare for 3.0.0's release
  • 1de09f4 Merge branch '2.6.x' into 2.7.x
  • e922650 Upgrade to Spring Framework 6.0.2
  • 4b8a28a Next development version (v2.7.7-SNAPSHOT)
  • 14ba9b1 Start building against Spring Framework 6.0.2 snapshots
  • d4a9100 Next development version (v2.6.15-SNAPSHOT)
  • 28cb225 Merge branch '2.7.x'
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter from 2.7.18 to 3.0.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter's releases.

v3.0.0

See the Release notes for 3.0 for upgrade instructions and details of new features.

⭐ New Features

  • Provide a configuration property for the observation patterns of Spring Integration components #33099
  • ...

    Description has been truncated

Bumps the maven-dependencies group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) | `4.11.0` | `5.0.0` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `4.11.0` | `5.0.0` |
| org.apache.logging.log4j:log4j-slf4j-impl | `2.24.0` | `2.24.1` |
| org.apache.logging.log4j:log4j-core | `2.24.0` | `2.24.1` |
| [org.springframework.boot:spring-boot-configuration-processor](https://github.com/spring-projects/spring-boot) | `2.7.18` | `3.0.0` |
| [org.springframework.boot:spring-boot-starter](https://github.com/spring-projects/spring-boot) | `2.7.18` | `3.0.0` |
| [org.springframework.boot:spring-boot-starter-test](https://github.com/spring-projects/spring-boot) | `2.7.18` | `3.0.0` |
| [org.springframework.boot:spring-boot-test-autoconfigure](https://github.com/spring-projects/spring-boot) | `2.7.18` | `3.0.0` |
| [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) | `2.7.18` | `3.0.0` |
| [io.projectreactor:reactor-core](https://github.com/reactor/reactor-core) | `3.6.10` | `3.6.11` |
| [io.projectreactor:reactor-test](https://github.com/reactor/reactor-core) | `3.6.10` | `3.6.11` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.0` | `3.5.1` |
| [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.10.0` | `3.10.1` |


Updates `org.mockito:mockito-junit-jupiter` from 4.11.0 to 5.0.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v4.11.0...v5.0.0)

Updates `org.mockito:mockito-core` from 4.11.0 to 5.0.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v4.11.0...v5.0.0)

Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.24.0 to 2.24.1

Updates `org.apache.logging.log4j:log4j-core` from 2.24.0 to 2.24.1

Updates `org.apache.logging.log4j:log4j-core` from 2.24.0 to 2.24.1

Updates `org.springframework.boot:spring-boot-configuration-processor` from 2.7.18 to 3.0.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.7.18...v3.0.0)

Updates `org.springframework.boot:spring-boot-starter` from 2.7.18 to 3.0.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.7.18...v3.0.0)

Updates `org.springframework.boot:spring-boot-starter-test` from 2.7.18 to 3.0.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.7.18...v3.0.0)

Updates `org.springframework.boot:spring-boot-test-autoconfigure` from 2.7.18 to 3.0.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.7.18...v3.0.0)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 2.7.18 to 3.0.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.7.18...v3.0.0)

Updates `org.springframework.boot:spring-boot-starter` from 2.7.18 to 3.0.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.7.18...v3.0.0)

Updates `org.springframework.boot:spring-boot-starter-test` from 2.7.18 to 3.0.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.7.18...v3.0.0)

Updates `org.springframework.boot:spring-boot-test-autoconfigure` from 2.7.18 to 3.0.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.7.18...v3.0.0)

Updates `org.mockito:mockito-core` from 4.11.0 to 5.0.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v4.11.0...v5.0.0)

Updates `io.projectreactor:reactor-core` from 3.6.10 to 3.6.11
- [Release notes](https://github.com/reactor/reactor-core/releases)
- [Commits](reactor/reactor-core@v3.6.10...v3.6.11)

Updates `io.projectreactor:reactor-test` from 3.6.10 to 3.6.11
- [Release notes](https://github.com/reactor/reactor-core/releases)
- [Commits](reactor/reactor-core@v3.6.10...v3.6.11)

Updates `io.projectreactor:reactor-test` from 3.6.10 to 3.6.11
- [Release notes](https://github.com/reactor/reactor-core/releases)
- [Commits](reactor/reactor-core@v3.6.10...v3.6.11)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.0...surefire-3.5.1)

Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.10.0 to 3.10.1
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.10.0...maven-javadoc-plugin-3.10.1)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 2.7.18 to 3.0.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.7.18...v3.0.0)

---
updated-dependencies:
- dependency-name: org.mockito:mockito-junit-jupiter
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.mockito:mockito-core
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.apache.logging.log4j:log4j-slf4j-impl
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-configuration-processor
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-test
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-test-autoconfigure
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-test
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-test-autoconfigure
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.mockito:mockito-core
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: io.projectreactor:reactor-core
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: io.projectreactor:reactor-test
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: io.projectreactor:reactor-test
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested review from a team, CodeDrivenMitch and smcvb and removed request for a team October 20, 2024 04:54
@dependabot dependabot bot added this to the Release 4.11.0 milestone Oct 20, 2024
@smcvb
Copy link
Member

smcvb commented Oct 21, 2024

@dependabot show org.mockito:mockito-junit-jupiter ignore conditions

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2024

Ignore Conditions
Dependency Ignore Condition
org.mockito:mockito-junit-jupiter [>= 5.0.a, < 5.1]
org.mockito:mockito-junit-jupiter [>= 5.a, < 6]

@smcvb
Copy link
Member

smcvb commented Oct 21, 2024

@dependabot unignore org.mockito:mockito-junit-jupiter [>= 5.0.a, < 5.1]

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2024

OK, I will stop ignoring the org.mockito:mockito-junit-jupiter dependency and its ignore condition [>= 5.0.a, < 5.1].

@smcvb
Copy link
Member

smcvb commented Oct 21, 2024

@dependabot show org.mockito:mockito-core ignore conditions

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2024

Ignore Conditions
Dependency Ignore Condition
org.mockito:mockito-core [>= 5.0.a, < 5.1]
org.mockito:mockito-core [>= 5.a, < 6]

@smcvb
Copy link
Member

smcvb commented Oct 21, 2024

@dependabot unignore org.mockito:mockito-core [>= 5.0.a, < 5.1]

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2024

OK, I will stop ignoring the org.mockito:mockito-core dependency and its ignore condition [>= 5.0.a, < 5.1].

@smcvb
Copy link
Member

smcvb commented Oct 21, 2024

@dependabot show org.springframework.boot:spring-boot-configuration-processor ignore conditions

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2024

Ignore Conditions
Dependency Ignore Condition
org.springframework.boot:spring-boot-configuration-processor [>= 3.0.a, < 3.1]
org.springframework.boot:spring-boot-configuration-processor [>= 3.a, < 4]

@smcvb
Copy link
Member

smcvb commented Oct 21, 2024

@dependabot unignore org.springframework.boot:spring-boot-configuration-processor [>= 3.0.a, < 3.1]

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2024

OK, I will stop ignoring the org.springframework.boot:spring-boot-configuration-processor dependency and its ignore condition [>= 3.0.a, < 3.1].

@smcvb
Copy link
Member

smcvb commented Oct 21, 2024

@dependabot show org.springframework.boot:spring-boot-starter ignore conditions

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2024

Ignore Conditions
Dependency Ignore Condition
org.springframework.boot:spring-boot-starter [>= 3.0.a, < 3.1]
org.springframework.boot:spring-boot-starter [>= 3.a, < 4]

@smcvb
Copy link
Member

smcvb commented Oct 21, 2024

@dependabot unignore org.springframework.boot:spring-boot-starter [>= 3.0.a, < 3.1]

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2024

OK, I will stop ignoring the org.springframework.boot:spring-boot-starter dependency and its ignore condition [>= 3.0.a, < 3.1].

@smcvb
Copy link
Member

smcvb commented Oct 21, 2024

@dependabot show org.springframework.boot:spring-boot-starter-test ignore conditions

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2024

Ignore Conditions
Dependency Ignore Condition
org.springframework.boot:spring-boot-starter-test [>= 3.0.a, < 3.1]
org.springframework.boot:spring-boot-starter-test [>= 3.a, < 4]

@smcvb
Copy link
Member

smcvb commented Oct 21, 2024

@dependabot unignore org.springframework.boot:spring-boot-starter-test [>= 3.0.a, < 3.1]

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2024

OK, I will stop ignoring the org.springframework.boot:spring-boot-starter-test dependency and its ignore condition [>= 3.0.a, < 3.1].

@smcvb
Copy link
Member

smcvb commented Oct 21, 2024

@dependabot show org.springframework.boot:spring-boot-test-autoconfigure ignore conditions

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2024

Ignore Conditions
Dependency Ignore Condition
org.springframework.boot:spring-boot-test-autoconfigure [>= 3.0.a, < 3.1]
org.springframework.boot:spring-boot-test-autoconfigure [>= 3.a, < 4]

@smcvb
Copy link
Member

smcvb commented Oct 21, 2024

@dependabot unignore org.springframework.boot:spring-boot-test-autoconfigure [>= 3.0.a, < 3.1]

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2024

OK, I will stop ignoring the org.springframework.boot:spring-boot-test-autoconfigure dependency and its ignore condition [>= 3.0.a, < 3.1].

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2024

Dependabot attempted to update this pull request, but because the branch dependabot/maven/maven-dependencies-b9cd8f2938 is protected it was unable to do so.

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2024

Oh no! Something went wrong on our end. Please try again later.

If the problem persists, please contact GitHub support for assistance 🙇

@smcvb
Copy link
Member

smcvb commented Oct 21, 2024

@dependabot show org.springframework.boot:spring-boot-maven-plugin ignore conditions

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2024

Ignore Conditions
Dependency Ignore Condition
org.springframework.boot:spring-boot-maven-plugin [>= 3.0.a, < 3.1]
org.springframework.boot:spring-boot-maven-plugin [>= 3.a, < 4]

@smcvb
Copy link
Member

smcvb commented Oct 21, 2024

@dependabot unignore org.springframework.boot:spring-boot-maven-plugin [>= 3.0.a, < 3.1]

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2024

OK, I will stop ignoring the org.springframework.boot:spring-boot-maven-plugin dependency and its ignore condition [>= 3.0.a, < 3.1].

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2024

Oh no! Something went wrong on our end. Please try again later.

If the problem persists, please contact GitHub support for assistance 🙇

@smcvb
Copy link
Member

smcvb commented Oct 21, 2024

After commenting on dependabot-core issue #10722, I got the following reply:

We made a change 3 weeks ago to follow the maven version identifier specification.
Based on this, 5.0.a0 == 5.0.alpha < 5.0.a. The first 2 are prereleases but 5.0.a is not. Likewise with 5.a. If you use 5.0a0 and 5.a0, respectively, everything should work as before.

Hence, all minor dependency ignore rules present on dependencies that move above JDK8 should be unignored from our set.
As Dependabot is not allowed to recreate the issue itself, I'll close this issue for it to be recreated the next week.
As apparent from the comment log above, I have removed the ignore rules as intended.

@smcvb smcvb closed this Oct 21, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2024

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/maven/maven-dependencies-b9cd8f2938 branch October 21, 2024 09:13
@smcvb smcvb self-assigned this Oct 21, 2024
@smcvb smcvb removed this from the Release 4.11.0 milestone Oct 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant