Bump spring-boot-dependencies from 2.7.2 to 2.7.3 in /dependencyManagement (#6666)
Bumps [spring-boot-dependencies](https://github.com/spring-projects/spring-boot) from 2.7.2 to 2.7.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-boot/releases">spring-boot-dependencies's releases</a>.</em></p> <blockquote> <h2>v2.7.3</h2> <h2>🐞 Bug Fixes</h2> <ul> <li>Misleading error message when using JarMode Layertools and the source is not an archive <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32097">#32097</a></li> <li>ClassNotFoundException can be thrown for classes in nested jars when under GC pressure <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32085">#32085</a></li> <li>Flyway auto-configuration fails with Flyway 9 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32034">#32034</a></li> <li>BasicJsonParser does not protect against deeply nested maps <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32031">#32031</a></li> <li>OptionalLiveReloadServer logs the wrong port number when it is configured to use an ephemeral port <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31984">#31984</a></li> <li>Servlet WebServerStartStopLifecycle doesn't set running to false on stop <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31967">#31967</a></li> <li>JUL-based logging performed during close of application context is lost <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31963">#31963</a></li> <li>The hash of spring-boot-jarmode-layertools.jar that's added to a fat jar doesn't match the hash of the equivalent published artifact <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31949">#31949</a></li> <li>management.endpoint.health.probes.add-additional-paths has no effect when configuration properties have already created the liveness and/or readiness groups <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31926">#31926</a></li> <li>UnsupportedDataSourcePropertyException is thrown when attempting to set jdbcUrl for C3P0 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31921">#31921</a></li> <li>Dev Tools restart failures caused by a too short quiet period are hard to diagnose <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31906">#31906</a></li> <li>HealthContributor beans managed by a CompositeHealthContributor are recreated on each call <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31879">#31879</a></li> <li>Dependency management for REST Assured is incomplete <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31877">#31877</a></li> <li>Jar Handler never clears PROTOCOL_HANDLER system property <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31875">#31875</a></li> <li>BasicJsonParser can fail with a timeout or stackoverflow with malformed map JSON <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31873">#31873</a></li> <li>BasicJsonParser can fail with a stackoverflow exception <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31871">#31871</a></li> </ul> <h2>📔 Documentation</h2> <ul> <li>Review Git contribution documentation <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32099">#32099</a></li> <li>Documentation for Maven Plugin classifier has an unresolved external reference <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32043">#32043</a></li> <li>Update Static Content reference documentation to reflect the DefaultServlet no longer being enabled by default <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32026">#32026</a></li> <li>Example log output is out-of-date and inconsistent <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31987">#31987</a></li> <li>Document that Undertow's record-request-start-time server option must be enabled for %D to work in access logging <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31976">#31976</a></li> <li>Update documentation on using H2C to consider running behind a proxy that's performing TLS termination <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31974">#31974</a></li> <li>Some properties in the Common Application Properties appendix have no description <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31971">#31971</a></li> <li>Fix links in documentations <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31951">#31951</a></li> <li>External configuration documentation uses incorrect placeholder syntax <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31943">#31943</a></li> <li>server.reactive.session.cookie properties are not listed in the application properties appendix <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31914">#31914</a></li> <li>Remove documentation and metadata references to ConfigFileApplicationListener <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31901">#31901</a></li> <li>Metadata for 'spring.beaninfo.ignore' has incorrect SourceType <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31899">#31899</a></li> <li>Remove reference to nitrite-spring-boot-starter <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31893">#31893</a></li> <li>Remove reference to Azure Application Insights <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31890">#31890</a></li> <li>Fix typos in code and documentation <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31865">#31865</a></li> </ul> <h2>🔨 Dependency Upgrades</h2> <ul> <li>Upgrade to Byte Buddy 1.12.13 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32013">#32013</a></li> <li>Upgrade to Couchbase Client 3.3.3 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32014">#32014</a></li> <li>Upgrade to Dependency Management Plugin 1.0.13.RELEASE <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32056">#32056</a></li> <li>Upgrade to Dropwizard Metrics 4.2.11 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32015">#32015</a></li> <li>Upgrade to Embedded Mongo 3.4.8 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32016">#32016</a></li> <li>Upgrade to GraphQL Java 18.3 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31945">#31945</a></li> <li>Upgrade to Groovy 3.0.12 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32017">#32017</a></li> <li>Upgrade to Gson 2.9.1 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32018">#32018</a></li> <li>Upgrade to Hazelcast 5.1.3 <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32019">#32019</a></li> <li>Upgrade to Hibernate Validator 6.2.4.Final <a href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32020">#32020</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="bff9b3924f
"><code>bff9b39</code></a> Release v2.7.3</li> <li><a href="60e1cc510c
"><code>60e1cc5</code></a> Merge branch '2.6.x' into 2.7.x</li> <li><a href="13bd61b6fe
"><code>13bd61b</code></a> Revert nested jar fixes</li> <li><a href="bd74344025
"><code>bd74344</code></a> Revert "Don't close jar files early"</li> <li><a href="674022d401
"><code>674022d</code></a> Revert "Don't close nested jars or wrapper when parent is closed"</li> <li><a href="3fcfcc4a3b
"><code>3fcfcc4</code></a> Merge branch '2.6.x' into 2.7.x</li> <li><a href="3b01325c6b
"><code>3b01325</code></a> Use asList consistently</li> <li><a href="ca63a6e9ad
"><code>ca63a6e</code></a> Merge branch '2.6.x' into 2.7.x</li> <li><a href="191593cf15
"><code>191593c</code></a> Review Git contribution documentation</li> <li><a href="1c6624db44
"><code>1c6624d</code></a> Merge branch '2.6.x' into 2.7.x</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-boot/compare/v2.7.2...v2.7.3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This commit is contained in:
parent
6e649d36c3
commit
90637cc434
|
@ -114,7 +114,7 @@ val DEPENDENCIES = listOf(
|
||||||
"org.spockframework:spock-spring:2.2-groovy-4.0",
|
"org.spockframework:spock-spring:2.2-groovy-4.0",
|
||||||
"org.scala-lang:scala-library:2.11.12",
|
"org.scala-lang:scala-library:2.11.12",
|
||||||
// Note that this is only referenced as "org.springframework.boot" in build files, not the artifact name.
|
// Note that this is only referenced as "org.springframework.boot" in build files, not the artifact name.
|
||||||
"org.springframework.boot:spring-boot-dependencies:2.7.2",
|
"org.springframework.boot:spring-boot-dependencies:2.7.3",
|
||||||
"javax.validation:validation-api:2.0.1.Final",
|
"javax.validation:validation-api:2.0.1.Final",
|
||||||
"org.yaml:snakeyaml:1.32"
|
"org.yaml:snakeyaml:1.32"
|
||||||
)
|
)
|
||||||
|
|
Loading…
Reference in New Issue