From aa02fbfb8af26ba03d7e888095d6fb84beaa7647 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Thu, 10 Jul 2025 06:41:37 +0200 Subject: [PATCH 01/10] Upgrade to ActiveMQ 6.1.7 Closes gh-46385 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index af6103a54ad..507d66370b8 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -28,7 +28,7 @@ bom { issueLabels = ["type: dependency-upgrade"] } } - library("ActiveMQ", "6.1.6") { + library("ActiveMQ", "6.1.7") { group("org.apache.activemq") { modules = [ "activemq-console" { From f38980a4e062ae182d9dd37234e08a4fc920e354 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Thu, 10 Jul 2025 06:41:40 +0200 Subject: [PATCH 02/10] Upgrade to Hibernate 6.6.20.Final Closes gh-46386 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 507d66370b8..82cf1f616e4 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -532,7 +532,7 @@ bom { releaseNotes("https://github.com/hazelcast/hazelcast/releases/tag/v{version}") } } - library("Hibernate", "6.6.18.Final") { + library("Hibernate", "6.6.20.Final") { group("org.hibernate.orm") { modules = [ "hibernate-agroal", From 4f7e75ce3e1e793a2050880f9b99b1af33f24161 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Thu, 10 Jul 2025 06:41:44 +0200 Subject: [PATCH 03/10] Upgrade to Infinispan 15.0.16.Final Closes gh-46387 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 82cf1f616e4..5ae4c2b6e07 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -642,7 +642,7 @@ bom { ] } } - library("Infinispan", "15.0.15.Final") { + library("Infinispan", "15.0.16.Final") { group("org.infinispan") { bom("infinispan-bom") } From 9e687cfc54707e366fb59508b03457df7ca5bc6e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Thu, 10 Jul 2025 06:41:48 +0200 Subject: [PATCH 04/10] Upgrade to Jetty 12.0.23 Closes gh-46388 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 5ae4c2b6e07..e593d72244b 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1006,7 +1006,7 @@ bom { ] } } - library("Jetty", "12.0.22") { + library("Jetty", "12.0.23") { group("org.eclipse.jetty.ee10") { bom("jetty-ee10-bom") } From b1e41b5a39ade3aa976df6191c4e94ff1cb57bad Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Thu, 10 Jul 2025 06:41:52 +0200 Subject: [PATCH 05/10] Upgrade to Prometheus Client 1.3.10 Closes gh-46389 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index e593d72244b..05f405e53bf 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1697,7 +1697,7 @@ bom { releaseNotes("https://github.com/pgjdbc/pgjdbc/releases/tag/REL{version}") } } - library("Prometheus Client", "1.3.8") { + library("Prometheus Client", "1.3.10") { group("io.prometheus") { bom("prometheus-metrics-bom") } From 1381a4b05f059423e22832232974ad33f945e9a3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Thu, 10 Jul 2025 06:41:55 +0200 Subject: [PATCH 06/10] Upgrade to RxJava3 3.1.11 Closes gh-46390 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 05f405e53bf..81732c69b30 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1920,7 +1920,7 @@ bom { releaseNotes("https://github.com/rsocket/rsocket-java/releases/tag/{version}") } } - library("RxJava3", "3.1.10") { + library("RxJava3", "3.1.11") { group("io.reactivex.rxjava3") { modules = [ "rxjava" From 2a65c1b0a1059f9b1150d0ea9e3d0a479a249b5a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Thu, 10 Jul 2025 06:41:59 +0200 Subject: [PATCH 07/10] Upgrade to Spring GraphQL 1.3.6 Closes gh-46391 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 81732c69b30..228663748fb 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2161,7 +2161,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-framework/releases/tag/v{version}") } } - library("Spring GraphQL", "1.3.5") { + library("Spring GraphQL", "1.3.6") { considerSnapshots() group("org.springframework.graphql") { modules = [ From 583a1c1079a4890477eea73c3472b420a3bb2210 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Thu, 10 Jul 2025 06:43:52 +0200 Subject: [PATCH 08/10] Upgrade to GraphQL Java 22.4 Closes gh-46394 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 228663748fb..2d413e8189e 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -454,7 +454,7 @@ bom { ] } } - library("GraphQL Java", "22.3") { + library("GraphQL Java", "22.4") { prohibit { startsWith(["2018-", "2019-", "2020-", "2021-", "230521-"]) because "These are snapshots that we don't want to see" From c310b5ed4266146af3fefb14dfb9b4d8372ed7ff Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Thu, 10 Jul 2025 06:42:03 +0200 Subject: [PATCH 09/10] Upgrade to Tomcat 10.1.43 Closes gh-46392 --- gradle.properties | 2 +- .../boot/autoconfigure/web/ServerProperties.java | 2 +- .../web/embedded/TomcatWebServerFactoryCustomizerTests.java | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/gradle.properties b/gradle.properties index 5db24ae9ef4..3c25a089a22 100644 --- a/gradle.properties +++ b/gradle.properties @@ -21,6 +21,6 @@ nativeBuildToolsVersion=0.10.6 snakeYamlVersion=2.3 springFrameworkVersion=6.2.9-SNAPSHOT springFramework60xVersion=6.0.23 -tomcatVersion=10.1.42 +tomcatVersion=10.1.43 kotlin.stdlib.default.dependency=false diff --git a/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java b/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java index 5576c28859f..db1fac9e3ec 100644 --- a/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java +++ b/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java @@ -425,7 +425,7 @@ public class ServerProperties { * Requests that exceed this limit will be rejected. A value of less than 0 means * no limit. */ - private int maxPartCount = 10; + private int maxPartCount = 50; /** * Maximum amount of request body to swallow. diff --git a/spring-boot-project/spring-boot-autoconfigure/src/test/java/org/springframework/boot/autoconfigure/web/embedded/TomcatWebServerFactoryCustomizerTests.java b/spring-boot-project/spring-boot-autoconfigure/src/test/java/org/springframework/boot/autoconfigure/web/embedded/TomcatWebServerFactoryCustomizerTests.java index 7614964ba2e..5b303ba4df1 100644 --- a/spring-boot-project/spring-boot-autoconfigure/src/test/java/org/springframework/boot/autoconfigure/web/embedded/TomcatWebServerFactoryCustomizerTests.java +++ b/spring-boot-project/spring-boot-autoconfigure/src/test/java/org/springframework/boot/autoconfigure/web/embedded/TomcatWebServerFactoryCustomizerTests.java @@ -184,7 +184,7 @@ class TomcatWebServerFactoryCustomizerTests { @Test void defaultMaxPartCount() { customizeAndRunServer( - (server) -> assertThat(server.getTomcat().getConnector().getMaxPartCount()).isEqualTo(10)); + (server) -> assertThat(server.getTomcat().getConnector().getMaxPartCount()).isEqualTo(50)); } @Test From 4a4ab261411d464aecd3a4b1eca75fd3882c2841 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Thu, 10 Jul 2025 06:42:07 +0200 Subject: [PATCH 10/10] Upgrade to XmlUnit2 2.10.3 Closes gh-46393 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 2d413e8189e..905846d251f 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2519,7 +2519,7 @@ bom { releaseNotes("https://github.com/mojohaus/xml-maven-plugin/releases/tag/{version}") } } - library("XmlUnit2", "2.10.2") { + library("XmlUnit2", "2.10.3") { group("org.xmlunit") { modules = [ "xmlunit-assertj",