From 8152bd02925646e06c39471688fee97e9d768ca2 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Thu, 15 Jan 2026 14:37:35 +0000 Subject: [PATCH 1/4] Upgrade to Micrometer 1.15.8 Closes gh-48705 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 0c9a346ff6e..b08fd03e555 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1582,7 +1582,7 @@ bom { releaseNotes("https://github.com/apache/maven-war-plugin/releases/tag/maven-war-plugin-{version}") } } - library("Micrometer", "1.15.8-SNAPSHOT") { + library("Micrometer", "1.15.8") { considerSnapshots() group("io.micrometer") { modules = [ From 3ea6db0a56e4e471c46153b1261d58b4b22af0f8 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Thu, 15 Jan 2026 14:37:35 +0000 Subject: [PATCH 2/4] Upgrade to Micrometer Tracing 1.5.8 Closes gh-48706 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index b08fd03e555..9f139062234 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1604,7 +1604,7 @@ bom { releaseNotes("https://github.com/micrometer-metrics/micrometer/releases/tag/v{version}") } } - library("Micrometer Tracing", "1.5.8-SNAPSHOT") { + library("Micrometer Tracing", "1.5.8") { considerSnapshots() group("io.micrometer") { bom("micrometer-tracing-bom") From 7bd53c7ba2955b49d4a07e84764a0539036db76c Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Thu, 15 Jan 2026 14:37:40 +0000 Subject: [PATCH 3/4] Upgrade to R2DBC MSSQL 1.0.4.RELEASE Closes gh-48847 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 9f139062234..cff7da79d71 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1906,7 +1906,7 @@ bom { releaseNotes("https://github.com/mariadb-corporation/mariadb-connector-r2dbc/releases/tag/{version}") } } - library("R2DBC MSSQL", "1.0.3.RELEASE") { + library("R2DBC MSSQL", "1.0.4.RELEASE") { group ("io.r2dbc") { modules = [ "r2dbc-mssql" From e5fd82855ac64ec9acb997ac5d28c84a5ce546af Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Thu, 15 Jan 2026 14:37:45 +0000 Subject: [PATCH 4/4] Upgrade to Undertow 2.3.21.Final Closes gh-48848 --- .../boot/autoconfigure/web/ServerProperties.java | 5 ++--- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- .../embedded/undertow/UndertowServletWebServerFactory.java | 2 +- 3 files changed, 4 insertions(+), 5 deletions(-) diff --git a/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java b/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java index 2ec75feb2c6..afd4ed46c8d 100644 --- a/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java +++ b/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java @@ -1614,10 +1614,9 @@ public class ServerProperties { public static class Undertow { /** - * Maximum size of the HTTP post content. When the value is -1, the default, the - * size is unlimited. + * Maximum size of the HTTP post content. */ - private DataSize maxHttpPostSize = DataSize.ofBytes(-1); + private DataSize maxHttpPostSize = DataSize.ofMegabytes(2); /** * Size of each buffer. The default is derived from the maximum amount of memory diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index cff7da79d71..42017602669 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2612,7 +2612,7 @@ bom { releaseNotes("https://github.com/pingidentity/ldapsdk/releases/tag/{version}") } } - library("Undertow", "2.3.20.Final") { + library("Undertow", "2.3.22.Final") { group("io.undertow") { modules = [ "undertow-core", diff --git a/spring-boot-project/spring-boot/src/main/java/org/springframework/boot/web/embedded/undertow/UndertowServletWebServerFactory.java b/spring-boot-project/spring-boot/src/main/java/org/springframework/boot/web/embedded/undertow/UndertowServletWebServerFactory.java index bd80197f372..f5851d2f87f 100644 --- a/spring-boot-project/spring-boot/src/main/java/org/springframework/boot/web/embedded/undertow/UndertowServletWebServerFactory.java +++ b/spring-boot-project/spring-boot/src/main/java/org/springframework/boot/web/embedded/undertow/UndertowServletWebServerFactory.java @@ -636,7 +636,7 @@ public class UndertowServletWebServerFactory extends AbstractServletWebServerFac for (Cookie cookie : exchange.responseCookies()) { SameSite sameSite = getSameSite(asServletCookie(cookie)); if (sameSite == SameSite.OMITTED) { - cookie.setSameSite(false); + cookie.setAttribute(Cookie.COOKIE_SAME_SITE_ATTR, null); } else if (sameSite != null) { cookie.setSameSiteMode(sameSite.attributeValue());