Skip to content

Bump org.springframework:spring-beans from 7.0.3 to 7.0.5#609

Merged
conorheffron merged 1 commit intor912from
dependabot/maven/org.springframework-spring-beans-7.0.5
Mar 7, 2026
Merged

Bump org.springframework:spring-beans from 7.0.3 to 7.0.5#609
conorheffron merged 1 commit intor912from
dependabot/maven/org.springframework-spring-beans-7.0.5

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 2, 2026

Bumps org.springframework:spring-beans from 7.0.3 to 7.0.5.

Release notes

Sourced from org.springframework:spring-beans's releases.

v7.0.5

⚠️ Attention Required

  • Optimize request and response header handling in Spring MVC #36334

⭐ New Features

  • Consistent adaptation of HTTP headers on Servlet responses #36343
  • Copy methodAnnotations in MethodParameter copy constructor #36342
  • Improve performance of validation groups determination in WebFlux #36336
  • Reuse AnnotatedMethod annotation cache in derived instances #36322
  • Optimize the addition of a charset to the MediaType in AbstractHttpMessageConverter #36320
  • Optimize MediaType(MediaType, Charset) constructor #36318
  • Detect all common size exceptions from Tomcat and Commons FileUpload 2.x #36317
  • Consistently support @Autowired as a meta-annotation #36315
  • Avoid duplicate required attribute lookup for @Autowired annotations #36314
  • Cache @ResponseBody presence per controller class in RequestResponseBodyMethodProcessor #36311

🐞 Bug Fixes

  • ResolvableType#getGenerics() breaks serialization #36346
  • DefaultHttpMessageConverters not adding provided configurer #36332
  • Restore early MessageConsumer creation for temporary queue #36321
  • Multipart upload leak on client abort (ByteBuf.release() not called) #36262

📔 Documentation

  • Document that SpEL expressions using Optional with null-safe and Elvis operators are not compilable #36331
  • Improve documentation of baseline API version to emphasize version must be supported #36316
  • Stop referring to obsolete ListenableFuture in documentation #36313
  • Stop referring to standard Java features as "Java 8" features in documentation #36310

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Niravil and @​TAKETODAY

v7.0.4

⭐ New Features

  • Cache method annotations in MethodParameter and AnnotatedMethod #36307
  • Consistently support @Lazy as a meta-annotation at arbitrary depths #36306
  • Consistently support @Validated as a meta-annotation at arbitrary depths #36305
  • Let developers disable default registrations in HttpMessageConverters #36303
  • Log which HandlerInterceptor threw the exception #36281
  • Improve performance of hashcode calculations for request mappings #36279
  • Improve performance of HandlerMethod bean lookup #36278
  • Improve performance of version mapping #36276
  • Improve performance of single pattern request mappings #36275

... (truncated)

Commits
  • 16ecbfc Release v7.0.5
  • 85c18ca Update docs on supported versions with baseline notation
  • 22bd8bd Skip serialization of potentially non-serializable cached state
  • 9b10bb5 Polishing
  • 727ccd0 Avoid setCharacterEncoding(Charset) call with null value
  • a9f447e Consistent adaptation of HTTP headers on Servlet responses
  • 0841e79 Copy methodAnnotations in MethodParameter copy constructor
  • a1868d3 fix TransactionAspectSupport#currentTransactionStatus javadoc
  • e5aac66 ServletResponseHeadersAdapter checks contentType property
  • 8bf85d2 Polishing
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.springframework:spring-beans](https://github.com/spring-projects/spring-framework) from 7.0.3 to 7.0.5.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v7.0.3...v7.0.5)

---
updated-dependencies:
- dependency-name: org.springframework:spring-beans
  dependency-version: 7.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Mar 2, 2026
@github-actions github-actions bot requested a review from conorheffron March 2, 2026 10:35
conorheffron added a commit that referenced this pull request Mar 7, 2026
- [ ] #612 
- [ ] #611 
- [ ] #610 
- [ ] #609 
- [ ] #608
@conorheffron conorheffron mentioned this pull request Mar 7, 2026
6 tasks
@conorheffron conorheffron changed the base branch from main to r912 March 7, 2026 22:21
@conorheffron conorheffron merged commit c5fca80 into r912 Mar 7, 2026
7 of 9 checks passed
@dependabot dependabot bot deleted the dependabot/maven/org.springframework-spring-beans-7.0.5 branch March 7, 2026 22:21
conorheffron added a commit that referenced this pull request Mar 8, 2026
* Release v9.1.2

- [ ] #612 
- [ ] #611 
- [ ] #610 
- [ ] #609 
- [ ] #608

* Update package.json

* Update package-lock.json

* Bump software.amazon.awssdk:secretsmanager from 2.41.34 to 2.42.4 (#612)

Bumps software.amazon.awssdk:secretsmanager from 2.41.34 to 2.42.4.

---
updated-dependencies:
- dependency-name: software.amazon.awssdk:secretsmanager
  dependency-version: 2.42.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump com.fasterxml.jackson.core:jackson-databind from 2.21.0 to 2.21.1 (#611)

Bumps [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) from 2.21.0 to 2.21.1.
- [Commits](https://github.com/FasterXML/jackson/commits)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump mockito.version from 5.21.0 to 5.22.0 (#610)

Bumps `mockito.version` from 5.21.0 to 5.22.0.

Updates `org.mockito:mockito-core` from 5.21.0 to 5.22.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.21.0...v5.22.0)

Updates `org.mockito:mockito-junit-jupiter` from 5.21.0 to 5.22.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.21.0...v5.22.0)

---
updated-dependencies:
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: org.mockito:mockito-junit-jupiter
  dependency-version: 5.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump org.springframework:spring-beans from 7.0.3 to 7.0.5 (#609)

Bumps [org.springframework:spring-beans](https://github.com/spring-projects/spring-framework) from 7.0.3 to 7.0.5.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v7.0.3...v7.0.5)

---
updated-dependencies:
- dependency-name: org.springframework:spring-beans
  dependency-version: 7.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump net.bytebuddy:byte-buddy from 1.18.5 to 1.18.7 (#608)

Bumps [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) from 1.18.5 to 1.18.7.
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.18.5...byte-buddy-1.18.7)

---
updated-dependencies:
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.18.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump jsonpath in /frontend in the npm_and_yarn group across 1 directory (#614)

Bumps the npm_and_yarn group with 1 update in the /frontend directory: [jsonpath](https://github.com/dchester/jsonpath).


Updates `jsonpath` from 1.2.1 to 1.3.0
- [Commits](https://github.com/dchester/jsonpath/commits)

---
updated-dependencies:
- dependency-name: jsonpath
  dependency-version: 1.3.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update package-lock.json

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

Development

Successfully merging this pull request may close these issues.

1 participant