v3.5.1
⚠️ Noteworthy Changes
- This release upgrades to Tomcat 10.1.42 which has introduced limits for part count and header size in
multipart/form-data
requests. These limits can be customized usingserver.tomcat.max-part-count
andserver.tomcat.max-part-header-size
respectively.
⭐ New Features
- Allow Specifying ConfigData.Options On ConfigDataEnvironmentContributors #42932
🐞 Bug Fixes
- Executable JAR application class encounters performance issues when classpath URLs reference a host #46028
- Loading from spring.factories may fail with a ClassNotFoundException when the TCCL changes between calls #46019
- spring.couchbase.authentication.jks.private-key-password has no effect #46006
- Actuator heapdump endpoint is failing on modern OpenJ9 JVMs #46005
- UnboundConfigurationPropertiesException is no longer thrown from IndexedElementsBinder #45994
- DataSouceBuilder can fail with a NPE when the driver is null #45992
- JSON writer incorrectly escapes forward slash which can cause structure logging issues #45980
- ManagementContextAutoConfiguration adds a property source that degrades binding performance #45968
- ClientHttpConnectorAutoConfiguration fails to load when 'java.net.http.HttpClient' is unavailable #45955
- It is not possible to opt-out of profile validation or use profile names that contain '.' #45947
- GraphQlProperties.DeprecatedSse is not annotated as deprecated #45878
- SpringApplication.setEnvironmentPrefix is ignored when reading MANAGEMENT_SERVER_PORT #45857
- Write and delete operations no longer work in the Cloud Foundry actuator support with Spring Security due to CSRF protection #45848
- ConditionalOnAvailableEndpoint does not use the ConditionContext's ClassLoader to load exposure outcome contributors #45803
- Binding no longer works with sytem environment properties that are not upper case #45741
- ManagementWebServerFactoryCustomizer and ManagementErrorPageCustomizer should not have the same order #45736
- Default version of Awailitility is not compatible with Kotlin 1.9 baseline #45673
- Spring Boot 3.5's dependency management should have been upgraded to Lettuce 6.6.0.RELEASE #45670
- Spring Boot 3.5's dependency management should have been upgraded to Jedis 6.0.0 #45669
- SAML2 autoconfiguration is not imported by
@WebMvcTest
#45666 - Spring Boot 3.5's dependency management should have been upgraded to MongoDB 5.5.0 #45660
📔 Documentation
- Fix Docker security options links in Packaging OCI images sections #46021
- Improve documentation for configuring Spring Security with '/error' #46009
- Timestamps in Retrieving Audit Events examples do not match the accompanying text #45997
- Add SSL response structure to actuator info endpoint documentation #45921
- Update javadoc of test slice annotations to suggest MockitoBean rather than MockBean #45915
- Include configuration classes from all modules in the "Auto-configuration Classes" appendix #45863
- Links to Testcontainers javadoc for many classes not in the core testcontainers module do not work #45844
- Update documentation to reflect changes in TestRestTemplate's default redirect behavior #45842
- Deprecation replacement for spring.codec.* properties has a typo #45743
- Gradle Shadow Plugin link in the reference guide is outdated #45740
- Example of using prometheus-metrics-exporter-pushgateway has wrong artifactId #45684
- Document use of git-commit-id-maven-plugin consistently #45683
- Update javadoc of Configurer classes that apply sensible defaults to describe how they're typically used #45656
🔨 Dependency Upgrades
- Upgrade to Build Helper Maven Plugin 3.6.1 #45827
- Upgrade to Byte Buddy 1.17.6 #45981
- Upgrade to Caffeine 3.2.1 #45864
- Upgrade to DB2 JDBC 12.1.2.0 #45942
- Upgrade to Git Commit ID Maven Plugin 9.0.2 #45828
- Upgrade to Groovy 4.0.27 #45829
- Upgrade to Hibernate 6.6.18.Final #45958
- Upgrade to HttpClient5 5.5 #46031
- Upgrade to Infinispan 15.2.4.Final #45943
- Upgrade to Jackson Bom 2.19.1 #45982
- Upgrade to Jaybird 6.0.2 #45832
- Upgrade to Jetty 12.0.22 #45834
- Upgrade to Jetty Reactive HTTPClient 4.0.10 #45833
- Upgrade to jOOQ 3.19.24 #45944
- Upgrade to Micrometer 1.15.1 #45776
- Upgrade to Micrometer Tracing 1.5.1 #45777
- Upgrade to MongoDB 5.5.1 #45865
- Upgrade to Netty 4.1.122.Final #45835
- Upgrade to Postgresql 42.7.7 #45945
- Upgrade to Prometheus Client 1.3.8 #45837
- Upgrade to Pulsar 4.0.5 #45838
- Upgrade to Reactor Bom 2024.0.7 #45778
- Upgrade to REST Assured 5.5.5 #45839
- Upgrade to Spring Authorization Server 1.5.1 #45779
- Upgrade to Spring Data Bom 2025.0.1 #45780
- Upgrade to Spring Framework 6.2.8 #45781
- Upgrade to Spring HATEOAS 2.5.1 #45946
- Upgrade to Spring Kafka 3.3.7 #45782
- Upgrade to Spring LDAP 3.3.1 #45783
- Upgrade to Spring Pulsar 1.2.7 #45784
- Upgrade to Spring RESTDocs 3.0.4 #45785
- Upgrade to Spring Security 6.5.1 #45786
- Upgrade to Spring Session 3.5.1 #45787
- Upgrade to Testcontainers 1.21.2 #46029
- Upgrade to Tomcat 10.1.42 #45872
- Upgrade to UnboundID LDAPSDK 7.0.3 #45983
- Upgrade to XmlUnit2 2.10.2 #45841
- Upgrade to Zipkin Reporter 3.5.1 #45826
❤️ Contributors
Thank you to all the contributors who worked on this release:
@Peksa, @Rutujakolte03, @chanbinme, @csbiy, @davidlj95, @izeye, @juliojgd, @ngocnhan-tran1996, @nicolasgarea, @nosan, @quaff, @shekharAggarwal, @tanruian, and @wonyongg