Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dependency org.springframework.boot:spring-boot-starter-data-jpa to v2.4.1 - autoclosed #523

Closed
wants to merge 1 commit into from
Closed

Update dependency org.springframework.boot:spring-boot-starter-data-jpa to v2.4.1 - autoclosed #523

wants to merge 1 commit into from

Conversation

mend-for-jackfan.us.kg[bot]
Copy link

This PR contains the following updates:

Package Update Change
org.springframework.boot:spring-boot-starter-data-jpa (source) patch 2.4.0 -> 2.4.1

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 9.8 CVE-2022-22965 #504
High 7.4 CVE-2020-25638 #260
Medium 4.3 CVE-2021-22060 #480
Medium 4.3 CVE-2021-22096 #464

Release Notes

spring-projects/spring-boot

v2.4.1

🪲 Bug Fixes

  • Wildcard config file locations from the working directory override each other #​24428
  • Configuration property binding processes JavaBean methods in a non-deterministic order which may result in variable behavior #​24425
  • JPA repositories mode should not be deferred by default #​24401
  • @Name support for value object binding fails with Kotlin classes #​24379
  • Allow recursive profile group references #​24327
  • Correct external application properties load order #​24308
  • Wrapper types are not displayed in actuator env endpoint #​24307
  • OriginTrackedPropertiesLoader#isNewDocument has wrong visibility #​24268
  • Redis health indicator requests more information than it needs resulting in unnecessarily large responses from Redis #​24251
  • ErrorAttributeOptions.excluding throws IllegalArgumentException if includes is empty #​24234
  • Actuator web endpoints cannot respond with custom HTTP status codes when running on MVC or WebFlux #​24223
  • Missing Spring Integration metrics due to the MeterRegistry bean being looked for before it has been defined #​24220
  • LocaleResolver (MVC) and LocaleContextResolver (WebFlux) beans will back off if a user provides a bean of the same type and a custom name but Framework will then use its own default #​24209
  • DevTools still refers to deprecated keys #​24203
  • DataSourceUnwrapper calls Wrapper.isWrapperFor with a class rather than an interface causing Oracle UCP warnings #​24200
  • WebFluxTags performs unnecessary Pattern compilation when ignoring trailing slashes #​24194
  • elasticsearch-rest-client-sniffer is missing from the dependency management for Elasticsearch's REST client modules #​24186
  • No converter is found when binding a non-string property via config tree #​24171
  • LoggingSystem calls with Log4J throws NullPointerException #​24163
  • Any line that is immediately after a line that contains only a # is lost when reading application properties files #​24158
  • Ensure the WebClient to be present before enabling the WebTestClientContextCustomizer #​24152
  • ConfigDataResourceNotFoundException incorrectly thrown for valid classpath locations #​24143

📔 Documentation

  • Document how to use Devtools without an IDE #​24410
  • Add link to appendix from error handling documentation #​24408
  • Document how to run unit tests #​24301
  • Invalid ErrorAttributesOptions#getInclude Javadoc #​24259
  • Fix typo in TomcatWebServer Javadoc #​24245
  • Security properties appendix contains spring.session and spring.ldap properties that belong elsewhere #​24196
  • Rename "sla" to "slo" in reference documentation #​24162
  • Document the granularity for property document imports #​22987

🔨 Dependency Upgrades

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

  • If you want to rebase/retry this PR, click this checkbox.

@mend-for-jackfan.us.kg mend-for-jackfan.us.kg bot added the security fix Security fix generated by WhiteSource label Apr 18, 2022
@mend-for-jackfan.us.kg mend-for-jackfan.us.kg bot changed the title Update dependency org.springframework.boot:spring-boot-starter-data-jpa to v2.4.1 Update dependency org.springframework.boot:spring-boot-starter-data-jpa to v2.4.1 - autoclosed Apr 25, 2022
@mend-for-jackfan.us.kg mend-for-jackfan.us.kg bot deleted the whitesource-remediate/org.springframework.boot-spring-boot-starter-data-jpa-2.x branch April 25, 2022 03:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants