Bump version.springframework from 5.3.39 to 7.0.7 by dependabot[bot] · Pull Request #451 · OWASP-Benchmark/BenchmarkJava

dependabot · 2026-04-17T11:05:31Z

Bumps version.springframework from 5.3.39 to 7.0.7.
Updates org.springframework:spring-context from 5.3.39 to 7.0.7

Release notes

Sourced from org.springframework:spring-context's releases.

v7.0.7

⭐ New Features

Improve SpringValidatorAdapter and MethodValidationAdapter performance #36621

Support JSON array decoding to Flux in KotlinSerializationJsonDecoder #36597

Deprecate methodIdentification() in CacheAspectSupport for removal #36575

Add MockRestServiceServer#createServer variant for RestClient #36572

Create RestClientXhrTransport variant replacing RestTemplateXhrTransport #36566

Improve error handling in multipart codecs #36563

Make ApplicationListenerMethodAdapter#getTargetMethod() public #36558

ApiVersionConfigurer.setSupportedVersionPredicate() returns void instead of ApiVersionConfigurer #36551

LazyConnectionDataSourceProxy does not work well with Hibernate's multi-tenancy by schema strategy #36527

Add registerManagedResource variant with bean key argument to MBeanExporter #36520

Handle blank Accept-Language header in AcceptHeaderLocaleResolver #36513

Make AbstractStreamingClientHttpRequest and AbstractBufferingClientHttpRequest public #36501

MySQL Error 149 (Galera/WSREP conflict) not translated to ConcurrencyFailureException in Spring JDBC/ORM #36499

Add PreFlightRequestFilter #36482

Support configuration of extension context scope for SpringExtension via Spring or JUnit properties #36460

Lower log level of "Cache miss for REQUEST dispatch" in HandlerMappingIntrospector #36309

🐞 Bug Fixes

WebDataBinder unnecessarily instantiates collections when using the "!" and "_" prefixes #36625

Cache pollution from high-cardinality FieldError default messages in MessageSourceSupport #36609

MergedAnnotation does not use ClassLoader for method or field #36606

@Sql fails if DataSource is wrapped in a TransactionAwareDataSourceProxy #36611

AnnotatedTypeMetadata no longer retains source declaration order on Java 24+ #36598

MergedAnnotation.asMap() fails when an attribute references a non-existent class #36586

FileSystemResource does not strictly follow the Resource#isReadable() contract #36584

Converter overrides in HttpMessageConverters only apply when defaults are registered #36579

Invalid method return type metadata for ClassFile variant on JDK 24+ #36577

Fix Writer lifecycle for AbstractJsonHttpMessageConverter.writeInternal(Object, Type, Writer) #36565

Flushing-related regression in SseServerResponse #36537

LazyConnectionDataSourceProxy does not pass on holdability to target Connection #36528

AnnotationBeanNameGenerator fails when an annotation references a non-existent class #36524

Perserve default API version in RestClientAdapter #36514

Inconsistent codings resolution in resource resolvers #36507

DefaultJmsListenerContainer may hang in an endless loop in doShutdown #36506

Query not hidden in DefaultClientResponse checkpoint #36502

RestClient closes stream for ResponseEntity responses #36492

IllegalStateException when using websocket handshake headers with Tomcat #36486

Invalid nullness information for ParameterizedTypeReference #36477

WebTestClient cannot assert null list elements #36476

Handle Kotlin nullable value class param correctly in CoroutineUtils #36449

Remove RFC 2047 encoding from Content-Disposition filename #36328

Parent traceId is not reused when calling WebClient.awaitExchange function #36182

📔 Documentation

Clarify semantics of HttpMethod.valueOf() #36652

... (truncated)

Commits

c997d40 Release v7.0.7
9185254 Upgrade to Reactor 2025.0.5 and Micrometer 1.16.5
802fa4d Refine RetryListener example
7052da4 Add doOnDiscard in MultipartHttpMessageReader
63817ce Add missing tests for WebRequestDataBinder
61bd790 Polish WebRequestDataBinderTests
ab6637c Completely extract ServletRequestParameterPropertyValuesTests
c9b88b4 Extract ServletRequestParameterPropertyValuesTests
68c575a Revise "Skip binding entirely when field is not allowed"
cb32046 Further clarify semantics of HttpMethod.valueOf()
Additional commits viewable in compare view

Updates org.springframework:spring-jdbc from 5.3.39 to 7.0.7

Release notes

Sourced from org.springframework:spring-jdbc's releases.

v7.0.7

⭐ New Features

Improve SpringValidatorAdapter and MethodValidationAdapter performance #36621

Support JSON array decoding to Flux in KotlinSerializationJsonDecoder #36597

Deprecate methodIdentification() in CacheAspectSupport for removal #36575

Add MockRestServiceServer#createServer variant for RestClient #36572

Create RestClientXhrTransport variant replacing RestTemplateXhrTransport #36566

Improve error handling in multipart codecs #36563

Make ApplicationListenerMethodAdapter#getTargetMethod() public #36558

ApiVersionConfigurer.setSupportedVersionPredicate() returns void instead of ApiVersionConfigurer #36551

LazyConnectionDataSourceProxy does not work well with Hibernate's multi-tenancy by schema strategy #36527

Add registerManagedResource variant with bean key argument to MBeanExporter #36520

Handle blank Accept-Language header in AcceptHeaderLocaleResolver #36513

Make AbstractStreamingClientHttpRequest and AbstractBufferingClientHttpRequest public #36501

MySQL Error 149 (Galera/WSREP conflict) not translated to ConcurrencyFailureException in Spring JDBC/ORM #36499

Add PreFlightRequestFilter #36482

Support configuration of extension context scope for SpringExtension via Spring or JUnit properties #36460

Lower log level of "Cache miss for REQUEST dispatch" in HandlerMappingIntrospector #36309

🐞 Bug Fixes

WebDataBinder unnecessarily instantiates collections when using the "!" and "_" prefixes #36625

Cache pollution from high-cardinality FieldError default messages in MessageSourceSupport #36609

MergedAnnotation does not use ClassLoader for method or field #36606

@Sql fails if DataSource is wrapped in a TransactionAwareDataSourceProxy #36611

AnnotatedTypeMetadata no longer retains source declaration order on Java 24+ #36598

MergedAnnotation.asMap() fails when an attribute references a non-existent class #36586

FileSystemResource does not strictly follow the Resource#isReadable() contract #36584

Converter overrides in HttpMessageConverters only apply when defaults are registered #36579

Invalid method return type metadata for ClassFile variant on JDK 24+ #36577

Fix Writer lifecycle for AbstractJsonHttpMessageConverter.writeInternal(Object, Type, Writer) #36565

Flushing-related regression in SseServerResponse #36537

LazyConnectionDataSourceProxy does not pass on holdability to target Connection #36528

AnnotationBeanNameGenerator fails when an annotation references a non-existent class #36524

Perserve default API version in RestClientAdapter #36514

Inconsistent codings resolution in resource resolvers #36507

DefaultJmsListenerContainer may hang in an endless loop in doShutdown #36506

Query not hidden in DefaultClientResponse checkpoint #36502

RestClient closes stream for ResponseEntity responses #36492

IllegalStateException when using websocket handshake headers with Tomcat #36486

Invalid nullness information for ParameterizedTypeReference #36477

WebTestClient cannot assert null list elements #36476

Handle Kotlin nullable value class param correctly in CoroutineUtils #36449

Remove RFC 2047 encoding from Content-Disposition filename #36328

Parent traceId is not reused when calling WebClient.awaitExchange function #36182

📔 Documentation

Clarify semantics of HttpMethod.valueOf() #36652

... (truncated)

Commits

c997d40 Release v7.0.7
9185254 Upgrade to Reactor 2025.0.5 and Micrometer 1.16.5
802fa4d Refine RetryListener example
7052da4 Add doOnDiscard in MultipartHttpMessageReader
63817ce Add missing tests for WebRequestDataBinder
61bd790 Polish WebRequestDataBinderTests
ab6637c Completely extract ServletRequestParameterPropertyValuesTests
c9b88b4 Extract ServletRequestParameterPropertyValuesTests
68c575a Revise "Skip binding entirely when field is not allowed"
cb32046 Further clarify semantics of HttpMethod.valueOf()
Additional commits viewable in compare view

Updates org.springframework:spring-tx from 5.3.39 to 7.0.7

Release notes

Sourced from org.springframework:spring-tx's releases.

v7.0.7

⭐ New Features

Improve SpringValidatorAdapter and MethodValidationAdapter performance #36621

Support JSON array decoding to Flux in KotlinSerializationJsonDecoder #36597

Deprecate methodIdentification() in CacheAspectSupport for removal #36575

Add MockRestServiceServer#createServer variant for RestClient #36572

Create RestClientXhrTransport variant replacing RestTemplateXhrTransport #36566

Improve error handling in multipart codecs #36563

Make ApplicationListenerMethodAdapter#getTargetMethod() public #36558

ApiVersionConfigurer.setSupportedVersionPredicate() returns void instead of ApiVersionConfigurer #36551

LazyConnectionDataSourceProxy does not work well with Hibernate's multi-tenancy by schema strategy #36527

Add registerManagedResource variant with bean key argument to MBeanExporter #36520

Handle blank Accept-Language header in AcceptHeaderLocaleResolver #36513

Make AbstractStreamingClientHttpRequest and AbstractBufferingClientHttpRequest public #36501

MySQL Error 149 (Galera/WSREP conflict) not translated to ConcurrencyFailureException in Spring JDBC/ORM #36499

Add PreFlightRequestFilter #36482

Support configuration of extension context scope for SpringExtension via Spring or JUnit properties #36460

Lower log level of "Cache miss for REQUEST dispatch" in HandlerMappingIntrospector #36309

🐞 Bug Fixes

WebDataBinder unnecessarily instantiates collections when using the "!" and "_" prefixes #36625

Cache pollution from high-cardinality FieldError default messages in MessageSourceSupport #36609

MergedAnnotation does not use ClassLoader for method or field #36606

@Sql fails if DataSource is wrapped in a TransactionAwareDataSourceProxy #36611

AnnotatedTypeMetadata no longer retains source declaration order on Java 24+ #36598

MergedAnnotation.asMap() fails when an attribute references a non-existent class #36586

FileSystemResource does not strictly follow the Resource#isReadable() contract #36584

Converter overrides in HttpMessageConverters only apply when defaults are registered #36579

Invalid method return type metadata for ClassFile variant on JDK 24+ #36577

Fix Writer lifecycle for AbstractJsonHttpMessageConverter.writeInternal(Object, Type, Writer) #36565

Flushing-related regression in SseServerResponse #36537

LazyConnectionDataSourceProxy does not pass on holdability to target Connection #36528

AnnotationBeanNameGenerator fails when an annotation references a non-existent class #36524

Perserve default API version in RestClientAdapter #36514

Inconsistent codings resolution in resource resolvers #36507

DefaultJmsListenerContainer may hang in an endless loop in doShutdown #36506

Query not hidden in DefaultClientResponse checkpoint #36502

RestClient closes stream for ResponseEntity responses #36492

IllegalStateException when using websocket handshake headers with Tomcat #36486

Invalid nullness information for ParameterizedTypeReference #36477

WebTestClient cannot assert null list elements #36476

Handle Kotlin nullable value class param correctly in CoroutineUtils #36449

Remove RFC 2047 encoding from Content-Disposition filename #36328

Parent traceId is not reused when calling WebClient.awaitExchange function #36182

📔 Documentation

Clarify semantics of HttpMethod.valueOf() #36652

... (truncated)

Commits

c997d40 Release v7.0.7
9185254 Upgrade to Reactor 2025.0.5 and Micrometer 1.16.5
802fa4d Refine RetryListener example
7052da4 Add doOnDiscard in MultipartHttpMessageReader
63817ce Add missing tests for WebRequestDataBinder
61bd790 Polish WebRequestDataBinderTests
ab6637c Completely extract ServletRequestParameterPropertyValuesTests
c9b88b4 Extract ServletRequestParameterPropertyValuesTests
68c575a Revise "Skip binding entirely when field is not allowed"
cb32046 Further clarify semantics of HttpMethod.valueOf()
Additional commits viewable in compare view

Updates org.springframework:spring-web from 5.3.39 to 7.0.7

Release notes

Sourced from org.springframework:spring-web's releases.

v7.0.7

⭐ New Features

Improve SpringValidatorAdapter and MethodValidationAdapter performance #36621

Support JSON array decoding to Flux in KotlinSerializationJsonDecoder #36597

Deprecate methodIdentification() in CacheAspectSupport for removal #36575

Add MockRestServiceServer#createServer variant for RestClient #36572

Create RestClientXhrTransport variant replacing RestTemplateXhrTransport #36566

Improve error handling in multipart codecs #36563

Make ApplicationListenerMethodAdapter#getTargetMethod() public #36558

ApiVersionConfigurer.setSupportedVersionPredicate() returns void instead of ApiVersionConfigurer #36551

LazyConnectionDataSourceProxy does not work well with Hibernate's multi-tenancy by schema strategy #36527

Add registerManagedResource variant with bean key argument to MBeanExporter #36520

Handle blank Accept-Language header in AcceptHeaderLocaleResolver #36513

Make AbstractStreamingClientHttpRequest and AbstractBufferingClientHttpRequest public #36501

MySQL Error 149 (Galera/WSREP conflict) not translated to ConcurrencyFailureException in Spring JDBC/ORM #36499

Add PreFlightRequestFilter #36482

Support configuration of extension context scope for SpringExtension via Spring or JUnit properties #36460

Lower log level of "Cache miss for REQUEST dispatch" in HandlerMappingIntrospector #36309

🐞 Bug Fixes

WebDataBinder unnecessarily instantiates collections when using the "!" and "_" prefixes #36625

Cache pollution from high-cardinality FieldError default messages in MessageSourceSupport #36609

MergedAnnotation does not use ClassLoader for method or field #36606

@Sql fails if DataSource is wrapped in a TransactionAwareDataSourceProxy #36611

AnnotatedTypeMetadata no longer retains source declaration order on Java 24+ #36598

MergedAnnotation.asMap() fails when an attribute references a non-existent class #36586

FileSystemResource does not strictly follow the Resource#isReadable() contract #36584

Converter overrides in HttpMessageConverters only apply when defaults are registered #36579

Invalid method return type metadata for ClassFile variant on JDK 24+ #36577

Fix Writer lifecycle for AbstractJsonHttpMessageConverter.writeInternal(Object, Type, Writer) #36565

Flushing-related regression in SseServerResponse #36537

LazyConnectionDataSourceProxy does not pass on holdability to target Connection #36528

AnnotationBeanNameGenerator fails when an annotation references a non-existent class #36524

Perserve default API version in RestClientAdapter #36514

Inconsistent codings resolution in resource resolvers #36507

DefaultJmsListenerContainer may hang in an endless loop in doShutdown #36506

Query not hidden in DefaultClientResponse checkpoint #36502

RestClient closes stream for ResponseEntity responses #36492

IllegalStateException when using websocket handshake headers with Tomcat #36486

Invalid nullness information for ParameterizedTypeReference #36477

WebTestClient cannot assert null list elements #36476

Handle Kotlin nullable value class param correctly in CoroutineUtils #36449

Remove RFC 2047 encoding from Content-Disposition filename #36328

Parent traceId is not reused when calling WebClient.awaitExchange function #36182

📔 Documentation

Clarify semantics of HttpMethod.valueOf() #36652

... (truncated)

Commits

c997d40 Release v7.0.7
9185254 Upgrade to Reactor 2025.0.5 and Micrometer 1.16.5
802fa4d Refine RetryListener example
7052da4 Add doOnDiscard in MultipartHttpMessageReader
63817ce Add missing tests for WebRequestDataBinder
61bd790 Polish WebRequestDataBinderTests
ab6637c Completely extract ServletRequestParameterPropertyValuesTests
c9b88b4 Extract ServletRequestParameterPropertyValuesTests
68c575a Revise "Skip binding entirely when field is not allowed"
cb32046 Further clarify semantics of HttpMethod.valueOf()
Additional commits viewable in compare view

Updates org.springframework:spring-webmvc from 5.3.39 to 7.0.7

Release notes

Sourced from org.springframework:spring-webmvc's releases.

v7.0.7

⭐ New Features

Improve SpringValidatorAdapter and MethodValidationAdapter performance #36621

Support JSON array decoding to Flux in KotlinSerializationJsonDecoder #36597

Deprecate methodIdentification() in CacheAspectSupport for removal #36575

Add MockRestServiceServer#createServer variant for RestClient #36572

Create RestClientXhrTransport variant replacing RestTemplateXhrTransport #36566

Improve error handling in multipart codecs #36563

Make ApplicationListenerMethodAdapter#getTargetMethod() public #36558

ApiVersionConfigurer.setSupportedVersionPredicate() returns void instead of ApiVersionConfigurer #36551

LazyConnectionDataSourceProxy does not work well with Hibernate's multi-tenancy by schema strategy #36527

Add registerManagedResource variant with bean key argument to MBeanExporter #36520

Handle blank Accept-Language header in AcceptHeaderLocaleResolver #36513

Make AbstractStreamingClientHttpRequest and AbstractBufferingClientHttpRequest public #36501

MySQL Error 149 (Galera/WSREP conflict) not translated to ConcurrencyFailureException in Spring JDBC/ORM #36499

Add PreFlightRequestFilter #36482

Support configuration of extension context scope for SpringExtension via Spring or JUnit properties #36460

Lower log level of "Cache miss for REQUEST dispatch" in HandlerMappingIntrospector #36309

🐞 Bug Fixes

WebDataBinder unnecessarily instantiates collections when using the "!" and "_" prefixes #36625

Cache pollution from high-cardinality FieldError default messages in MessageSourceSupport #36609

MergedAnnotation does not use ClassLoader for method or field #36606

@Sql fails if DataSource is wrapped in a TransactionAwareDataSourceProxy #36611

AnnotatedTypeMetadata no longer retains source declaration order on Java 24+ #36598

MergedAnnotation.asMap() fails when an attribute references a non-existent class #36586

FileSystemResource does not strictly follow the Resource#isReadable() contract #36584

Converter overrides in HttpMessageConverters only apply when defaults are registered #36579

Invalid method return type metadata for ClassFile variant on JDK 24+ #36577

Fix Writer lifecycle for AbstractJsonHttpMessageConverter.writeInternal(Object, Type, Writer) #36565

Flushing-related regression in SseServerResponse #36537

LazyConnectionDataSourceProxy does not pass on holdability to target Connection #36528

AnnotationBeanNameGenerator fails when an annotation references a non-existent class #36524

Perserve default API version in RestClientAdapter #36514

Inconsistent codings resolution in resource resolvers #36507

DefaultJmsListenerContainer may hang in an endless loop in doShutdown #36506

Query not hidden in DefaultClientResponse checkpoint #36502

RestClient closes stream for ResponseEntity responses #36492

IllegalStateException when using websocket handshake headers with Tomcat #36486

Invalid nullness information for ParameterizedTypeReference #36477

WebTestClient cannot assert null list elements #36476

Handle Kotlin nullable value class param correctly in CoroutineUtils #36449

Remove RFC 2047 encoding from Content-Disposition filename #36328

Parent traceId is not reused when calling WebClient.awaitExchange function #36182

📔 Documentation

Clarify semantics of HttpMethod.valueOf() #36652

... (truncated)

Commits

c997d40 Release v7.0.7
9185254 Upgrade to Reactor 2025.0.5 and Micrometer 1.16.5
802fa4d Refine RetryListener example
7052da4 Add doOnDiscard in MultipartHttpMessageReader
63817ce Add missing tests for WebRequestDataBinder
61bd790 Polish WebRequestDataBinderTests
ab6637c Completely extract ServletRequestParameterPropertyValuesTests
c9b88b4 Extract ServletRequestParameterPropertyValuesTests
68c575a Revise "Skip binding entirely when field is not allowed"
cb32046 Further clarify semantics of HttpMethod.valueOf()
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `version.springframework` from 5.3.39 to 7.0.7. Updates `org.springframework:spring-context` from 5.3.39 to 7.0.7 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v5.3.39...v7.0.7) Updates `org.springframework:spring-jdbc` from 5.3.39 to 7.0.7 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v5.3.39...v7.0.7) Updates `org.springframework:spring-tx` from 5.3.39 to 7.0.7 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v5.3.39...v7.0.7) Updates `org.springframework:spring-web` from 5.3.39 to 7.0.7 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v5.3.39...v7.0.7) Updates `org.springframework:spring-webmvc` from 5.3.39 to 7.0.7 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v5.3.39...v7.0.7) --- updated-dependencies: - dependency-name: org.springframework:spring-context dependency-version: 7.0.7 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.springframework:spring-jdbc dependency-version: 7.0.7 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.springframework:spring-tx dependency-version: 7.0.7 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.springframework:spring-web dependency-version: 7.0.7 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.springframework:spring-webmvc dependency-version: 7.0.7 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

davewichers · 2026-04-17T13:40:24Z

Can't. Breaks things.

dependabot · 2026-04-17T13:40:27Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

dependabot bot added the dependencies Pull requests that update a dependency file label Apr 17, 2026

davewichers closed this Apr 17, 2026

dependabot bot deleted the dependabot/maven/version.springframework-7.0.7 branch April 17, 2026 13:40

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump version.springframework from 5.3.39 to 7.0.7#451

Bump version.springframework from 5.3.39 to 7.0.7#451
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/version.springframework-7.0.7

dependabot bot commented on behalf of github Apr 17, 2026

Uh oh!

davewichers commented Apr 17, 2026

Uh oh!

dependabot bot commented on behalf of github Apr 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Apr 17, 2026

v7.0.7

⭐ New Features

🐞 Bug Fixes

📔 Documentation

v7.0.7

⭐ New Features

🐞 Bug Fixes

📔 Documentation

v7.0.7

⭐ New Features

🐞 Bug Fixes

📔 Documentation

v7.0.7

⭐ New Features

🐞 Bug Fixes

📔 Documentation

v7.0.7

⭐ New Features

🐞 Bug Fixes

📔 Documentation

Uh oh!

davewichers commented Apr 17, 2026

Uh oh!

dependabot bot commented on behalf of github Apr 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant