From feb84f001ceb6646eabf8de68dd15b636699ee1c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 27 May 2025 12:14:42 +0100
Subject: [PATCH] Bump org.springframework.session:spring-session-core from
3.4.3 to 3.5.0 (#3591)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
[//]: # (dependabot-start)
⚠️ **Dependabot is rebasing this PR** ⚠️
Rebasing might not happen immediately, so don't worry if this takes some
time.
Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.
---
[//]: # (dependabot-end)
Bumps
[org.springframework.session:spring-session-core](https://github.com/spring-projects/spring-session)
from 3.4.3 to 3.5.0.
Release notes
Sourced from org.springframework.session:spring-session-core's
releases.
3.5.0
:beetle: Bug Fixes
- Fix Race Condition in Integration Tests Using Redis
SessionEventRegistry #3400
:hammer: Dependency Upgrades
- Bump com.fasterxml.jackson.core:jackson-databind from 2.18.3 to
2.18.4 #3393
- Bump io.projectreactor:reactor-bom from 2024.0.5 to 2024.0.6 #3395
- Bump io.projectreactor:reactor-core from 3.6.16 to 3.6.17 #3394
- Bump io.spring.gradle:spring-security-release-plugin from 1.0.5 to
1.0.6 #3392
- Bump io.spring.javaformat:spring-javaformat-checkstyle from 0.0.43
to 0.0.45 #3402
- Bump io.spring.javaformat:spring-javaformat-gradle-plugin from
0.0.43 to 0.0.45 #3404
- Bump org.springframework.data:spring-data-bom from 2025.0.0-RC1 to
2025.0.1-SNAPSHOT #3397
- Bump org.springframework.security:spring-security-bom from 6.5.0-RC1
to 6.5.1-SNAPSHOT #3401
- Bump org.springframework:spring-framework-bom from 6.2.6 to 6.2.7 #3403
- Spring Security 6.5.0 #3406
- Update to Spring Data 2025.0.0 #3405
:heart: Contributors
Thank you to all the contributors who worked on this release:
@rwinch
3.5.0-RC1
:star: New Features
- Introduce CompositeHttpSessionIdResolver #3264
- Start JDBC transactions only when there is an update #3330
:beetle: Bug Fixes
- Explicitly use junit-platform-launcher #3367
- Fix jdbc session with special characters #3316
:hammer: Dependency Upgrades
- Bump io.projectreactor:reactor-bom from 2024.0.4 to 2024.0.5 #3380
- Bump io.projectreactor:reactor-core from 3.6.15 to 3.6.16 #3381
- Bump io.spring.gradle:spring-security-release-plugin from 1.0.3 to
1.0.4 #3377
- Bump io.spring.gradle:spring-security-release-plugin from 1.0.4 to
1.0.5 #3387
- Bump org.aspectj:aspectjweaver from 1.9.23 to 1.9.24 #3378
- Bump org.hsqldb:hsqldb from 2.7.3 to 2.7.4 #3369
- Bump org.mariadb.jdbc:mariadb-java-client from 3.5.2 to 3.5.3 #3371
- Bump org.springframework.boot:spring-boot-gradle-plugin from
3.5.0-M3 to 3.5.0-SNAPSHOT #3373
- Bump org.springframework.data:spring-data-bom from 2025.0.0-M2 to
2025.0.0-SNAPSHOT #3372
- Bump org.springframework:spring-framework-bom from 6.2.5 to 6.2.6 #3384
- Update to Spring Boot 3.5.0 (dependencies) #3368
- Update to Spring Security 6.5.0-rc1 #3386
... (truncated)
Commits
817b172
Release 3.5.05a9c220
Update to Spring Security 6.5.0ce5efb7
Update to Spring Data 2025.0.0d6391a8
Revert "Bump
io.spring.javaformat:spring-javaformat-checkstyle"f75cd24
Revert "Bump
org.springframework.security:spring-security-bom"ca46943
Bump org.springframework.security:spring-security-bombf09912
Bump io.spring.javaformat:spring-javaformat-checkstyleae2f606
Bump io.spring.javaformat:spring-javaformat-gradle-plugin05e9a3e
Bump org.springframework:spring-framework-bom from 6.2.6 to 6.2.76fb972d
Bump io.spring.gradle:spring-security-release-plugin from 1.0.5 to
1.0.6- Additional commits viewable in compare
view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
build.gradle | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/build.gradle b/build.gradle
index 14c3ee394..368bee5b2 100644
--- a/build.gradle
+++ b/build.gradle
@@ -458,7 +458,7 @@ dependencies {
implementation "org.springframework.boot:spring-boot-starter-oauth2-client:$springBootVersion"
implementation "org.springframework.boot:spring-boot-starter-mail:$springBootVersion"
- implementation "org.springframework.session:spring-session-core:3.4.3"
+ implementation "org.springframework.session:spring-session-core:3.5.0"
implementation "org.springframework:spring-jdbc:6.2.7"
implementation 'com.unboundid.product.scim2:scim2-sdk-client:2.3.5'