Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 14, 2025

Bumps org.springframework:spring-framework-bom from 6.2.12 to 6.2.13.

Release notes

Sourced from org.springframework:spring-framework-bom's releases.

v6.2.13

⭐ New Features

  • Support response encoding in select and options JSP form tags #35783
  • Preserve Connection readOnly state for DataSource with defaultReadOnly configuration #35743
  • Optimize resource URL resolution in SortedResourcesFactoryBean #35687
  • Relax multiple segment matching constraints in PathPattern #35686
  • Support wildcard path elements at the start of path patterns #35679
  • Validating byte[]s may produce OutOfMemoryError #35675
  • Update in FragmentsRendering to names of static methods #33974

🐞 Bug Fixes

  • ConcurrentReferenceHashMap misses dedicated computeIfAbsent, computeIfPresent, compute, merge implementations #35794
  • Avoid unnecessary bridge method resolution around getMostSpecificMethod #35780
  • Fix multi-release JAR issue with VirtualThreadDelegate #35773
  • ContentNegotiationManager not finding media type when request includes quality parameter #35754
  • Race condition in BufferingClientHttpResponseWrapper.getBody() #35745
  • Deprecate setConnectTimeout on HttpComponentsClientHttpRequestFactory #35748
  • Fix PathMatchingResourcePatternResolver to handle absolute paths in JAR manifests #35732
  • BeanDefinitionBuilder.addAutowiredProperty causes error during AOT processing #35731
  • Improve HttpServiceMethod support for Kotlin suspending functions returning Flow #35718
  • Exception translation does not expose original BatchUpdateException anymore #35717
  • Add hints for entities package-private methods #35711
  • Fix concurrency permit leak causing deadlock in SimpleAsyncTaskExecutor #35708
  • Remove jibx-marshaller element from spring-oxm.xsd #35699
  • NullPointerException When Handling 407 with JdkClientHttpConnector in WebClient #35692
  • Method-based Map injection fails against target Map with incomplete generics despite bean name or qualifier match #35690
  • JUnit Jupiter TEST_METHOD ExtensionContextScope is not fully supported #35680
  • Introduce isAutowirableConstructor(Executable, PropertyProvider) in TestConstructorUtils and deprecate existing variants #35676
  • Reflection on java.sql.Types without runtime hints #35674
  • getPubliclyAccessibleMethodIfPossible() returns hidden static method #35667
  • RestClient hangs during upload with ReactorClientHttpRequestFactory #34707

📔 Documentation

  • Correct formatting for Mono type #35786
  • Improve Java Bean Validation documentation for controller methods #35759
  • Fix typo in @NumberFormat Javadoc #35742
  • Javadoc of AsyncConfigurer does not match runtime behavior #35736
  • Document PathPattern behavior difference between */{name} and **/{*path} #35727
  • Fix minor typo in RestClient documentation #35723
  • Document test-method scoped TestContext semantics #35716
  • Improve docs on AbstractStreamingClientHttpRequest for streaming vs buffering mode #35700
  • Fix minor typo in JDBC Core Classes documentation #35684
  • Fix typos #35656
  • Improve spring-web filter documentation #30454

🔨 Dependency Upgrades

... (truncated)

Commits
  • 0a471c9 Release v6.2.13
  • da31750 Upgrade to Micrometer 1.14.13
  • b853203 Upgrade to Reactor 2024.0.12
  • 2b04df0 Upgrade to Jetty 12.0.30
  • 40544e0 Fix typo in ProxyMethodInvocation javadoc
  • 23354b0 Fix doTask method visibility (referring to private Task type)
  • 5c5367a Polishing
  • 12dd758 Provide compute method implementations in ConcurrentReferenceHashMap
  • 5aec239 Add hints for entities package-private methods
  • d0ff8f9 Fix HttpServiceMethod for suspending functions returning Flow
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 6.2.12 to 6.2.13.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.12...v6.2.13)

---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
  dependency-version: 6.2.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the type: dependency-upgrade A dependency upgrade label Nov 14, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type: dependency-upgrade A dependency upgrade

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant