Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 21, 2025

Bumps org.springframework.boot from 3.4.11 to 3.4.12.

Release notes

Sourced from org.springframework.boot's releases.

v3.4.12

⚠️ Noteworthy changes

🐞 Bug Fixes

  • Gradle war task does not exclude starter POMs from lib-provided #48195
  • Testcontainers integration fails on Docker 29.0.0 #48104
  • NullPointerException when using @ConditionalOnSingleCandidate with multiple manually registered singletons #48117
  • Buildpack fails with recent Docker installs due to hardcoded version in URL #48050
  • PortInUseException incorrectly thrown on failure to bind port due to Netty IP misconfiguration #47618
  • Image building may fail when specifying a platform if an image has already been built with a different platform #47292
  • Setting 'max-uri-tags' does not prevent unlimited meter growth on any AutoConfiguredCompositeMeterRegistry #47285
  • WebSecurityCustomizer beans are excluded by WebMvcTest #47255
  • Docker response 407 is not handled correctly resulting in no error message #47180
  • Undertow's ServletContext is destroy too early, making it unusable in @PreDestroy methods #47141
  • New arm64 macbooks fail to bootBuildImage due to incorrect platform image #46665
  • Auto-configured JCacheMetrics cannot be customized #46212
  • Properties bound in the child management context ignore the parent's environment prefix #45858

📔 Documentation

  • Fix typo in PortInUseException Javadoc #48124
  • Document support for configuring servlet context init parameters using properties #47951
  • BootstrapContext#getOrElseThrow has incorrect reference to IllegalStateException #47903
  • Clarify when BootstrapContext get methods may return null rather than throwing an exception or calling the fallback supplier #47896
  • Document how to use ContextPropagatingTaskDecorator for propagating trace context over thread boundaries #47893
  • Limit Kotlin API documentation to Kotlin-specific APIs #47763
  • Document that Actuator endpoint may have at most one extension of each type #47740
  • Some spring.test.* properties are not documented #47236
  • Document EndpointObjectMapper and management.endpoints.jackson.isolated-object-mapper #47039
  • Clarify how warnings about soon-to-expire SSL certificates are reported #45564
  • Correct section about required setters in "Type-safe Configuration Properties" #43138

🔨 Dependency Upgrades

  • Upgrade to AspectJ 1.9.25 #48015
  • Upgrade to Hibernate 6.6.36.Final #48146
  • Upgrade to Jackson Bom 2.18.5 #48017
  • Upgrade to Jetty 12.0.30 #48119
  • Upgrade to Jetty Reactive HTTPClient 4.0.13 #48147
  • Upgrade to jOOQ 3.19.28 #48078
  • Upgrade to Logback 1.5.21 #48079
  • Upgrade to Micrometer 1.14.13 #48018
  • Upgrade to Micrometer Tracing 1.4.12 #48019
  • Upgrade to MySQL 9.5.0 #48020
  • Upgrade to Neo4j Java Driver 5.28.10 #48030
  • Upgrade to R2DBC Postgresql 1.0.9.RELEASE #48021
  • Upgrade to Reactor Bom 2024.0.12 #48022

... (truncated)

Commits
  • 4fc7eed Release v3.4.12
  • ee70d55 Upgrade to Spring Framework 6.2.14
  • 4a8d01d Exclude starter POMs from lib-provided when using Gradle
  • 4625534 Force Testcontainers Docker API version for Docker 29.0.0+ compatibility
  • b0f5058 Upgrade to antora-ui-spring v0.4.21
  • 1497f93 Upgrade to Spring Integration 6.4.9
  • 3040dc1 Apply system environment prefix to management context
  • aecdff1 Merge pull request #48172 from dependabot[bot]
  • 7bc2fa0 Bump js-yaml from 4.1.0 to 4.1.1 in /antora
  • 2d9d48d Start building against Spring Framework 6.2.14 snapshots
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.springframework.boot](https://github.com/spring-projects/spring-boot) from 3.4.11 to 3.4.12.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.11...v3.4.12)

---
updated-dependencies:
- dependency-name: org.springframework.boot
  dependency-version: 3.4.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@royclarkson royclarkson merged commit 104929c into 4.4.x Nov 21, 2025
3 checks passed
@royclarkson royclarkson deleted the dependabot/gradle/4.4.x/org.springframework.boot-3.4.12 branch November 21, 2025 20:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants