Skip to content

chore(deps): Bump spring-cloud-stream from 5.0.2 to 5.0.3 - #1844

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/spring-cloud-stream-5.0.3
Open

chore(deps): Bump spring-cloud-stream from 5.0.2 to 5.0.3#1844
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/spring-cloud-stream-5.0.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps spring-cloud-stream from 5.0.2 to 5.0.3.
Updates org.springframework.cloud:spring-cloud-starter-stream-kafka from 5.0.2 to 5.0.3

Commits

Updates org.springframework.cloud:spring-cloud-stream from 5.0.2 to 5.0.3

Release notes

Sourced from org.springframework.cloud:spring-cloud-stream's releases.

5.0.3

Security

  • CVE-2026-59302 — Potential for logging sensitive data in Spring Cloud Stream
  • CVE-2026-59303 — Dynamic destination cache size is not properly bound in Spring Cloud Stream
  • CVE-2026-59304 — Improper caching of the original content type in Spring Cloud Stream Avro
  • CVE-2026-59305 — Partition interceptor may be improperly added while sending message
  • CVE-2026-59306 — Potential for deserialization of untrusted types in Spring Cloud Stream

What's Changed

New Contributors

Full Changelog: spring-cloud/spring-cloud-stream@v5.0.2...v5.0.3

Commits
  • ec87bc8 Release 5.0.3
  • 8fa7cb9 Initialize commercial release branch
  • 07eb699 Ensure bindings are removed from BindingServiceProperties
  • 21fcdb9 Remove java.net from trusted packages
  • e3b3fa4 Implemet self-eviction of mime-types in OriginalContentTypeResolver
  • fad9346 Ensure DefaultPartitioningInterceptor is not added more then once
  • ff791f2 Add encoding loging for queue and exchange during admin operations
  • e314c90 Update versions for 2025.1.3-INTERNAL-SNAPSHOT
  • a08c56b Add commercial release CI files [skip actions]
  • a2bbc43 Merge pull request #3246 from spring-cloud/dependabot/maven/main/org.apache.h...
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `spring-cloud-stream` from 5.0.2 to 5.0.3.

Updates `org.springframework.cloud:spring-cloud-starter-stream-kafka` from 5.0.2 to 5.0.3
- [Commits](https://github.com/spring-cloud/spring-cloud-stream-binder-kafka/commits)

Updates `org.springframework.cloud:spring-cloud-stream` from 5.0.2 to 5.0.3
- [Release notes](https://github.com/spring-cloud/spring-cloud-stream/releases)
- [Changelog](https://github.com/spring-cloud/spring-cloud-stream/blob/main/release-train-settings.xml)
- [Commits](spring-cloud/spring-cloud-stream@v5.0.2...v5.0.3)

---
updated-dependencies:
- dependency-name: org.springframework.cloud:spring-cloud-starter-stream-kafka
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.cloud:spring-cloud-stream
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 31, 2026
@netlify

netlify Bot commented Aug 31, 2026

Copy link
Copy Markdown

Deploy Preview for springwolf-ui canceled.

Name Link
🔨 Latest commit d6fd560
🔍 Latest deploy log https://app.netlify.com/projects/springwolf-ui/deploys/6a95fee3505e470008adbe1f

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants