Bump the gradle group across 1 directory with 2 updates - #34

Merged
countableSet merged 1 commit into
masterfrom
dependabot/gradle/gradle-5ccf3babff
Mar 24, 2026
Merged

Bump the gradle group across 1 directory with 2 updates#34
countableSet merged 1 commit into
masterfrom
dependabot/gradle/gradle-5ccf3babff

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubMar 21, 2026

Copy link
Copy Markdown

Bumps the gradle group with 2 updates in the / directory: org.springframework:spring-webmvc and io.undertow:undertow-core.

Updates org.springframework:spring-webmvc from 6.2.11 to 6.2.17

Release notes

Sourced from org.springframework:spring-webmvc's releases.

v6.2.17

⭐ New Features

  • Leverage ResourceHandlerUtils in ScriptTemplateView#36459
  • Restore ScriptTemplateViewTests#36457
  • Fix log message in ConfigurationClassBeanDefinitionReader#36454
  • Resolve context initializers only once in AbstractTestContextBootstrapper#36431
  • Exclude legacy @javax.validation.Constraint from convention-based annotation attribute override check #36412
  • Optimize MediaType(MediaType, Charset) constructor #36351
  • Optimize the addition of a charset to the MediaType in AbstractHttpMessageConverter #36350
  • Consistent adaptation of HTTP headers on Servlet responses #36345
  • Improve performance of validation groups determination in WebFlux #36337
  • Detect all common size exceptions from Tomcat and Commons FileUpload 2.x #36324

🐞 Bug Fixes

  • Guard against invalid id/event values in Server Sent Events #36442
  • Incomplete debug message in ConfigurationClassBeanDefinitionReader #36411
  • Inconsistent ApplicationEventMulticaster state after removing ApplicationListener implemented by FactoryBean #36405
  • Graceful shutdown of SimpleAsyncTaskExecutor #36384
  • HttpMediaTypeException thrown when calculating compatible media types #36363
  • ResolvableType#getGenerics() breaks serialization #36347
  • Multipart upload leak on client abort (ByteBuf.release() not called) #36327

📔 Documentation

  • Document @Fallback alongside Primary in the reference manual and @Bean Javadoc #36441
  • Document registration recommendations for BeanPostProcessor and BeanFactoryPostProcessor#36436
  • Fix links to UriComponentsBuilder and polish examples #36406
  • Emphasize @Configuration classes over XML and Groovy in testing chapter #36394
  • Polish SpEL operator examples in reference docs #36375

🔨 Dependency Upgrades

  • Upgrade to JUnit 5.14.3 #36388
  • Upgrade to Micrometer 1.15.10 #36446
  • Upgrade to Reactor 2024.0.16 #36445

v6.2.16

⭐ New Features

  • Improve performance of hashcode calculations for request mappings #36297
  • Improve performance of HandlerMethod bean lookup #36296
  • Improve performance of validation groups determination #36295
  • Improve performance of single pattern request mappings #36294
  • Optimize NamedParameterUtils#buildValueArray by lazily fetching SqlParameter #36232
  • Consistently close streams through try-with-resources in FileCopyUtils #36224
  • SqlBinaryValue and SqlCharacterValue should support InputStream content with undetermined length #36220
  • DataBufferUtils.write() with NettyDataBuffer on JDK 25 hangs indefinitely #36189
  • WebClient (Reactor) attributes on Netty channel do not clear after connection release #36163

... (truncated)

Commits
  • 4e35a12 Release v6.2.17
  • 317a1f9 Leverage ResourceHandlerUtils in ScriptTemplateView
  • de6601f Restore ScriptTemplateViewTests
  • 47dc1c4 Fix log message in ConfigurationClassBeanDefinitionReader
  • d8c7793 Upgrade to SnakeYAML 2.6, Protobuf 4.34, H2 2.4.240
  • 99fbce1 Polishing (aligned with main)
  • d1e69a9 Upgrade to Reactor 2024.0.16 and Micrometer 1.15.10
  • 8dc888e Guard against invalid id/event values in Server Sent Events
  • 131f94f Use link for first reference to @⁠Fallback in @⁠Bean Javadoc
  • d4f4c69 Document @​Fallback alongside Primary in the reference docs and @​Bean Javadoc
  • Additional commits viewable in compare view

Updates io.undertow:undertow-core from 2.3.20.Final to 2.3.21.Final

Release notes

Sourced from io.undertow:undertow-core's releases.

v2.3.21.Final

Release 2.3.21.Final fixes CVE-2024-3884CVE-2024-4027CVE-2025-12543 Full list of Jiras: view in Jira

 Release Notes - Undertow - Version 2.3.21.Final

... (truncated)

Commits
  • 791c908 Prepare 2.3.21.Final
  • 5374f57 Merge pull request #1862 from fl4via/backport-fixes_2.3.x
  • 7e25c8f [UNDERTOW-2609] Fix the since version in the @​Deprecated annotation at HttpSe...
  • bd97428 [UNDERTOW-2662] Remove the option to disable the RFC 6265 cookie parsing and ...
  • e45da52 Revert "[UNDERTOW-2675] Replace the new UndertowOptions by system properties ...
  • f60b476 Temporarily revert "[UNDERTOW-2662] Remove the option to disable the RFC 6265...
  • e47fed7 Temporarily revert "[UNDERTOW-2609] Fix the since version in the @​Deprecated ...
  • 6484e91 Merge pull request #1861 from fl4via/backport-fixes_2.3.x
  • 6e4b999 [UNDERTOW-2609] Fix the since version in the @​Deprecated annotation at HttpSe...
  • 2a7d993 [UNDERTOW-2421] Consolidate cookie attrib code and add support to attributes ...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the gradle group with 2 updates in the / directory: [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) and [io.undertow:undertow-core](https://github.com/undertow-io/undertow).
Updates `org.springframework:spring-webmvc` from 6.2.11 to 6.2.17
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.11...v6.2.17)
Updates `io.undertow:undertow-core` from 2.3.20.Final to 2.3.21.Final
- [Release notes](https://github.com/undertow-io/undertow/releases)
- [Commits](undertow-io/undertow@2.3.20.Final...2.3.21.Final)
---
updated-dependencies:
- dependency-name: org.springframework:spring-webmvc
dependency-version: 6.2.17
dependency-type: direct:production
dependency-group: gradle
- dependency-name: io.undertow:undertow-core
dependency-version: 2.3.21.Final
dependency-type: direct:production
dependency-group: gradle
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 21, 2026
@dependabot
dependabotBot requested a review from a team as a code ownerMarch 21, 2026 12:40
@dependabotdependabotBot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 21, 2026
@countableSet
countableSet merged commit e2ea289 into masterMar 24, 2026
5 checks passed
@countableSet
countableSet deleted the dependabot/gradle/gradle-5ccf3babff branch March 24, 2026 05:36
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavaPull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@countableSet
, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
Skip to content

Bump the gradle group across 1 directory with 2 updates - #34

Merged
countableSet merged 1 commit into
masterfrom
dependabot/gradle/gradle-5ccf3babff
Mar 24, 2026
Merged

Bump the gradle group across 1 directory with 2 updates#34
countableSet merged 1 commit into
masterfrom
dependabot/gradle/gradle-5ccf3babff

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubMar 21, 2026

Copy link
Copy Markdown

Bumps the gradle group with 2 updates in the / directory: org.springframework:spring-webmvc and io.undertow:undertow-core.

Updates org.springframework:spring-webmvc from 6.2.11 to 6.2.17

Release notes

Sourced from org.springframework:spring-webmvc's releases.

v6.2.17

⭐ New Features

  • Leverage ResourceHandlerUtils in ScriptTemplateView#36459
  • Restore ScriptTemplateViewTests#36457
  • Fix log message in ConfigurationClassBeanDefinitionReader#36454
  • Resolve context initializers only once in AbstractTestContextBootstrapper#36431
  • Exclude legacy @javax.validation.Constraint from convention-based annotation attribute override check #36412
  • Optimize MediaType(MediaType, Charset) constructor #36351
  • Optimize the addition of a charset to the MediaType in AbstractHttpMessageConverter #36350
  • Consistent adaptation of HTTP headers on Servlet responses #36345
  • Improve performance of validation groups determination in WebFlux #36337
  • Detect all common size exceptions from Tomcat and Commons FileUpload 2.x #36324

🐞 Bug Fixes

  • Guard against invalid id/event values in Server Sent Events #36442
  • Incomplete debug message in ConfigurationClassBeanDefinitionReader #36411
  • Inconsistent ApplicationEventMulticaster state after removing ApplicationListener implemented by FactoryBean #36405
  • Graceful shutdown of SimpleAsyncTaskExecutor #36384
  • HttpMediaTypeException thrown when calculating compatible media types #36363
  • ResolvableType#getGenerics() breaks serialization #36347
  • Multipart upload leak on client abort (ByteBuf.release() not called) #36327

📔 Documentation

  • Document @Fallback alongside Primary in the reference manual and @Bean Javadoc #36441
  • Document registration recommendations for BeanPostProcessor and BeanFactoryPostProcessor#36436
  • Fix links to UriComponentsBuilder and polish examples #36406
  • Emphasize @Configuration classes over XML and Groovy in testing chapter #36394
  • Polish SpEL operator examples in reference docs #36375

🔨 Dependency Upgrades

  • Upgrade to JUnit 5.14.3 #36388
  • Upgrade to Micrometer 1.15.10 #36446
  • Upgrade to Reactor 2024.0.16 #36445

v6.2.16

⭐ New Features

  • Improve performance of hashcode calculations for request mappings #36297
  • Improve performance of HandlerMethod bean lookup #36296
  • Improve performance of validation groups determination #36295
  • Improve performance of single pattern request mappings #36294
  • Optimize NamedParameterUtils#buildValueArray by lazily fetching SqlParameter #36232
  • Consistently close streams through try-with-resources in FileCopyUtils #36224
  • SqlBinaryValue and SqlCharacterValue should support InputStream content with undetermined length #36220
  • DataBufferUtils.write() with NettyDataBuffer on JDK 25 hangs indefinitely #36189
  • WebClient (Reactor) attributes on Netty channel do not clear after connection release #36163

... (truncated)

Commits
  • 4e35a12 Release v6.2.17
  • 317a1f9 Leverage ResourceHandlerUtils in ScriptTemplateView
  • de6601f Restore ScriptTemplateViewTests
  • 47dc1c4 Fix log message in ConfigurationClassBeanDefinitionReader
  • d8c7793 Upgrade to SnakeYAML 2.6, Protobuf 4.34, H2 2.4.240
  • 99fbce1 Polishing (aligned with main)
  • d1e69a9 Upgrade to Reactor 2024.0.16 and Micrometer 1.15.10
  • 8dc888e Guard against invalid id/event values in Server Sent Events
  • 131f94f Use link for first reference to @⁠Fallback in @⁠Bean Javadoc
  • d4f4c69 Document @​Fallback alongside Primary in the reference docs and @​Bean Javadoc
  • Additional commits viewable in compare view

Updates io.undertow:undertow-core from 2.3.20.Final to 2.3.21.Final

Release notes

Sourced from io.undertow:undertow-core's releases.

v2.3.21.Final

Release 2.3.21.Final fixes CVE-2024-3884CVE-2024-4027CVE-2025-12543 Full list of Jiras: view in Jira

 Release Notes - Undertow - Version 2.3.21.Final

... (truncated)

Commits
  • 791c908 Prepare 2.3.21.Final
  • 5374f57 Merge pull request #1862 from fl4via/backport-fixes_2.3.x
  • 7e25c8f [UNDERTOW-2609] Fix the since version in the @​Deprecated annotation at HttpSe...
  • bd97428 [UNDERTOW-2662] Remove the option to disable the RFC 6265 cookie parsing and ...
  • e45da52 Revert "[UNDERTOW-2675] Replace the new UndertowOptions by system properties ...
  • f60b476 Temporarily revert "[UNDERTOW-2662] Remove the option to disable the RFC 6265...
  • e47fed7 Temporarily revert "[UNDERTOW-2609] Fix the since version in the @​Deprecated ...
  • 6484e91 Merge pull request #1861 from fl4via/backport-fixes_2.3.x
  • 6e4b999 [UNDERTOW-2609] Fix the since version in the @​Deprecated annotation at HttpSe...
  • 2a7d993 [UNDERTOW-2421] Consolidate cookie attrib code and add support to attributes ...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the gradle group with 2 updates in the / directory: [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) and [io.undertow:undertow-core](https://github.com/undertow-io/undertow).
Updates `org.springframework:spring-webmvc` from 6.2.11 to 6.2.17
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.11...v6.2.17)
Updates `io.undertow:undertow-core` from 2.3.20.Final to 2.3.21.Final
- [Release notes](https://github.com/undertow-io/undertow/releases)
- [Commits](undertow-io/undertow@2.3.20.Final...2.3.21.Final)
---
updated-dependencies:
- dependency-name: org.springframework:spring-webmvc
dependency-version: 6.2.17
dependency-type: direct:production
dependency-group: gradle
- dependency-name: io.undertow:undertow-core
dependency-version: 2.3.21.Final
dependency-type: direct:production
dependency-group: gradle
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 21, 2026
@dependabot
dependabotBot requested a review from a team as a code ownerMarch 21, 2026 12:40
@dependabotdependabotBot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 21, 2026
@countableSet
countableSet merged commit e2ea289 into masterMar 24, 2026
5 checks passed
@countableSet
countableSet deleted the dependabot/gradle/gradle-5ccf3babff branch March 24, 2026 05:36
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavaPull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@countableSet
, 'i'); if (__m === '*' || __re.test(location.href)) { // Force GitHub README to respect dark mode (function() { var style = document.createElement('style'); style.textContent = ' .markdown-body { color-scheme: dark light; } .markdown-body pre { background: #161b22 !important; } .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; } .markdown-body table th, .markdown-body table td { border-color: #30363d !important; } .markdown-body img { background: #0d1117; } .markdown-body blockquote { border-left-color: #8b949e; } .markdown-body hr { border-color: #30363d; } '; document.head.appendChild(style); })(); } } catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

Bump the gradle group across 1 directory with 2 updates - #34

Merged
countableSet merged 1 commit into
masterfrom
dependabot/gradle/gradle-5ccf3babff
Mar 24, 2026
Merged

Bump the gradle group across 1 directory with 2 updates#34
countableSet merged 1 commit into
masterfrom
dependabot/gradle/gradle-5ccf3babff

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubMar 21, 2026

Copy link
Copy Markdown

Bumps the gradle group with 2 updates in the / directory: org.springframework:spring-webmvc and io.undertow:undertow-core.

Updates org.springframework:spring-webmvc from 6.2.11 to 6.2.17

Release notes

Sourced from org.springframework:spring-webmvc's releases.

v6.2.17

⭐ New Features

  • Leverage ResourceHandlerUtils in ScriptTemplateView#36459
  • Restore ScriptTemplateViewTests#36457
  • Fix log message in ConfigurationClassBeanDefinitionReader#36454
  • Resolve context initializers only once in AbstractTestContextBootstrapper#36431
  • Exclude legacy @javax.validation.Constraint from convention-based annotation attribute override check #36412
  • Optimize MediaType(MediaType, Charset) constructor #36351
  • Optimize the addition of a charset to the MediaType in AbstractHttpMessageConverter #36350
  • Consistent adaptation of HTTP headers on Servlet responses #36345
  • Improve performance of validation groups determination in WebFlux #36337
  • Detect all common size exceptions from Tomcat and Commons FileUpload 2.x #36324

🐞 Bug Fixes

  • Guard against invalid id/event values in Server Sent Events #36442
  • Incomplete debug message in ConfigurationClassBeanDefinitionReader #36411
  • Inconsistent ApplicationEventMulticaster state after removing ApplicationListener implemented by FactoryBean #36405
  • Graceful shutdown of SimpleAsyncTaskExecutor #36384
  • HttpMediaTypeException thrown when calculating compatible media types #36363
  • ResolvableType#getGenerics() breaks serialization #36347
  • Multipart upload leak on client abort (ByteBuf.release() not called) #36327

📔 Documentation

  • Document @Fallback alongside Primary in the reference manual and @Bean Javadoc #36441
  • Document registration recommendations for BeanPostProcessor and BeanFactoryPostProcessor#36436
  • Fix links to UriComponentsBuilder and polish examples #36406
  • Emphasize @Configuration classes over XML and Groovy in testing chapter #36394
  • Polish SpEL operator examples in reference docs #36375

🔨 Dependency Upgrades

  • Upgrade to JUnit 5.14.3 #36388
  • Upgrade to Micrometer 1.15.10 #36446
  • Upgrade to Reactor 2024.0.16 #36445

v6.2.16

⭐ New Features

  • Improve performance of hashcode calculations for request mappings #36297
  • Improve performance of HandlerMethod bean lookup #36296
  • Improve performance of validation groups determination #36295
  • Improve performance of single pattern request mappings #36294
  • Optimize NamedParameterUtils#buildValueArray by lazily fetching SqlParameter #36232
  • Consistently close streams through try-with-resources in FileCopyUtils #36224
  • SqlBinaryValue and SqlCharacterValue should support InputStream content with undetermined length #36220
  • DataBufferUtils.write() with NettyDataBuffer on JDK 25 hangs indefinitely #36189
  • WebClient (Reactor) attributes on Netty channel do not clear after connection release #36163

... (truncated)

Commits
  • 4e35a12 Release v6.2.17
  • 317a1f9 Leverage ResourceHandlerUtils in ScriptTemplateView
  • de6601f Restore ScriptTemplateViewTests
  • 47dc1c4 Fix log message in ConfigurationClassBeanDefinitionReader
  • d8c7793 Upgrade to SnakeYAML 2.6, Protobuf 4.34, H2 2.4.240
  • 99fbce1 Polishing (aligned with main)
  • d1e69a9 Upgrade to Reactor 2024.0.16 and Micrometer 1.15.10
  • 8dc888e Guard against invalid id/event values in Server Sent Events
  • 131f94f Use link for first reference to @⁠Fallback in @⁠Bean Javadoc
  • d4f4c69 Document @​Fallback alongside Primary in the reference docs and @​Bean Javadoc
  • Additional commits viewable in compare view

Updates io.undertow:undertow-core from 2.3.20.Final to 2.3.21.Final

Release notes

Sourced from io.undertow:undertow-core's releases.

v2.3.21.Final

Release 2.3.21.Final fixes CVE-2024-3884CVE-2024-4027CVE-2025-12543 Full list of Jiras: view in Jira

 Release Notes - Undertow - Version 2.3.21.Final

... (truncated)

Commits
  • 791c908 Prepare 2.3.21.Final
  • 5374f57 Merge pull request #1862 from fl4via/backport-fixes_2.3.x
  • 7e25c8f [UNDERTOW-2609] Fix the since version in the @​Deprecated annotation at HttpSe...
  • bd97428 [UNDERTOW-2662] Remove the option to disable the RFC 6265 cookie parsing and ...
  • e45da52 Revert "[UNDERTOW-2675] Replace the new UndertowOptions by system properties ...
  • f60b476 Temporarily revert "[UNDERTOW-2662] Remove the option to disable the RFC 6265...
  • e47fed7 Temporarily revert "[UNDERTOW-2609] Fix the since version in the @​Deprecated ...
  • 6484e91 Merge pull request #1861 from fl4via/backport-fixes_2.3.x
  • 6e4b999 [UNDERTOW-2609] Fix the since version in the @​Deprecated annotation at HttpSe...
  • 2a7d993 [UNDERTOW-2421] Consolidate cookie attrib code and add support to attributes ...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the gradle group with 2 updates in the / directory: [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) and [io.undertow:undertow-core](https://github.com/undertow-io/undertow).
Updates `org.springframework:spring-webmvc` from 6.2.11 to 6.2.17
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.11...v6.2.17)
Updates `io.undertow:undertow-core` from 2.3.20.Final to 2.3.21.Final
- [Release notes](https://github.com/undertow-io/undertow/releases)
- [Commits](undertow-io/undertow@2.3.20.Final...2.3.21.Final)
---
updated-dependencies:
- dependency-name: org.springframework:spring-webmvc
dependency-version: 6.2.17
dependency-type: direct:production
dependency-group: gradle
- dependency-name: io.undertow:undertow-core
dependency-version: 2.3.21.Final
dependency-type: direct:production
dependency-group: gradle
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 21, 2026
@dependabot
dependabotBot requested a review from a team as a code ownerMarch 21, 2026 12:40
@dependabotdependabotBot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 21, 2026
@countableSet
countableSet merged commit e2ea289 into masterMar 24, 2026
5 checks passed
@countableSet
countableSet deleted the dependabot/gradle/gradle-5ccf3babff branch March 24, 2026 05:36
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavaPull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@countableSet
, 'i'); if (__m === '*' || __re.test(location.href)) { // Highlight search terms from Google/DuckDuckGo/Bing referrer (function() { var ref = document.referrer; var terms = []; if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) { var url = new URL(ref); var q = url.searchParams.get('q') || url.searchParams.get('p'); if (q) { terms = q.split(/\s+/).filter(function(t) { return t.length > 2; }); } } if (terms.length === 0) return; var style = document.createElement('style'); style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }'; document.head.appendChild(style); function highlight(node) { if (node.nodeType === 3) { // text node var text = node.textContent; var found = false; terms.forEach(function(term) { var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi'); if (regex.test(text)) { found = true; var frag = document.createDocumentFragment(); var parts = text.split(regex); parts.forEach(function(part, i) { if (i % 2 === 0) { frag.appendChild(document.createTextNode(part)); } else { var span = document.createElement('span'); span.className = 'userscript-highlight'; span.textContent = part; frag.appendChild(span); } }); node.parentNode.replaceChild(frag, node); } }); } else if (node.nodeType === 1 && node.childNodes) { // element var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT']; if (!skipTags.includes(node.tagName)) { Array.from(node.childNodes).forEach(highlight); } } } highlight(document.body); // Re-highlight on dynamic content var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1 || node.nodeType === 3) highlight(node); }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

Bump the gradle group across 1 directory with 2 updates - #34

Merged
countableSet merged 1 commit into
masterfrom
dependabot/gradle/gradle-5ccf3babff
Mar 24, 2026
Merged

Bump the gradle group across 1 directory with 2 updates#34
countableSet merged 1 commit into
masterfrom
dependabot/gradle/gradle-5ccf3babff

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubMar 21, 2026

Copy link
Copy Markdown

Bumps the gradle group with 2 updates in the / directory: org.springframework:spring-webmvc and io.undertow:undertow-core.

Updates org.springframework:spring-webmvc from 6.2.11 to 6.2.17

Release notes

Sourced from org.springframework:spring-webmvc's releases.

v6.2.17

⭐ New Features

  • Leverage ResourceHandlerUtils in ScriptTemplateView#36459
  • Restore ScriptTemplateViewTests#36457
  • Fix log message in ConfigurationClassBeanDefinitionReader#36454
  • Resolve context initializers only once in AbstractTestContextBootstrapper#36431
  • Exclude legacy @javax.validation.Constraint from convention-based annotation attribute override check #36412
  • Optimize MediaType(MediaType, Charset) constructor #36351
  • Optimize the addition of a charset to the MediaType in AbstractHttpMessageConverter #36350
  • Consistent adaptation of HTTP headers on Servlet responses #36345
  • Improve performance of validation groups determination in WebFlux #36337
  • Detect all common size exceptions from Tomcat and Commons FileUpload 2.x #36324

🐞 Bug Fixes

  • Guard against invalid id/event values in Server Sent Events #36442
  • Incomplete debug message in ConfigurationClassBeanDefinitionReader #36411
  • Inconsistent ApplicationEventMulticaster state after removing ApplicationListener implemented by FactoryBean #36405
  • Graceful shutdown of SimpleAsyncTaskExecutor #36384
  • HttpMediaTypeException thrown when calculating compatible media types #36363
  • ResolvableType#getGenerics() breaks serialization #36347
  • Multipart upload leak on client abort (ByteBuf.release() not called) #36327

📔 Documentation

  • Document @Fallback alongside Primary in the reference manual and @Bean Javadoc #36441
  • Document registration recommendations for BeanPostProcessor and BeanFactoryPostProcessor#36436
  • Fix links to UriComponentsBuilder and polish examples #36406
  • Emphasize @Configuration classes over XML and Groovy in testing chapter #36394
  • Polish SpEL operator examples in reference docs #36375

🔨 Dependency Upgrades

  • Upgrade to JUnit 5.14.3 #36388
  • Upgrade to Micrometer 1.15.10 #36446
  • Upgrade to Reactor 2024.0.16 #36445

v6.2.16

⭐ New Features

  • Improve performance of hashcode calculations for request mappings #36297
  • Improve performance of HandlerMethod bean lookup #36296
  • Improve performance of validation groups determination #36295
  • Improve performance of single pattern request mappings #36294
  • Optimize NamedParameterUtils#buildValueArray by lazily fetching SqlParameter #36232
  • Consistently close streams through try-with-resources in FileCopyUtils #36224
  • SqlBinaryValue and SqlCharacterValue should support InputStream content with undetermined length #36220
  • DataBufferUtils.write() with NettyDataBuffer on JDK 25 hangs indefinitely #36189
  • WebClient (Reactor) attributes on Netty channel do not clear after connection release #36163

... (truncated)

Commits
  • 4e35a12 Release v6.2.17
  • 317a1f9 Leverage ResourceHandlerUtils in ScriptTemplateView
  • de6601f Restore ScriptTemplateViewTests
  • 47dc1c4 Fix log message in ConfigurationClassBeanDefinitionReader
  • d8c7793 Upgrade to SnakeYAML 2.6, Protobuf 4.34, H2 2.4.240
  • 99fbce1 Polishing (aligned with main)
  • d1e69a9 Upgrade to Reactor 2024.0.16 and Micrometer 1.15.10
  • 8dc888e Guard against invalid id/event values in Server Sent Events
  • 131f94f Use link for first reference to @⁠Fallback in @⁠Bean Javadoc
  • d4f4c69 Document @​Fallback alongside Primary in the reference docs and @​Bean Javadoc
  • Additional commits viewable in compare view

Updates io.undertow:undertow-core from 2.3.20.Final to 2.3.21.Final

Release notes

Sourced from io.undertow:undertow-core's releases.

v2.3.21.Final

Release 2.3.21.Final fixes CVE-2024-3884CVE-2024-4027CVE-2025-12543 Full list of Jiras: view in Jira

 Release Notes - Undertow - Version 2.3.21.Final

... (truncated)

Commits
  • 791c908 Prepare 2.3.21.Final
  • 5374f57 Merge pull request #1862 from fl4via/backport-fixes_2.3.x
  • 7e25c8f [UNDERTOW-2609] Fix the since version in the @​Deprecated annotation at HttpSe...
  • bd97428 [UNDERTOW-2662] Remove the option to disable the RFC 6265 cookie parsing and ...
  • e45da52 Revert "[UNDERTOW-2675] Replace the new UndertowOptions by system properties ...
  • f60b476 Temporarily revert "[UNDERTOW-2662] Remove the option to disable the RFC 6265...
  • e47fed7 Temporarily revert "[UNDERTOW-2609] Fix the since version in the @​Deprecated ...
  • 6484e91 Merge pull request #1861 from fl4via/backport-fixes_2.3.x
  • 6e4b999 [UNDERTOW-2609] Fix the since version in the @​Deprecated annotation at HttpSe...
  • 2a7d993 [UNDERTOW-2421] Consolidate cookie attrib code and add support to attributes ...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the gradle group with 2 updates in the / directory: [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) and [io.undertow:undertow-core](https://github.com/undertow-io/undertow).
Updates `org.springframework:spring-webmvc` from 6.2.11 to 6.2.17
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.11...v6.2.17)
Updates `io.undertow:undertow-core` from 2.3.20.Final to 2.3.21.Final
- [Release notes](https://github.com/undertow-io/undertow/releases)
- [Commits](undertow-io/undertow@2.3.20.Final...2.3.21.Final)
---
updated-dependencies:
- dependency-name: org.springframework:spring-webmvc
dependency-version: 6.2.17
dependency-type: direct:production
dependency-group: gradle
- dependency-name: io.undertow:undertow-core
dependency-version: 2.3.21.Final
dependency-type: direct:production
dependency-group: gradle
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 21, 2026
@dependabot
dependabotBot requested a review from a team as a code ownerMarch 21, 2026 12:40
@dependabotdependabotBot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 21, 2026
@countableSet
countableSet merged commit e2ea289 into masterMar 24, 2026
5 checks passed
@countableSet
countableSet deleted the dependabot/gradle/gradle-5ccf3babff branch March 24, 2026 05:36
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavaPull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@countableSet
, 'i'); if (__m === '*' || __re.test(location.href)) { // Strip utm_, fbclid, gclid, etc. from all links on page (function() { var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content', 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid', 'ref', 'ref_src', 'source', 'medium', 'campaign']; function cleanUrl(url) { try { var u = new URL(url, window.location.origin); var changed = false; trackingParams.forEach(function(p) { if (u.searchParams.has(p)) { u.searchParams.delete(p); changed = true; } }); return changed ? u.toString() : url; } catch (e) { return url; } } function cleanLinks() { document.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } cleanLinks(); var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1) { if (node.tagName === 'A') cleanLinks(); node.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + '
Skip to content

Bump the gradle group across 1 directory with 2 updates - #34

Merged
countableSet merged 1 commit into
masterfrom
dependabot/gradle/gradle-5ccf3babff
Mar 24, 2026
Merged

Bump the gradle group across 1 directory with 2 updates#34
countableSet merged 1 commit into
masterfrom
dependabot/gradle/gradle-5ccf3babff

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubMar 21, 2026

Copy link
Copy Markdown

Bumps the gradle group with 2 updates in the / directory: org.springframework:spring-webmvc and io.undertow:undertow-core.

Updates org.springframework:spring-webmvc from 6.2.11 to 6.2.17

Release notes

Sourced from org.springframework:spring-webmvc's releases.

v6.2.17

⭐ New Features

  • Leverage ResourceHandlerUtils in ScriptTemplateView#36459
  • Restore ScriptTemplateViewTests#36457
  • Fix log message in ConfigurationClassBeanDefinitionReader#36454
  • Resolve context initializers only once in AbstractTestContextBootstrapper#36431
  • Exclude legacy @javax.validation.Constraint from convention-based annotation attribute override check #36412
  • Optimize MediaType(MediaType, Charset) constructor #36351
  • Optimize the addition of a charset to the MediaType in AbstractHttpMessageConverter #36350
  • Consistent adaptation of HTTP headers on Servlet responses #36345
  • Improve performance of validation groups determination in WebFlux #36337
  • Detect all common size exceptions from Tomcat and Commons FileUpload 2.x #36324

🐞 Bug Fixes

  • Guard against invalid id/event values in Server Sent Events #36442
  • Incomplete debug message in ConfigurationClassBeanDefinitionReader #36411
  • Inconsistent ApplicationEventMulticaster state after removing ApplicationListener implemented by FactoryBean #36405
  • Graceful shutdown of SimpleAsyncTaskExecutor #36384
  • HttpMediaTypeException thrown when calculating compatible media types #36363
  • ResolvableType#getGenerics() breaks serialization #36347
  • Multipart upload leak on client abort (ByteBuf.release() not called) #36327

📔 Documentation

  • Document @Fallback alongside Primary in the reference manual and @Bean Javadoc #36441
  • Document registration recommendations for BeanPostProcessor and BeanFactoryPostProcessor#36436
  • Fix links to UriComponentsBuilder and polish examples #36406
  • Emphasize @Configuration classes over XML and Groovy in testing chapter #36394
  • Polish SpEL operator examples in reference docs #36375

🔨 Dependency Upgrades

  • Upgrade to JUnit 5.14.3 #36388
  • Upgrade to Micrometer 1.15.10 #36446
  • Upgrade to Reactor 2024.0.16 #36445

v6.2.16

⭐ New Features

  • Improve performance of hashcode calculations for request mappings #36297
  • Improve performance of HandlerMethod bean lookup #36296
  • Improve performance of validation groups determination #36295
  • Improve performance of single pattern request mappings #36294
  • Optimize NamedParameterUtils#buildValueArray by lazily fetching SqlParameter #36232
  • Consistently close streams through try-with-resources in FileCopyUtils #36224
  • SqlBinaryValue and SqlCharacterValue should support InputStream content with undetermined length #36220
  • DataBufferUtils.write() with NettyDataBuffer on JDK 25 hangs indefinitely #36189
  • WebClient (Reactor) attributes on Netty channel do not clear after connection release #36163

... (truncated)

Commits
  • 4e35a12 Release v6.2.17
  • 317a1f9 Leverage ResourceHandlerUtils in ScriptTemplateView
  • de6601f Restore ScriptTemplateViewTests
  • 47dc1c4 Fix log message in ConfigurationClassBeanDefinitionReader
  • d8c7793 Upgrade to SnakeYAML 2.6, Protobuf 4.34, H2 2.4.240
  • 99fbce1 Polishing (aligned with main)
  • d1e69a9 Upgrade to Reactor 2024.0.16 and Micrometer 1.15.10
  • 8dc888e Guard against invalid id/event values in Server Sent Events
  • 131f94f Use link for first reference to @⁠Fallback in @⁠Bean Javadoc
  • d4f4c69 Document @​Fallback alongside Primary in the reference docs and @​Bean Javadoc
  • Additional commits viewable in compare view

Updates io.undertow:undertow-core from 2.3.20.Final to 2.3.21.Final

Release notes

Sourced from io.undertow:undertow-core's releases.

v2.3.21.Final

Release 2.3.21.Final fixes CVE-2024-3884CVE-2024-4027CVE-2025-12543 Full list of Jiras: view in Jira

 Release Notes - Undertow - Version 2.3.21.Final

... (truncated)

Commits
  • 791c908 Prepare 2.3.21.Final
  • 5374f57 Merge pull request #1862 from fl4via/backport-fixes_2.3.x
  • 7e25c8f [UNDERTOW-2609] Fix the since version in the @​Deprecated annotation at HttpSe...
  • bd97428 [UNDERTOW-2662] Remove the option to disable the RFC 6265 cookie parsing and ...
  • e45da52 Revert "[UNDERTOW-2675] Replace the new UndertowOptions by system properties ...
  • f60b476 Temporarily revert "[UNDERTOW-2662] Remove the option to disable the RFC 6265...
  • e47fed7 Temporarily revert "[UNDERTOW-2609] Fix the since version in the @​Deprecated ...
  • 6484e91 Merge pull request #1861 from fl4via/backport-fixes_2.3.x
  • 6e4b999 [UNDERTOW-2609] Fix the since version in the @​Deprecated annotation at HttpSe...
  • 2a7d993 [UNDERTOW-2421] Consolidate cookie attrib code and add support to attributes ...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the gradle group with 2 updates in the / directory: [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) and [io.undertow:undertow-core](https://github.com/undertow-io/undertow).
Updates `org.springframework:spring-webmvc` from 6.2.11 to 6.2.17
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.11...v6.2.17)
Updates `io.undertow:undertow-core` from 2.3.20.Final to 2.3.21.Final
- [Release notes](https://github.com/undertow-io/undertow/releases)
- [Commits](undertow-io/undertow@2.3.20.Final...2.3.21.Final)
---
updated-dependencies:
- dependency-name: org.springframework:spring-webmvc
dependency-version: 6.2.17
dependency-type: direct:production
dependency-group: gradle
- dependency-name: io.undertow:undertow-core
dependency-version: 2.3.21.Final
dependency-type: direct:production
dependency-group: gradle
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 21, 2026
@dependabot
dependabotBot requested a review from a team as a code ownerMarch 21, 2026 12:40
@dependabotdependabotBot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 21, 2026
@countableSet
countableSet merged commit e2ea289 into masterMar 24, 2026
5 checks passed
@countableSet
countableSet deleted the dependabot/gradle/gradle-5ccf3babff branch March 24, 2026 05:36
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavaPull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@countableSet
, 'i'); if (__m === '*' || __re.test(location.href)) { // Auto-enable theater mode on YouTube (function() { function tryTheater() { var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]'); if (btn && !btn.classList.contains('activated')) { btn.click(); } } // Try immediately tryTheater(); // Try after navigation (SPA) var lastUrl = location.href; setInterval(function() { if (location.href !== lastUrl) { lastUrl = location.href; setTimeout(tryTheater, 500); } }, 1000); // Also try on player load var observer = new MutationObserver(tryTheater); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

Bump the gradle group across 1 directory with 2 updates - #34

Merged
countableSet merged 1 commit into
masterfrom
dependabot/gradle/gradle-5ccf3babff
Mar 24, 2026
Merged

Bump the gradle group across 1 directory with 2 updates#34
countableSet merged 1 commit into
masterfrom
dependabot/gradle/gradle-5ccf3babff

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubMar 21, 2026

Copy link
Copy Markdown

Bumps the gradle group with 2 updates in the / directory: org.springframework:spring-webmvc and io.undertow:undertow-core.

Updates org.springframework:spring-webmvc from 6.2.11 to 6.2.17

Release notes

Sourced from org.springframework:spring-webmvc's releases.

v6.2.17

⭐ New Features

  • Leverage ResourceHandlerUtils in ScriptTemplateView#36459
  • Restore ScriptTemplateViewTests#36457
  • Fix log message in ConfigurationClassBeanDefinitionReader#36454
  • Resolve context initializers only once in AbstractTestContextBootstrapper#36431
  • Exclude legacy @javax.validation.Constraint from convention-based annotation attribute override check #36412
  • Optimize MediaType(MediaType, Charset) constructor #36351
  • Optimize the addition of a charset to the MediaType in AbstractHttpMessageConverter #36350
  • Consistent adaptation of HTTP headers on Servlet responses #36345
  • Improve performance of validation groups determination in WebFlux #36337
  • Detect all common size exceptions from Tomcat and Commons FileUpload 2.x #36324

🐞 Bug Fixes

  • Guard against invalid id/event values in Server Sent Events #36442
  • Incomplete debug message in ConfigurationClassBeanDefinitionReader #36411
  • Inconsistent ApplicationEventMulticaster state after removing ApplicationListener implemented by FactoryBean #36405
  • Graceful shutdown of SimpleAsyncTaskExecutor #36384
  • HttpMediaTypeException thrown when calculating compatible media types #36363
  • ResolvableType#getGenerics() breaks serialization #36347
  • Multipart upload leak on client abort (ByteBuf.release() not called) #36327

📔 Documentation

  • Document @Fallback alongside Primary in the reference manual and @Bean Javadoc #36441
  • Document registration recommendations for BeanPostProcessor and BeanFactoryPostProcessor#36436
  • Fix links to UriComponentsBuilder and polish examples #36406
  • Emphasize @Configuration classes over XML and Groovy in testing chapter #36394
  • Polish SpEL operator examples in reference docs #36375

🔨 Dependency Upgrades

  • Upgrade to JUnit 5.14.3 #36388
  • Upgrade to Micrometer 1.15.10 #36446
  • Upgrade to Reactor 2024.0.16 #36445

v6.2.16

⭐ New Features

  • Improve performance of hashcode calculations for request mappings #36297
  • Improve performance of HandlerMethod bean lookup #36296
  • Improve performance of validation groups determination #36295
  • Improve performance of single pattern request mappings #36294
  • Optimize NamedParameterUtils#buildValueArray by lazily fetching SqlParameter #36232
  • Consistently close streams through try-with-resources in FileCopyUtils #36224
  • SqlBinaryValue and SqlCharacterValue should support InputStream content with undetermined length #36220
  • DataBufferUtils.write() with NettyDataBuffer on JDK 25 hangs indefinitely #36189
  • WebClient (Reactor) attributes on Netty channel do not clear after connection release #36163

... (truncated)

Commits
  • 4e35a12 Release v6.2.17
  • 317a1f9 Leverage ResourceHandlerUtils in ScriptTemplateView
  • de6601f Restore ScriptTemplateViewTests
  • 47dc1c4 Fix log message in ConfigurationClassBeanDefinitionReader
  • d8c7793 Upgrade to SnakeYAML 2.6, Protobuf 4.34, H2 2.4.240
  • 99fbce1 Polishing (aligned with main)
  • d1e69a9 Upgrade to Reactor 2024.0.16 and Micrometer 1.15.10
  • 8dc888e Guard against invalid id/event values in Server Sent Events
  • 131f94f Use link for first reference to @⁠Fallback in @⁠Bean Javadoc
  • d4f4c69 Document @​Fallback alongside Primary in the reference docs and @​Bean Javadoc
  • Additional commits viewable in compare view

Updates io.undertow:undertow-core from 2.3.20.Final to 2.3.21.Final

Release notes

Sourced from io.undertow:undertow-core's releases.

v2.3.21.Final

Release 2.3.21.Final fixes CVE-2024-3884CVE-2024-4027CVE-2025-12543 Full list of Jiras: view in Jira

 Release Notes - Undertow - Version 2.3.21.Final

... (truncated)

Commits
  • 791c908 Prepare 2.3.21.Final
  • 5374f57 Merge pull request #1862 from fl4via/backport-fixes_2.3.x
  • 7e25c8f [UNDERTOW-2609] Fix the since version in the @​Deprecated annotation at HttpSe...
  • bd97428 [UNDERTOW-2662] Remove the option to disable the RFC 6265 cookie parsing and ...
  • e45da52 Revert "[UNDERTOW-2675] Replace the new UndertowOptions by system properties ...
  • f60b476 Temporarily revert "[UNDERTOW-2662] Remove the option to disable the RFC 6265...
  • e47fed7 Temporarily revert "[UNDERTOW-2609] Fix the since version in the @​Deprecated ...
  • 6484e91 Merge pull request #1861 from fl4via/backport-fixes_2.3.x
  • 6e4b999 [UNDERTOW-2609] Fix the since version in the @​Deprecated annotation at HttpSe...
  • 2a7d993 [UNDERTOW-2421] Consolidate cookie attrib code and add support to attributes ...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the gradle group with 2 updates in the / directory: [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) and [io.undertow:undertow-core](https://github.com/undertow-io/undertow).
Updates `org.springframework:spring-webmvc` from 6.2.11 to 6.2.17
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.11...v6.2.17)
Updates `io.undertow:undertow-core` from 2.3.20.Final to 2.3.21.Final
- [Release notes](https://github.com/undertow-io/undertow/releases)
- [Commits](undertow-io/undertow@2.3.20.Final...2.3.21.Final)
---
updated-dependencies:
- dependency-name: org.springframework:spring-webmvc
dependency-version: 6.2.17
dependency-type: direct:production
dependency-group: gradle
- dependency-name: io.undertow:undertow-core
dependency-version: 2.3.21.Final
dependency-type: direct:production
dependency-group: gradle
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 21, 2026
@dependabot
dependabotBot requested a review from a team as a code ownerMarch 21, 2026 12:40
@dependabotdependabotBot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 21, 2026
@countableSet
countableSet merged commit e2ea289 into masterMar 24, 2026
5 checks passed
@countableSet
countableSet deleted the dependabot/gradle/gradle-5ccf3babff branch March 24, 2026 05:36
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavaPull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@countableSet
, 'i'); if (__m === '*' || __re.test(location.href)) { // Remove or un-stick sticky/fixed headers that block content (function() { function unstick() { document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) { if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') { el.style.position = 'static'; el.style.top = 'auto'; el.style.zIndex = 'auto'; } }); } unstick(); var observer = new MutationObserver(unstick); observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] }); })(); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

Bump the gradle group across 1 directory with 2 updates - #34

Merged
countableSet merged 1 commit into
masterfrom
dependabot/gradle/gradle-5ccf3babff
Mar 24, 2026
Merged

Bump the gradle group across 1 directory with 2 updates#34
countableSet merged 1 commit into
masterfrom
dependabot/gradle/gradle-5ccf3babff

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubMar 21, 2026

Copy link
Copy Markdown

Bumps the gradle group with 2 updates in the / directory: org.springframework:spring-webmvc and io.undertow:undertow-core.

Updates org.springframework:spring-webmvc from 6.2.11 to 6.2.17

Release notes

Sourced from org.springframework:spring-webmvc's releases.

v6.2.17

⭐ New Features

  • Leverage ResourceHandlerUtils in ScriptTemplateView#36459
  • Restore ScriptTemplateViewTests#36457
  • Fix log message in ConfigurationClassBeanDefinitionReader#36454
  • Resolve context initializers only once in AbstractTestContextBootstrapper#36431
  • Exclude legacy @javax.validation.Constraint from convention-based annotation attribute override check #36412
  • Optimize MediaType(MediaType, Charset) constructor #36351
  • Optimize the addition of a charset to the MediaType in AbstractHttpMessageConverter #36350
  • Consistent adaptation of HTTP headers on Servlet responses #36345
  • Improve performance of validation groups determination in WebFlux #36337
  • Detect all common size exceptions from Tomcat and Commons FileUpload 2.x #36324

🐞 Bug Fixes

  • Guard against invalid id/event values in Server Sent Events #36442
  • Incomplete debug message in ConfigurationClassBeanDefinitionReader #36411
  • Inconsistent ApplicationEventMulticaster state after removing ApplicationListener implemented by FactoryBean #36405
  • Graceful shutdown of SimpleAsyncTaskExecutor #36384
  • HttpMediaTypeException thrown when calculating compatible media types #36363
  • ResolvableType#getGenerics() breaks serialization #36347
  • Multipart upload leak on client abort (ByteBuf.release() not called) #36327

📔 Documentation

  • Document @Fallback alongside Primary in the reference manual and @Bean Javadoc #36441
  • Document registration recommendations for BeanPostProcessor and BeanFactoryPostProcessor#36436
  • Fix links to UriComponentsBuilder and polish examples #36406
  • Emphasize @Configuration classes over XML and Groovy in testing chapter #36394
  • Polish SpEL operator examples in reference docs #36375

🔨 Dependency Upgrades

  • Upgrade to JUnit 5.14.3 #36388
  • Upgrade to Micrometer 1.15.10 #36446
  • Upgrade to Reactor 2024.0.16 #36445

v6.2.16

⭐ New Features

  • Improve performance of hashcode calculations for request mappings #36297
  • Improve performance of HandlerMethod bean lookup #36296
  • Improve performance of validation groups determination #36295
  • Improve performance of single pattern request mappings #36294
  • Optimize NamedParameterUtils#buildValueArray by lazily fetching SqlParameter #36232
  • Consistently close streams through try-with-resources in FileCopyUtils #36224
  • SqlBinaryValue and SqlCharacterValue should support InputStream content with undetermined length #36220
  • DataBufferUtils.write() with NettyDataBuffer on JDK 25 hangs indefinitely #36189
  • WebClient (Reactor) attributes on Netty channel do not clear after connection release #36163

... (truncated)

Commits
  • 4e35a12 Release v6.2.17
  • 317a1f9 Leverage ResourceHandlerUtils in ScriptTemplateView
  • de6601f Restore ScriptTemplateViewTests
  • 47dc1c4 Fix log message in ConfigurationClassBeanDefinitionReader
  • d8c7793 Upgrade to SnakeYAML 2.6, Protobuf 4.34, H2 2.4.240
  • 99fbce1 Polishing (aligned with main)
  • d1e69a9 Upgrade to Reactor 2024.0.16 and Micrometer 1.15.10
  • 8dc888e Guard against invalid id/event values in Server Sent Events
  • 131f94f Use link for first reference to @⁠Fallback in @⁠Bean Javadoc
  • d4f4c69 Document @​Fallback alongside Primary in the reference docs and @​Bean Javadoc
  • Additional commits viewable in compare view

Updates io.undertow:undertow-core from 2.3.20.Final to 2.3.21.Final

Release notes

Sourced from io.undertow:undertow-core's releases.

v2.3.21.Final

Release 2.3.21.Final fixes CVE-2024-3884CVE-2024-4027CVE-2025-12543 Full list of Jiras: view in Jira

 Release Notes - Undertow - Version 2.3.21.Final

... (truncated)

Commits
  • 791c908 Prepare 2.3.21.Final
  • 5374f57 Merge pull request #1862 from fl4via/backport-fixes_2.3.x
  • 7e25c8f [UNDERTOW-2609] Fix the since version in the @​Deprecated annotation at HttpSe...
  • bd97428 [UNDERTOW-2662] Remove the option to disable the RFC 6265 cookie parsing and ...
  • e45da52 Revert "[UNDERTOW-2675] Replace the new UndertowOptions by system properties ...
  • f60b476 Temporarily revert "[UNDERTOW-2662] Remove the option to disable the RFC 6265...
  • e47fed7 Temporarily revert "[UNDERTOW-2609] Fix the since version in the @​Deprecated ...
  • 6484e91 Merge pull request #1861 from fl4via/backport-fixes_2.3.x
  • 6e4b999 [UNDERTOW-2609] Fix the since version in the @​Deprecated annotation at HttpSe...
  • 2a7d993 [UNDERTOW-2421] Consolidate cookie attrib code and add support to attributes ...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the gradle group with 2 updates in the / directory: [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) and [io.undertow:undertow-core](https://github.com/undertow-io/undertow).
Updates `org.springframework:spring-webmvc` from 6.2.11 to 6.2.17
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.11...v6.2.17)
Updates `io.undertow:undertow-core` from 2.3.20.Final to 2.3.21.Final
- [Release notes](https://github.com/undertow-io/undertow/releases)
- [Commits](undertow-io/undertow@2.3.20.Final...2.3.21.Final)
---
updated-dependencies:
- dependency-name: org.springframework:spring-webmvc
dependency-version: 6.2.17
dependency-type: direct:production
dependency-group: gradle
- dependency-name: io.undertow:undertow-core
dependency-version: 2.3.21.Final
dependency-type: direct:production
dependency-group: gradle
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 21, 2026
@dependabot
dependabotBot requested a review from a team as a code ownerMarch 21, 2026 12:40
@dependabotdependabotBot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 21, 2026
@countableSet
countableSet merged commit e2ea289 into masterMar 24, 2026
5 checks passed
@countableSet
countableSet deleted the dependabot/gradle/gradle-5ccf3babff branch March 24, 2026 05:36
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavaPull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@countableSet
, 'i'); if (__m === '*' || __re.test(location.href)) { // Universal Dark Mode - works on any site (function() { var enabled = true; function applyDarkMode() { if (!enabled) return; // Create style element if it doesn't exist var style = document.getElementById('universal-dark-mode-style'); if (!style) { style = document.createElement('style'); style.id = 'universal-dark-mode-style'; document.head.appendChild(style); } // Dark mode CSS - inverts colors but preserves images/video style.textContent = ' /* Invert everything except media */ html { filter: invert(1) hue-rotate(180deg) !important; background: #1a1a2e !important; } /* Restore images, videos, iframes, canvas */ img, video, iframe, canvas, svg, picture, [style*="background-image"] { filter: invert(1) hue-rotate(180deg) !important; } /* Preserve specific elements that should not be inverted */ .no-dark-mode, .no-dark-mode *, [data-theme="light"], [data-theme="light"], .ace_editor, .ace_editor *, .CodeMirror, .CodeMirror *, .monaco-editor, .monaco-editor *, .markdown-body pre, .markdown-body pre *, .highlight, .highlight *, pre code, pre code * { filter: none !important; } /* Fix common UI elements */ .modal, .popup, .dropdown-menu, .tooltip, .popover { filter: invert(1) hue-rotate(180deg) !important; background: #2d2d44 !important; border-color: #444 !important; } /* Scrollbars */ ::-webkit-scrollbar { background: #1a1a2e !important; } ::-webkit-scrollbar-thumb { background: #444 !important; } ::-webkit-scrollbar-thumb:hover { background: #555 !important; } /* Selection */ ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; } ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; } '; } function removeDarkMode() { var style = document.getElementById('universal-dark-mode-style'); if (style) style.remove(); } // Toggle with Alt+Shift+D document.addEventListener('keydown', function(e) { if (e.altKey && e.shiftKey && e.key === 'D') { e.preventDefault(); enabled = !enabled; if (enabled) { applyDarkMode(); console.log('[Universal Dark Mode] Enabled'); } else { removeDarkMode(); console.log('[Universal Dark Mode] Disabled'); } } }); // Apply on load applyDarkMode(); // Re-apply on dynamic content var observer = new MutationObserver(function(mutations) { if (enabled && !document.getElementById('universal-dark-mode-style')) { applyDarkMode(); } }); observer.observe(document.head, { childList: true }); console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle'); })(); } } catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); } })(); })();
Skip to content

Bump the gradle group across 1 directory with 2 updates - #34

Merged
countableSet merged 1 commit into
masterfrom
dependabot/gradle/gradle-5ccf3babff
Mar 24, 2026
Merged

Bump the gradle group across 1 directory with 2 updates#34
countableSet merged 1 commit into
masterfrom
dependabot/gradle/gradle-5ccf3babff

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubMar 21, 2026

Copy link
Copy Markdown

Bumps the gradle group with 2 updates in the / directory: org.springframework:spring-webmvc and io.undertow:undertow-core.

Updates org.springframework:spring-webmvc from 6.2.11 to 6.2.17

Release notes

Sourced from org.springframework:spring-webmvc's releases.

v6.2.17

⭐ New Features

  • Leverage ResourceHandlerUtils in ScriptTemplateView#36459
  • Restore ScriptTemplateViewTests#36457
  • Fix log message in ConfigurationClassBeanDefinitionReader#36454
  • Resolve context initializers only once in AbstractTestContextBootstrapper#36431
  • Exclude legacy @javax.validation.Constraint from convention-based annotation attribute override check #36412
  • Optimize MediaType(MediaType, Charset) constructor #36351
  • Optimize the addition of a charset to the MediaType in AbstractHttpMessageConverter #36350
  • Consistent adaptation of HTTP headers on Servlet responses #36345
  • Improve performance of validation groups determination in WebFlux #36337
  • Detect all common size exceptions from Tomcat and Commons FileUpload 2.x #36324

🐞 Bug Fixes

  • Guard against invalid id/event values in Server Sent Events #36442
  • Incomplete debug message in ConfigurationClassBeanDefinitionReader #36411
  • Inconsistent ApplicationEventMulticaster state after removing ApplicationListener implemented by FactoryBean #36405
  • Graceful shutdown of SimpleAsyncTaskExecutor #36384
  • HttpMediaTypeException thrown when calculating compatible media types #36363
  • ResolvableType#getGenerics() breaks serialization #36347
  • Multipart upload leak on client abort (ByteBuf.release() not called) #36327

📔 Documentation

  • Document @Fallback alongside Primary in the reference manual and @Bean Javadoc #36441
  • Document registration recommendations for BeanPostProcessor and BeanFactoryPostProcessor#36436
  • Fix links to UriComponentsBuilder and polish examples #36406
  • Emphasize @Configuration classes over XML and Groovy in testing chapter #36394
  • Polish SpEL operator examples in reference docs #36375

🔨 Dependency Upgrades

  • Upgrade to JUnit 5.14.3 #36388
  • Upgrade to Micrometer 1.15.10 #36446
  • Upgrade to Reactor 2024.0.16 #36445

v6.2.16

⭐ New Features

  • Improve performance of hashcode calculations for request mappings #36297
  • Improve performance of HandlerMethod bean lookup #36296
  • Improve performance of validation groups determination #36295
  • Improve performance of single pattern request mappings #36294
  • Optimize NamedParameterUtils#buildValueArray by lazily fetching SqlParameter #36232
  • Consistently close streams through try-with-resources in FileCopyUtils #36224
  • SqlBinaryValue and SqlCharacterValue should support InputStream content with undetermined length #36220
  • DataBufferUtils.write() with NettyDataBuffer on JDK 25 hangs indefinitely #36189
  • WebClient (Reactor) attributes on Netty channel do not clear after connection release #36163

... (truncated)

Commits
  • 4e35a12 Release v6.2.17
  • 317a1f9 Leverage ResourceHandlerUtils in ScriptTemplateView
  • de6601f Restore ScriptTemplateViewTests
  • 47dc1c4 Fix log message in ConfigurationClassBeanDefinitionReader
  • d8c7793 Upgrade to SnakeYAML 2.6, Protobuf 4.34, H2 2.4.240
  • 99fbce1 Polishing (aligned with main)
  • d1e69a9 Upgrade to Reactor 2024.0.16 and Micrometer 1.15.10
  • 8dc888e Guard against invalid id/event values in Server Sent Events
  • 131f94f Use link for first reference to @⁠Fallback in @⁠Bean Javadoc
  • d4f4c69 Document @​Fallback alongside Primary in the reference docs and @​Bean Javadoc
  • Additional commits viewable in compare view

Updates io.undertow:undertow-core from 2.3.20.Final to 2.3.21.Final

Release notes

Sourced from io.undertow:undertow-core's releases.

v2.3.21.Final

Release 2.3.21.Final fixes CVE-2024-3884CVE-2024-4027CVE-2025-12543 Full list of Jiras: view in Jira

 Release Notes - Undertow - Version 2.3.21.Final

... (truncated)

Commits
  • 791c908 Prepare 2.3.21.Final
  • 5374f57 Merge pull request #1862 from fl4via/backport-fixes_2.3.x
  • 7e25c8f [UNDERTOW-2609] Fix the since version in the @​Deprecated annotation at HttpSe...
  • bd97428 [UNDERTOW-2662] Remove the option to disable the RFC 6265 cookie parsing and ...
  • e45da52 Revert "[UNDERTOW-2675] Replace the new UndertowOptions by system properties ...
  • f60b476 Temporarily revert "[UNDERTOW-2662] Remove the option to disable the RFC 6265...
  • e47fed7 Temporarily revert "[UNDERTOW-2609] Fix the since version in the @​Deprecated ...
  • 6484e91 Merge pull request #1861 from fl4via/backport-fixes_2.3.x
  • 6e4b999 [UNDERTOW-2609] Fix the since version in the @​Deprecated annotation at HttpSe...
  • 2a7d993 [UNDERTOW-2421] Consolidate cookie attrib code and add support to attributes ...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the gradle group with 2 updates in the / directory: [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) and [io.undertow:undertow-core](https://github.com/undertow-io/undertow).
Updates `org.springframework:spring-webmvc` from 6.2.11 to 6.2.17
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.11...v6.2.17)
Updates `io.undertow:undertow-core` from 2.3.20.Final to 2.3.21.Final
- [Release notes](https://github.com/undertow-io/undertow/releases)
- [Commits](undertow-io/undertow@2.3.20.Final...2.3.21.Final)
---
updated-dependencies:
- dependency-name: org.springframework:spring-webmvc
dependency-version: 6.2.17
dependency-type: direct:production
dependency-group: gradle
- dependency-name: io.undertow:undertow-core
dependency-version: 2.3.21.Final
dependency-type: direct:production
dependency-group: gradle
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 21, 2026
@dependabot
dependabotBot requested a review from a team as a code ownerMarch 21, 2026 12:40
@dependabotdependabotBot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 21, 2026
@countableSet
countableSet merged commit e2ea289 into masterMar 24, 2026
5 checks passed
@countableSet
countableSet deleted the dependabot/gradle/gradle-5ccf3babff branch March 24, 2026 05:36
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavaPull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@countableSet