Skip to content

Build(deps): Bump org.springframework.boot from 3.2.3 to 3.5.15 in /backend#51

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/gradle/backend/main/org.springframework.boot-3.5.15
Jun 18, 2026
Merged

Build(deps): Bump org.springframework.boot from 3.2.3 to 3.5.15 in /backend#51
github-actions[bot] merged 1 commit into
mainfrom
dependabot/gradle/backend/main/org.springframework.boot-3.5.15

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 18, 2026

Copy link
Copy Markdown
Contributor

Bumps org.springframework.boot from 3.2.3 to 3.5.15.

Release notes

Sourced from org.springframework.boot's releases.

v3.5.15

🐞 Bug Fixes

  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50743
  • MailSender auto-configuration does not enable hostname verification #50742
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50624
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50501
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50451
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50429
  • GraphQL WebSocket support does not configure allowed origins #50391
  • Buildpack module does not validate long-to-int casts #50382
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50373
  • Created StackTracePrinter instances have no access to the Environment #50303
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50301
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50292
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50273
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50254
  • Meter registries are not removed from the global registry when the context is closed #50235
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50225
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50205
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50118
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50095

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50641
  • Remove the use of Optional from Data Neo4j repository examples #50600
  • Fix typos in documentation #50593
  • Document Java 25 requirement for AOT cache #50482
  • Clarify dependency requirement for Bean Validation support #50290
  • Document SSL reloading with Let's Encrypt #50222
  • Polish InvalidConfigurationPropertyValueException constructor javadoc #50212
  • Document known testcontainers lifecycle issues #50210
  • Document configuring multiple connectors with Jetty #50206
  • Fix typo in Spring Security OAuth2 client registration documentation #50193

🔨 Dependency Upgrades

... (truncated)

Commits
  • c069bce Release v3.5.15
  • b068647 Upgrade to Spring Integration 6.5.9
  • 327bef3 Enable hostname verification by default in Mail auto-config
  • 4218bd7 Fix predictable temp directory in Artemis embedded configuration
  • b2a67be Upgrade to Spring GraphQL 1.4.6
  • 54ef8d3 Upgrade to Spring Batch 5.2.6
  • d3f60fe Upgrade to Spring WS 4.1.4
  • 28d4ae8 Upgrade to Spring Session 3.5.7
  • 190c452 Upgrade to Spring Security 6.5.11
  • 34e7b58 Upgrade to Spring Pulsar 1.2.18
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
org.springframework.boot [>= 4.a, < 5]

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jun 18, 2026
@github-actions github-actions Bot enabled auto-merge (squash) June 18, 2026 18:38
Bumps [org.springframework.boot](https://github.com/spring-projects/spring-boot) from 3.2.3 to 3.5.15.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.2.3...v3.5.15)

---
updated-dependencies:
- dependency-name: org.springframework.boot
  dependency-version: 3.5.15
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/gradle/backend/main/org.springframework.boot-3.5.15 branch from 2d9cdfe to c19a02d Compare June 18, 2026 18:40
@github-actions github-actions Bot merged commit 23fed47 into main Jun 18, 2026
4 checks passed
@dependabot dependabot Bot deleted the dependabot/gradle/backend/main/org.springframework.boot-3.5.15 branch June 18, 2026 18:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants