build(deps): bump org.springframework:spring-web from 6.2.12 to 7.0.5 by dependabot[bot] · Pull Request #1249

build(deps): bump org.springframework:spring-web from 6.2.12 to 7.0.5 by dependabot[bot] · Pull Request #1249 · allure-framework/allure-java

Bumps org.springframework:spring-web from 6.2.12 to 7.0.5.

Release notes

Sourced from org.springframework:spring-web's releases.

v7.0.5

⚠️ Attention Required

Optimize request and response header handling in Spring MVC #36334

⭐ New Features

Consistent adaptation of HTTP headers on Servlet responses #36343

Copy methodAnnotations in MethodParameter copy constructor #36342

Improve performance of validation groups determination in WebFlux #36336

Reuse AnnotatedMethod annotation cache in derived instances #36322

Optimize the addition of a charset to the MediaType in AbstractHttpMessageConverter #36320

Optimize MediaType(MediaType, Charset) constructor #36318

Detect all common size exceptions from Tomcat and Commons FileUpload 2.x #36317

Consistently support @Autowired as a meta-annotation #36315

Avoid duplicate required attribute lookup for @Autowired annotations #36314

Cache @ResponseBody presence per controller class in RequestResponseBodyMethodProcessor #36311

🐞 Bug Fixes

ResolvableType#getGenerics() breaks serialization #36346

DefaultHttpMessageConverters not adding provided configurer #36332

Restore early MessageConsumer creation for temporary queue #36321

Multipart upload leak on client abort (ByteBuf.release() not called) #36262

📔 Documentation

Document that SpEL expressions using Optional with null-safe and Elvis operators are not compilable #36331

Improve documentation of baseline API version to emphasize version must be supported #36316

Stop referring to obsolete ListenableFuture in documentation #36313

Stop referring to standard Java features as "Java 8" features in documentation #36310

❤️ Contributors

Thank you to all the contributors who worked on this release:

@Niravil and @TAKETODAY

v7.0.4

⭐ New Features

Cache method annotations in MethodParameter and AnnotatedMethod #36307

Consistently support @Lazy as a meta-annotation at arbitrary depths #36306

Consistently support @Validated as a meta-annotation at arbitrary depths #36305

Let developers disable default registrations in HttpMessageConverters #36303

Log which HandlerInterceptor threw the exception #36281

Improve performance of hashcode calculations for request mappings #36279

Improve performance of HandlerMethod bean lookup #36278

Improve performance of version mapping #36276

Improve performance of single pattern request mappings #36275

... (truncated)

Commits

16ecbfc Release v7.0.5
85c18ca Update docs on supported versions with baseline notation
22bd8bd Skip serialization of potentially non-serializable cached state
9b10bb5 Polishing
727ccd0 Avoid setCharacterEncoding(Charset) call with null value
a9f447e Consistent adaptation of HTTP headers on Servlet responses
0841e79 Copy methodAnnotations in MethodParameter copy constructor
a1868d3 fix TransactionAspectSupport#currentTransactionStatus javadoc
e5aac66 ServletResponseHeadersAdapter checks contentType property
8bf85d2 Polishing
Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
org.springframework:spring-web	[>= 6.a, < 7]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Note: Dependabot was ignoring updates to this dependency, but since you've updated it yourself we've started tracking it for you again. 🤖

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)