Sourced from com.amazonaws:aws-java-sdk-s3's changelog.

1.12.261 2022-07-14

AWS Config

• Features

  • Update ResourceType enum with values for Route53Resolver, Batch, DMS, Workspaces, Stepfunctions, SageMaker, ElasticLoadBalancingV2, MSK types

AWS Glue

• Features

  • This release adds an additional worker type for Glue Streaming jobs.

AWS Outposts

• Features

  • This release adds the ShipmentInformation and AssetInformationList fields to the GetOrder API response.

AWSKendraFrontendService

• Features

  • This release adds AccessControlConfigurations which allow you to redefine your document level access control without the need for content re-indexing.

Amazon Athena

• Features

  • This release updates data types that contain either QueryExecutionId, NamedQueryId or ExpectedBucketOwner. Ids must be between 1 and 128 characters and contain only non-whitespace characters. ExpectedBucketOwner must be 12-digit string.

Amazon Elastic Compute Cloud

• Features

  • This release adds flow logs for Transit Gateway to allow customers to gain deeper visibility and insights into network traffic through their Transit Gateways.

Amazon S3

• Bugfixes

  • Fixed possible issue in TransferManager's downloadDirectory operation where files could be downloaded to some sibling directories of the destination directory if the key contained specially-crafted relative paths.

Amazon SageMaker Service

• Features

  • This release adds support for G5, P4d, and C6i instance types in Amazon SageMaker Inference and increases the number of hyperparameters that can be searched from 20 to 30 in Amazon SageMaker Automatic Model Tuning

AmazonNimbleStudio

• Features

  • Amazon Nimble Studio adds support for IAM-based access to AWS resources for Nimble Studio components and custom studio components. Studio Component scripts use these roles on Nimble Studio workstation to mount filesystems, access S3 buckets, or other configured resources in the Studio's AWS account

CodeArtifact

• Features

  • This release introduces Package Origin Controls, a mechanism used to counteract Dependency Confusion attacks. Adds two new APIs, PutPackageOriginConfiguration and DescribePackage, and updates the ListPackage, DescribePackageVersion and ListPackageVersion APIs in support of the feature.

Firewall Management Service

• Features

  • Adds support for strict ordering in stateful rule groups in Network Firewall policies.

Inspector2

• Features

  • This release adds support for Inspector V2 scan configurations through the get and update configuration APIs. Currently this allows configuring ECR automated re-scan duration to lifetime or 180 days or 30 days.

1.12.260 2022-07-13

... (truncated)

• cb66c50 AWS SDK for Java 1.12.261
• 685134e Update GitHub version number to 1.12.261-SNAPSHOT
• 5555d84 AWS SDK for Java 1.12.260
• ae88c8a Update GitHub version number to 1.12.260-SNAPSHOT
• 93a0a7f AWS SDK for Java 1.12.259
• 5ec7cb7 Update GitHub version number to 1.12.259-SNAPSHOT
• 75fe4e1 AWS SDK for Java 1.12.258
• 8b6bdb0 Update GitHub version number to 1.12.258-SNAPSHOT
• eba6423 AWS SDK for Java 1.12.257
• d2f0b05 Update GitHub version number to 1.12.257-SNAPSHOT
• Additional commits viewable in compare view

• 9a46ef8 [maven-release-plugin] prepare release jackson-core-2.18.6
• 5f192db Prep for 2.18.6 release
• b0c428e Enforce StreamReadConstraints.maxNumberLength for non-blocking (async) pars...
• 7c8b6d5 Add test for nesting for DataInput-backed JsonParser (#1550)
• 97a647b Update CI: JDK 23 -> 25
• 1601331 (backport from 2.21) Fix #1548: validate max doc length for fixed buffer inpu...
• fae2542 release notes update
• 70c99ba Update UTF8DataInputJsonParser.java (#1512)
• caea665 Post-release dep version bump
• 635d3bd [maven-release-plugin] prepare for next development iteration
• Additional commits viewable in compare view

Sourced from com.google.code.gson:gson's releases.

Gson 2.14.0

What's Changed

• Add type adapters for java.time classes by @​eamonnmcmanus in google/gson#2948

  When the java.time API is available, Gson automatically can read and write instances of classes like Instant and Duration. The format it uses essentially freezes the JSON representation that ReflectiveTypeAdapterFactory established by default, based on the private fields of java.time classes. That's not a great representation, but it is understandable. Changing it to anything else would break compatibility with systems that are expecting the current format.

  With this change, Gson no longer tries to access private fields of these classes using reflection. So it is no longer necessary to run with --add-opens for these classes on recent JDKs.

• Remove com.google.gson.graph by @​eamonnmcmanus in google/gson#2990.

  This package was not part of any released artifact and depended on Gson internals in potentially problematic ways.

• Validate that strings being parsed as integers consist of ASCII characters by @​eamonnmcmanus in google/gson#2995

  Previously, strings could contain non-ASCII Unicode digits and still be parsed as integers. That's inconsistent with how JSON numbers are treated.

• Fix duplicate key detection when first value is null by @​andrewstellman in google/gson#3006

  This could potentially break code that was relying on the incorrect behaviour. For example, this JSON string was previously accepted but will no longer be: {"foo": null, "foo": bar}.

• Remove Serializable from internal Type implementation classes. by @​eamonnmcmanus in google/gson#3011

  The nested classes ParameterizedTypeImpl, GenericArrayTypeImpl, and WildcardTypeImpl in GsonTypes are implementations of the corresponding types (without Impl) in java.lang.reflect. For some reason, they were serializable, even though the java.lang.reflect implementations are not. Having unnecessarily serializable classes could conceivably have been a security problem if they were part of a larger exploit using serialization. (We do not consider this a likely scenario and do not suggest that you need to update Gson just to get this change.)

• Add LegacyProtoTypeAdapterFactory. by @​eamonnmcmanus in google/gson#3014

  This is not part of any released artifact, but may be of use when trying to fix code that is currently accessing the internals of protobuf classes via reflection.

• Make AppendableWriter do flush and close if delegation object supports by @​MukjepScarlet in google/gson#2925

Other less visible changes

• Add default capacity to EnumTypeAdapter maps by @​MukjepScarlet in google/gson#2959
• refactor: move derived adapters from Gson to TypeAdapters by @​MukjepScarlet in google/gson#2951
• Optimize new Gson() by @​MukjepScarlet in google/gson#2864

New Contributors

• @​ThirdGoddess made their first contribution in google/gson#2944
• @​lmj798 made their first contribution in google/gson#2988
• @​Eng-YasminKotb made their first contribution in google/gson#3005
• @​andrewstellman made their first contribution in google/gson#3006

Full Changelog: google/gson@gson-parent-2.13.2...gson-parent-2.14.0

Gson 2.13.2

The main changes in this release are just newer dependencies.

... (truncated)

Sourced from com.google.code.gson:gson's changelog.

Change Log

The change log for versions newer than 2.10 is available only on the GitHub Releases page.

Version 2.10

• Support for serializing and deserializing Java records, on Java ≥ 16. (google/gson#2201)
• Add JsonArray.asList and JsonObject.asMap view methods (google/gson#2225)
• Fix TypeAdapterRuntimeTypeWrapper not detecting reflective TreeTypeAdapter and FutureTypeAdapter (google/gson#1787)
• Improve JsonReader.skipValue() (google/gson#2062)
• Perform numeric conversion for primitive numeric type adapters (google/gson#2158)
• Add Gson.fromJson(..., TypeToken) overloads (google/gson#1700)
• Fix changes to GsonBuilder affecting existing Gson instances (google/gson#1815)
• Make JsonElement conversion methods more consistent and fix javadoc (google/gson#2178)
• Throw UnsupportedOperationException when JsonWriter.jsonValue is not supported (google/gson#1651)
• Disallow JsonObject Entry.setValue(null) (google/gson#2167)
• Fix TypeAdapter.toJson throwing AssertionError for custom IOException (google/gson#2172)
• Convert null to JsonNull for JsonArray.set (google/gson#2170)
• Fixed nullSafe usage. (google/gson#1555)
• Validate TypeToken.getParameterized arguments (google/gson#2166)
• Fix #1702: Gson.toJson creates CharSequence which does not implement toString (google/gson#1703)
• Prefer existing adapter for concurrent Gson.getAdapter calls (google/gson#2153)
• Improve ArrayTypeAdapter for Object[] (google/gson#1716)
• Improve AppendableWriter performance (google/gson#1706)

Version 2.9.1

• Make Object and JsonElement deserialization iterative rather than recursive (google/gson#1912)
• Added parsing support for enum that has overridden toString() method (google/gson#1950)
• Removed support for building Gson with Gradle (google/gson#2081)
• Removed obsolete codegen hierarchy (google/gson#2099)
• Add support for reflection access filter (google/gson#1905)
• Improve TypeToken creation validation (google/gson#2072)
• Add explicit support for float in JsonWriter (google/gson#2130, google/gson#2132)
• Fail when parsing invalid local date (google/gson#2134)

Also many small improvements to javadoc.

Version 2.9.0

The minimum supported Java version changes from 6 to 7.

• Change target Java version to 7 (google/gson#2043)
• Put module-info.class into Multi-Release JAR folder (google/gson#2013)
• Improve error message when abstract class cannot be constructed (google/gson#1814)
• Support EnumMap deserialization (google/gson#2071)
• Add LazilyParsedNumber default adapter (google/gson#2060)
• Fix JsonReader.hasNext() returning true at end of document (google/gson#2061)

... (truncated)

• 3ff35d6 [maven-release-plugin] prepare release gson-parent-2.14.0
• a3024fd Bump the maven group with 13 updates (#3002)
• 5689ffe Bump the github-actions group across 1 directory with 3 updates (#3018)
• 48db33c Add LegacyProtoTypeAdapterFactory. (#3014)
• 53d703e Update outdated comment regarding serializable types (#3012)
• 0189b72 Remove Serializable from internal Type implementation classes. (#3011)
• f4d371d Fix duplicate key detection when first value is null (#3006)
• 27d9ba1 Fix typo in README (JPMS dependencies section) (#3005)
• 1fa9b7a Validate that strings being parsed as integers consist of ASCII characters (#...
• b7d5954 Add iterator fail-fast tests for LinkedTreeMap.clear() (#2992)
• Additional commits viewable in compare view

Sourced from com.google.guava:guava's releases.

32.0.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>32.0.0-jre</version>
  <!-- or, for Android: -->
  <version>32.0.0-android</version>
</dependency>

Jar files

• 32.0.0-jre.jar
• 32.0.0-android.jar

Guava requires one runtime dependency, which you can download here:

• failureaccess-1.0.1.jar

Javadoc

• 32.0.0-jre
• 32.0.0-android

JDiff

• 32.0.0-jre vs. 31.1-jre
• 32.0.0-android vs. 31.1-android
• 32.0.0-android vs. 32.0.0-jre

Changelog

Security fixes

• Reimplemented Files.createTempDir and FileBackedOutputStream to further address CVE-2020-8908 (#4011) and CVE-2023-2976 (#2575). (feb83a1c8f)

While CVE-2020-8908 was officially closed when we deprecated Files.createTempDir in Guava 30.0, we've heard from users that even recent versions of Guava have been listed as vulnerable in other databases of security vulnerabilities. In response, we've reimplemented the method (and the very rarely used FileBackedOutputStream class, which had a similar issue) to eliminate the insecure behavior entirely. This change could technically affect users in a number of different ways (discussed under "Incompatible changes" below), but in practice, the only problem users are likely to encounter is with Windows. If you are using those APIs under Windows, you should skip 32.0.0 and go straight to 32.0.1 which fixes the problem. (Unfortunately, we didn't think of the Windows problem until after the release. And while we warn that common.io in particular may not work under Windows, we didn't intend to regress support.) Sorry for the trouble.

Incompatible changes

Although this release bumps Guava's major version number, it makes no binary-incompatible changes to the guava artifact.

One change could cause issues for Widows users, and a few other changes could cause issues for users in more usual situations:

• The new implementations of Files.createTempDir and FileBackedOutputStream throw an exception under Windows. This is fixed in 32.0.1. Sorry for the trouble.
• guava-gwt now requires GWT 2.10.0.
• This release makes a binary-incompatible change to a @Beta API in the separate artifact guava-testlib. Specifically, we changed the return type of TestingExecutors.sameThreadScheduledExecutor to ListeningScheduledExecutorService. The old return type was a package-private class, which caused the Kotlin compiler to produce warnings. (dafaa3e435)

... (truncated)

• See full diff in compare view

Sourced from com.rabbitmq:amqp-client's releases.

v5.18.0

Changes between 5.17.0 and 5.18.0

This is a minor release with usability improvements and dependency upgrades. It is compatible with 5.17.x. All users of the 5.x.x series are encouraged to upgrade.

Inbound message size is now enforced, with default limit being 64 MiB.

Thanks to @​JHahnHRO and Sérgio Faria (@​sergio91pt) for their contribution.

Add ability to specify maximum message size

GitHub issue: #1062

Do not confirmSelect more than once per channel

GitHub PR: #1057

Make RpcClient (Auto)Closeable

GitHub issue: #1032

Bump dependencies

GitHub issue: #999

Dependency

Maven

<dependency>
  <groupId>com.rabbitmq</groupId>
  <artifactId>amqp-client</artifactId>
  <version>5.18.0</version>
</dependency>

Gradle

compile 'com.rabbitmq:amqp-client:5.18.0'

v5.17.1

Changes between 5.17.0 and 5.17.1

This is a minor release with a usability improvement. It is compatible with 5.17.0.

Inbound message size is now enforced, with the default limit being 64 MiB.

... (truncated)

• dcc284e [maven-release-plugin] prepare release v5.18.0
• 75d1d1e Set release version to 5.18.0
• dc7952e Merge pull request #1064 from rabbitmq/dependabot/maven/5.x.x-stable/org.mock...
• e2fa38f Bump mockito-core from 5.3.1 to 5.4.0
• 04f1801 Tweak error message
• 714aae6 Add max inbound message size to ConnectionFactory
• 83cf551 Fix flaky test
• 0dc9ea2 Do not confirmSelect more than once per channel
• 129dc6a Merge pull request #1060 from rabbitmq/dependabot/maven/5.x.x-stable/io.micro...
• 671efdc Bump micrometer-core from 1.11.0 to 1.11.1
• Additional commits viewable in compare view

• See full diff in compare view

Sourced from org.bouncycastle:bcpkix-jdk15on's changelog.

... (truncated)

• See full diff in compare view

Sourced from org.bouncycastle:bcprov-jdk15on's changelog.

... (truncated)

• See full diff in compare view

Sourced from org.bouncycastle:bcprov-jdk15on's changelog.

... (truncated)

• See full diff in compare view

• See full diff in compare view

Sourced from org.json:json's releases.

20231013

Pull Request	Description
#793	Reverted #761
#792	update the docs for release 20231013
#783	optLong vs getLong inconsistencies
#782	Fix XMLTest.testIndentComplicatedJsonObjectWithArrayAndWithConfig() for Windows
#779	add validity check for JSONObject constructors
#778	Fix XMLTest.testIndentComplicatedJsonObjectWithArrayAndWithConfig() for Windows
#776	Update [JUnit to version 4.13.2
#774	Removing unneeded synchronization
#773	Add optJSONArray method to JSONObject with a default value
#772	Disallow nested objects and arrays as keys in objects
#779	Unit test cleanup
#769	Addressed Java 17 compile warnings
#764	Update CodeQL action version
#761	Add module-info
#759	JSON parsing should detect embedded
#753	Updated new object methods
#752	Fixes possible unit test bug when compiling/testing on Windows

20230618

Pull Request	Description
#749	Prep for release 20230618
#740	Fixed Flaky Tests Caused by JSON permutations
#734	Fixed Flaky Tests Caused by JSON permutations
#733	JSONTokener implemented java.io.Closeable
#731	Removing commented out code in JSONObject optDouble()
#729	Refactor ParserConfiguration class hierarchy

20230227

Pull Request	Description
#723	Protect JSONML from stack overflow exceptions caused by recursion
#720	Limit the XML nesting depth for CVE-2022-45688
#711	Revert pull 707 - interviewbit spam
#704	Move javadoc comments above the interface definition to make it visible
#703	Update Releases.md for JSONObject(Map): Throws NPE if key is null
#696	Update JSONPointerTest for NonDex compatibility
#694	Pretty print XML
#692	Example.md syntax highlight and indentation
#691	Create unit tests for various number formats

20220924

Pull Request	Description
#688	Update copyright to Public Domain
#687	Fix a typo
#685	JSONObject map type unit tests

... (truncated)

Sourced from org.json:json's changelog.

20231013 First release with minimum Java version 1.8. Recent commits, including fixes for CVE-2023-5072.

20230618 Final release with Java 1.6 compatibility. Future releases will require Java 1.8 or greater.

20230227 Fix for CVE-2022-45688 and recent commits

20220924 New License - public domain, and some minor updates

20220320 Wrap StackOverflow with JSONException

20211205 Recent commits and some bug fixes for similar()

20210307 Recent commits and potentially breaking fix to JSONPointer

20201115 Recent commits and first release after project structure change

20200518 Recent commits and snapshot before project structure change

20190722 Recent commits

20180813 POM change to include Automatic-Module-Name (#431) JSONObject(Map) now throws an exception if any of a map keys are null (#405)

20180130 Recent commits

20171018 Checkpoint for recent commits.

20170516 Roll up recent commits.

20160810 Revert code that was breaking opt*() methods.

20160807 This release contains a bug in the JSONObject.opt*() and JSONArray.opt*() methods, it is not recommended for use. Java 1.6 compatability fixed, JSONArray.toList() and JSONObject.toMap(), RFC4180 compatibility, JSONPointer, some exception fixes, optional XML type conversion. Contains the latest code as of 7 Aug 2016

20160212 Java 1.6 compatibility, OSGi bundle. Contains the latest code as of 12 Feb 2016.

20151123 JSONObject and JSONArray initialization with generics. Contains the latest code as of 23 Nov 2015.

20150729 Checkpoint for Maven central repository release. Contains the latest code as of 29 July 2015.

• See full diff in compare view

Sourced from org.owasp.esapi:esapi's releases.

2.6.0.0

Full Release Notes

Release notes for ESAPI release 2.6.0.0 are located at:

• https://github.com/ESAPI/esapi-java-legacy/blob/develop/documentation/esapi4java-core-2.6.0.0-release-notes.txt

What's Changed

• Preparation for ESAPI release 2.6.0.0 by @​kwwall in ESAPI/esapi-java-legacy#860

Full Changelog: ESAPI/esapi-java-legacy@esapi-2.5.5.0...esapi-2.6.0.0

Configuration Jar

Note the associated file "esapi-2.6.0.0-configuration.jar" contains the default ESAPI configuration files under 'configuration/' (ESAPI.properties, validation.properties, etc.) and the file "esapi-2.6.0.0-configuration.jar.asc" is a GPG signature of that jar file made by Kevin W. Wall.

2.5.5.0

Full Release Notes

Release notes for ESAPI release 2.5.5.0 are located at:

• https://github.com/ESAPI/esapi-java-legacy/blob/develop/documentation/esapi4java-core-2.5.5.0-release-notes.txt

What's Changed

• Pom updates to address issue #847 by @​kwwall in ESAPI/esapi-java-legacy#848
• Update the logging properties to opt-out of the prefix events #844 by @​mickeyz07 in ESAPI/esapi-java-legacy#845
• Fix Typos by @​DarioViva42 in ESAPI/esapi-java-legacy#852
• Improved documentation by @​DebajitKumarPhukan in ESAPI/esapi-java-legacy#853
• Release prep 2.5.5.0 by @​kwwall in ESAPI/esapi-java-legacy#856

New Contributors

• @​mickeyz07 made their first contribution in ESAPI/esapi-java-legacy#845
• @​DarioViva42 made their first contribution in ESAPI/esapi-java-legacy#852
• @​DebajitKumarPhukan made their first contribution in ESAPI/esapi-java-legacy#853

Full Changelog: ESAPI/esapi-java-legacy@esapi-2.5.4.0...esapi-2.5.5.0

Configuration Jar

Note the associated file "esapi-2.5.5.0-configuration.jar" contains the default ESAPI configuration files under 'configuration/' (ESAPI.properties, validation.properties, etc.) and the file "esapi-2.5.5.0-configuration.jar.asc" is a GPG signature of that jar file made by Kevin W. Wall.

2.5.4.0

Full release notes

Full release notes for ESAPI release 2.5.4.0 are located at:

• https://github.com/ESAPI/esapi-java-legacy/blob/develop/documentation/esapi4java-core-2.5.4.0-release-notes.txt

It contains important details, which you need to read as you MUST remove (or rename) 'esapi-java-logging.properties' if you are using ESAPI's default logging, which is JUL. Otherwise ESAPI will throw a ConfigurationException (which may appear as a java.lang.ExceptionInInitializerError or as a java.lang.NoClassDefFoundError, depending on circumstances). Please refer to the "Configuring the JavaLogFactory" wiki page for additional details.

YOU HAVE BEEN WARNED!!!

... (truncated)

• dcde6c2 A few minor documentation fixes.
• 5a10f77 Revert "Minor change to release steps document."
• 8b9f8f1 Minor change to release steps document.
• 4698c43 Bump release to new official release number.
• f185e5b Preparation for ESAPI release 2.6.0.0 (#860)
• 0b0f86c Update SECURITY.md
• 4879a08 Modifying pom.xml for next planned release.
• 3f2ff05 Fix release date.
• 19b739a Merge pull request #856 from kwwall/release-prep-2.5.5.0
• a160de0 Update section on commit / PR history.
• Additional commits viewable in compare view

Sourced from org.springframework:spring-aop's releases.

v7.0.7

⭐ New Features

• Improve SpringValidatorAdapter and MethodValidationAdapter performance #36621
• Support JSON array decoding to Flux in KotlinSerializationJsonDecoder #36597
• Deprecate methodIdentification() in CacheAspectSupport for removal #36575
• Add MockRestServiceServer#createServer variant for RestClient #36572
• Create RestClientXhrTransport variant replacing RestTemplateXhrTransport #36566
• Improve error handling in multipart codecs #36563
• Make ApplicationListenerMethodAdapter#getTargetMethod() public #36558
• ApiVersionConfigurer.setSupportedVersionPredicate() returns void instead of ApiVersionConfigurer #36551
• LazyConnectionDataSourceProxy does not work well with Hibernate's multi-tenancy by schema strategy #36527
• Add registerManagedResource variant with bean key argument to MBeanExporter #36520
• Handle blank Accept-Language header in AcceptHeaderLocaleResolver #36513
• Make AbstractStreamingClientHttpRequest and AbstractBufferingClientHttpRequest public #36501
• MySQL Error 149 (Galera/WSREP conflict) not translated to ConcurrencyFailureException in Spring JDBC/ORM #36499
• Add PreFlightRequestFilter #36482
• Support configuration of extension context scope for SpringExtension via Spring or JUnit properties #36460
• Lower log level of "Cache miss for REQUEST dispatch" in HandlerMappingIntrospector #36309

🐞 Bug Fixes

• WebDataBinder unnecessarily instantiates collections when using the "!" and "_" prefixes #36625
• Cache pollution from high-cardinality FieldError default messages in MessageSourceSupport #36609
• MergedAnnotation does not use ClassLoader for method or field #36606
• @Sql fails if DataSource is wrapped in a TransactionAwareDataSourceProxy #36611
• AnnotatedTypeMetadata no longer retains source declaration order on Java 24+ #36598
• MergedAnnotation.asMap() fails when an attribute references a non-existent class #36586
• FileSystemResource does not strictly follow the Resource#isReadable() contract #36584
• Converter overrides in HttpMessageConverters only apply when defaults are registered #36579
• Invalid method return type metadata for ClassFile variant on JDK 24+ #36577
• Fix Writer lifecycle for AbstractJsonHttpMessageConverter.writeInternal(Object, Type, Writer) #36565
• Flushing-related regression in SseServerResponse #36537
• LazyConnectionDataSourceProxy does not pass on holdability to target Connection #36528
• AnnotationBeanNameGenerator fails when an annotation references a non-existent class #36524
• Perserve default API version in RestClientAdapter #36514
• Inconsistent codings resolution in resource resolvers #36507
• DefaultJmsListenerContainer may hang in an endless loop in doShutdown #36506
• Query not hidden in DefaultClientResponse checkpoint #36502
• RestClient closes stream for ResponseEntity responses #36492
• IllegalStateException when using websocket handshake headers with Tomcat #36486
• Invalid nullness information for ParameterizedTypeReference #36477
• WebTestClient cannot assert null list elements #36476
• Handle Kotlin nullable value class param correctly in CoroutineUtils #36449
• Remove RFC 2047 encoding from Content-Disposition filename #36328

📔 Documentation

• Clarify semantics of HttpMethod.valueOf() #36652
• Document whitespace semantics in SpEL expressions #36628

... (truncated)

• c997d40 Release v7.0.7
• 9185254 Upgrade to Reactor 2025.0.5 and Micrometer 1.16.5
• 802fa4d Refine RetryListener example
• 7052da4 Add doOnDiscard in MultipartHttpMessageReader
• 63817ce Add missing tests for WebRequestDataBinder
• 61bd790 Polish WebRequestDataBinderTests
• ab6637c Completely extract ServletRequestParameterPropertyValuesTests
• c9b88b4 Extract ServletRequestParameterPropertyValuesTests
• 68c575a Revise "Skip binding entirely when field is not allowed"
• cb32046 Further clarify semantics of HttpMethod.valueOf()
• Additional commits viewable in compare view

Sourced from org.springframework:spring-beans's releases.

v7.0.7

⭐ New Features

• Improve SpringValidatorAdapter and MethodValidationAdapter performance #36621
• Support JSON array decoding to Flux in KotlinSerializationJsonDecoder #36597
• Deprecate methodIdentification() in CacheAspectSupport for removal #36575
• Add MockRestServiceServer#createServer variant for RestClient #36572
• Create RestClientXhrTransport variant replacing RestTemplateXhrTransport #36566
• Improve error handling in multipart codecs #36563
• Make ApplicationListenerMethodAdapter#getTargetMethod() public #36558
• ApiVersionConfigurer.setSupportedVersionPredicate() returns void instead of ApiVersionConfigurer #36551
• LazyConnectionDataSourceProxy does not work well with Hibernate's multi-tenancy by schema strategy #36527
• Add registerMa...

  Description has been truncated