fix(deps): update spring core to v3.2.18.release

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
org.springframework:spring-test	3.1.4.RELEASE -> 3.2.18.RELEASE
org.springframework:spring-orm	3.1.4.RELEASE -> 3.2.18.RELEASE
org.springframework:spring-context-support	3.1.4.RELEASE -> 3.2.18.RELEASE
org.springframework:spring-beans	3.1.4.RELEASE -> 3.2.18.RELEASE
org.springframework:spring-core	3.1.4.RELEASE -> 3.2.18.RELEASE
org.springframework:spring-webmvc-portlet	3.1.4.RELEASE -> 3.2.18.RELEASE

---

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.

---

Release Notes

spring-projects/spring-framework

v3.2.18.RELEASE: 3.2.18 Release

Compare Source

⭐ New Features

• Allow method inlining of ObjectUtils.nullSafeEquals() [SPR-14349] #​18921
• Normalize resource URL in ResourceServlet [SPR-14946] #​19513
• ModelAndViewResolver still refers to raw Class type [SPR-7860] #​12517

🪲 Bug Fixes

• Constructor sets the source incorrectly in org.springframework.beans.PropertyValue [SPR-8337] #​12985
• ObjectToObjectConverter should be able to use constructors on non-public classes [SPR-14304] #​18876
• Async advisor retrieval blocks when triggered by singleton init method [SPR-14324] #​18896
• Deadlock while creating a new thread on bean initialization with transactional code invocation [SPR-14388] #​18961
• CronSequenceGenerator causes StackOverflowError with reversed range values [SPR-14462] #​19031
• Ineffective synchronization in StandardTypeConverter constructor [SPR-14465] #​19034
• ResourcePatternUtils.getResourcePatternResolver does not accept null arg [SPR-14500] #​19069
• LinkedCaseInsensitiveMap doesn't override HashMap.clone() [SPR-14509] #​19078
• StackOverflowError for advisor search against factory-bean reference to FactoryBean [SPR-14551] #​19119
• StringUtils.parseLocaleString(): does not parse locale string in java 7 for Serbian (Latin) [SPR-14718] #​19283
• Concurrency problem in DeferredResult: potential double execution of handleResult [SPR-14978] #​19544
• MBeanExporter fails against null beans [SPR-15031] #​19598

📔 Documentation

• Ambiguous sentence in the cache documentation [SPR-14399] #​18017
• SpEL and Date Literals [SPR-14987] #​19553

v3.2.17.RELEASE: 3.2.17 Release

Compare Source

⭐ New Features

• SimpleTriggerFactoryBean and CronTriggerFactoryBean fail without jobDetail [SPR-13604] #​18182
• Prevent Quartz XSD from being fetched from the Internet [SPR-13706] #​18281
• Backport MVC config path config options to 3.2.x [SPR-14186] #​18757

🪲 Bug Fixes

• Handle RejectedExecutionException in WebAsyncManager [SPR-13836] #​18409
• NullPointerException while building error message in InvocableHandlerMethod [SPR-13917] #​18491
• ReflectiveMethodResolver chooses parent class over child for static methods [SPR-13918] #​18492
• AbstractMarshaller's DocumentBuilderFactory instance may be used by several threads simultaneously [SPR-13935] #​18507
• TimerManagerTaskScheduler.TimerScheduledFuture.getDelay is inverted [SPR-13977] #​18549
• Scripted beans not updated after a script compilation error in getScriptedObjectType [SPR-14007] #​18579
• ModelAndView is replaced when a RedirectView is used [SPR-14045] #​18617
• @RequestHeader HttpHeaders fails with NPE against null header value [SPR-14091] #​18663
• NPE thrown when calling methods with an empty @Caching annotation [SPR-14162] #​18734
• Deadlock possible with AspectJ aspects and multi-threading [SPR-14241] #​18814
• AbstractRequestLoggingFilter appends null query string [SPR-14244] #​18817

📔 Documentation

• wrong example given at section 17.4 Handler mappings [SPR-13832] #​18405
• @EnableScheduling javadoc has incomplete XML example [SPR-14145] #​18717

v3.2.16.RELEASE: 3.2.16 Release

Compare Source

⭐ New Features

• Skip Content-Disposition header when status != 2xx [SPR-13588] #​18165
• Avoid NPE for anonymous SqlParameter in CallMetaDataContext [SPR-13628] #​18206
• Content-Disposition with fixed file name "f.txt" causes confusion [SPR-13643] #​18220
• Revisit BeansException warn logging after startup failure [SPR-13663] #​18238
• BeanFactoryAnnotationUtils.qualifiedBeanOfType should not instantiate all beans of given type before checking qualifier [SPR-13741] #​18314
• Support for Microsoft SQL Server driver version 4 and above [SPR-13772] #​18346

🪲 Bug Fixes

• Content-Disposition header causes download in browser for Spring Boot Actuator endpoints [SPR-13587] #​18164
• AbstractJdbcCall's compiled variable should be declared as volatile [SPR-13617] #​18195
• Content-Disposition added for @ResponseBody methods explicitly mapped to ".html" or other extensions [SPR-13629] #​18207
• CommonsMultipartFile.getOriginalFilename() does not strip file path properly [SPR-13662] #​18237
• AbstractApplicationContext.isRunning throws IllegalStateException when called too early [SPR-13667] #​18242
• Jdbc4SqlXmlHandler should return null as documented (instead of throwing NPE) [SPR-13782] #​18356

📔 Documentation

• Fix cron trigger example in reference documentation [SPR-10474] #​15107

v3.2.15.RELEASE: 3.2.15 Release

Compare Source

⭐ New Features

• Avoid ambiguous property warning for setter methods with multiple parameters [SPR-13349] #​17933
• Protect against RFD exploits [SPR-13548] #​18124

🪲 Bug Fixes

• ConcurrentModificationException when doing a merge on AbstractEnvironment [SPR-13213] #​17805
• DeferredResult not thread-safe for isSetOrExpired call [SPR-13451] #​18031
• AbstractEmbeddedDatabaseConfigurer.shutdown does not close JDBC resources [SPR-13474] #​18053
• JCacheCache doesn't recognize null values in other JVMs [SPR-13553] #​18129
• Clarify whether HttpInputMessage.getBody() is allowed to return null [SPR-13563] #​18139

📔 Documentation

• Misleading note on readonly and disabled flags in spring-form.tld [SPR-13397] #​17977
• Documentation for Portlet MVC does not refer to Portlet 2.0 spec (JSR-286) [SPR-13513] #​18090

v3.2.14.RELEASE: 3.2.14 Release

Compare Source

🪲 Bug Fixes

• @Scheduled no longer works in case of multiple proxied target classes implementing the same interface [SPR-12709] #​17306
• ServletUriComponentsBuilder#initFromRequest can cause NPE [SPR-12723] #​17320
• Deadlock publishing event while creating listener bean [SPR-12739] #​17336
• Specified MVC resource at root level not considered "under location" [SPR-12747] #​17344
• EncodedResource does not include charset in equals() implementation [SPR-12767] #​17364
• StandardMultipartHttpServletRequest.StandardMultipartFile not serializable [SPR-12795] #​17392
• Incorrect value in InvalidPropertyException message from BeanWrapperImpl.setPropertyValue [SPR-12866] #​17464
• CronSequenceGenerator constructor goes into infinite loop with invalid increments [SPR-12871] #​17469
• PatternMatchUtils infinite loop bug [SPR-12971] #​17563
• CustomBooleanEditor may run into NPE when configured with allowEmpty=false [SPR-13010] #​17601
• NPE for alias resolved to null in SimpleAliasRegistry [SPR-13016] #​17607
• Remoting over JMS with receiveTimeout blocks service forever [SPR-13052] #​17644
• When use a @args as pointcut, there is case that occur a NPE at calling the unrelated method [SPR-13102] #​17693
• XML input vulnerability based on DTD declaration [SPR-13136] #​17727
• SpEL chooses wrong method to invoke when varargs method is present [SPR-12803] #​17400

📔 Documentation

• Documentation error in "SimpleJdbcInsert" section [SPR-12639] #​17240
• Consider rewording ack modes on the listener container javadocs [SPR-12705] #​17302

v3.2.13.RELEASE: 3.2.13 Release

Compare Source

⭐ New Features

• Consistent bridge method handling in annotation post-processors [SPR-12495] #​17101

🪲 Bug Fixes

• Java 8 bridge method handling can lead to false positive detection of autowired annotations [SPR-12187] #​16801
• webjar stops working [SPR-12432] #​17038
• Introspection with BeanUtils started failing against java.awt.Window [SPR-12434] #​17039
• NPE in org.springframework.core.MethodParameter.getParameterName (possible race condition) [SPR-12453] #​17058
• Unable to initialize WebAsyncTask with executorName [SPR-12457] #​17062
• SpEL: problem with static methods conflicting with instance methods [SPR-12502] #​17107
• Prototype with changing bean class does not get populated with dependencies after type switch [SPR-12526] #​17131
• Performance - hashCode method of AbstractFallbackTransactionAttributeSource.DefaultCacheKey doesn't take targetClass into account [SPR-12536] #​17141
• AbstractApplicationEventMulticaster "lost" application listener [SPR-12545] #​17148
• Duplicated interceptors in HandlerExecutionChain after intermediate getInterceptors() call [SPR-12566] #​17167
• When use the same configuration annotation of javaconfig, does not work on spring 3.2.12 [SPR-12442] #​17047
• Embedded derby database uses derby.log [SPR-12437] #​17042

📔 Documentation

• Misleading documentation for SqlRowSet [SPR-12476] #​17082
• Update documentation after SPR-3542 [SPR-12570] #​17171

v3.2.12.RELEASE: 3.2.12 Release

Compare Source

⭐ New Features

• Log warning for single optional constructor when no default constructor to fall back to [SPR-12161] #​16775
• HttpHeaders should accept empty Content-Type header [SPR-12173] #​16787
• Scheduled/JmsListenerAnnotationBeanPostProcessor needlessly scans every scoped instance [SPR-12189] #​16803
• Spring HTTP clients do not enforce RFC 6265 (cookies in a single header) [SPR-12196] #​16810
• Make MockRestServiceServer error messages more descriptive [SPR-12230] #​16845
• Further locking optimizations for the retrieval of non-singleton beans [SPR-12250] #​16864
• Log context cache statistics in the TestContext framework [SPR-12409] #​17017

🪲 Bug Fixes

• @Qualifier resolution fails with Spring Batch parent/child context arrangement [SPR-12191] #​16805
• org.springframework.context.support.LiveBeansView.generateJson(Set) generates invalid JSON when resources already double-quoted [SPR-12252] #​16866
• Web Async responses force concurrentResult.toString() call [SPR-12253] #​16867
• DataSourceTransactionManager closes JDBC connection on doBegin failure but leaves it attached to transaction object [SPR-12280] #​16885
• Provider<...> declaration for @Value method argument fails with TypeMismatchException [SPR-12297] #​16903
• Private @Scheduled methods end up on 'empty' proxy instance in case of CGLIB auto-proxying [SPR-12308] #​16913
• Directory traversal with static resource handling (CVE-2014-3625) [SPR-12354] #​16959
• Tiles 2.x: TilesConfigurer NPE when no definitions found [SPR-12362] #​16967
• ResponseStatusExceptionResolver does not get a MessageSource injected in the MVC Java config [SPR-12380] #​16987
• ConfigurationClassUtils fails to introspect inner classes with dot name syntax (and silently ignores it) [SPR-12390] #​16998
• @Import in another annotation still results in double scan [SPR-12334] #​16939
• util:map does not recognize the attribute of value-type [SPR-10994] #​15622

📔 Documentation

• ContextLoaderServlet is mentioned in doc, but does not exist [SPR-7725] #​12381

v3.2.11.RELEASE: 3.2.11 Release

Compare Source

⭐ New Features

• XmlBeanDefinitionReader runs 10x slower due to resetBeanDefinition check [SPR-8318] #​12966
• Exceptions thrown during AbstractApplicationContext.refresh() not being logged right when they are caught [SPR-12010] #​16626
• RestTemplate with InputStreamResource does not work if Content-Length is not set [SPR-12017] #​16633

🪲 Bug Fixes

• Injecting EXTENDED @PersistenceContext into JUnit 4 test class causes NoSuchBeanDefinitionException [SPR-8834] #​13476
• Exception during context refresh swallowed by subsequent LifecycleProcessor exception handling [SPR-10000] #​14634
• getBean(Object.class) fails when introspecting Environment bean [SPR-10542] #​15172
• UriComponentsBuilder.fromUriString may not parse correctly when there is no path [SPR-11970] #​16586
• StaxStreamXMLReader ignores significant whitespace [SPR-12000] #​16616
• NPE in SelectedValueComparator with null bound value [SPR-12001] #​16617
• Changes to AbstractApplicationEventMulticaster in 3.2.9 break HttpSessionEventPublisher in Google AppEngine Runtime [SPR-12002] #​16618
• AbstractMessageListenerContainer#doExecuteListener can cause a dropped message if using CLIENT_ACKNOWLEDGE and the container is stopped and subsequently started again. [SPR-12015] #​16631
• Tiles 3 TilesViewResolver should allow for custom TilesView subclasses [SPR-12075] #​16691
• MockMvc security filters causes FileUploadException: the request was rejected because no multipart boundary was found [SPR-12114] #​16730
• Plain FactoryBean declaration on @Bean method leads to early call (pre injection) [SPR-12141] #​16755
• CachingConnectionFactory should catch exceptions on logical close [SPR-12148] #​16762

v3.2.10.RELEASE: 3.2.10 Release

Compare Source

⭐ New Features

• Misleading exception message for using JPA with custom IsolationLevels [SPR-8325] #​12974
• Revisit class cache in CachedIntrospectionResults [SPR-11867] #​16486
• Performance regression for custom autowireBean calls with many properties [SPR-11875] #​16494
• ReflectionUtils slow down application startup on WebSphere [SPR-11882] #​16501
• Improve performance of ReflectionUtils.isCglibRenamedMethod [SPR-11894] #​16513
• Consistent declaration of private static final logger variables [SPR-11905] #​16524
• Manually registered transaction manager are not recognized by qualifiedBeanOfType [SPR-11915] #​16534
• Unclear error message on BeanPostProcessor returning null [SPR-11951] #​15997

🪲 Bug Fixes

• RequestAttributes in FrameworkPortlet [SPR-11295] #​15919
• StandardPortletEnvironment is not properly populated [SPR-11816] #​16436
• isGlobalRollbackOnly always returns 'false' with WebSphereUOWTransactionManager [SPR-11876] #​16495
• MBeanExportConfiguration.SpecificPlatform never calls afterPropertiesSet() [SPR-11877] #​16496
• URIComponentsBuilder shares state across calls of .build() [SPR-11885] #​16504
• Spring 3.2.9 breaks JBoss EAP 5.1.1 VFS compatibility [SPR-11887] #​16506
• HttpHeaders fails to return getAllow() if it was previously set to an empty collection [SPR-11917] #​16536
• Objects created by FactoryBeans might get processed multiple times by BeanPostProcessors if beans are created lazily [SPR-11937] #​16554
• Backward compatibility issue in RestTemplate's messageConverters after SPR-11351 [SPR-11962] #​16578
• Java 8: ASM5 visitors required for parsing INVOKESPECIAL/STATIC on interfaces [SPR-11979] #​16595

📔 Documentation

• Dead link to "MVC application step-by-step" guide [SPR-11935] #​16552

v3.2.9.RELEASE: 3.2.9 Release

Compare Source

⭐ New Features

• Overriding bean definition message does not take parent definition into account [SPR-9671] #​14305
• CollectionToCollectionConverter.convert() improvement for untyped collections [SPR-11479] #​16104
• Treat empty log config refresh interval as infinite interval in Log4jWebConfigurer [SPR-11507] #​16132
• Improve exception message for failed property access in SpEL [SPR-11535] #​16160
• ResizableByteArrayOutputStream and ByteArrayOutputStream capacities [SPR-11594] #​16218
• MarshallingView should avoid temporary byte array when copying to response [SPR-11646] #​16269
• Fix/optimize handling of @Bean method override regression with return type narrowing on JDK 8 [SPR-11718] #​16340
• Metadata reading should never use ASM for java.* and javax.* types (in particular on JDK 8) [SPR-11719] #​16341
• AbstractAdvisingBeanPostProcessor.isEligible(…) does not consider proxy interfaces [SPR-11725] #​16347
• StandardServletMultipartResolver should support lazy resolution along the lines of CommonsMultipartResolver [SPR-11730] #​16352
• AbstractMarshaller should avoid SAXSource workaround when processExternalEntities=true [SPR-11737] #​16359
• Improve prefix detection in StringUtils.cleanPath [SPR-11793] #​16414
• ConfigurationClassParser.invokeAwareMethods(…) does not consider EnvironmentAware [SPR-11744] #​16366
• Basic Java 8 bytecode compatibility for Spring 3.2.x through ASM 5.0.2 [SPR-11656] #​16279

🪲 Bug Fixes

• Java config FactoryBean proxy causes class loader leak [SPR-9274] #​13912
• Unsafe fallback pointcut construction in AspectJExpressionPointcut [SPR-9335] #​13973
• Servlet 3 multipart parameter binding does not work on Weblogic12c (12.1.2.0) [SPR-11074] #​15700
• double evaluation of method arguments in SpEL [SPR-11445] #​16071
• XmlValidationModeDetector: length of a string is always greater than index of any of its characters [SPR-11477] #​16102
• SpringBeanELResolver - setValue throws PropertyNotWritableException [SPR-11502] #​16127
• Unable to retrieve FlashMap when target parameters are encoded [SPR-11504] #​16129
• Default KeyGenerator doesn't work for methods with arguments of array types [SPR-11505] #​16130
• Spring MVC Test can fail to obtain async result due to timing issue [SPR-11516] #​16141
• ConstructorResolver will generate NPE in case of no factory method found when there are explicit args [SPR-11517] #​16142
• Memory leak when using annotation based auto-wiring in child context [SPR-11520] #​16145
• Providing unique names to prototype inner beans causes excessive memory and CPU use [SPR-11545] #​16170
• BufferedImageHttpMessageConverter fails if JAI is installed [SPR-11581] #​16205
• Log Forging in DispatcherServlet via requestURI [SPR-11591] #​16215
• AbstractApplicationEventMulticaster can leak classes [SPR-11606] #​16229
• Referencing static field of class that extends Map in expression language causes class cast exception [SPR-11609] #​16232
• Servlet mocks are not reinjected into test instance between TestNG test methods [SPR-11626] #​16249
• ResourceHttpRequestHandler not closing Resource's input stream [SPR-11644] #​16267
• UrlResource.exists() does not properly detect JBoss vfszip resources [SPR-11676] #​16299
• ConcurrentReferenceHashMap doesn't limit upper concurrency level [SPR-11720] #​16342
• SpringProperties: the ClassLoader might be null, if class is loaded by the bootstrap class loader [SPR-11721] #​16343
• If-Modified-Since header is parsed as HTTP-date; but IE 10 sends length [SPR-11727] #​16349
• JRubyScriptUtils fails against JRuby 1.7.12 with NullPointerException in findClassNode [SPR-11747] #​16369
• IdToEntityConverter throws Access Denied exception within Spring MVC application on WebSphere 8.x [SPR-11758] #​16380
• Protect against security exploits via system identifier in DTD declaration [SPR-11768] #​16390
• JDBC findColumn gives wrong result in case of duplicate column labels [SPR-11786] #​16408
• SPR-10829: Spring JMS problem with Oracle AQ still exists if underlying DataSource is decorated [SPR-11791] #​16412
• getTestExecutionListeners() doesn't detect NoClassDefFoundError within BeanInstantiationException [SPR-11804] #​16424
• StringUtils.parseLocaleString: locale variant cannot contain country code [SPR-11806] #​16426

v3.2.8.RELEASE: 3.2.8 Release

Compare Source

⭐ New Features

• Improve error reporting for issues related to @Controller types requiring AOP proxing [SPR-11281] #​15905
• Consistently avoid close() call on Servlet OutputStream [SPR-11413] #​16040
• MarshallingView should explicitly skip BindingResult when searching for a model object [SPR-11417] #​16044
• Minor CompositeCacheManager revision [SPR-11427] #​16053

🪲 Bug Fixes

• Method injection causes memory leak [SPR-10785] #​15411
• Velocity springFormCheckboxes macro does not check preselected items correctly [SPR-10837] #​15463
• URLs containing %2F (forward slash) are not mapped correctly to @RequestMapping methods [SPR-11101] #​15727
• LiveBeansView generates invalid JSON on specific case [SPR-11366] #​15992
• StringIndexOutOfBoundsException in AbstractErrors for class-level JSR-303 validator [SPR-11374] #​16001
• Jaxb2RootElementHttpMessageConverter is susceptible to XXE vulnerability [SPR-11376] #​16003
• Potential ClassCastException in RequestContextListener when destroying the request object [SPR-11378] #​16005
• Fix off-by-one regression in AbstractMethodMockingControl [SPR-11385] #​16012
• PreparedStatement#getParameterMetaData() calls may trigger unwanted side effects [SPR-11386] #​16013
• aop:scoped-proxy may fail with LinkageError: loader attempted duplicate class definition for name [SPR-11398] #​16025
• EhCacheCacheManager does not wrap runtime-registered caches with TransactionAwareCacheDecorator [SPR-11407] #​16034
• MarshallingView should not close response output stream [SPR-11411] #​16038
• Inclusion of 'overloaded' in equals() and hashCode() for MethodOverride breaks equals() in AbstractBeanDefinition [SPR-11420] #​16047
• resolveFactoryMethodIfPossible should consider nonPublicAccessAllowed flag and SecurityManager scenario [SPR-11422] #​16049
• Objects with multi-threaded access should not lazily populate a hash field [SPR-11428] #​16054
• Memory leak in ConcurrentReferenceHashMap [SPR-11440] #​16066

📔 Documentation

• Broken link into documentation section 21.5.3 [SPR-11404] #​16031

v3.2.7.RELEASE: 3.2.7 Release

Compare Source

⭐ New Features

• JMSTemplate setDeliveryPersistent(boolean deliveryPersistent) javadoc incorrect [SPR-3983] #​8663
• Improve the performance of BeanInfo lookups in CachedIntrospectionResults [SPR-9014] #​13653
• CronTriggerFactoryBean doesn't allow calendar name and description to be specified [SPR-9771] #​14405
• Provide access to SimpleTriggerFactoryBean property startTime [SPR-10940] #​15568
• better method identification in AnnotationTransactionAttributeSource logging [SPR-11267] #​15892
• Add patch() to MockMvcRequestBuilders [SPR-11299] #​15923
• Optimize lookup of field errors in AbstractBindingResult [SPR-11304] #​15928
• Provide a mechanism for adding ApplicationContextInitializers to DispatcherServlet's ApplicationContext [SPR-11314] #​15938
• Add control of what HTTP Request method AbstractFileResolvingResource methods exists, lastModified and lastModified uses on http url resources [SPR-11320] #​15944
• Bootstrapping the EntityManagerFactory should log the name of the persistence unit being used [SPR-11333] #​15957
• Reduce footprint due to RootBeanDefinition [SPR-11343] #​15967
• Unnecessary class loading in AspectJ RuntimeTestWalker [SPR-11344] #​15968
• Provide alternative RestTemplate constructor to avoid default MessageConverter creation [SPR-11351] #​15976
• Compatibility with JOpt 4.6 [SPR-11359] #​15985

🪲 Bug Fixes

• Fix @Bean meta-annotation detection when using ASM [SPR-10488] #​15121
• theme resolution fails with "IllegalArgumentException: Basename must not be empty" when an empty theme value is provided via request url [SPR-11128] #​15754
• context:component-scan element says error in the mvc-cofig.xml [SPR-11221] #​15846
• Backward compatibility of BeanUtils.copyProperties broken for copying wrapped types to primitive types (and vice versa) on 3.2.6 and 4.0.0 [SPR-11231] #​15856
• Regression: InjectionMetadata cache needs to handle different bean classes per bean name [SPR-11246] #​15871
• XMLEventStreamWriter fails to handle writeEmptyElement() followed by writeAttribute() [SPR-11254] #​15879
• EhCacheFactoryBean should not call set(Sampled)StatisticsEnabled on EhCache 2.7/2.8 [SPR-11265] #​15890
• @Async with cglib based proxy causes memory leak in heap [SPR-11275] #​15899
• @Async with cglib based proxy causes memory leak in permgen [SPR-11276] #​15900
• Full Quartz 2.2 compatibility, including LocalDataSourceJobStore [SPR-11284] #​15908
• StandardEnvironment's system environment access produces warning with stacktrace on WebSphere [SPR-11297] #​15921
• Bad type comparison in ReflectionHelper.getTypeDifferenceWeight(List paramTypes, List argTypes) [SPR-11306] #​15930
• ServletWebRequest.checkNotModified() methods should treat HEAD identically to GET [SPR-11317] #​15941
• Wrong assert in AspectJAwareAdvisorAutoProxyCreator.setAspectJAdvisorFactory() [SPR-11330] #​15954
• ServletTestExecutionListener is not enabled by default in abstract base test classes [SPR-11340] #​15964
• PlaceholderConfigurerSupport.doProcessProperties() loses stack trace on exception [SPR-11346] #​15970
• Handle NoClassDefFoundError for TestExecutionListeners consistently in the TestContext framework [SPR-11347] #​15971
• AbstractAnnotationConfigDispatcherServletInitializer does not allow consolidating all configuration into the "root" context [SPR-11357] #​15982
• BeanWrapper fails in case of read/write method mismatch (e.g. EhCacheFactoryBean.setMemoryStoreEvictionPolicy) [SPR-11361] #​15987
• SchedulerAccessor 'globalJobListeners' and 'globalTriggerListeners' not working with 2.0.x and 2.1.x [SPR-11362] #​15988
• CompoundClassLoader.loadClass is trying to load some framework class and comsuming all web container threads. [SPR-11499] #​16124
• StatementCreatorUtils introduces java 1.6 dependency [SPR-11349] #​15974
• NoClassDefFoundError with Spring 3.2.7.BUILD-SNAPSHOT on WebSphere 6.1 [SPR-11341] #​15965
• Downgrade accidental use of Java 1.6 APIs [SPR-11321] #​15945
• spring-jdbc-3.2.6.RELEASE doesn't support JDK 5. [SPR-11313] #​15937
• @Enable registrars invoked with subclass for annotation placed on superclass (3.2.x) [SPR-11251] #​15876

v3.2.6.RELEASE: 3.2.6 Release

Compare Source

⭐ New Features

• Expression evaluator should accept raw collection value for parameterized method argument [SPR-7831] #​12487
• Map "Foreign key constraint violation occurred" Sybase error code to DataIntegrityViolationException [SPR-11097] #​15723
• Minor issue with fix for CVE 2010-1622 [SPR-11098] #​15724
• Add Maven 'bill-of-materials' project for 3.2.x [SPR-11204] #​15512

🪲 Bug Fixes

• In spring MVC portlet, @resourceMapping doesn't work. [SPR-10791] #​15417
• Security vulnerabilities in Spring v2.5.6 and v3.2.4 [SPR-10912] #​15540
• Remove integer conversion in JmsListenerContainerParser [SPR-10986] #​15614
• MBeanExporter/MBeanRegistrationSupport lack synchronization [SPR-11002] #​15630
• Use StoredProcedure to call sp, if not set the rowmapper for out parameter which type is cursor, will throw null pointer exception [SPR-11076] #​15702
• ClassPathScanningCandidateComponentProvider.findCandidateComponents fails on private meta-attributes [SPR-11091] #​15717
• If the !profile selector is used the other profiles can be ignored in [SPR-11093] #​15719
• performancedrop due to repeated JDBC 3.0 getParameterType calls in setNull in StatementCreatorUtils [SPR-11100] #​15726
• "CglibAopProxy: Unable to proxy method" WARN when bean class contains static final method [SPR-11107] #​15733
• Type resolution fails for uninitialized factory-method declaration [SPR-11112] #​15738
• Cannot autowire qualified scoped-proxy @Bean definitions [SPR-11116] #​15742
• Dependency Injection issue when using ManagedMap or ManagedList in BeanDefinitionParser [SPR-11131] #​15757
• Fix tests related to java.beans.BeanInfo changes in JDK8-b117 [SPR-11139] #​15765
• ServletTestExecutionListener breaks old code [SPR-11144] #​15771
• Recently changes of GenericTypeAwarePropertyDescriptor breaks BeanUtils.copyProperties() [SPR-11209] #​15834
• ReflectivePropertyAccessor should not consider "is" methods with non boolean returns [SPR-11142] #​15768
• Support multiple comma-separated values in X-Forwarded-Host header [SPR-11140] #​15766
• EhCacheFactoryBean.afterPropertiesSet should be synchronized [SPR-11132] #​15758
• Spring caching: combining multiple @Cacheable within @Caching annotation doesn't work [SPR-11124] #​15750
• EhCacheFactoryBean fails when statistics are enabled [SPR-11080] #​15706

v3.2.5.RELEASE: 3.2.5 Release

Compare Source

⭐ New Features

• Disable the processing of external entities in SourceHttpMessageConverter by default [SPR-11078] #​15704
• Avoid unnecessary char[] allocation in NamedParameterUtils [SPR-11042] #​15670
• Spring doesn't parse jndi variables default values to match the expected-type [SPR-11039] #​15667
• Methods in AnnotationConfigUtils.processCommonDefinitionAnnotations(…) should be public [SPR-11032] #​15660
• PropertyOrFieldReference suffers from potential NullPointerException [SPR-11031] #​15659
• ClassPathBeanDefinitionScanner INFO logging on JSR 330 [SPR-10974] #​15602
• Make createRequestMappingInfo in RequestMappingHandlerMapping protected [SPR-10950] #​15578
• Add XStream CatchAllConverter [SPR-10821] #​15447
• Order of values in @PropertySource annotation depends on name attribute [SPR-10820] #​15446

🪲 Bug Fixes

• Cannot override singleton with scoped proxy [SPR-10744] #​15370
• ClasspathXmlApplicationContext does not inherit/merge parent context environment [SPR-11068] #​15695
• MockHttpServletR

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.