org.springframework.boot:spring-boot-starter-undertow

🔨 Dependency Upgrades

• Upgrade to Spring AMQP 3.2.12 #50818
• Upgrade to Spring Data Bom 2025.0.13 #50819
• Upgrade to Spring Integration 6.5.10 #50820

🐞 Bug Fixes

• Artemis auto-configuration uses a predictable default location for the embedded broker's data #50743
• MailSender auto-configuration does not enable hostname verification #50742
• SSL should not be enabled when a SSL bundle is overridden to an empty string #50624
• Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50501
• Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50451
• RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50429
• GraphQL WebSocket support does not configure allowed origins #50391
• Buildpack module does not validate long-to-int casts #50382
• MappingsEndpoint reports the context's own ID as parentId when a parent exists #50373
• Created StackTracePrinter instances have no access to the Environment #50303
• NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50301
• Spring Boot Loader Does Not Support RSA and EC Signed Jars #50292
• ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50273
• Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50254
• Meter registries are not removed from the global registry when the context is closed #50235
• ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50225
• Apply HTML escaping to timestamp attribute in Whitelabel error page #50205
• NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50118
• EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50095

📔 Documentation

• Fix reference to Gradle documentation for module replacement #50641
• Remove the use of Optional from Data Neo4j repository examples #50600
• Fix typos in documentation #50593
• Document Java 25 requirement for AOT cache #50482
• Clarify dependency requirement for Bean Validation support #50290
• Document SSL reloading with Let's Encrypt #50222
• Polish InvalidConfigurationPropertyValueException constructor javadoc #50212
• Document known testcontainers lifecycle issues #50210
• Document configuring multiple connectors with Jetty #50206
• Fix typo in Spring Security OAuth2 client registration documentation #50193

🔨 Dependency Upgrades

• Upgrade to Caffeine 3.2.4 #50308
• Upgrade to Cassandra Driver 4.19.3 #50670
• Upgrade to Glassfish JAXB 4.0.9 #50671
• Upgrade to Groovy 4.0.32 #50310
• Upgrade to Hibernate 6.6.53.Final #50721
• Upgrade to Jackson Bom 2.21.4 #50673
• Upgrade to Jakarta Json Bind 3.0.2 #50674
• Upgrade to Jakarta XML Bind 4.0.5 #50313
• Upgrade to Jaxen 2.0.6 #50722
• Upgrade to Jetty 12.0.36 #50676
• Upgrade to Jetty Reactive HTTPClient 4.0.14 #50723
• Upgrade to jOOQ 3.19.35 #50724
• Upgrade to Logback 1.5.34 #50677
• Upgrade to Maven Failsafe Plugin 3.5.6 #50678
• Upgrade to Maven Surefire Plugin 3.5.6 #50679
• Upgrade to Micrometer 1.15.12 #50511
• Upgrade to Micrometer Tracing 1.5.12 #50512
• Upgrade to Netty 4.1.135.Final #50680
• Upgrade to Postgresql 42.7.11 #50317
• Upgrade to Pulsar 4.0.11 #50725
• Upgrade to R2DBC MySQL 1.4.2 #50319
• Upgrade to Reactor Bom 2024.0.18 #50513
• Upgrade to SAAJ Impl 3.0.6 #50726
• Upgrade to SLF4J 2.0.18 #50533
• Upgrade to Spring AMQP 3.2.11 #50514
• Upgrade to Spring Authorization Server 1.5.8 #50515
• Upgrade to Spring Batch 5.2.6 #50516
• Upgrade to Spring Data Bom 2025.0.12 #50517
• Upgrade to Spring Framework 6.2.19 #50518
• Upgrade to Spring GraphQL 1.4.6 #50739
• Upgrade to Spring HATEOAS 2.5.3 #50519
• Upgrade to Spring Integration 6.5.9 #50520
• Upgrade to Spring Kafka 3.3.16 #50521
• Upgrade to Spring LDAP 3.3.8 #50522
• Upgrade to Spring Pulsar 1.2.18 #50523
• Upgrade to Spring RESTDocs 3.0.6 #50524
• Upgrade to Spring Retry 2.0.13 #50525
• Upgrade to Spring Security 6.5.11 #50526
• Upgrade to Spring Session 3.5.7 #50527
• Upgrade to Spring WS 4.1.4 #50528
• Upgrade to Tomcat 10.1.55 #50534

❤️ Contributors

Thank you to all the contributors who worked on this release:

@Abdlatif-nabgha, @DragonFSKY, @Kapil-chn7, @SJvaca30, @SebTardif, @ares333, @codingkiddo, @dlwldnjs1009, @henriquejsza, @igormukhin, @johnnypwong, @kwondh5217, @leestana01, @mheath, @ngocnhan-tran1996, @nosan, @quaff, @scordio, @vinhhieu21, @won-seoop, and @zxuhan

🐞 Bug Fixes

• ApplicationPidFileWriter does not handle symlinks correctly #50173
• RandomValuePropertySource is not suitable for secrets #50172
• Cassandra auto-configuration misconfigures CqlSessionBuilder #50171
• ApplicationTemp does not handle symlinks correctly #50170
• Remote DevTools performs comparison incorrectly #50169
• spring.rabbitmq.ssl.verify-hostname is applied inconsistently #50168
• EnversRevisionRepositoriesRegistrar should reuse @EnableEnversRepositories rather than configuring the JPA counterpart #50035
• Annotations like @Ssl don't work on @Bean methods when using @ServiceConnection #50033
• Whole number values are ignored when configuring min and max expected values and SLO boundaries for a distribution summary meter #50021
• WebFlux Cloud Foundry links endpoint includes query string from received request in resolved links #50008
• 500 response from env endpoint when supplied pattern is invalid #49942
• HTTP method is lost when configuring excludes in EndpointRequest #49885
• Docker Compose support doesn't work with apache/artemis image #49865
• Honor HttpMethod for reactive additional endpoint paths #49864
• Docker Compose support doesn't work with apache/activemq image #49863
• Imports on a containing test class are ignored when a nested class has imports #49860

📔 Documentation

• Link to the observability section of the Lettuce documentation is broken #50092
• Javadoc for StaticResourceLocation.FAVICON doesn't describe icons location #50083
• MySamlRelyingPartyConfiguration is missing a Kotlin sample #50023
• Incorrect default value for management.httpexchanges.recording.include in configuration metadata #50010
• Link to the Kubernetes documentation when discussing startup probes #50007
• Update docs to encourage Java fundamentals for beginners that prefer to learn that way #49895
• Clarify that configuration property default values are not available through the Environment #49835

🔨 Dependency Upgrades

• Upgrade to Groovy 4.0.31 #49905
• Upgrade to Hibernate 6.6.49.Final #50140
• Upgrade to Jaxen 2.0.1 #50109
• Upgrade to Jaybird 6.0.5 #49907
• Upgrade to Jetty 12.0.34 #49908
• Upgrade to jOOQ 3.19.32 #50110
• Upgrade to Lombok 1.18.46 #50148
• Upgrade to MariaDB 3.5.8 #49909
• Upgrade to Micrometer 1.15.11 #49961
• Upgrade to Micrometer Tracing 1.5.11 #49962
• Upgrade to MySQL 9.7.0 #50161
• Upgrade to Neo4j Java Driver 5.28.13 #50074
• Upgrade to Reactor Bom 2024.0.17 #49963
• Upgrade to Spring AMQP 3.2.10 #49964
• Upgrade to Spring Authorization Server 1.5.7 #49965
• Upgrade to Spring Data Bom 2025.0.11 #49966
• Upgrade to Spring Framework 6.2.18 #49967
• Upgrade to Spring Kafka 3.3.15 #50129
• Upgrade to Spring LDAP 3.3.7 #49968
• Upgrade to Spring Pulsar 1.2.17 #49969
• Upgrade to Spring Security 6.5.10 #49970
• Upgrade to Spring Session 3.5.6 #49971
• Upgrade to Thymeleaf 3.1.5.RELEASE #50149
• Upgrade to Thymeleaf Extras SpringSecurity 3.1.5.RELEASE #50151
• Upgrade to Tomcat 10.1.54 #49910

❤️ Contributors

Thank you to all the contributors who worked on this release:

@MohammedGhallab, @dlwldnjs1009, @edwardsre, @kodama-kcc, @kwondh5217, @quaff, @refeccd, and @scordio