org.springframework.cloud:spring-cloud-starter-loadbalancer

Security

• CVE-2026-59284 — Spring Cloud Commons no allow list for writable env actuator endpoint

What's Changed

• Bouncycastle has been upgraded to 1.85.2 and Spring Cloud Commons now uses the Bouncycastle BOM in 34d9ec2
• GH-1644: Document RefreshScopeHealthIndicator and how to disable it by @won-seoop in #1697
• Do not recursively try to reset configuration properties for library types by @ryanjbaxter in #1699
• Skip resetting beans to default vaules if there is no default constructor by @ryanjbaxter in #1701
• Bump antora from 3.2.0-alpha.12 to 3.2.0-rc.2 in /docs by @dependabot[bot] in #1704
• Bump actions/checkout from 6 to 7 by @dependabot[bot] in #1702
• Re-enable lifecycle MVC endpoint tests by @hutiefang76 in #1707
• Polish note about @ConfigurationProperties can't be refreshed by @quaff in #1466
• Add null protection for property names in AbstractEnvironmentDecrypt by @ryanjbaxter in #1713
• Bump @springio/antora-extensions from 1.14.12 to 1.14.13 in /docs by @dependabot[bot] in #1718
• Autowire beans when rebinding by @ryanjbaxter in #1720
• Add a per-bean-name lock around destroy/reset/re-populate/re-initialize steps in rebind by @ryanjbaxter in #1721
• Escape asterisk character by @ngocnhan-tran1996 in #1722

New Contributors

• @won-seoop made their first contribution in #1697
• @hutiefang76 made their first contribution in #1707

Full Changelog: v5.0.2...v5.0.3

🐞 Bug Fixes

• ConfigurationProperties initial values not restored on DELETE /actuator/env #1616

❤️ Contributors

Thank you to all the contributors who worked on this release:

@dependabot[bot] and @ryanjbaxter

What's Changed

• Bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #1647
• Bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #1645
• Bump maven-resolver.version from 1.9.24 to 1.9.27 by @dependabot[bot] in #1648
• Bump org.bouncycastle:bcprov-jdk18on from 1.81 to 1.83 by @dependabot[bot] in #1649
• Bump org.apache.maven:maven-resolver-provider from 3.9.11 to 3.9.12 by @dependabot[bot] in #1655
• Bump org.apache.maven:maven-resolver-provider from 3.9.11 to 3.9.13 by @dependabot[bot] in #1661
• Bump @antora/collector-extension from 1.0.2 to 1.0.3 in /docs by @dependabot[bot] in #1660
• Bump @antora/collector-extension from 1.0.2 to 1.0.3 in /docs by @dependabot[bot] in #1658
• Bump org.apache.maven:maven-resolver-provider from 3.9.12 to 3.9.13 by @dependabot[bot] in #1657
• Bump org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14 by @dependabot[bot] in #1664
• Bump org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14 by @dependabot[bot] in #1663
• Fix EncryptionIntegrationTests for changes in Boot behavior by @ryanjbaxter in #1665
• Bump @springio/asciidoctor-extensions from 1.0.0-alpha.17 to 1.0.0-alpha.18 in /docs by @dependabot[bot] in #1670
• Bump @springio/antora-extensions from 1.14.7 to 1.14.9 in /docs by @dependabot[bot] in #1668
• Bump @springio/asciidoctor-extensions from 1.0.0-alpha.17 to 1.0.0-alpha.18 in /docs by @dependabot[bot] in #1666
• Bump @springio/antora-extensions from 1.14.7 to 1.14.9 in /docs by @dependabot[bot] in #1671
• Bump io.micrometer:micrometer-docs-generator from 1.0.2 to 1.0.4 by @dependabot[bot] in #1650
• Bump io.micrometer:micrometer-docs-generator from 1.0.2 to 1.0.4 by @dependabot[bot] in #1651
• Bump @springio/antora-extensions from 1.14.9 to 1.14.10 in /docs by @dependabot[bot] in #1674
• Bump @springio/antora-extensions from 1.14.9 to 1.14.10 in /docs by @dependabot[bot] in #1672
• Bump @springio/antora-extensions from 1.14.10 to 1.14.11 in /docs by @dependabot[bot] in #1682
• Bump @springio/antora-extensions from 1.14.10 to 1.14.11 in /docs by @dependabot[bot] in #1683
• Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15 by @dependabot[bot] in #1686
• Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15 by @dependabot[bot] in #1685
• Reset bean to defaults before rebinding values by @shanman190 in #1680
• Bump org.apache.maven:maven-resolver-provider from 3.9.15 to 3.9.16 by @dependabot[bot] in #1689
• Bump org.apache.maven:maven-resolver-provider from 3.9.15 to 3.9.16 by @dependabot[bot] in #1690
• Bump @springio/antora-extensions from 1.14.11 to 1.14.12 in /docs by @dependabot[bot] in #1691
• Bump org.springframework.retry:spring-retry from 2.0.12 to 2.0.13 by @dependabot[bot] in #1694

New Contributors

• @shanman190 made their first contribution in #1680

Full Changelog: v5.0.1...v5.0.2

📔 Documentation

• Correct typos in documentation #1635
• Suggestion: swap withWeighted() and withCaching() order in documentation example #1630
• Fix docs in LoadBalancer Integration for Spring HTTP Service Clients #1615

❤️ Contributors

Thank you to all the contributors who worked on this release:

@B18150228NJUPT, @MaxRybetsky, @SkyeBeFreeman, @dependabot[bot], @limo520, @mipo256, and @ngocnhan-tran1996

⭐ New Features

• Creates InstanceProperties #1604
• Enables jspecify #1603

❤️ Contributors

Thank you to all the contributors who worked on this release:

@OlgaMaciaszek, @dependabot[bot], and @spencergibb

⭐ New Features

• Initial support for JSpecify #1594

❤️ Contributors

Thank you to all the contributors who worked on this release:

@dependabot[bot] and @ryanjbaxter

❤️ Contributors

Thank you to all the contributors who worked on this release:

@dependabot[bot]

What's Changed

• Bump @springio/antora-extensions from 1.14.10 to 1.14.11 in /docs by @dependabot[bot] in #1683
• Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15 by @dependabot[bot] in #1686
• Bump org.apache.maven:maven-resolver-provider from 3.9.15 to 3.9.16 by @dependabot[bot] in #1690
• Bump @springio/antora-extensions from 1.14.11 to 1.14.12 in /docs by @dependabot[bot] in #1693

Full Changelog: v4.3.2...v4.3.3

🐞 Bug Fixes

• Properties decryption not working correctly when they are on a list (yaml) #1253

❤️ Contributors

Thank you to all the contributors who worked on this release:

@dependabot[bot]

❤️ Contributors

Thank you to all the contributors who worked on this release:

@dependabot[bot]

What's Changed

• remove duplicate line in document by @JongP in #1496
• Bump maven-resolver.version from 1.9.22 to 1.9.23 by @dependabot[bot] in #1499
• Bump maven-resolver.version from 1.9.22 to 1.9.23 by @dependabot[bot] in #1502
• Bump maven-resolver.version from 1.9.22 to 1.9.23 by @dependabot[bot] in #1501
• Bump org.apache.maven:maven-resolver-provider from 3.9.9 to 3.9.10 by @dependabot[bot] in #1504
• Bump org.apache.maven:maven-resolver-provider from 3.9.9 to 3.9.10 by @dependabot[bot] in #1506
• Bump org.apache.maven:maven-resolver-provider from 3.9.9 to 3.9.10 by @dependabot[bot] in #1505
• Bump @springio/antora-extensions from 1.14.4 to 1.14.7 in /docs by @dependabot[bot] in #1533
• Bump @springio/antora-extensions from 1.14.4 to 1.14.7 in /docs by @dependabot[bot] in #1536
• Bump actions/checkout from 4 to 5 by @dependabot[bot] in #1558
• Bump antora from 3.2.0-alpha.8 to 3.2.0-alpha.9 in /docs by @dependabot[bot] in #1557
• Bump @antora/collector-extension from 1.0.1 to 1.0.2 in /docs by @dependabot[bot] in #1555
• Bump antora from 3.2.0-alpha.8 to 3.2.0-alpha.9 in /docs by @dependabot[bot] in #1554
• Bump actions/checkout from 4 to 5 by @dependabot[bot] in #1550
• add some basic tests by @wind57 in #1559
• Bump maven-resolver.version from 1.9.23 to 1.9.24 by @dependabot[bot] in #1566
• Bump maven-resolver.version from 1.9.23 to 1.9.24 by @dependabot[bot] in #1564
• Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11 by @dependabot[bot] in #1563
• Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11 by @dependabot[bot] in #1561
• Bump actions/setup-java from 4 to 5 by @dependabot[bot] in #1570
• Bump actions/setup-java from 4 to 5 by @dependabot[bot] in #1569
• Bump @antora/collector-extension from 1.0.1 to 1.0.2 in /docs by @dependabot[bot] in #1556
• Bump @antora/atlas-extension from 1.0.0-alpha.2 to 1.0.0-alpha.5 in /docs by @dependabot[bot] in #1578
• Bump @antora/atlas-extension from 1.0.0-alpha.2 to 1.0.0-alpha.5 in /docs by @dependabot[bot] in #1577
• 1580: Fixes property substitution problem for active profiles by @hosea in #1581
• Bump antora from 3.2.0-alpha.9 to 3.2.0-alpha.10 in /docs by @dependabot[bot] in #1586
• Bump antora from 3.2.0-alpha.9 to 3.2.0-alpha.10 in /docs by @dependabot[bot] in #1585
• Bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in #1592
• Bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in #1591
• Bump mikepenz/action-junit-report from 5 to 6 by @dependabot[bot] in #1598
• Bump mikepenz/action-junit-report from 5 to 6 by @dependabot[bot] in #1597
• Bump actions/checkout from 5 to 6 by @dependabot[bot] in #1607
• Bump actions/checkout from 5 to 6 by @dependabot[bot] in #1606
• Bump antora from 3.2.0-alpha.10 to 3.2.0-alpha.11 in /docs by @dependabot[bot] in #1612
• Bump antora from 3.2.0-alpha.10 to 3.2.0-alpha.11 in /docs by @dependabot[bot] in #1613
• Verify RestartEndpoint is enabled without causing a restart by @ryanjbaxter in #1617
• Bump actions/cache from 4 to 5 by @dependabot[bot] in #1627
• Bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in #1626

New Contributors

• @JongP made their first contribution in #1496
• @hosea made their first contribution in #1581

Full Changelog: v4.3.0...v4.3.1

❤️ Contributors

Thank you to all the contributors who worked on this release:

@dependabot[bot]

🐞 Bug Fixes

• Wrong set of active profiles as property substitution does not take place inside values #1580

❤️ Contributors

Thank you to all the contributors who worked on this release:

@dependabot[bot] and @wind57