chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
gradle (source)		minor	8.0.2 -> 8.1.1
org.springframework:spring-web	dependencies	patch	6.0.7 -> 6.0.8
org.springframework:spring-test	dependencies	patch	6.0.7 -> 6.0.8
org.apache.groovy:groovy-all (source)	dependencies	patch	4.0.10 -> 4.0.11
com.fasterxml.jackson.core:jackson-databind (source)	dependencies	minor	2.14.2 -> 2.15.0
com.fasterxml.jackson.datatype:jackson-datatype-jdk8	dependencies	minor	2.14.2 -> 2.15.0
com.fasterxml.jackson.core:jackson-annotations (source)	dependencies	minor	2.14.2 -> 2.15.0
com.fasterxml.jackson.core:jackson-core	dependencies	minor	2.14.2 -> 2.15.0
com.graphql-java:graphql-java	dependencies	minor	20.1 -> 20.2

---

Release Notes

gradle/gradle

v8.1.1: 8.1.1

This is a patch release for Gradle 8.1. We recommend using 8.1.1 instead of 8.1.

It fixes the following issues:

• #​24748 MethodTooLargeException when instrumenting a class with thousand of lambdas for configuration cache
• #​24754 Kotlin DSL precompiled script plugins built with Gradle 8.1 cannot be used with other versions of Gradle
• #​24788 Gradle 8.1 configure freeCompilerArgs for Kotlin in buildSrc breaks build with unhelpful errors

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 8.1.1 by updating your wrapper:

./gradlew wrapper --gradle-version=8.1.1

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 8.1.1.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

spring-projects/spring-framework

v6.0.8

⭐ New Features

• Disable variable assignment in SimpleEvaluationContext #​30326
• Limit SpEL expression length #​30325
• Limit string concatenation in SpEL expressions #​30324
• Introduce StringUtils.truncate() #​30290
• Introduce ObjectUtils.nullSafeConciseToString() #​30286
• Introduce assertions against Cookie attributes in CookieResultMatchers for MockMvc #​30285
• Polishing #​30267
• Support SameSite cookie attribute in MockMvcHttpConnector #​30264
• Update MockCookie to make use of Servlet 6.0 APIs and semantics for "attributes" #​30263
• Refine initRequestBuilder in DefaultWebClient #​30254
• HttpServerErrorException contains not-serializable field of type DefaultResponseErrorHandler #​30224
• Add class hints for Jackson annotations on fields and methods #​30208
• Add HttpMethod reflection hint to ObjectToObjectConverterRuntimeHints #​30201
• Improve performance of canRead() in HttpMessageReader's #​30192
• Optimize array creation in SpEL ConstructorReference #​30189
• ConstructorResolver error hints about mixing indexed and named args #​30169
• Replace Collections.unmodifiableList(new ArrayList(..)) with List.copyOf() #​30166
• Add assert null validations for DefaultServerResponseBuilder #​30157
• Use InputStream.readAllBytes() in FileCopyUtils.copyToByteArray() #​30155
• Cache ServerHttpRequest::getMethod in AbstractServerHttpRequest #​30139
• Use String.equals() in LiteralPathElement #​30138
• Optimize some iterations in BodyExtractor and BodyInserter #​30136
• Add a couple missing java.time types to StatementCreatorUtils #​30123
• WebClient observations should not record CANCEL signals as aborted if response was received #​30070
• Destroy method not found in native image if concrete bean type is not exposed #​29545
• Contribute init/destroy lifecycle introspection hints for registered beans #​29246

🐞 Bug Fixes

• NPE thrown for nonexistent default-destroy-method in XML config #​30301
• Fix comparison of title in equals() and hashCode() of ProblemDetail #​30294
• SSE breaks with indenting serializer in WebMvc.fn #​30277
• @HttpExchange interface does not resolve return type correctly while using with suspending methods #​30266
• Increase max regex length in SpEL expressions #​30265
• Missing response information from client observation context when filter functions fail #​30247
• NullPointerException on timeout in HttpComponentsClientHttpConnector when using Apache HttpComponents #​30245
• Wrong MockRestRequestMatchers.header() method in spring-test being invoked (JDK issue?) #​30220
• Refine generic type management in AbstractMessageWriterResultHandler #​30214
• MvcUriComponentsBuilder.fromMethodCall breaks for controller with CharSequence return type #​30210
• Encode IPV6 Zone IDs (%) in ReactorServerHttpRequest #​30188
• Handle all exceptions for stored proc output param retrieval in SharedEntityManagerCreator #​30161
• Fix IllegalArgumentException that prevents STOMP DISCONNECT from reaching the client #​30120
• TypeNotPresentException: org/springframework/cglib/proxy/NoOp not present on Java 17 #​30115

📔 Documentation

• Add since tags to sameSite() and attribute() in CookieResultMatchersDsl #​30308
• Fix incorrect jakarta.inject artifact version #​30270
• Fix @PathVariable reference documentation code snippets #​30243
• Use diamond operator in examples in reference manual #​30204
• Fix example in Javadoc for @EnableWebSocket #​30183
• Fix anchor in link to "Web on Reactive Stack" chapter #​30158
• Documentation for Vavr's Try method to trigger transaction rollbacks #​30108
• Document that WebClient defaultStatusHandler do not apply to exchange* methods #​30059

🔨 Dependency Upgrades

• Upgrade to Micrometer 1.10.6 #​30317
• Upgrade to Reactor 2022.0.6 #​30316

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​1993heqiang, @​TAKETODAY, @​ZouHongxue, @​alexjansons, @​divcon, @​edyda99, @​filipblondeel, @​ghostg00, @​giuseppemilicia, @​izeye, @​justin-tay, @​krzyk, @​kyuarl21, @​quaff, @​shitian9, @​simonbasle, @​srivatsa-cfp, @​ssang1105, @​stsypanov, @​wizard4wu, and @​yuzawa-san

graphql-java/graphql-java

v20.2: 20.2

This is a security bugfix release containing #​3148, which adds a limit to the number of characters used in an operation.

There are no breaking changes in this release.

What's Changed

• Diffing fixes 2 by @​gnawf in https://github.com/graphql-java/graphql-java/pull/3146
• Fix argument added to new type by @​gnawf in https://github.com/graphql-java/graphql-java/pull/3150
• Show test failures in builds by @​bbakerman in https://github.com/graphql-java/graphql-java/pull/3151
• Fix applied argument deleted on field by @​gnawf in https://github.com/graphql-java/graphql-java/pull/3154
• Have a limit on how many characters are presented to the Parser by @​bbakerman in https://github.com/graphql-java/graphql-java/pull/3148

Full Changelog: graphql-java/graphql-java@v20.1...v20.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information