Skip to content

Bump org.springframework:spring-web from 6.2.10 to 7.0.5 - #172

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/maven/org.springframework-spring-web-7.0.5
Closed

Bump org.springframework:spring-web from 6.2.10 to 7.0.5#172
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/maven/org.springframework-spring-web-7.0.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 24, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps org.springframework:spring-web from 6.2.10 to 7.0.5.

Release notes

Sourced from org.springframework:spring-web's releases.

v7.0.5

⚠️ Attention Required

  • Optimize request and response header handling in Spring MVC #36334

⭐ New Features

  • Consistent adaptation of HTTP headers on Servlet responses #36343
  • Copy methodAnnotations in MethodParameter copy constructor #36342
  • Improve performance of validation groups determination in WebFlux #36336
  • Reuse AnnotatedMethod annotation cache in derived instances #36322
  • Optimize the addition of a charset to the MediaType in AbstractHttpMessageConverter #36320
  • Optimize MediaType(MediaType, Charset) constructor #36318
  • Detect all common size exceptions from Tomcat and Commons FileUpload 2.x #36317
  • Consistently support @Autowired as a meta-annotation #36315
  • Avoid duplicate required attribute lookup for @Autowired annotations #36314
  • Cache @ResponseBody presence per controller class in RequestResponseBodyMethodProcessor #36311

🐞 Bug Fixes

  • ResolvableType#getGenerics() breaks serialization #36346
  • DefaultHttpMessageConverters not adding provided configurer #36332
  • Restore early MessageConsumer creation for temporary queue #36321
  • Multipart upload leak on client abort (ByteBuf.release() not called) #36262

📔 Documentation

  • Document that SpEL expressions using Optional with null-safe and Elvis operators are not compilable #36331
  • Improve documentation of baseline API version to emphasize version must be supported #36316
  • Stop referring to obsolete ListenableFuture in documentation #36313
  • Stop referring to standard Java features as "Java 8" features in documentation #36310

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Niravil and @​TAKETODAY

v7.0.4

⭐ New Features

  • Cache method annotations in MethodParameter and AnnotatedMethod #36307
  • Consistently support @Lazy as a meta-annotation at arbitrary depths #36306
  • Consistently support @Validated as a meta-annotation at arbitrary depths #36305
  • Let developers disable default registrations in HttpMessageConverters #36303
  • Log which HandlerInterceptor threw the exception #36281
  • Improve performance of hashcode calculations for request mappings #36279
  • Improve performance of HandlerMethod bean lookup #36278
  • Improve performance of version mapping #36276
  • Improve performance of single pattern request mappings #36275

... (truncated)

Commits
  • 16ecbfc Release v7.0.5
  • 85c18ca Update docs on supported versions with baseline notation
  • 22bd8bd Skip serialization of potentially non-serializable cached state
  • 9b10bb5 Polishing
  • 727ccd0 Avoid setCharacterEncoding(Charset) call with null value
  • a9f447e Consistent adaptation of HTTP headers on Servlet responses
  • 0841e79 Copy methodAnnotations in MethodParameter copy constructor
  • a1868d3 fix TransactionAspectSupport#currentTransactionStatus javadoc
  • e5aac66 ServletResponseHeadersAdapter checks contentType property
  • 8bf85d2 Polishing
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot
Bump org.springframework:spring-web from 6.2.10 to 7.0.5
92bb356 
Bumps [org.springframework:spring-web](https://github.com/spring-projects/spring-framework) from 6.2.10 to 7.0.5.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.10...v7.0.5)

---
updated-dependencies:
- dependency-name: org.springframework:spring-web
  dependency-version: 7.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Feb 24, 2026
@dependabot dependabot Bot mentioned this pull request Feb 24, 2026
Closed
@github-actions

github-actions Bot commented Apr 3, 2026

Copy link
Copy Markdown

This PR has been automatically marked as stale because it has no activity for 30 days.
Please add a comment if you want to keep the issue open. Thank you for your contributions!

@github-actions github-actions Bot added the stale label Apr 3, 2026
@github-actions github-actions Bot removed the stale label May 2, 2026
@dedece35 dedece35 moved this from Backlog to Ready in Hackathon Kanban - JAVA May 2, 2026
@dedece35 dedece35 moved this from Ready to Backlog in Hackathon Kanban - JAVA May 2, 2026
@dedece35 dedece35 moved this from Backlog to Need Analysis before Ready in Hackathon Kanban - JAVA May 2, 2026
@dedece35 dedece35 moved this from Need Analysis before Ready to Backlog in Hackathon Kanban - JAVA May 6, 2026
@dedece35 dedece35 moved this from Backlog to Ready in Hackathon Kanban - JAVA May 14, 2026
@github-actions

github-actions Bot commented Jun 1, 2026

Copy link
Copy Markdown

This PR has been automatically marked as stale because it has no activity for 30 days.
Please add a comment if you want to keep the issue open. Thank you for your contributions!

@github-actions github-actions Bot added the stale label Jun 1, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor Author

A newer version of org.springframework:spring-web exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

@dedece35 dedece35 closed this Sep 4, 2026
@github-project-automation github-project-automation Bot moved this from Ready to Done in Hackathon Kanban - JAVA Sep 4, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/maven/org.springframework-spring-web-7.0.5 branch September 4, 2026 12:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code stale

Projects

Hackathon Kanban - JAVA
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@dedece35