build(deps): bump the maven group across 10 directories with 11 updates by dependabot[bot] · Pull Request #30 · Centaurioun/codeql

dependabot · 2026-04-15T19:58:10Z

Bumps the maven group with 1 update in the /java/ql/integration-tests/all-platforms/java/java-web-jsp directory: org.springframework:spring-webmvc.
Bumps the maven group with 1 update in the /java/ql/integration-tests/all-platforms/java/maven-sample directory: junit:junit.
Bumps the maven group with 1 update in the /java/ql/integration-tests/all-platforms/java/maven-sample-extract-properties directory: junit:junit.
Bumps the maven group with 1 update in the /java/ql/integration-tests/all-platforms/java/maven-sample-large-xml-files directory: junit:junit.
Bumps the maven group with 1 update in the /java/ql/integration-tests/all-platforms/java/maven-sample-small-xml-files directory: junit:junit.
Bumps the maven group with 1 update in the /java/ql/integration-tests/all-platforms/java/maven-sample-xml-mode-all directory: junit:junit.
Bumps the maven group with 1 update in the /java/ql/integration-tests/all-platforms/java/maven-sample-xml-mode-byname directory: junit:junit.
Bumps the maven group with 1 update in the /java/ql/integration-tests/all-platforms/java/maven-sample-xml-mode-disabled directory: junit:junit.
Bumps the maven group with 1 update in the /java/ql/integration-tests/all-platforms/java/maven-sample-xml-mode-smart directory: junit:junit.
Bumps the maven group with 10 updates in the /java/ql/test/utils/flowtestcasegenerator directory:

Package	From	To
org.springframework:spring-webmvc	`5.3.18`	`6.2.17`
org.apache.logging.log4j:log4j-core	`2.14.1`	`2.25.4`
org.springframework.ldap:spring-ldap-core	`2.3.5.RELEASE`	`2.4.4`
org.springframework:spring-web	`5.3.18`	`6.1.21`
org.springframework:spring-context	`5.3.18`	`6.1.20`
org.apache.shiro:shiro-core	`1.8.0`	`2.1.0`
org.owasp.esapi:esapi	`2.2.3.1`	`2.6.0.0`
org.thymeleaf:thymeleaf	`3.0.15.RELEASE`	`3.1.4.RELEASE`
com.hubspot.jinjava:jinjava	`2.6.0`	`2.7.6`
io.pebbletemplates:pebble	`3.1.5`	`3.2.4`

Updates org.springframework:spring-webmvc from 4.0.2.RELEASE to 6.2.17

Release notes

Sourced from org.springframework:spring-webmvc's releases.

v6.2.17

⭐ New Features

Leverage ResourceHandlerUtils in ScriptTemplateView #36459

Restore ScriptTemplateViewTests #36457

Fix log message in ConfigurationClassBeanDefinitionReader #36454

Resolve context initializers only once in AbstractTestContextBootstrapper #36431

Exclude legacy @javax.validation.Constraint from convention-based annotation attribute override check #36412

Optimize MediaType(MediaType, Charset) constructor #36351

Optimize the addition of a charset to the MediaType in AbstractHttpMessageConverter #36350

Consistent adaptation of HTTP headers on Servlet responses #36345

Improve performance of validation groups determination in WebFlux #36337

Detect all common size exceptions from Tomcat and Commons FileUpload 2.x #36324

🐞 Bug Fixes

Guard against invalid id/event values in Server Sent Events #36442

Incomplete debug message in ConfigurationClassBeanDefinitionReader #36411

Inconsistent ApplicationEventMulticaster state after removing ApplicationListener implemented by FactoryBean #36405

Graceful shutdown of SimpleAsyncTaskExecutor #36384

HttpMediaTypeException thrown when calculating compatible media types #36363

ResolvableType#getGenerics() breaks serialization #36347

Multipart upload leak on client abort (ByteBuf.release() not called) #36327

📔 Documentation

Document @Fallback alongside Primary in the reference manual and @Bean Javadoc #36441

Document registration recommendations for BeanPostProcessor and BeanFactoryPostProcessor #36436

Fix links to UriComponentsBuilder and polish examples #36406

Emphasize @Configuration classes over XML and Groovy in testing chapter #36394

Polish SpEL operator examples in reference docs #36375

🔨 Dependency Upgrades

Upgrade to JUnit 5.14.3 #36388

Upgrade to Micrometer 1.15.10 #36446

Upgrade to Reactor 2024.0.16 #36445

v6.2.16

⭐ New Features

Improve performance of hashcode calculations for request mappings #36297

Improve performance of HandlerMethod bean lookup #36296

Improve performance of validation groups determination #36295

Improve performance of single pattern request mappings #36294

Optimize NamedParameterUtils#buildValueArray by lazily fetching SqlParameter #36232

Consistently close streams through try-with-resources in FileCopyUtils #36224

SqlBinaryValue and SqlCharacterValue should support InputStream content with undetermined length #36220

DataBufferUtils.write() with NettyDataBuffer on JDK 25 hangs indefinitely #36189

WebClient (Reactor) attributes on Netty channel do not clear after connection release #36163

... (truncated)

Commits

4e35a12 Release v6.2.17
317a1f9 Leverage ResourceHandlerUtils in ScriptTemplateView
de6601f Restore ScriptTemplateViewTests
47dc1c4 Fix log message in ConfigurationClassBeanDefinitionReader
d8c7793 Upgrade to SnakeYAML 2.6, Protobuf 4.34, H2 2.4.240
99fbce1 Polishing (aligned with main)
d1e69a9 Upgrade to Reactor 2024.0.16 and Micrometer 1.15.10
8dc888e Guard against invalid id/event values in Server Sent Events
131f94f Use link for first reference to @⁠Fallback in @⁠Bean Javadoc
d4f4c69 Document @Fallback alongside Primary in the reference docs and @Bean Javadoc
Additional commits viewable in compare view