Skip to content

build(deps): bump org.springframework:spring-webmvc from 6.2.5 to 7.0.7#3503

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/org.springframework-spring-webmvc-7.0.7
Open

build(deps): bump org.springframework:spring-webmvc from 6.2.5 to 7.0.7#3503
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/org.springframework-spring-webmvc-7.0.7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jun 3, 2026

Bumps org.springframework:spring-webmvc from 6.2.5 to 7.0.7.

Release notes

Sourced from org.springframework:spring-webmvc's releases.

v7.0.7

⭐ New Features

  • Improve SpringValidatorAdapter and MethodValidationAdapter performance #36621
  • Support JSON array decoding to Flux in KotlinSerializationJsonDecoder #36597
  • Deprecate methodIdentification() in CacheAspectSupport for removal #36575
  • Add MockRestServiceServer#createServer variant for RestClient #36572
  • Create RestClientXhrTransport variant replacing RestTemplateXhrTransport #36566
  • Improve error handling in multipart codecs #36563
  • Make ApplicationListenerMethodAdapter#getTargetMethod() public #36558
  • ApiVersionConfigurer.setSupportedVersionPredicate() returns void instead of ApiVersionConfigurer #36551
  • LazyConnectionDataSourceProxy does not work well with Hibernate's multi-tenancy by schema strategy #36527
  • Add registerManagedResource variant with bean key argument to MBeanExporter #36520
  • Handle blank Accept-Language header in AcceptHeaderLocaleResolver #36513
  • Make AbstractStreamingClientHttpRequest and AbstractBufferingClientHttpRequest public #36501
  • MySQL Error 149 (Galera/WSREP conflict) not translated to ConcurrencyFailureException in Spring JDBC/ORM #36499
  • Add PreFlightRequestFilter #36482
  • Support configuration of extension context scope for SpringExtension via Spring or JUnit properties #36460
  • Lower log level of "Cache miss for REQUEST dispatch" in HandlerMappingIntrospector #36309

🐞 Bug Fixes

  • WebDataBinder unnecessarily instantiates collections when using the "!" and "_" prefixes #36625
  • Cache pollution from high-cardinality FieldError default messages in MessageSourceSupport #36609
  • MergedAnnotation does not use ClassLoader for method or field #36606
  • @Sql fails if DataSource is wrapped in a TransactionAwareDataSourceProxy #36611
  • AnnotatedTypeMetadata no longer retains source declaration order on Java 24+ #36598
  • MergedAnnotation.asMap() fails when an attribute references a non-existent class #36586
  • FileSystemResource does not strictly follow the Resource#isReadable() contract #36584
  • Converter overrides in HttpMessageConverters only apply when defaults are registered #36579
  • Invalid method return type metadata for ClassFile variant on JDK 24+ #36577
  • Fix Writer lifecycle for AbstractJsonHttpMessageConverter.writeInternal(Object, Type, Writer) #36565
  • Flushing-related regression in SseServerResponse #36537
  • LazyConnectionDataSourceProxy does not pass on holdability to target Connection #36528
  • AnnotationBeanNameGenerator fails when an annotation references a non-existent class #36524
  • Perserve default API version in RestClientAdapter #36514
  • Inconsistent codings resolution in resource resolvers #36507
  • DefaultJmsListenerContainer may hang in an endless loop in doShutdown #36506
  • Query not hidden in DefaultClientResponse checkpoint #36502
  • RestClient closes stream for ResponseEntity responses #36492
  • IllegalStateException when using websocket handshake headers with Tomcat #36486
  • Invalid nullness information for ParameterizedTypeReference #36477
  • WebTestClient cannot assert null list elements #36476
  • Handle Kotlin nullable value class param correctly in CoroutineUtils #36449
  • Remove RFC 2047 encoding from Content-Disposition filename #36328

📔 Documentation

  • Clarify semantics of HttpMethod.valueOf() #36652
  • Document whitespace semantics in SpEL expressions #36628

... (truncated)

Commits
  • c997d40 Release v7.0.7
  • 9185254 Upgrade to Reactor 2025.0.5 and Micrometer 1.16.5
  • 802fa4d Refine RetryListener example
  • 7052da4 Add doOnDiscard in MultipartHttpMessageReader
  • 63817ce Add missing tests for WebRequestDataBinder
  • 61bd790 Polish WebRequestDataBinderTests
  • ab6637c Completely extract ServletRequestParameterPropertyValuesTests
  • c9b88b4 Extract ServletRequestParameterPropertyValuesTests
  • 68c575a Revise "Skip binding entirely when field is not allowed"
  • cb32046 Further clarify semantics of HttpMethod.valueOf()
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) from 6.2.5 to 7.0.7.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.5...v7.0.7)

---
updated-dependencies:
- dependency-name: org.springframework:spring-webmvc
  dependency-version: 7.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jun 3, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jun 3, 2026

PR Summary

Bumps the dependency org.springframework:spring-webmvc from 6.2.5 to 7.0.7 across multiple modules. This is a semver-major production dependency upgrade; changes are limited to Maven POMs with no source code edits in this PR. Release notes for v7 include various new features and bug fixes.

Changes

File Summary
microservices-aggregrator/aggregator-service/pom.xml Bumped org.springframework:spring-webmvc from 6.2.5 to 7.0.7 in the aggregator-service POM. Semver-major production dependency update; no code changes.
microservices-aggregrator/information-microservice/pom.xml Updated org.springframework:spring-webmvc from 6.2.5 to 7.0.7 in the information-microservice POM. Semver-major update; production dependency only.
microservices-aggregrator/inventory-microservice/pom.xml Updated org.springframework:spring-webmvc from 6.2.5 to 7.0.7 in the inventory-microservice POM. Semver-major update; production dependency only.
microservices-api-gateway/api-gateway-service/pom.xml Upgraded org.springframework:spring-webmvc from 6.2.5 to 7.0.7 in the api-gateway-service POM. Semver-major upgrade; production dependency only.
microservices-api-gateway/image-microservice/pom.xml Changed org.springframework:spring-webmvc from 6.2.5 to 7.0.7 in the image-microservice POM. Semver-major upgrade; production dependency only.
microservices-api-gateway/price-microservice/pom.xml Updated org.springframework:spring-webmvc to 7.0.7 from 6.2.5 in the price-microservice POM. Major upgrade; no code changes.
page-controller/pom.xml Bumped org.springframework:spring-webmvc from 6.2.5 to 7.0.7 in the page-controller POM. Semver-major upgrade; production dependency only.

autogenerated by presubmit.ai

Copy link
Copy Markdown

@github-actions github-actions Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

Review Summary

Commits Considered (1)
  • 114bd67: build(deps): bump org.springframework:spring-webmvc from 6.2.5 to 7.0.7

Bumps org.springframework:spring-webmvc from 6.2.5 to 7.0.7.


updated-dependencies:

  • dependency-name: org.springframework:spring-webmvc
    dependency-version: 7.0.7
    dependency-type: direct:production
    update-type: version-update:semver-major
    ...

Signed-off-by: dependabot[bot] support@github.com

Files Processed (7)
  • microservices-aggregrator/aggregator-service/pom.xml (1 hunk)
  • microservices-aggregrator/information-microservice/pom.xml (1 hunk)
  • microservices-aggregrator/inventory-microservice/pom.xml (1 hunk)
  • microservices-api-gateway/api-gateway-service/pom.xml (1 hunk)
  • microservices-api-gateway/image-microservice/pom.xml (1 hunk)
  • microservices-api-gateway/price-microservice/pom.xml (1 hunk)
  • page-controller/pom.xml (1 hunk)
Actionable Comments (0)
Skipped Comments (7)
  • microservices-aggregrator/aggregator-service/pom.xml [41-41]

    best_practice: "Spring WebMVC major version alignment"

  • microservices-aggregrator/information-microservice/pom.xml [41-41]

    best_practice: "Synchronize Spring major version across modules"

  • microservices-aggregrator/inventory-microservice/pom.xml [41-41]

    best_practice: "Major version upgrade consistency"

  • microservices-api-gateway/api-gateway-service/pom.xml [41-41]

    best_practice: "Cross-module compatibility check for Spring 7"

  • microservices-api-gateway/image-microservice/pom.xml [41-41]

    best_practice: "Ensure consistent Spring 7 upgrade across services"

  • microservices-api-gateway/price-microservice/pom.xml [41-41]

    best_practice: "Dependency version management"

  • page-controller/pom.xml [45-45]

    best_practice: "Spring WebMVC major version bump in page-controller"

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants