fix(deps): update dependency org.springframework:spring-web to v6.2.8

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.springframework:spring-web	6.2.5 -> 6.2.8

---

Release Notes

spring-projects/spring-framework (org.springframework:spring-web)

v6.2.8

Compare Source

⭐ New Features

• Nullability @Contract declaration for CodeFlow.isIntegerForNumericOp() is unnecessary #​34985
• Serializer hint registration is broken for some Kotlin classes #​34979
• Clients created using JdkClientHttpRequestFactory set content-length for GET, DELETE and HEAD requests #​34971
• Support registration of non-public BeanDefinitionReader via @ImportResource #​34928
• Make max size for pattern cache in PathPatternMatchableHandlerMapping configurable #​34918
• Add optimized DataBufferInputStream overrides #​34799

🐞 Bug Fixes

• Encode non-printable character in Content-Disposition parameter #​35034
• Allow update of existing WebSession after max sessions limit is reached #​35013
• Fix support for collections in AbstractKotlinSerializationHttpMessageConverter #​34992
• PathPattern#combine throws StringIndexOutOfBoundsException #​34986
• Fix AOT code generation for autowired inner class constructor #​34974
• AbstractFileResolvingResource.exists closes JAR resource input streams with v6.2.7 #​34955
• Enhanced configuration class fails to call package-visible superclass constructor on WebSphere #​34950
• Fix REPLY_CHANNEL header check in MessageHeaderAccessor #​34949
• MockEnvironment does not accept Object property values #​34947
• PropertySourcesPlaceholderConfigurer no longer uses ConversionService from Environment #​34936
• @Contract for StreamUtils.drain() incorrectly declares null results in an exception #​34933
• Inconsistent behavior injecting null @Bean factory parameter #​34929
• MockHttpServletRequest.addHeader duplicates "Content-Type" header #​34913
• BeanUtils.getParameterNames fails for Kotlin data classes #​34760
• JAXB message converters ignore Content-Type charset #​34745
• Aspect Not Triggered After Restart in Spring Boot 3.4.x (But Works in 3.3.10) #​34735
• Add caching headers to unmodified static resources #​34614

📔 Documentation

• Apply gh-34856 to MockClientHttpRequest in testfixture package #​35031
• Fix ResourceHttpRequestHandler#setHeaders JavaDoc #​35004
• Remove reference to AspectJ Eclipse Javadoc #​35000
• Mention CompletableFuture in Spring MVC "Asynchronous Requests" section of reference manual #​34991
• Fix exception name in ModelAttribute docs #​34980
• Fix syntax in @SqlGroup example #​34972
• Update X-Forwarded-Proto doc to say https / http #​34959
• Update Guidance on Best Practices To Test Code That Uses RestClient and RestTemplate #​34892
• Add a section for WebAsyncTask in mvc-ann-async.adoc #​34885
• Clarify what @RestControllerAdvice vs @ControllerAdvice apply to by default #​34866
• Improve Javadoc for @ExceptionHandler #​34554

🔨 Dependency Upgrades

• Upgrade to HttpComponents HttpClient 5.5 #​34941
• Upgrade to Micrometer 1.14.8 #​35020
• Upgrade to Reactor 2024.0.7 #​35021

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Allan-QLB, @​Aurh1l, @​BowieDu, @​DhruvTheDev1, @​Dongnyoung, @​JimmyAx, @​addoDev, @​dmitrysulman, @​izeye, @​jjank, @​kilink, @​mbazos, @​msnsaeed71, @​ngocnhan-tran1996, @​nosan, @​remeio, @​vpavic, and @​yuzawa-san

v6.2.7

Compare Source

⭐ New Features

• Forward more methods to underlying InputStream in NonClosingInputStream #​34893
• Introduce Spring property for the default property placeholder escape character #​34865
• Close ApplicationContext once AOT processing has completed #​34841
• Fix AbstractJackson2HttpMessageConverter#getObjectMappersForType nullness #​34811
• Add option for case-insensitive match to PatternMatchUtils #​34801
• RestClient @RequestBody parameters lose generic type information when creating HTTP service beans #​34793
• Adds option to set Principal in MockServerWebExchange #​34789

🐞 Bug Fixes

• Beans created by FactoryBean are not considered as autowiring candidates if another thread holds a singletonLock #​34902
• PropertySourcesPlaceholderConfigurer placeholder resolution fails in several scenarios #​34861
• HttpComponentsClientHttpRequestFactory setConnectionRequestTimeout not working with httpclient 5.3.1 #​34851
• Fragment.create() requires mutable map - which is unusable when used with Kotlin #​34848
• Duplicate BeanOverrideHandler discovered in @Nested test case with superclass from different class or in interface implemented multiple times #​34844
• Accidental ClassLoader defineClass enforcement after #​34677 #​34824
• HttpEntity.EMPTY headers should not be possible to mutate via HttpHeaders constructor #​34812
• AbstractFileResolvingResource.exists incorrectly reports result for resources inside of spring-boot executable jar #​34796
• Correctly expand query param with same name from URI variables array #​34783
• R2DBC NamedParameterUtils only expands reused collection parameter once #​34768
• PathMatchingResourcePatternResolver wrongly assumes that target/classes always exists #​34764

📔 Documentation

• Clarify CompositePropertySource behavior for EnumerablePropertySource contract #​34886
• Javadoc and @Nullable annotation for servletContext parameter of ConfigurableWebEnvironment.initPropertySources are contradictory #​34845
• Spring MVC: @EnableAsync needs to be redeclared for each ApplicationContext #​34843
• Provide a working example instead of unclear placeholders #​34828

🔨 Dependency Upgrades

• Upgrade to Micrometer 1.14.7 #​34889
• Upgrade to Reactor 2024.0.6 #​34898

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Artur-, @​blake-bauman, @​iifawzi, @​kilink, @​quaff, @​whlit, and @​zzoe2346

v6.2.6

Compare Source

⭐ New Features

• An option for SimpleAsyncTaskExecutor to throw an exception when limit is reached #​34727
• Provide first-class support for Bean Overrides with @ContextHierarchy #​34723
• Micro performance optimizations #​34717
• Suppress "Unable to rollback against JDBC Connection" in case of timeout (connection closed) #​34714
• Avoid early FactoryBean instantiation for type-based retrieval with includeNonSingletons=false and allowEagerInit=true #​34710
• ReactiveCachingHandler still not using error handler on sync cache. #​34708
• Add an exchangeForRequiredValue variant to RestClient #​34692
• Recursively boxing Kotlin nested value classes in CoroutinesUtils #​34682
• ServletServerHttpRequest does not use charset parameter of application/x-www-form-urlencoded #​34675
• LifecycleGroup concurrent start and start timeout #​34634
• HibernateJpaDialect exception translation misses concrete exceptions wrapped in Hibernate's ExecutionException #​34633

🐞 Bug Fixes

• Inconsistency in SseEmitter.onCompletion() behavior between Spring 6.2.3 and 6.2.5 #​34762
• Deadlock while creating Spring beans with parallel bootstrap threads on IBM Liberty #​34729
• PropertyBatchUpdateException: causes of nested PropertyAccessExceptions not shown in output #​34691
• IllegalAccessError for package-private member of AzureStorageConfiguration on WebSphere #​34684
• Change in Jar usecache behavior with Spring 6.1.x causing java.lang.IllegalStateException: zip file closed #​34678
• Startup performance regression due to CGLIB class load attempts in Spring 6.1.x #​34677
• An infinite wait on a parallel context.getBean() #​34672
• InvalidObservationException: Invalid start: Observation 'http.client.requests' has already been started #​34671
• @Configuration classes can no longer be abstract without @Bean methods #​34663
• Generated-code for LinkedHashMap is missing static keyword #​34659
• Detect late-set primary markers for autowiring shortcut algorithm #​34658
• @MockitoBean with custom @Qualifier is not injected into @Configuration class #​34646
• Qualifier Resolution Issue in Parent-Child Context Hierarchies #​34644
• Enforced container-level acknowledge call for custom acknowledgement mode #​34635
• UriComponentsBuilder does not treat a URN as opaque if it contains a slash #​34588
• Migrating from Spring 6.1.x to 6.2.x leads to exceptions in a Pekko setup #​34303

📔 Documentation

• Update Javadoc for ignoreDependencyInterface() in AbstractAutowireCapableBeanFactory #​34747
• Update Javadoc to stop mentioning 5.3.x as the status quo #​34740
• Fix broken link for Server-Sent Events #​34705
• Fix typo in Bean Validation section of reference manual #​34686
• Remove unnecessary closing curly brackets in Javadoc #​34679
• Add javadoc notes on potential exception suppression in ListableBeanFactory#getBeansOfType #​34629
• Remove remaining references to Forwarded headers in MvcUriComponentsBuilder #​34625

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​acktsap, @​dmitrysulman, @​iggzq, @​izeye, @​ngocnhan-tran1996, @​obourgain, and @​tobias-haenel

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.