BlackTreeLifecycle intelligence
Evidence-linked product lifecycle intelligenceSUPPORT · SECURITY · RETIREMENT
← Lifecycle catalogue
RELEASE NOTESBROADCOMVERIFIED

PUBLISHER UPDATE · SPRING-BOOT-3.5.15

SPRING-BOOT-3.5.15 release notes and known issues

v3.5.15

Scope: Spring Boot. This update record adds version, fix and known-issue context. Its publication date is not a lifecycle boundary.

Summary

🐞 Bug Fixes Artemis auto-configuration uses a predictable default location for the embedded broker's data #50743 MailSender auto-configuration does not enable hostname verification #50742 SSL should not be enabled when a SSL bundle is overridden to an empty string #50624 Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50501 Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50451 RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50429 GraphQL WebSocket support does not configure allowed origins #50391 Buildpack module does not validate long-to-int casts #50382 MappingsEndpoint reports the context's own ID as parentId when a parent exists #50373 Created StackTracePrinter instances have no access to the Environment #50303 NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50301 Spring Boot Loader Does Not Support RSA and EC Signed Jars #50292 ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50273 Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50254 Meter registries are not removed from the global registry when the context is closed #50235 ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50225 Apply HTML escaping to timestamp attribute in Whitelabel error page #50205 NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50118 EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50095 📔 Documentation Fix reference to Gradle documentation for module replacement #50641 Remove the use of Optional from Data Neo4j repository examples #50600 Fix typos in documentation #50593 Document Java 25 requirement for AOT cache #50482 Clarify dependency requirement for Bean Validation support #50290 Document SSL reloading with Let's Encrypt #50222 Polish InvalidConfigurationPropertyValueException constructor javadoc #50212 Document known testcontainers lifecycle issues #50210 Document configuring multiple connectors with Jetty #50206 Fix typo in Spring Security OAuth2 client registration documentation #50193 🔨 Dependency Upgrades Upgrade to Caffeine 3.2.4 #50308 Upgrade to Cassandra Driver 4.19.3 #50670 Upgrade to Glassfish JAXB 4.0.9 #50671 Upgrade to Groovy 4.0.32 #50310 Upgrade to Hibernate 6.6.53.Final #50721 Upgrade to Jackson Bom 2.21.4 #50673 Upgrade to Jakarta Json Bind 3.0.2 #50674 Upgrade to Jakarta XML Bind 4.0.5 #50313 Upgrade to Jaxen 2.0.6 #50722 Upgrade to Jetty 12.0.36 #50676 Upgrade to Jetty Reactive HTTPClient 4.0.14 #50723 Upgrade to jOOQ 3.19.35 #50724 Upgrade to Logback 1.5.34 #50677 Upgrade to Maven Failsafe Plugin 3.5.6 #50678 Upgrade to Maven Surefire Plugin 3.5.6 #50679 Upgrade to Micrometer 1.15.12 #50511 Upgrade to Micrometer Tracing 1.5.12 #50512 Upgrade to Netty 4.1.135.Final #50680 Upgrade to Postgresql 42.7.11 #50317 Upgrade to Pulsar 4.0.11 #50725 Upgrade to R2DBC MySQL 1.4.2 #50319 Upgrade to Reactor Bom 2024.0.18 #50513 Upgrade to SAAJ Impl 3.0.6 #50726 Upgrade to SLF4J 2.0.18 #50533 Upgrade to Spring AMQP 3.2.11 #50514 Upgrade to Spring Authorization Server 1.5.8 #50515 Upgrade to Spring Batch 5.2.6 #50516 Upgrade to Spring Data Bom 2025.0.12 #50517 Upgrade to Spring Framework 6.2.19 #50518 Upgrade to Spring GraphQL 1.4.6 #50739 Upgrade to Spring HATEOAS 2.5.3 #50519 Upgrade to Spring Integration 6.5.9 #50520 Upgrade to Spring Kafka 3.3.16 #50521 Upgrade to Spring LDAP 3.3.8 #50522 Upgrade to Spring Pulsar 1.2.18 #50523 Upgrade to Spring RESTDocs 3.0.6 #50524 Upgrade to Spring Retry 2.0.13 #50525 Upgrade to Spring Security 6.5.11 #50526 Upgrade to Spring Session 3.5.7 #50527 Upgrade to Spring WS 4.1.4 #50528 Upgrade t

Improvements and security content

  • 🐞 Bug Fixes Artemis auto-configuration uses a predictable default location for the embedded broker's data #50743 MailSender auto-configuration does not enable hostname verification #50742 SSL should not be enabled when a SSL bundle is overridden to an empty string #50624 Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50501 Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50451 RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50429 GraphQL WebSocket support does not configure allowed origins #50391 Buildpack module does not validate long-to-int casts #50382 MappingsEndpoint reports the context's own ID as parentId when a parent exists #50373 Created StackTracePrinter instances have no access to the Environment #50303 NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50301 Spring Boot Loader Does Not Support RSA and EC Signed Jars #50292 ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50273 Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50254 Meter registries are not removed from the global registry when the context is closed #50235 ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50225 Apply HTML escaping to timestamp attribute in Whitelabel error page #50205 NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50118 EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50095 📔 Documentation Fix reference to Gradle documentation for module replacement #50641 Remove the use of Optional from Data Neo4j repository examples #50600 Fix typos in documentation #50593 Document Java 25 requirement for AOT cache #50482 Clarify dependency requirement for Bean Validation support #50290 Document SSL reloading with Let's Encrypt #50222 Polish InvalidConfigurationPropertyValueException constructor javadoc #50212 Document known testcontainers lifecycle issues #50210 Document configuring multiple connectors with Jetty #50206 Fix typo in Spring Security OAuth2 client registration documentation #50193 🔨 Dependency Upgrades Upgrade to Caffeine 3.2.4 #50308 Upgrade to Cassandra Driver 4.19.3 #50670 Upgrade to Glassfish JAXB 4.0.9 #50671 Upgrade to Groovy 4.0.32 #50310 Upgrade to Hibernate 6.6.53.Final #50721 Upgrade to Jackson Bom 2.21.4 #50673 Upgrade to Jakarta Json Bind 3.0.2 #50674 Upgrade to Jakarta XML Bind 4.0.5 #50313 Upgrade to Jaxen 2.0.6 #50722 Upgrade to Jetty 12.0.36 #50676 Upgrade to Jetty Reactive HTTPClient 4.0.14 #50723 Upgrade to jOOQ 3.19.35 #50724 Upgrade to Logback 1.5.34 #50677 Upgrade to Maven Failsafe Plugin 3.5.6 #50678 Upgrade to Maven Surefire Plugin 3.5.6 #50679 Upgrade to Micrometer 1.15.12 #50511 Upgrade to Micrometer Tracing 1.5.12 #50512 Upgrade to Netty 4.1.135.Final #50680 Upgrade to Postgresql 42.7.11 #50317 Upgrade to Pulsar 4.0.11 #50725 Upgrade to R2DBC MySQL 1.4.2 #50319 Upgrade to Reactor Bom 2024.0.18 #50513 Upgrade to SAAJ Impl 3.0.6 #50726 Upgrade to SLF4J 2.0.18 #50533 Upgrade to Spring AMQP 3.2.11 #50514 Upgrade to Spring Authorization Server 1.5.8 #50515 Upgrade to Spring Batch 5.2.6 #50516 Upgrade to Spring Data Bom 2025.0.12 #50517 Upgrade to Spring Framework 6.2.19 #50518 Upgrade to Spring GraphQL 1.4.6 #50739 Upgrade to Spring HATEOAS 2.5.3 #50519 Upgrade to Spring Integration 6.5.9 #50520 Upgrade to Spring Kafka 3.3.16 #50521 Upgrade to Spring LDAP 3.3.8 #50522 Upgrade to Spring Pulsar 1.2.18 #50523 Upgrade to Spring RESTDocs 3.0.6 #50524 Upgrade to Spring Retry 2.0.13 #50525 Upgrade to Spring Security 6.5.11 #50526 Upgrade to Spring Session 3.5.7 #50527 Upgrade to Spring WS 4.1.4 #50528 Upgrade t

Known issues

Publisher statement

Not stated. The verified publisher record does not contain a known-issues statement.

Affected products and versions

Products

  • Spring Boot

Affected versions

  • 3.5.15
  • 3.2.4
  • 4.19.3
  • 4.0.9
  • 4.0.32
  • 6.6.53
  • 2.21.4
  • 3.0.2
  • 4.0.5
  • 2.0.6
  • 12.0.36
  • 4.0.14
  • 3.19.35
  • 1.5.34
  • 3.5.6
  • 1.15.12
  • 1.5.12
  • 4.1.135
  • 42.7.11
  • 4.0.11
  • 1.4.2
  • 2024.0.18
  • 3.0.6
  • 2.0.18
  • 3.2.11
  • 1.5.8
  • 5.2.6
  • 2025.0.12
  • 6.2.19
  • 1.4.6
  • 2.5.3
  • 6.5.9
  • 3.3.16
  • 3.3.8
  • 1.2.18
  • 2.0.13
  • 6.5.11
  • 3.5.7
  • 4.1.4

Fixed versions or updates

  • No fixed version is stated in this record.

Recommended action

Review the official publisher document before deployment.

Official publisher evidence