Template for a modern spring web service.

Overview

Spring Service Scaffold

A scaffold for a web service operating with a Spring Framework backend, reactjs as frontend and a continuous testing and building pipeline, built on gradle, junit5 and GitHub actions.

Components

Backend

This repository builds a Java 17 application serving a webapp and web service using the Spring Framework on Reactive Stack. See ApiController class for the implementation of a controller.

Frontend

A reactjs application created with the create-react-app script.

Continuous Building/Testing

Besides JUnit 5, this scaffold employs the following tools for building and testing:

  1. Gradle plugin for the OWASP dependency check, to spot vulnerabilities in the JARs dependencies.
  2. Gradle plugin for Checkstyle to verify code formatting.
  3. Gradle JIB plugin for building a docker image out of the JAR.
  4. Dependabot to update outdated gradle dependencies.
  5. Spring Boot Integration for Sentry.

TODOs

After forking the repository to build your new web services, complete the following TODOs:

Comments
  • Bump com.github.node-gradle.node from 2.2.1 to 3.1.1

    Bump com.github.node-gradle.node from 2.2.1 to 3.1.1

    Bumps com.github.node-gradle.node from 2.2.1 to 3.1.1.

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 2
  • Bump sentry-spring-boot-starter from 5.4.0 to 6.9.2

    Bump sentry-spring-boot-starter from 5.4.0 to 6.9.2

    Bumps sentry-spring-boot-starter from 5.4.0 to 6.9.2.

    Release notes

    Sourced from sentry-spring-boot-starter's releases.

    6.9.2

    Fixes

    • Updated ProfileMeasurementValue types (#2412)
    • Clear window reference only on activity stop in profileMeasurements collector (#2407)
    • No longer disable OpenTelemetry exporters in default Java Agent config (#2408)
    • Fix ClassNotFoundException for io.sentry.spring.SentrySpringServletContainerInitializer in sentry-spring-jakarta (#2411)
    • Fix sentry-samples-spring-jakarta (#2411)

    Features

    • Add SENTRY_AUTO_INIT environment variable to control OpenTelemetry Agent init (#2410)
    • Add OpenTelemetryLinkErrorEventProcessor for linking errors to traces created via OpenTelemetry (#2418)

    Dependencies

    • Bump OpenTelemetry to 1.20.1 and OpenTelemetry Java Agent to 1.20.2 (#2420)

    6.9.1

    Fixes

    • OpenTelemetry modules were missing in 6.9.0 so we released the same code again as 6.9.1 including OpenTelemetry modules

    6.9.0

    Fixes

    • Use canonicalName in Fragment Integration for better de-obfuscation (#2379)
    • Fix Timber and Fragment integrations auto-installation for obfuscated builds (#2379)
    • Don't attach screenshots to events from Hybrid SDKs (#2360)
    • Ensure Hints do not cause memory leaks (#2387)
    • Do not attach empty sentry-trace and baggage headers (#2385)

    Features

    • Add beforeSendTransaction which allows users to filter and change transactions (#2388)
    • Add experimental support for OpenTelemetry (README)(#2344)

    Dependencies

    • Update Spring Boot Jakarta to Spring Boot 3.0.0 (#2389)
    • Bump Spring Boot to 2.7.5 (#2383)

    6.8.0

    Fixes

    • Remove profiler main thread io (#2348)
    • Fix ensure all options are processed before integrations are loaded (#2377)

    Features

    ... (truncated)

    Changelog

    Sourced from sentry-spring-boot-starter's changelog.

    6.9.2

    Fixes

    • Updated ProfileMeasurementValue types (#2412)
    • Clear window reference only on activity stop in profileMeasurements collector (#2407)
    • No longer disable OpenTelemetry exporters in default Java Agent config (#2408)
    • Fix ClassNotFoundException for io.sentry.spring.SentrySpringServletContainerInitializer in sentry-spring-jakarta (#2411)
    • Fix sentry-samples-spring-jakarta (#2411)

    Features

    • Add SENTRY_AUTO_INIT environment variable to control OpenTelemetry Agent init (#2410)
    • Add OpenTelemetryLinkErrorEventProcessor for linking errors to traces created via OpenTelemetry (#2418)

    Dependencies

    • Bump OpenTelemetry to 1.20.1 and OpenTelemetry Java Agent to 1.20.2 (#2420)

    6.9.1

    Fixes

    • OpenTelemetry modules were missing in 6.9.0 so we released the same code again as 6.9.1 including OpenTelemetry modules

    6.9.0

    Fixes

    • Use canonicalName in Fragment Integration for better de-obfuscation (#2379)
    • Fix Timber and Fragment integrations auto-installation for obfuscated builds (#2379)
    • Don't attach screenshots to events from Hybrid SDKs (#2360)
    • Ensure Hints do not cause memory leaks (#2387)
    • Do not attach empty sentry-trace and baggage headers (#2385)

    Features

    • Add beforeSendTransaction which allows users to filter and change transactions (#2388)
    • Add experimental support for OpenTelemetry (README)(#2344)

    Dependencies

    • Update Spring Boot Jakarta to Spring Boot 3.0.0 (#2389)
    • Bump Spring Boot to 2.7.5 (#2383)

    6.8.0

    Fixes

    • Remove profiler main thread io (#2348)

    ... (truncated)

    Commits
    • cd0af87 release: 6.9.2
    • 96b948d Add SENTRY_AUTO_INIT environment variable to control OpenTelemetry Agent init...
    • 61132a2 Improve test coverage for OpenTelemetry (#2401)
    • 20d7d3d Updated ProfileMeasurementValue types (#2412)
    • 1e1ab7f Clear window reference only on activity stop in profileMeasurements collector...
    • f122116 Fix ClassNotFoundException for `io.sentry.spring.SentrySpringServletContain...
    • ecf9680 No longer disable OpenTelemetry exporters in default Java Agent config (#2408)
    • 34a8bfd Update profiling release field (#2371)
    • 31f3e4c Bump saucelabs/saucectl-run-action from 1.3.0 to 2.0.0 (#2338)
    • 7967d22 Fix 6.9.1 changelog (#2400)
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 1
  • Bump actions/setup-java from 2.3.1 to 3.8.0

    Bump actions/setup-java from 2.3.1 to 3.8.0

    Bumps actions/setup-java from 2.3.1 to 3.8.0.

    Release notes

    Sourced from actions/setup-java's releases.

    v3.8.0

    In scope of this release we added logic to pass the token input through on GHES for Microsoft Build of OpenJDK (actions/setup-java#395) and updated minimatch dependency.

    v3.6.0

    In scope of this release we added Maven Toolchains Support and Maven Toolchains Declaration. Moreover, from this release we use os.arch to determine default architecture for runners: actions/setup-java#376. Besides, we made such changes as:

    v3.5.1

    In scope of this release we change logic for Microsoft Build of OpenJDK. Previously it had hard coded versions. In this release versions were moved to the separate json file. When a new version of Java is released, it can be added to this file and be used without releasing new version of the action.

    v3.5.0

    Add support for multiple jdks

    In scope of this release we add support for multiple jdks. Customers can specify multiple versions of java through java-version input.

        steps:
          - uses: actions/setup-java@v3
            with:
              distribution: '<distribution>'
              java-version: |
                8
                11
                15
    

    Besides, we added such changes as:

    v3.4.1

    In scope of this release we updated actions/cache package as the new version contains fixes for caching error handling.

    v3.4.0

    In scope of this release we introduce such changes as:

    v3.3.0

    In scope of this pull request we add support for Amazon Corretto Build of OpenJDK (actions/setup-java#312).

    steps:
      - name: Checkout
    </tr></table> 
    

    ... (truncated)

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies github_actions 
    opened by dependabot[bot] 1
  • Bump org.owasp.dependencycheck from 6.5.0.1 to 7.4.0

    Bump org.owasp.dependencycheck from 6.5.0.1 to 7.4.0

    Bumps org.owasp.dependencycheck from 6.5.0.1 to 7.4.0.

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 1
  • Bump actions/setup-java from 2.3.1 to 3.7.0

    Bump actions/setup-java from 2.3.1 to 3.7.0

    Bumps actions/setup-java from 2.3.1 to 3.7.0.

    Release notes

    Sourced from actions/setup-java's releases.

    v3.7.0

    In scope of this release we added support for Oracle JDK (actions/setup-java#401). Besides, we added logic to Pass the token input through on GHES for Microsoft Build of OpenJDK (actions/setup-java#395) and updated minimatch dependency.

    steps:
      - name: Checkout
        uses: actions/checkout@v3
      - name: Setup-java
        uses: actions/setup-java@v3
        with:
          distribution: oracle
          java-version: 17
    

    Supported distributions

    Currently, the following distributions are supported:

    Keyword Distribution Official site License
    temurin Eclipse Temurin Link Link
    zulu Azul Zulu OpenJDK Link Link
    adopt or adopt-hotspot AdoptOpenJDK Hotspot Link Link
    adopt-openj9 AdoptOpenJDK OpenJ9 Link Link
    liberica Liberica JDK Link Link
    microsoft Microsoft Build of OpenJDK Link Link
    corretto Amazon Corretto Build of OpenJDK Link Link
    oracle Oracle JDK Link Link

    v3.6.0

    In scope of this release we added Maven Toolchains Support and Maven Toolchains Declaration. Moreover, from this release we use os.arch to determine default architecture for runners: actions/setup-java#376. Besides, we made such changes as:

    v3.5.1

    In scope of this release we change logic for Microsoft Build of OpenJDK. Previously it had hard coded versions. In this release versions were moved to the separate json file. When a new version of Java is released, it can be added to this file and be used without releasing new version of the action.

    v3.5.0

    Add support for multiple jdks

    In scope of this release we add support for multiple jdks. Customers can specify multiple versions of java through java-version input.

        steps:
          - uses: actions/setup-java@v3
            with:
              distribution: '<distribution>'
              java-version: |
    </tr></table> 
    

    ... (truncated)

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies github_actions 
    opened by dependabot[bot] 1
  • Bump sentry-spring-boot-starter from 5.4.0 to 6.9.1

    Bump sentry-spring-boot-starter from 5.4.0 to 6.9.1

    Bumps sentry-spring-boot-starter from 5.4.0 to 6.9.1.

    Release notes

    Sourced from sentry-spring-boot-starter's releases.

    6.9.1

    Fixes

    • OpenTelemetry modules were missing in 6.9.0 so we released the same code again as 6.9.1 including OpenTelemetry modules

    6.9.0

    Fixes

    • Use canonicalName in Fragment Integration for better de-obfuscation (#2379)
    • Fix Timber and Fragment integrations auto-installation for obfuscated builds (#2379)
    • Don't attach screenshots to events from Hybrid SDKs (#2360)
    • Ensure Hints do not cause memory leaks (#2387)
    • Do not attach empty sentry-trace and baggage headers (#2385)

    Features

    • Add beforeSendTransaction which allows users to filter and change transactions (#2388)
    • Add experimental support for OpenTelemetry (README)(#2344)

    Dependencies

    • Update Spring Boot Jakarta to Spring Boot 3.0.0 (#2389)
    • Bump Spring Boot to 2.7.5 (#2383)

    6.8.0

    Fixes

    • Remove profiler main thread io (#2348)
    • Fix ensure all options are processed before integrations are loaded (#2377)

    Features

    • Add FrameMetrics to Android profiling data (#2342)

    6.7.1

    Fixes

    • Fix Gpu.vendorId should be a String (#2343)
    • Don't set device name on Android if sendDefaultPii is disabled (#2354)
    • Fix corrupted UUID on Motorola devices (#2363)
    • Fix ANR on dropped uncaught exception events (#2368)

    Features

    • Update Spring Boot Jakarta to Spring Boot 3.0.0-RC2 (#2347)

    6.7.0

    Fixes

    • Use correct set-cookie for the HTTP Client response object (#2326)

    ... (truncated)

    Changelog

    Sourced from sentry-spring-boot-starter's changelog.

    6.9.1

    Fixes

    • OpenTelemetry modules were missing in 6.9.0 so we released the same code again as 6.9.1 including OpenTelemetry modules

    6.9.0

    Fixes

    • Use canonicalName in Fragment Integration for better de-obfuscation (#2379)
    • Fix Timber and Fragment integrations auto-installation for obfuscated builds (#2379)
    • Don't attach screenshots to events from Hybrid SDKs (#2360)
    • Ensure Hints do not cause memory leaks (#2387)
    • Do not attach empty sentry-trace and baggage headers (#2385)

    Features

    • Add beforeSendTransaction which allows users to filter and change transactions (#2388)
    • Add experimental support for OpenTelemetry (README)(#2344)

    Dependencies

    • Update Spring Boot Jakarta to Spring Boot 3.0.0 (#2389)
    • Bump Spring Boot to 2.7.5 (#2383)

    6.8.0

    Fixes

    • Remove profiler main thread io (#2348)
    • Fix ensure all options are processed before integrations are loaded (#2377)

    Features

    • Add FrameMetrics to Android profiling data (#2342)

    6.7.1

    Fixes

    • Fix Gpu.vendorId should be a String (#2343)
    • Don't set device name on Android if sendDefaultPii is disabled (#2354)
    • Fix corrupted UUID on Motorola devices (#2363)
    • Fix ANR on dropped uncaught exception events (#2368)

    Features

    • Update Spring Boot Jakarta to Spring Boot 3.0.0-RC2 (#2347)

    ... (truncated)

    Commits
    • 2285d6f release: 6.9.1
    • 79634bd Merge branch 'release/6.9.0'
    • 30ac01f Revert "Revert "Re-add OTEL modules to craft""
    • 874a2fa Revert "Re-add OTEL modules to craft"
    • 29f82a5 Re-add OTEL modules to craft
    • 05d356b Disable craft for OTEL modules for now
    • 2a40b03 Include otel module distributions in build archive
    • 4de22ae release: 6.9.0
    • 81a1a6c Add support for Opentelemetry (#2344)
    • 451f2fe Ensure Hints do not cause memory leaks (#2387)
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 1
  • Bump sentry-spring-boot-starter from 5.4.0 to 6.9.0

    Bump sentry-spring-boot-starter from 5.4.0 to 6.9.0

    Bumps sentry-spring-boot-starter from 5.4.0 to 6.9.0.

    Release notes

    Sourced from sentry-spring-boot-starter's releases.

    6.9.0

    Fixes

    • Use canonicalName in Fragment Integration for better de-obfuscation (#2379)
    • Fix Timber and Fragment integrations auto-installation for obfuscated builds (#2379)
    • Don't attach screenshots to events from Hybrid SDKs (#2360)
    • Ensure Hints do not cause memory leaks (#2387)
    • Do not attach empty sentry-trace and baggage headers (#2385)

    Features

    • Add beforeSendTransaction which allows users to filter and change transactions (#2388)
    • Add experimental support for OpenTelemetry (README)(#2344)

    Dependencies

    • Update Spring Boot Jakarta to Spring Boot 3.0.0 (#2389)
    • Bump Spring Boot to 2.7.5 (#2383)

    6.8.0

    Fixes

    • Remove profiler main thread io (#2348)
    • Fix ensure all options are processed before integrations are loaded (#2377)

    Features

    • Add FrameMetrics to Android profiling data (#2342)

    6.7.1

    Fixes

    • Fix Gpu.vendorId should be a String (#2343)
    • Don't set device name on Android if sendDefaultPii is disabled (#2354)
    • Fix corrupted UUID on Motorola devices (#2363)
    • Fix ANR on dropped uncaught exception events (#2368)

    Features

    • Update Spring Boot Jakarta to Spring Boot 3.0.0-RC2 (#2347)

    6.7.0

    Fixes

    • Use correct set-cookie for the HTTP Client response object (#2326)
    • Fix NoSuchElementException in CircularFifoQueue when cloning a Scope (#2328)

    Features

    • Customizable fragment lifecycle breadcrumbs (#2299)

    ... (truncated)

    Changelog

    Sourced from sentry-spring-boot-starter's changelog.

    6.9.0

    Fixes

    • Use canonicalName in Fragment Integration for better de-obfuscation (#2379)
    • Fix Timber and Fragment integrations auto-installation for obfuscated builds (#2379)
    • Don't attach screenshots to events from Hybrid SDKs (#2360)
    • Ensure Hints do not cause memory leaks (#2387)
    • Do not attach empty sentry-trace and baggage headers (#2385)

    Features

    • Add beforeSendTransaction which allows users to filter and change transactions (#2388)
    • Add experimental support for OpenTelemetry (README)(#2344)

    Dependencies

    • Update Spring Boot Jakarta to Spring Boot 3.0.0 (#2389)
    • Bump Spring Boot to 2.7.5 (#2383)

    6.8.0

    Fixes

    • Remove profiler main thread io (#2348)
    • Fix ensure all options are processed before integrations are loaded (#2377)

    Features

    • Add FrameMetrics to Android profiling data (#2342)

    6.7.1

    Fixes

    • Fix Gpu.vendorId should be a String (#2343)
    • Don't set device name on Android if sendDefaultPii is disabled (#2354)
    • Fix corrupted UUID on Motorola devices (#2363)
    • Fix ANR on dropped uncaught exception events (#2368)

    Features

    • Update Spring Boot Jakarta to Spring Boot 3.0.0-RC2 (#2347)

    6.7.0

    Fixes

    • Use correct set-cookie for the HTTP Client response object (#2326)
    • Fix NoSuchElementException in CircularFifoQueue when cloning a Scope (#2328)

    ... (truncated)

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 1
  • Bump org.springframework.boot from 2.5.6 to 3.0.0

    Bump org.springframework.boot from 2.5.6 to 3.0.0

    Bumps org.springframework.boot from 2.5.6 to 3.0.0.

    Release notes

    Sourced from org.springframework.boot's releases.

    v3.0.0

    :star: New Features

    • Provide a configuration property for the observation patterns of Spring Integration components #33099

    :lady_beetle: Bug Fixes

    • io.micrometer.tracing.Tracer on the classpath breaks AOT processing for tests #33298
    • Tracer library HTTP instrumentation is auto-configured unnecessarily #33287
    • Auto-configuration ignores user-provided ObservationConventions #33285
    • ScheduledBeanLazyInitializationExcludeFilter is auto-configured even when annotation-based scheduled has not been enabled #33284
    • SpringBootContextLoader prints banner twice when using a @ContextHierarchy #33263
    • Properties migrator causes an application to fail to start if it tries to map a property whose metadata data entry contains an invalid configuration property name #33250
    • Wavefront MeterRegistryCustomizer is not applying application tags from application.properties #33244
    • Actuator responses no longer format timestamps as ISO-8601 #33236
    • Configuration property is not bound in a native image when property has get, set, and is methods #33232
    • Configuration property binding does not deal with bridge methods #33212
    • Contribute missing resource hints for GraphQL schema files and GraphiQL HTML page #33208
    • Hints for ClientHttpRequestFactory should only be generated for matching methods #33203
    • Native profile should configure execution in pluginManagement #33184
    • Configuring management.server.port via a config tree results in a ConverterNotFoundException when the management context is refreshed #33169
    • JBoss logging does not route directly to SLF4J when using Logback #33155
    • Test with UseMainMethod.Always do not work with Kotlin main functions #33114
    • Maven process-aot does not specify source and target release when compiling generated sources #33112
    • Some Actuator beans are ineligible for post-processing #33110
    • AOT-generated source fails to compile when Actuator is enabled on a WebFlux project #33106
    • @ContextHierarchy should never be used with main method #33078
    • Maven process-aot fails when compiler plugin has been configured with --enable-preview #33012
    • Wavefront application tags differ from those used in a Spring Boot 2.x application #32844
    • Maven goal spring-boot:build-image runs package phase twice #26455

    :notebook_with_decorative_cover: Documentation

    • Document observation for R2DBC #33335
    • Align Tomcat multiple connectors example with recommendation to configure SSL declaratively #33333
    • Actuator document is misleading about k8s startup probe #33327
    • Update documented for @Timed to reflect narrower support #33282
    • Update reference documentation to replace mentions of tags providers and contributors with their Observation-based equivalents #33281
    • Link to Micrometer's @Timed documentation #33266
    • Clarify use of the spring.cache.type property with Hazelcast #33258
    • Example git.commit.time in the Actuator API documentation is thousands of years in the future #33256
    • Update Spring Security filter dispatcher types docs to reflect change in default value #33252
    • Documentation for nested configuration properties in a native image uses @NestedConfigurationProperty too widely #33239
    • Document that the jar task should not be disabled when building a native image #33238
    • Document nesting configuration properties using records or Kotlin data classes and how and when to use @NestedConfigurationProperty #33235
    • Links to Features describes sections that have moved elsewhere #33214
    • Fix broken links in docs #33209
    • Document the need for compilation with -parameters when targeting a native image #33182
    • Remove outdated native image documentation #33109
    • Mention @RegisterReflectionForBinding in the docs #32903

    ... (truncated)

    Commits
    • c9c359f Release v3.0.0
    • fb2cc73 Work around Thymeleaf's dependency on spring-security-bom:6.0.0-RC2
    • 355b428 Merge branch '2.7.x'
    • 7ea5881 Update LATEST_GA to false to prepare for 3.0.0's release
    • 1de09f4 Merge branch '2.6.x' into 2.7.x
    • e922650 Upgrade to Spring Framework 6.0.2
    • 4b8a28a Next development version (v2.7.7-SNAPSHOT)
    • 14ba9b1 Start building against Spring Framework 6.0.2 snapshots
    • d4a9100 Next development version (v2.6.15-SNAPSHOT)
    • 28cb225 Merge branch '2.7.x'
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 1
  • Bump org.owasp.dependencycheck from 6.5.0.1 to 7.3.2

    Bump org.owasp.dependencycheck from 6.5.0.1 to 7.3.2

    Bumps org.owasp.dependencycheck from 6.5.0.1 to 7.3.2.

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 1
  • Bump sentry-spring-boot-starter from 5.4.0 to 6.8.0

    Bump sentry-spring-boot-starter from 5.4.0 to 6.8.0

    Bumps sentry-spring-boot-starter from 5.4.0 to 6.8.0.

    Release notes

    Sourced from sentry-spring-boot-starter's releases.

    6.8.0

    Fixes

    • Remove profiler main thread io (#2348)
    • Fix ensure all options are processed before integrations are loaded (#2377)

    Features

    • Add FrameMetrics to Android profiling data (#2342)

    6.7.1

    Fixes

    • Fix Gpu.vendorId should be a String (#2343)
    • Don't set device name on Android if sendDefaultPii is disabled (#2354)
    • Fix corrupted UUID on Motorola devices (#2363)
    • Fix ANR on dropped uncaught exception events (#2368)

    Features

    • Update Spring Boot Jakarta to Spring Boot 3.0.0-RC2 (#2347)

    6.7.0

    Fixes

    • Use correct set-cookie for the HTTP Client response object (#2326)
    • Fix NoSuchElementException in CircularFifoQueue when cloning a Scope (#2328)

    Features

    • Customizable fragment lifecycle breadcrumbs (#2299)
    • Provide hook for Jetpack Compose navigation instrumentation (#2320)
    • Populate event.modules with dependencies metadata (#2324)
    • Support Spring 6 and Spring Boot 3 (#2289)

    Dependencies

    6.7.0-alpha.1

    Fixes

    • Ensure potential callback exceptions are caught #2123 (#2291)
    • Remove verbose FrameMetricsAggregator failure logging (#2293)
    • Ignore broken regex for tracePropagationTarget (#2288)

    Features

    ... (truncated)

    Changelog

    Sourced from sentry-spring-boot-starter's changelog.

    6.8.0

    Fixes

    • Remove profiler main thread io (#2348)
    • Fix ensure all options are processed before integrations are loaded (#2377)

    Features

    • Add FrameMetrics to Android profiling data (#2342)

    6.7.1

    Fixes

    • Fix Gpu.vendorId should be a String (#2343)
    • Don't set device name on Android if sendDefaultPii is disabled (#2354)
    • Fix corrupted UUID on Motorola devices (#2363)
    • Fix ANR on dropped uncaught exception events (#2368)

    Features

    • Don't set device name on Android if sendDefaultPii is disabled (#2354)
    • Fix corrupted UUID on Motorola devices (#2363)
    • Update Spring Boot Jakarta to Spring Boot 3.0.0-RC2 (#2347)

    6.7.0

    Fixes

    • Use correct set-cookie for the HTTP Client response object (#2326)
    • Fix NoSuchElementException in CircularFifoQueue when cloning a Scope (#2328)

    Features

    • Customizable fragment lifecycle breadcrumbs (#2299)
    • Provide hook for Jetpack Compose navigation instrumentation (#2320)
    • Populate event.modules with dependencies metadata (#2324)
    • Support Spring 6 and Spring Boot 3 (#2289)

    Dependencies

    6.6.0

    Fixes

    ... (truncated)

    Commits
    • 81150ea release: 6.8.0
    • 2d676d1 Fix ensure all options are processed before integrations are loaded (#2377)
    • ed00ecb added FrameMetrics to Android profiling data (#2342)
    • 84f0ef1 Merge branch 'release/6.7.1'
    • 9e682ce release: 6.7.1
    • 15bb186 Fix ANR on dropped uncaught exception events (#2368)
    • 507f924 Fix corrupted UUID on Motorola devices (#2363)
    • be45a71 Merge pull request #2359 from getsentry/release/6.7.0
    • f5173a1 Merge branch 'main' into release/6.7.0
    • 642001e fix: don't sent device name if DefaultPII is disabled (#2354)
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 1
  • Bump sentry-spring-boot-starter from 5.4.0 to 6.7.1

    Bump sentry-spring-boot-starter from 5.4.0 to 6.7.1

    Bumps sentry-spring-boot-starter from 5.4.0 to 6.7.1.

    Release notes

    Sourced from sentry-spring-boot-starter's releases.

    6.7.1

    Fixes

    • Fix Gpu.vendorId should be a String (#2343)
    • Don't set device name on Android if sendDefaultPii is disabled (#2354)
    • Fix corrupted UUID on Motorola devices (#2363)
    • Fix ANR on dropped uncaught exception events (#2368)

    Features

    • Update Spring Boot Jakarta to Spring Boot 3.0.0-RC2 (#2347)

    6.7.0

    Fixes

    • Use correct set-cookie for the HTTP Client response object (#2326)
    • Fix NoSuchElementException in CircularFifoQueue when cloning a Scope (#2328)

    Features

    • Customizable fragment lifecycle breadcrumbs (#2299)
    • Provide hook for Jetpack Compose navigation instrumentation (#2320)
    • Populate event.modules with dependencies metadata (#2324)
    • Support Spring 6 and Spring Boot 3 (#2289)

    Dependencies

    6.7.0-alpha.1

    Fixes

    • Ensure potential callback exceptions are caught #2123 (#2291)
    • Remove verbose FrameMetricsAggregator failure logging (#2293)
    • Ignore broken regex for tracePropagationTarget (#2288)

    Features

    • Add support for using Encoder with logback.SentryAppender (#2246)
    • Add captureProfile method to hub and client (#2290)
    • Support Spring 6 and Spring Boot 3 (#2289)

    6.6.0

    Fixes

    • Ensure potential callback exceptions are caught #2123 (#2291)
    • Remove verbose FrameMetricsAggregator failure logging (#2293)
    • Ignore broken regex for tracePropagationTarget (#2288)

    ... (truncated)

    Changelog

    Sourced from sentry-spring-boot-starter's changelog.

    6.7.1

    Fixes

    • Fix Gpu.vendorId should be a String (#2343)
    • Don't set device name on Android if sendDefaultPii is disabled (#2354)
    • Fix corrupted UUID on Motorola devices (#2363)
    • Fix ANR on dropped uncaught exception events (#2368)

    Features

    • Update Spring Boot Jakarta to Spring Boot 3.0.0-RC2 (#2347)

    6.7.0

    Fixes

    • Use correct set-cookie for the HTTP Client response object (#2326)
    • Fix NoSuchElementException in CircularFifoQueue when cloning a Scope (#2328)

    Features

    • Customizable fragment lifecycle breadcrumbs (#2299)
    • Provide hook for Jetpack Compose navigation instrumentation (#2320)
    • Populate event.modules with dependencies metadata (#2324)
    • Support Spring 6 and Spring Boot 3 (#2289)

    Dependencies

    6.6.0

    Fixes

    • Ensure potential callback exceptions are caught #2123 (#2291)
    • Remove verbose FrameMetricsAggregator failure logging (#2293)
    • Ignore broken regex for tracePropagationTarget (#2288)
    • No longer serialize static fields; use toString as fallback (#2309)
    • Fix SentryFileWriter/SentryFileOutputStream append overwrites file contents (#2304)
    • Respect incoming parent sampled decision when continuing a trace (#2311)

    Features

    • Profile envelopes are sent directly from profiler (#2298)
    • Add support for using Encoder with logback.SentryAppender (#2246)
    • Report Startup Crashes (#2277)
    • HTTP Client errors for OkHttp (#2287)

    ... (truncated)

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 1
  • Bump com.github.node-gradle.node from 2.2.1 to 3.5.1

    Bump com.github.node-gradle.node from 2.2.1 to 3.5.1

    Bumps com.github.node-gradle.node from 2.2.1 to 3.5.1.

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 0
  • Bump org.springframework.boot from 2.5.6 to 3.0.1

    Bump org.springframework.boot from 2.5.6 to 3.0.1

    Bumps org.springframework.boot from 2.5.6 to 3.0.1.

    Release notes

    Sourced from org.springframework.boot's releases.

    v3.0.1

    :lady_beetle: Bug Fixes

    • Fix typo in LocalDevToolsAutoConfiguration logging #33615
    • No warning is given when <springProfile> is used in a Logback <root> block #33610
    • Auto-configure PropagationWebGraphQlInterceptor for tracing propagation #33542
    • WebClient instrumentation fails with IllegalArgumentException when adapting to WebClientExchangeTagsProvider #33483
    • Reactive observation auto-configuration does not declare order for WebFilter #33444
    • Web server fails to start due to "Resource location must not be null" when attempting to use a PKCS 11 KeyStore #33433
    • Actuator health endpoint for neo4j throws NoSuchElementException and always returns Status.DOWN #33428
    • Anchors in YAML configuration files throw UnsupportedOperationException #33404
    • ZipkinRestTemplateSender is not customizable #33399
    • AOT doesn't work with Logstash Logback Encoder #33387
    • Maven process-aot goal fails when release version is set in Maven compiler plugin #33382
    • DependsOnDatabaseInitializationPostProcessor re-declares bean dependencies at native image runtime #33374
    • @SpringBootTest now throws a NullPointerException rather than a helpful IllegalStateException when @SpringBootConfiguration is not found #33371
    • bootBuildImage always trys to create a native image due to bootJar always adding a META-INF/native-image/argfile to the jar #33363

    :notebook_with_decorative_cover: Documentation

    • Improve gradle plugin tags documentation #33617
    • Improve maven plugin tags documentation #33616
    • Fix typo in tomcat accesslog checkExists doc #33512
    • Documented Java compiler level is wrong #33505
    • Fix typo in documentation #33453
    • Update instead of replace environment in bootBuildImage documentation #33424
    • Update the reference docs to document the need to declare the native-maven-plugin when using buildpacks to create a native image #33422
    • Document that the shutdown endpoint is not intended for use when deploying a war to a servlet container #33410
    • Reinstate GraphQL testing documentaion #33407
    • Description of NEVER in Sanitize Sensitive Values isn't formatted correctly #33398

    :hammer: Dependency Upgrades

    • Upgrade to AspectJ 1.9.19 #33586
    • Upgrade to Byte Buddy 1.12.20 #33587
    • Upgrade to Couchbase Client 3.4.1 #33588
    • Upgrade to Dropwizard Metrics 4.2.14 #33589
    • Upgrade to Elasticsearch Client 8.5.3 #33590
    • Upgrade to Hibernate 6.1.6.Final #33591
    • Upgrade to HttpClient 4.5.14 #33592
    • Upgrade to HttpCore 4.4.16 #33593
    • Upgrade to Infinispan 14.0.4.Final #33594
    • Upgrade to Jaybird 4.0.8.java11 #33595
    • Upgrade to Jetty 11.0.13 #33596
    • Upgrade to jOOQ 3.17.6 #33597
    • Upgrade to Kotlin 1.7.22 #33598
    • Upgrade to Lettuce 6.2.2.RELEASE #33599
    • Upgrade to MongoDB 4.8.1 #33600
    • Upgrade to MSSQL JDBC 11.2.2.jre17 #33601
    • Upgrade to Native Build Tools Plugin 0.9.19 #33602

    ... (truncated)

    Commits
    • 837947c Release v3.0.1
    • 5929d95 Merge branch '2.7.x'
    • b10b788 Next development version (v2.7.8-SNAPSHOT)
    • f588793 Update copyright year of changed files
    • 0254619 Merge branch '2.7.x'
    • e4772cf Update copyright year of changed files
    • 2e7ca6f Warning if <springProfile> is used in phase 2 model elements
    • 2ed512d Use model.deepMarkAsSkipped in SpringProfileModelHandler
    • 532fed3 Increase couchbase connection timeout for tests
    • 9562a2c Merge branch '2.7.x'
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 0
  • Bump sentry-spring-boot-starter from 5.4.0 to 6.10.0

    Bump sentry-spring-boot-starter from 5.4.0 to 6.10.0

    Bumps sentry-spring-boot-starter from 5.4.0 to 6.10.0.

    Release notes

    Sourced from sentry-spring-boot-starter's releases.

    6.10.0

    Features

    • Add time-to-initial-display span to Activity transactions (#2369)
    • Start a session after init if AutoSessionTracking is enabled (#2356)
    • Provide automatic breadcrumbs and transactions for click/scroll events for Compose (#2390)
    • Add blocked_main_thread and call_stack to File I/O spans to detect performance issues (#2382)

    Dependencies

    6.9.2

    Fixes

    • Updated ProfileMeasurementValue types (#2412)
    • Clear window reference only on activity stop in profileMeasurements collector (#2407)
    • No longer disable OpenTelemetry exporters in default Java Agent config (#2408)
    • Fix ClassNotFoundException for io.sentry.spring.SentrySpringServletContainerInitializer in sentry-spring-jakarta (#2411)
    • Fix sentry-samples-spring-jakarta (#2411)

    Features

    • Add SENTRY_AUTO_INIT environment variable to control OpenTelemetry Agent init (#2410)
    • Add OpenTelemetryLinkErrorEventProcessor for linking errors to traces created via OpenTelemetry (#2418)

    Dependencies

    • Bump OpenTelemetry to 1.20.1 and OpenTelemetry Java Agent to 1.20.2 (#2420)

    6.9.1

    Fixes

    • OpenTelemetry modules were missing in 6.9.0 so we released the same code again as 6.9.1 including OpenTelemetry modules

    6.9.0

    Fixes

    • Use canonicalName in Fragment Integration for better de-obfuscation (#2379)
    • Fix Timber and Fragment integrations auto-installation for obfuscated builds (#2379)
    • Don't attach screenshots to events from Hybrid SDKs (#2360)
    • Ensure Hints do not cause memory leaks (#2387)
    • Do not attach empty sentry-trace and baggage headers (#2385)

    Features

    • Add beforeSendTransaction which allows users to filter and change transactions (#2388)
    • Add experimental support for OpenTelemetry (README)(#2344)

    ... (truncated)

    Changelog

    Sourced from sentry-spring-boot-starter's changelog.

    6.10.0

    Features

    • Add time-to-initial-display span to Activity transactions (#2369)
    • Start a session after init if AutoSessionTracking is enabled (#2356)
    • Provide automatic breadcrumbs and transactions for click/scroll events for Compose (#2390)
    • Add blocked_main_thread and call_stack to File I/O spans to detect performance issues (#2382)

    Dependencies

    6.9.2

    Fixes

    • Updated ProfileMeasurementValue types (#2412)
    • Clear window reference only on activity stop in profileMeasurements collector (#2407)
    • No longer disable OpenTelemetry exporters in default Java Agent config (#2408)
    • Fix ClassNotFoundException for io.sentry.spring.SentrySpringServletContainerInitializer in sentry-spring-jakarta (#2411)
    • Fix sentry-samples-spring-jakarta (#2411)

    Features

    • Add SENTRY_AUTO_INIT environment variable to control OpenTelemetry Agent init (#2410)
    • Add OpenTelemetryLinkErrorEventProcessor for linking errors to traces created via OpenTelemetry (#2418)

    Dependencies

    • Bump OpenTelemetry to 1.20.1 and OpenTelemetry Java Agent to 1.20.2 (#2420)

    6.9.1

    Fixes

    • OpenTelemetry modules were missing in 6.9.0 so we released the same code again as 6.9.1 including OpenTelemetry modules

    6.9.0

    Fixes

    • Use canonicalName in Fragment Integration for better de-obfuscation (#2379)
    • Fix Timber and Fragment integrations auto-installation for obfuscated builds (#2379)
    • Don't attach screenshots to events from Hybrid SDKs (#2360)
    • Ensure Hints do not cause memory leaks (#2387)
    • Do not attach empty sentry-trace and baggage headers (#2385)

    ... (truncated)

    Commits
    • f0a7246 release: 6.10.0
    • c5366ae Fix craft not handling multidigit version numbers (#2433)
    • 063f12a Revert sourcesets config to produce same modules as before (#2431)
    • 606823f Fix compose-helper module is exposed and gets published (#2430)
    • 81a3c32 File I/O on main thread (#2382)
    • 87598a5 Provide automatic breadcrumbs and transactions for click/scroll events for Co...
    • b5b855d Add ttid span to ActivityLifecycleIntegration (#2369)
    • d00c464 Start a session after init if AutoSessionTracking is enabled (#2356)
    • 703d523 tests now search the envelope among all the ones sent to the mock relay serve...
    • b3a8fb3 chore(deps): update Native SDK to v0.5.3 (#2423)
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 0
  • Bump actions/setup-java from 2.3.1 to 3.9.0

    Bump actions/setup-java from 2.3.1 to 3.9.0

    Bumps actions/setup-java from 2.3.1 to 3.9.0.

    Release notes

    Sourced from actions/setup-java's releases.

    v3.9.0

    In scope of this release we add support for .java-version file (actions/setup-java#426). For more information about its usage please refer to the documentation.

        steps:
          - uses: actions/checkout@v3
          - name: Setup java
            uses: actions/setup-java@v3
            with:
              distribution: '<distribution>'
              java-version-file: .java-version
          - run: java HelloWorldApp.java
    

    v3.8.0

    In scope of this release we added logic to pass the token input through on GHES for Microsoft Build of OpenJDK (actions/setup-java#395) and updated minimatch dependency.

    v3.6.0

    In scope of this release we added Maven Toolchains Support and Maven Toolchains Declaration. Moreover, from this release we use os.arch to determine default architecture for runners: actions/setup-java#376. Besides, we made such changes as:

    v3.5.1

    In scope of this release we change logic for Microsoft Build of OpenJDK. Previously it had hard coded versions. In this release versions were moved to the separate json file. When a new version of Java is released, it can be added to this file and be used without releasing new version of the action.

    v3.5.0

    Add support for multiple jdks

    In scope of this release we add support for multiple jdks. Customers can specify multiple versions of java through java-version input.

        steps:
          - uses: actions/setup-java@v3
            with:
              distribution: '<distribution>'
              java-version: |
                8
                11
                15
    

    Besides, we added such changes as:

    v3.4.1

    ... (truncated)

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies github_actions 
    opened by dependabot[bot] 0
  • Bump org.owasp.dependencycheck from 6.5.0.1 to 7.4.1

    Bump org.owasp.dependencycheck from 6.5.0.1 to 7.4.1

    Bumps org.owasp.dependencycheck from 6.5.0.1 to 7.4.1.

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 0
  • Bump com.google.cloud.tools.jib from 3.1.4 to 3.3.1

    Bump com.google.cloud.tools.jib from 3.1.4 to 3.3.1

    Bumps com.google.cloud.tools.jib from 3.1.4 to 3.3.1.

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 0
Owner
null
Spring-graphql-getting-started - Spring for GraphQL provides support for Spring applications built on GraphQL Java

Getting Started with GraphQL and Spring Boot Spring for GraphQL provides support

Shinya 0 Feb 2, 2022
Accessibility-Service - Filter url from browser by using accessibility service

Accessibility Service example Filter url from browser by using accessibility ser

AmirMohammad Yazdanmanesh 8 Nov 29, 2022
Demo Spting REST Service on Kotlin. Works with PostgreSQL via Spring Data. Data initialization provided by liquibase

Spring Boot REST API with Kotlin Spring Boot REST API service. Spring Data with PostgreSQL. Data initialization with Liquibase. Swagger UI Reference D

null 0 Jun 10, 2022
Microservice-arch - Basic micro service architecture using spring boot

Readme 4 applications are created: discovery-service: every application register

Melvin Zottola 1 Jan 8, 2022
Cargo service: REST API, Spring Boot, Kotlin, JDBC, PostgreSQL

cargo-jdbc Cargo service, training project with Spring Boot, JDBC and Kotlin. To

Valeriy Emelyanov 1 Dec 7, 2022
Spring MSA api gateway & service discovery with consul & Jaeger & Cassandra

Spring MSA api gateway & service discovery with consul & Jaeger & Cassandra

INSUNG CHOI 2 Nov 22, 2022
Starter project to create a simple RESTful web service in Kotlin

Modified: Adding Koin for DI Using JWT for authentication and authorization Dropping proprietary FlyAway tool Single Page Application support Starter

null 1 Oct 23, 2021
My personal template for a Spring Boot REST reactive webapp

My personal spring boot kotlin reactive template Features Spring Security implementation with JWT access and refresh token MongoDB database Project Co

Dušan 2 Dec 1, 2021
This repository contains RabbitMQ Protobuf starters with its usage samples for spring-rabbit and spring-cloud-starter-stream-rabbit modules

This repository contains RabbitMQ Protobuf starters with its usage samples for spring-rabbit and spring-cloud-starter-stream-rabbit modules

Maksim Kostromin 2 Nov 29, 2021
Spring-with-maven - Spring Boot App with Postgresql and maven

Spring Boot Api Aplikasi ini dibuat menggunakan bahasa kotlin dan untuk database

Aldi Aulia Rosyad 1 Jan 12, 2022
Template to accelerate the creation of new apps using Spring Boot 3, MongoDB & GraphQL.

Template to accelerate the creation of new apps using Spring Boot 3, MongoDB & GraphQL.

André Ramon 1 Feb 13, 2022
Reactive setup with Spring WebFlux , Kotlin, Postgres and Spring Data R2DBC

Reactive Spring with Kotlin and Pg Spring WebFlux with Netty instead of Spring Web with Tomcat Mono and Flux in all layers (controller, service, repo)

Bimal Raj Gyawali 7 Dec 9, 2022
Spring-kotlin - Learning API Rest with Kotlin, Spring and PostgreSQL

Kotlin, Spring, PostgreSQL and Liquibase Database Migrations Learning Kotlin for

Andre L S Ferreira 2 Feb 14, 2022
Android login spring - Android login against spring backend

Android Jetpack Compose login implementation with JWT tokens against our own bac

null 1 Feb 13, 2022
A sample skeleton backend app built using Spring Boot kotlin, Expedia Kotlin Graphql, Reactive Web that can be deployed to Google App Engine Flexible environmennt

spring-kotlin-gql-gae This is a sample skeleton of a backend app that was built using: Spring Boot(Kotlin) Reactive Web Sprinng Data R2DBC with MYSQL

Dario Mungoi 7 Sep 17, 2022
Maintenance mode library for spring boot web and security projects.

spring-boot-starter-maintenance spring-boot-starter-maintenance is a maintenance mode library for spring boot web and security projects. Download Grad

Viascom 3 Nov 3, 2022
Spring Boot API for Modern Warfare 2 Dedicated Servers

Spring Boot API for Modern Warfare 2 Dedicated Servers

Kai o((>ω< ))o 1 Apr 24, 2022
Web Container: A simple web container library for Android to help fellow developer to open WebView easily

WebContainer Description Web Container is a simple web container library for And

Achmad Ichsan Thaib 8 Nov 22, 2022
Jetpack Compose for Desktop and Web, a modern UI framework for Kotlin that makes building performant and beautiful user interfaces easy and enjoyable.

Jetpack Compose for Desktop and Web, a modern UI framework for Kotlin that makes building performant and beautiful user interfaces easy and enjoyable.

JetBrains 10k Jan 7, 2023