Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025

Bumps org.springframework.data:spring-data-commons from 3.3.5 to 4.0.0.

Release notes

Sourced from org.springframework.data:spring-data-commons's releases.

4.0.0

📗 Links

⭐ New Features

  • Switch to MetadataReaderFactory in DefaultProjectionInformation #3402
  • Enable Streamable for Pageable use #3397
  • Move Method string rendering from QueryCreationException to ReflectionUtils #3396
  • Move PropertyPath and TypeInformation types to core package #3393
  • Allow overriding DateTimeProvider via Bean Definition #3385
  • Use precompiled regex for PropertyMatch.namePattern #3376
  • Improve PropertyMatch performance using precompiled regex patterns #3375
  • Consistent factory methods for QueryCreationException #3373
  • Refine TypeCollector usage and predicates #3363
  • Refine filters for TypeCollector and ManagedTypesBeanRegistrationAotProcessor contributions #3362
  • Add JavaPoet enhancements #3357
  • Add ExpressionMarker abstraction for obtaining enclosing method in AOT generated code #3338
  • Expose MethodParameters in AotQueryMethodGenerationContext #3334
  • Enable AOT repositories by default #3323
  • Include generated PersistentPropertyAccessorFactory and EntityInstantiator classes during AOT processing #3318
  • Defer MappingContext access inPersistentEntities #3310
  • Log a warning if param not annotated with @ProjectedPayload #3303
  • Log warning when param is not annotated with @ProjectedPayload (4.0.x) #3300
  • Upgrade to Jackson 3 #3292
  • Add support for ConfigurationSource and Dynamic Projections #3289
  • Refine customization of EntityInformation #3288
  • Introduce SearchResult and SearchResults #3285
  • Refine Repository Composition retrieval during AOT processing #3282
  • Capture repository configuration from registered beans #3279
  • Add getRequiredName and hasName API to org.springframework.data.mapping.Parameter #3272
  • Add LocalVariableNameFactory #3271
  • Introduce AOT context sensitive VariableNameFactory #3270
  • Refine AOT Repositories infrastructure #3267
  • Add support for AOT Repositories #3265
  • Remove ListenableFuture support #3232
  • Mark API with @Contract and @CheckReturnValue annotations #3210
  • Remove @Deprecated API #3208
  • Introduce @Contract and @CheckReturnValue annotations #3195
  • Allow overriding DateTimeProvider via Bean Definition #3177
  • Migrate to JSpecify annotations for nullability constraints #3170
  • Use Spring's Nullness utility to determine JSpecify nullness #3100
  • Introduce org.springframework.data.mapping.Parameter.getRequiredName() and Parameter.hasName() #3088
  • Include generated property accessors and entity instantiator bytecode in AOT classes #2595

🐞 Bug Fixes

  • Filter bridge methods from DefaultCrudMethods lookup #3401
  • Register native hints for (at)Reflective annotated methods of domain types #3391
  • Add test cases for Kotlin private constructor instantiation edge cases #3390
  • Failed to instantiate bug when a class with private constructor has value class constructor param #3389

... (truncated)

Commits
  • 8e448a9 Release version 4.0 GA (2025.1.0).
  • 45e947a Prepare 4.0 GA (2025.1.0).
  • f3308be Update Update security documentation.
  • 0e2fb43 Polishing.
  • 0397b8d Update Auditing Documentation to latest changes.
  • 64a53db Added a stable link name to the AOT section.
  • 6fde0a0 Update AOT documentation.
  • 09623aa Remove explicit version declarations from jMolecules dependencies.
  • a570d7a Polishing.
  • 128e1a0 Switch to MetadataReaderFactory in DefaultProjectionInformation.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.springframework.data:spring-data-commons](https://github.com/spring-projects/spring-data-commons) from 3.3.5 to 4.0.0.
- [Release notes](https://github.com/spring-projects/spring-data-commons/releases)
- [Commits](spring-projects/spring-data-commons@3.3.5...4.0.0)

---
updated-dependencies:
- dependency-name: org.springframework.data:spring-data-commons
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Dec 1, 2025
@dependabot dependabot bot requested a review from alvelchev as a code owner December 1, 2025 01:19
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Dec 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant