Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 21, 2025

Bumps org.springframework.data:spring-data-commons from 3.5.5 to 4.0.0.

Release notes

Sourced from org.springframework.data:spring-data-commons's releases.

4.0.0

📗 Links

⭐ New Features

  • Switch to MetadataReaderFactory in DefaultProjectionInformation #3402
  • Enable Streamable for Pageable use #3397
  • Move Method string rendering from QueryCreationException to ReflectionUtils #3396
  • Move PropertyPath and TypeInformation types to core package #3393
  • Allow overriding DateTimeProvider via Bean Definition #3385
  • Use precompiled regex for PropertyMatch.namePattern #3376
  • Improve PropertyMatch performance using precompiled regex patterns #3375
  • Consistent factory methods for QueryCreationException #3373
  • Refine TypeCollector usage and predicates #3363
  • Refine filters for TypeCollector and ManagedTypesBeanRegistrationAotProcessor contributions #3362
  • Add JavaPoet enhancements #3357
  • Add ExpressionMarker abstraction for obtaining enclosing method in AOT generated code #3338
  • Expose MethodParameters in AotQueryMethodGenerationContext #3334
  • Enable AOT repositories by default #3323
  • Include generated PersistentPropertyAccessorFactory and EntityInstantiator classes during AOT processing #3318
  • Defer MappingContext access inPersistentEntities #3310
  • Log a warning if param not annotated with @ProjectedPayload #3303
  • Log warning when param is not annotated with @ProjectedPayload (4.0.x) #3300
  • Upgrade to Jackson 3 #3292
  • Add support for ConfigurationSource and Dynamic Projections #3289
  • Refine customization of EntityInformation #3288
  • Introduce SearchResult and SearchResults #3285
  • Refine Repository Composition retrieval during AOT processing #3282
  • Capture repository configuration from registered beans #3279
  • Add getRequiredName and hasName API to org.springframework.data.mapping.Parameter #3272
  • Add LocalVariableNameFactory #3271
  • Introduce AOT context sensitive VariableNameFactory #3270
  • Refine AOT Repositories infrastructure #3267
  • Add support for AOT Repositories #3265
  • Remove ListenableFuture support #3232
  • Mark API with @Contract and @CheckReturnValue annotations #3210
  • Remove @Deprecated API #3208
  • Introduce @Contract and @CheckReturnValue annotations #3195
  • Allow overriding DateTimeProvider via Bean Definition #3177
  • Migrate to JSpecify annotations for nullability constraints #3170
  • Use Spring's Nullness utility to determine JSpecify nullness #3100
  • Introduce org.springframework.data.mapping.Parameter.getRequiredName() and Parameter.hasName() #3088
  • Include generated property accessors and entity instantiator bytecode in AOT classes #2595

🐞 Bug Fixes

  • Filter bridge methods from DefaultCrudMethods lookup #3401
  • Register native hints for (at)Reflective annotated methods of domain types #3391
  • Add test cases for Kotlin private constructor instantiation edge cases #3390
  • Failed to instantiate bug when a class with private constructor has value class constructor param #3389

... (truncated)

Commits
  • 8e448a9 Release version 4.0 GA (2025.1.0).
  • 45e947a Prepare 4.0 GA (2025.1.0).
  • f3308be Update Update security documentation.
  • 0e2fb43 Polishing.
  • 0397b8d Update Auditing Documentation to latest changes.
  • 64a53db Added a stable link name to the AOT section.
  • 6fde0a0 Update AOT documentation.
  • 09623aa Remove explicit version declarations from jMolecules dependencies.
  • a570d7a Polishing.
  • 128e1a0 Switch to MetadataReaderFactory in DefaultProjectionInformation.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 21, 2025
Bumps [org.springframework.data:spring-data-commons](https://github.com/spring-projects/spring-data-commons) from 3.5.5 to 4.0.0.
- [Release notes](https://github.com/spring-projects/spring-data-commons/releases)
- [Commits](spring-projects/spring-data-commons@3.5.5...4.0.0)

---
updated-dependencies:
- dependency-name: org.springframework.data:spring-data-commons
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/gradle/org.springframework.data-spring-data-commons-4.0.0 branch from 28cd95d to 2943a58 Compare November 22, 2025 16:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant