[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
|
[com.google.protobuf:protoc](https://developers.google.com/protocol-buffers/)
([source](https://togithub.com/protocolbuffers/protobuf)) | `3.24.2` ->
`3.24.3` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/com.google.protobuf:protoc/3.24.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/com.google.protobuf:protoc/3.24.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/com.google.protobuf:protoc/3.24.2/3.24.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/com.google.protobuf:protoc/3.24.2/3.24.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[com.google.protobuf:protobuf-java](https://developers.google.com/protocol-buffers/)
([source](https://togithub.com/protocolbuffers/protobuf)) | `3.24.2` ->
`3.24.3` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/com.google.protobuf:protobuf-java/3.24.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/com.google.protobuf:protobuf-java/3.24.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/com.google.protobuf:protobuf-java/3.24.2/3.24.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/com.google.protobuf:protobuf-java/3.24.2/3.24.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>protocolbuffers/protobuf (com.google.protobuf:protoc)</summary>

###
[`v3.24.3`](https://togithub.com/protocolbuffers/protobuf/compare/v3.24.2...v3.24.3)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/apollographql/federation-jvm).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi4yNy4xIiwidXBkYXRlZEluVmVyIjoiMzYuODMuMCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

)

Attempting to import new directives with old specification version will
throw exception.

Add missing `Purpose` enum. Full `@link` definition as per the
[spec](https://github.com/apollographql/specs/blob/main/link/v1.0/link-v1.0.graphql):

```graphql
directive @link(
    url: String!,
    as: String,
    import: [Import],
    for: Purpose)
repeatable on SCHEMA

scalar Import

enum Purpose {
  SECURITY
  EXECUTION
}
```

Resolves: #351

GraphQL subscriptions enable clients to receive continual, real-time
updates whenever new data becomes available. Unlike queries and
mutations, subscriptions are long-lasting. This means a client can
receive multiple updates from a single subscription.

[Spring GraphQL](https://docs.spring.io/spring-graphql/reference/)
provides out of box support for GraphQL subscriptions over WebSockets
using [graphql-transport-ws](https://github.com/enisdenjo/graphql-ws)
protocol.

This PR adds new `federation-spring-subscription-callback` module that
provides support for subscriptions using [Apollo HTTP callback
protocol](https://www.apollographql.com/docs/router/executing-operations/subscription-callback-protocol).

See
* [Apollo
Router](https://www.apollographql.com/docs/router/executing-operations/subscription-support)
for additional details about Federation and Subscription support

## Motivation / Implements

This PR adds the necessary files to configure
[Gitleaks](https://github.com/gitleaks/gitleaks) to run on PRs on this
repo. The Apollo Security team uses Gitleaks to test our repositories
for secrets.

Once this is accepted and merged, the Security team plans to make a
passing Gitleaks check a requirement for PRs to merge into this repo.
This will prevent secrets from being introduced to our repos.

In the event that a secret _is_ detected on a repo, the CI job will add
a comment to the PR associated with the detection to provide
instructions on how to properly resolve the detection. Additionally, if
a secret is detected, the Apollo Security team will be notified so that
we can be available to assist in resolving the detection.

If maintainers reviewing this PR have questions, please see this
[Apollo-internal Slack
link](https://apollograph.slack.com/archives/C03HCCJBAJC/p1696261536123059).

## Changed

- Added `.circleci/config.yml` to this repo. This file contains
appropriate configuration to enable Gitleaks as a CI check.

## Motivation / Implements
This PR updates the version of the SecOps orb used in this repo. Version
2.0.0 of the orb included an issue on the gitleaks job that prevented
the job from running on PRs created from forks. The issue was caused by
a default configuration in CircleCI which prevents providing secrets
provided through CircleCI contexts to PRs created from forks. This
default configuration is probably the correct one, so we needed up
update the SecOps orb to properly operate on PRs from forks.

Update protocol to support configurable heartbeat interval. In order to
keep backwards compatibility with older version of protocol, if no
heartbeat value is provided, we default to 5s.

Updated protocol to also support both `camelCase` and `snake_case`
extension values.

[![Mend Renovate logo
banner](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://togithub.com/actions/checkout) | action |
major | `v3` -> `v4` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

###
[`v4`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v400)

[Compare Source](https://togithub.com/actions/checkout/compare/v3...v4)

- [Support fetching without the --progress
option](https://togithub.com/actions/checkout/pull/1067)
-   [Update to node20](https://togithub.com/actions/checkout/pull/1436)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/apollographql/federation-jvm).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi43OS4xIiwidXBkYXRlZEluVmVyIjoiMzcuNDYuMCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

[![Mend Renovate logo
banner](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
|
[com.google.protobuf:protoc](https://developers.google.com/protocol-buffers/)
([source](https://togithub.com/protocolbuffers/protobuf)) | `3.24.3` ->
`3.25.1` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/com.google.protobuf:protoc/3.25.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/com.google.protobuf:protoc/3.25.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/com.google.protobuf:protoc/3.24.3/3.25.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/com.google.protobuf:protoc/3.24.3/3.25.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[com.google.protobuf:protobuf-java](https://developers.google.com/protocol-buffers/)
([source](https://togithub.com/protocolbuffers/protobuf)) | `3.24.3` ->
`3.25.1` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/com.google.protobuf:protobuf-java/3.25.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/com.google.protobuf:protobuf-java/3.25.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/com.google.protobuf:protobuf-java/3.24.3/3.25.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/com.google.protobuf:protobuf-java/3.24.3/3.25.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>protocolbuffers/protobuf (com.google.protobuf:protoc)</summary>

###
[`v3.25.1`](https://togithub.com/protocolbuffers/protobuf/compare/v3.25.0...v3.25.1)

###
[`v3.25.0`](https://togithub.com/protocolbuffers/protobuf/compare/v3.24.4...v3.25.0)

###
[`v3.24.4`](https://togithub.com/protocolbuffers/protobuf/compare/v3.24.3...v3.24.4)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/apollographql/federation-jvm).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4wLjMiLCJ1cGRhdGVkSW5WZXIiOiIzNy41OS44IiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [gradle](https://gradle.org)
([source](https://togithub.com/gradle/gradle)) | minor | `8.2.1` ->
`8.5` |

---

### Release Notes

<details>
<summary>gradle/gradle (gradle)</summary>

### [`v8.5`](https://togithub.com/gradle/gradle/compare/v8.4.0...v8.5.0)

[Compare
Source](https://togithub.com/gradle/gradle/compare/v8.4.0...v8.5.0)

### [`v8.4`](https://togithub.com/gradle/gradle/releases/tag/v8.4.0):
8.4

[Compare
Source](https://togithub.com/gradle/gradle/compare/v8.3.0...v8.4.0)

The Gradle team is excited to announce Gradle 8.4.

Amongst other improvements, this release addresses two security
vulnerabilities:

- [Incorrect permission assignment for symlinked files used in copy or
archiving
operations](https://togithub.com/gradle/gradle/security/advisories/GHSA-43r3-pqhv-f7h9)
- [Possible local text file exfiltration by XML External entity
injection](https://togithub.com/gradle/gradle/security/advisories/GHSA-mrff-q8qj-xvg8)

[Read the Release Notes](https://docs.gradle.org/8.4/release-notes.html)

We would like to thank the following community members for their
contributions to this release of Gradle:
[Ahmed Ehab](https://togithub.com/ahmedehabb),
[Andrei Rybak](https://togithub.com/rybak),
[Baptiste Decroix](https://togithub.com/bdecroix-spiria),
[Björn Kautler](https://togithub.com/Vampire),
[Cesar de la Vega](https://togithub.com/vegaro),
[Ganavi Jayaram](https://togithub.com/ganavijayaram),
[Gaurav Padam](https://togithub.com/Gauravpadam),
[hwanseok](https://togithub.com/hwanseok-dev),
[J.T. McQuigg](https://togithub.com/JT122406),
[Jakub Chrzanowski](https://togithub.com/hsz),
[Jendrik Johannes](https://togithub.com/jjohannes),
[kackey0-1](https://togithub.com/kackey0-1),
[Konstantin Gribov](https://togithub.com/grossws),
[Pratik Haldankar](https://togithub.com/pratik2315),
[Qinglin](https://togithub.com/nodmp),
[Sebastian Schuberth](https://togithub.com/sschuberth),
[Thad House](https://togithub.com/ThadHouse),
[valery1707](https://togithub.com/valery1707),
[Vladimir Sitnikov](https://togithub.com/vlsi),
[wuyangnju](https://togithub.com/wuyangnju),
[Yanming Zhou](https://togithub.com/quaff),
[Yanshun Li](https://togithub.com/Chaoba),
[Yusuke Uehara](https://togithub.com/uskey512),
[zeners](https://togithub.com/zeners)

#### Upgrade instructions

Switch your build to use Gradle 8.4 by updating your wrapper:

    ./gradlew wrapper --gradle-version=8.4

#### Reporting problems

If you find a problem with this release, please file a bug on [GitHub
Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue
guidelines.
If you're not sure you're encountering a bug, please use the
[forum](https://discuss.gradle.org/c/help-discuss).

We hope you will build happiness with Gradle, and we look forward to
your feedback via [Twitter](https://twitter.com/gradle) or on
[GitHub](https://togithub.com/gradle).

### [`v8.3`](https://togithub.com/gradle/gradle/releases/tag/v8.3.0):
8.3

[Compare
Source](https://togithub.com/gradle/gradle/compare/v8.2.1...v8.3.0)

The Gradle team is excited to announce Gradle 8.3.

[Read the Release Notes](https://docs.gradle.org/8.3/release-notes.html)

We would like to thank the following community members for their
contributions to this release of Gradle:
[Adam](https://togithub.com/aSemy),
[Ahmed Ehab](https://togithub.com/ahmedehabb),
[Aurimas](https://togithub.com/liutikas),
[Baptiste Decroix](https://togithub.com/bdecroix-spiria),
[Björn Kautler](https://togithub.com/Vampire),
[Borewit](https://togithub.com/Borewit),
[Korov](https://togithub.com/Korov),
[Mohammed Thavaf](https://togithub.com/mthavaf),
[Patrick Brückner](https://togithub.com/madmuffin1),
[Philip Wedemann](https://togithub.com/hfhbd),
[Róbert Papp](https://togithub.com/TWiStErRob),
[Shi Chen](https://togithub.com/CsCherrYY),
[Tony Robalik](https://togithub.com/autonomousapps)

#### Upgrade instructions

Switch your build to use Gradle 8.3 by updating your wrapper:

    ./gradlew wrapper --gradle-version=8.3

#### Reporting problems

If you find a problem with this release, please file a bug on [GitHub
Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue
guidelines.
If you're not sure you're encountering a bug, please use the
[forum](https://discuss.gradle.org/c/help-discuss).

We hope you will build happiness with Gradle, and we look forward to
your feedback via [Twitter](https://twitter.com/gradle) or on
[GitHub](https://togithub.com/gradle).

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/apollographql/federation-jvm).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi40My4yIiwidXBkYXRlZEluVmVyIjoiMzcuODEuMyIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-java](https://togithub.com/actions/setup-java) | action
| major | `v3` -> `v4` |

---

### Release Notes

<details>
<summary>actions/setup-java (actions/setup-java)</summary>

### [`v4`](https://togithub.com/actions/setup-java/compare/v3...v4)

[Compare
Source](https://togithub.com/actions/setup-java/compare/v3...v4)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/apollographql/federation-jvm).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy41OS44IiwidXBkYXRlZEluVmVyIjoiMzcuODEuMyIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/upload-artifact](https://togithub.com/actions/upload-artifact)
| action | major | `v3` -> `v4` |

---

### Release Notes

<details>
<summary>actions/upload-artifact (actions/upload-artifact)</summary>

### [`v4`](https://togithub.com/actions/upload-artifact/compare/v3...v4)

[Compare
Source](https://togithub.com/actions/upload-artifact/compare/v3...v4)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/apollographql/federation-jvm).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy45My4xIiwidXBkYXRlZEluVmVyIjoiMzcuOTMuMSIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

## Motivation / Implements

This PR adds or updates the necessary configuration to enable
[Semgrep](https://semgrep.dev/docs/semgrep-code/overview/) to run on PRs
on this repo. The Apollo Security team uses Semgrep to test our source
for potential security vulnerabilities.

Once this is accepted and merged, the Security team plans to make a
passing Semgrep check a requirement for PRs to merge into this repo.
This will prevent net-new severe issues from being introduced. The job
proposed by this PR runs in a diff-aware mode, so it will only alert if
net-new issues are introduced in a branch.

In the event that a severe issue _is_ detected on a PR, the CI job will
add a comment to the PR associated with the detection to provide
instructions on how to properly resolve the detection. The comment added
to PRs will also include instructions on how to get further support if
needed.

If maintainers reviewing this PR have questions, please reach out in the
`#security` channel in Slack or contact Matt Peake directly at
`matt[.]peake@apollographql[.]com`.

## Changed

- Updated `.circleci/config.yml` to include appropriate configuration to
enable Semgrep as a CI check. These changes were programmatically
generated, so YAML formatting may have been modified to conform to the
YAML spec.
- Updated SecOps orb to latest version

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change | Age | Adoption | Passing |
Confidence |
|---|---|---|---|---|---|---|---|
| openjdk | final | patch | `17` -> `17.0.2` |
[![age](https://developer.mend.io/api/mc/badges/age/docker/openjdk/17.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/docker/openjdk/17.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/docker/openjdk/17/17.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/openjdk/17/17.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[secops](https://circleci.com/developer/orbs/orb/apollo/circleci-secops-orb)
| orb | patch | `2.0.6` -> `2.0.7` |
[![age](https://developer.mend.io/api/mc/badges/age/orb/secops/2.0.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/orb/secops/2.0.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/orb/secops/2.0.6/2.0.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/orb/secops/2.0.6/2.0.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[com.diffplug.spotless:spotless-plugin-gradle](https://togithub.com/diffplug/spotless)
| devDependencies | minor | `6.21.0` -> `6.24.0` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/com.diffplug.spotless:spotless-plugin-gradle/6.24.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/com.diffplug.spotless:spotless-plugin-gradle/6.24.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/com.diffplug.spotless:spotless-plugin-gradle/6.21.0/6.24.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/com.diffplug.spotless:spotless-plugin-gradle/6.21.0/6.24.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [org.junit.jupiter:junit-jupiter](https://junit.org/junit5/)
([source](https://togithub.com/junit-team/junit5)) | dependencies |
patch | `5.10.0` -> `5.10.1` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/org.junit.jupiter:junit-jupiter/5.10.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/org.junit.jupiter:junit-jupiter/5.10.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/org.junit.jupiter:junit-jupiter/5.10.0/5.10.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.junit.jupiter:junit-jupiter/5.10.0/5.10.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[io.projectreactor:reactor-test](https://togithub.com/reactor/reactor-core)
| dependencies | minor | `3.5.9` -> `3.6.2` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/io.projectreactor:reactor-test/3.6.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/io.projectreactor:reactor-test/3.6.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/io.projectreactor:reactor-test/3.5.9/3.6.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/io.projectreactor:reactor-test/3.5.9/3.6.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[org.springframework.graphql:spring-graphql-test](https://togithub.com/spring-projects/spring-graphql)
| dependencies | patch | `1.2.3` -> `1.2.4` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/org.springframework.graphql:spring-graphql-test/1.2.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/org.springframework.graphql:spring-graphql-test/1.2.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/org.springframework.graphql:spring-graphql-test/1.2.3/1.2.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.springframework.graphql:spring-graphql-test/1.2.3/1.2.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[org.springframework.boot:spring-boot-starter-websocket](https://spring.io/projects/spring-boot)
([source](https://togithub.com/spring-projects/spring-boot)) |
dependencies | minor | `3.1.4` -> `3.2.2` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/org.springframework.boot:spring-boot-starter-websocket/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/org.springframework.boot:spring-boot-starter-websocket/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/org.springframework.boot:spring-boot-starter-websocket/3.1.4/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.springframework.boot:spring-boot-starter-websocket/3.1.4/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[org.springframework.boot:spring-boot-starter-test](https://spring.io/projects/spring-boot)
([source](https://togithub.com/spring-projects/spring-boot)) |
dependencies | minor | `3.1.4` -> `3.2.2` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/org.springframework.boot:spring-boot-starter-test/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/org.springframework.boot:spring-boot-starter-test/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/org.springframework.boot:spring-boot-starter-test/3.1.4/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.springframework.boot:spring-boot-starter-test/3.1.4/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[org.springframework.boot:spring-boot-starter-webflux](https://spring.io/projects/spring-boot)
([source](https://togithub.com/spring-projects/spring-boot)) |
dependencies | minor | `3.1.4` -> `3.2.2` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/org.springframework.boot:spring-boot-starter-webflux/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/org.springframework.boot:spring-boot-starter-webflux/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/org.springframework.boot:spring-boot-starter-webflux/3.1.4/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.springframework.boot:spring-boot-starter-webflux/3.1.4/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[org.springframework.boot:spring-boot-starter-web](https://spring.io/projects/spring-boot)
([source](https://togithub.com/spring-projects/spring-boot)) |
dependencies | minor | `3.1.4` -> `3.2.2` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/org.springframework.boot:spring-boot-starter-web/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/org.springframework.boot:spring-boot-starter-web/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/org.springframework.boot:spring-boot-starter-web/3.1.4/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.springframework.boot:spring-boot-starter-web/3.1.4/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[org.springframework.boot:spring-boot-starter-graphql](https://spring.io/projects/spring-boot)
([source](https://togithub.com/spring-projects/spring-boot)) |
dependencies | minor | `3.1.4` -> `3.2.2` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/org.springframework.boot:spring-boot-starter-graphql/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/org.springframework.boot:spring-boot-starter-graphql/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/org.springframework.boot:spring-boot-starter-graphql/3.1.4/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.springframework.boot:spring-boot-starter-graphql/3.1.4/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [org.slf4j:slf4j-api](http://www.slf4j.org)
([source](https://togithub.com/qos-ch/slf4j)) | dependencies | patch |
`2.0.9` -> `2.0.11` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/org.slf4j:slf4j-api/2.0.11?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/org.slf4j:slf4j-api/2.0.11?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/org.slf4j:slf4j-api/2.0.9/2.0.11?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.slf4j:slf4j-api/2.0.9/2.0.11?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [com.squareup.okhttp3:mockwebserver](https://square.github.io/okhttp/)
([source](https://togithub.com/square/okhttp)) | dependencies | minor |
`4.11.0` -> `4.12.0` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/com.squareup.okhttp3:mockwebserver/4.12.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/com.squareup.okhttp3:mockwebserver/4.12.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/com.squareup.okhttp3:mockwebserver/4.11.0/4.12.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/com.squareup.okhttp3:mockwebserver/4.11.0/4.12.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| io.spring.dependency-management | plugin | patch | `1.1.3` -> `1.1.4`
|
[![age](https://developer.mend.io/api/mc/badges/age/maven/io.spring.dependency-management/1.1.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/io.spring.dependency-management/1.1.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/io.spring.dependency-management/1.1.3/1.1.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/io.spring.dependency-management/1.1.3/1.1.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[org.jetbrains:annotations](https://togithub.com/JetBrains/java-annotations)
| dependencies | minor | `24.0.1` -> `24.1.0` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/org.jetbrains:annotations/24.1.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/org.jetbrains:annotations/24.1.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/org.jetbrains:annotations/24.0.1/24.1.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.jetbrains:annotations/24.0.1/24.1.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| org.springframework.boot | plugin | minor | `3.1.3` -> `3.2.2` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/org.springframework.boot/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/org.springframework.boot/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/org.springframework.boot/3.1.3/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.springframework.boot/3.1.3/3.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>reactor/reactor-core (io.projectreactor:reactor-test)</summary>

###
[`v3.6.2`](https://togithub.com/reactor/reactor-core/releases/tag/v3.6.2)

[Compare
Source](https://togithub.com/reactor/reactor-core/compare/v3.6.1...v3.6.2)

<!-- Release notes generated using configuration in .github/release.yml
at v3.6.2 -->

#### What's Changed

##### :warning: Update considerations and deprecations

- Restore where onLastOperatorHook is applied by
[@&#8203;chemicL](https://togithub.com/chemicL) in
[https://github.com/reactor/reactor-core/pull/3673](https://togithub.com/reactor/reactor-core/pull/3673)

##### :lady_beetle: Bug fixes

- ensure error is not propagated on cancellation and onNext race by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3665](https://togithub.com/reactor/reactor-core/pull/3665)
- Fix pendingTask count not tracking task rejection by
[@&#8203;Nicolas125841](https://togithub.com/Nicolas125841) in
[https://github.com/reactor/reactor-core/pull/3660](https://togithub.com/reactor/reactor-core/pull/3660)

##### :book: Documentation, Tests and Build

- Fix sample code typos in Mono javadocs by
[@&#8203;valery1707](https://togithub.com/valery1707) in
[https://github.com/reactor/reactor-core/pull/3657](https://togithub.com/reactor/reactor-core/pull/3657)
- Remove unused com.gradle.enterprise plugin by
[@&#8203;chemicL](https://togithub.com/chemicL) in
[https://github.com/reactor/reactor-core/pull/3668](https://togithub.com/reactor/reactor-core/pull/3668)
- Fix flaky test for pending tasks count validation by
[@&#8203;chemicL](https://togithub.com/chemicL) in
[https://github.com/reactor/reactor-core/pull/3669](https://togithub.com/reactor/reactor-core/pull/3669)
- Fix flaky test for BoundedElasticThreadPerTaskScheduler by
[@&#8203;chemicL](https://togithub.com/chemicL) in
[https://github.com/reactor/reactor-core/pull/3679](https://togithub.com/reactor/reactor-core/pull/3679)
- Improve RaceTestUtils to yield when CPUs don't suffice by
[@&#8203;chemicL](https://togithub.com/chemicL) in
[https://github.com/reactor/reactor-core/pull/3678](https://togithub.com/reactor/reactor-core/pull/3678)
- Remove overridden methods from GenericBoundedElasticThreadPerTask… by
[@&#8203;chemicL](https://togithub.com/chemicL) in
[https://github.com/reactor/reactor-core/pull/3685](https://togithub.com/reactor/reactor-core/pull/3685)
- Exclude loom boundedElastic from restart validation by
[@&#8203;chemicL](https://togithub.com/chemicL) in
[https://github.com/reactor/reactor-core/pull/3686](https://togithub.com/reactor/reactor-core/pull/3686)

##### :up: Dependency Upgrades

- Bump byteBuddyVersion from 1.14.9 to 1.14.10 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3659](https://togithub.com/reactor/reactor-core/pull/3659)
- Bump org.junit:junit-bom from 5.10.0 to 5.10.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3680](https://togithub.com/reactor/reactor-core/pull/3680)
- Bump org.assertj:assertj-core from 3.24.2 to 3.25.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3681](https://togithub.com/reactor/reactor-core/pull/3681)
- Bump ch.qos.logback:logback-classic from 1.2.12 to 1.2.13 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3684](https://togithub.com/reactor/reactor-core/pull/3684)
- Bump byteBuddyVersion from 1.14.10 to 1.14.11 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3683](https://togithub.com/reactor/reactor-core/pull/3683)

#### New Contributors

- [@&#8203;Nicolas125841](https://togithub.com/Nicolas125841) made their
first contribution in
[https://github.com/reactor/reactor-core/pull/3660](https://togithub.com/reactor/reactor-core/pull/3660)
- [@&#8203;valery1707](https://togithub.com/valery1707) made their first
contribution in
[https://github.com/reactor/reactor-core/pull/3657](https://togithub.com/reactor/reactor-core/pull/3657)

**Full Changelog**:
https://github.com/reactor/reactor-core/compare/v3.6.1...v3.6.2

###
[`v3.6.1`](https://togithub.com/reactor/reactor-core/releases/tag/v3.6.1)

<!-- Release notes generated using configuration in .github/release.yml
at v3.6.1 -->

`Reactor Core` `3.6.1` is part of **`2023.0.1` Release Train**.

#### What's Changed

##### :lady_beetle: Bug fixes

- `SinkManyUnicast` discard support during subscription cancel by
[@&#8203;chemicL](https://togithub.com/chemicL) in
[#&#8203;3641](https://togithub.com/reactor/reactor-core/issues/3641),
[`1bee07c`](https://togithub.com/reactor/reactor-core/commit/1bee07c56b955e2102a884fb2d3b82f2deee64e1)
- Ensure scheduler is initialised by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[`06bf103`](https://togithub.com/reactor/reactor-core/commit/06bf103de8db24d3e3f118f3cdfb257e8304b8a0)

##### :book: Documentation, Tests and Build

- `MemoryUtils.Tracked` used in tests releases collections by
[@&#8203;chemicL](https://togithub.com/chemicL) in
[#&#8203;3328](https://togithub.com/reactor/reactor-core/issues/3328)
- Final method declaration in final class by
[@&#8203;subbarao](https://togithub.com/subbarao) in
[#&#8203;3461](https://togithub.com/reactor/reactor-core/issues/3461)
- Update `reactiveProgramming.adoc` by
[@&#8203;Navaneethsen](https://togithub.com/Navaneethsen) in
[#&#8203;3592](https://togithub.com/reactor/reactor-core/issues/3592)
- Add `@Override` annotations in sample java code by
[@&#8203;ByoungJoonIm](https://togithub.com/ByoungJoonIm) in
[#&#8203;3605](https://togithub.com/reactor/reactor-core/issues/3605)
- Improve documentation for `VirtualThread`s `boundedElastic` behaviour
by [@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[#&#8203;3635](https://togithub.com/reactor/reactor-core/issues/3635)
- `StressSubscriber` `discardedValues` should not have downstream type
by [@&#8203;chemicL](https://togithub.com/chemicL) in
[#&#8203;3643](https://togithub.com/reactor/reactor-core/issues/3643)
- Add `Pull Request` template by
[@&#8203;chemicL](https://togithub.com/chemicL) in
[#&#8203;3650](https://togithub.com/reactor/reactor-core/issues/3650)

##### :up: Dependency Upgrades

- Bump `byteBuddyVersion` from `1.14.8` to `1.14.9` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[#&#8203;3619](https://togithub.com/reactor/reactor-core/issues/3619)
- Bump `Micrometer` libs versions by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[#&#8203;3662](https://togithub.com/reactor/reactor-core/issues/3662)

#### New Contributors

- [@&#8203;Navaneethsen](https://togithub.com/Navaneethsen) made their
first contribution in
[#&#8203;3592](https://togithub.com/reactor/reactor-core/issues/3592)
- [@&#8203;ByoungJoonIm](https://togithub.com/ByoungJoonIm) made their
first contribution in
[#&#8203;3605](https://togithub.com/reactor/reactor-core/issues/3605)
- [@&#8203;subbarao](https://togithub.com/subbarao) made their first
contribution in
[#&#8203;3461](https://togithub.com/reactor/reactor-core/issues/3461)

**Full Changelog**:
https://github.com/reactor/reactor-core/compare/v3.6.0...v3.6.1

###
[`v3.6.0`](https://togithub.com/reactor/reactor-core/releases/tag/v3.6.0)

<!-- Release notes generated using configuration in .github/release.yml
at v3.6.0 -->

Reactor-Core 3.6.0 is part of 2023.0.0 Release Train.

This is the first GA release of 2023.0.0 🎉

This note focuses on 3.6.0 proper, curating changes from across all
milestones and also includes changes already released as part of 3.4.x
line up to 3.4.34 as well as 3.5.x line up to 3.5.12.

While there are plenty of improvements and bug fixes, it's worth to
highlight the bigger themes first:

- The `Schedulers.boundedElastic()` may return a specific implementation
tailored for [Project Loom](https://openjdk.org/projects/loom/) and
running on virtual threads if application runs in Java 21+ runtime and
have set the `reactor.schedulers.defaultBoundedElasticOnVirtualThreads`
system property to `true`. Please consult the
[javadocs](https://projectreactor.io/docs/core/snapshot/api/reactor/core/scheduler/Schedulers.html#boundedElastic--)
and [the reference
documentation](https://projectreactor.io/docs/core/snapshot/reference/#schedulers)
for more information.
- Support for [Multi-Release Jar](https://openjdk.org/jeps/238). Since
this release project has java version specific sources that are enabled
if runs in specific Java runtime. This allows to avoid unnecessary
reflection checks as well as embrace some new neat java features without
changing the baseline for the whole code base.
- Hardening of the context-propagation. This release introduces better
support for external `Publisher`s detection with their corresponding
decoration if detected. This enables more stable context-propagation
when it comes to external libraries integration.

See dedicated pre-release
[blogpost](https://spring.io/blog/2023/10/31/what-new-is-coming-in-reactor-core-3-6-0#virtual-threads-support)
for more information.

#### What's Changed

##### :warning: Update considerations and deprecations

- ensures `addCap` always returns value with flag by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3610](https://togithub.com/reactor/reactor-core/pull/3610)
- makes `throwable` assignment happens-before `done` assignment in
`onError` for FluxPublish by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3638](https://togithub.com/reactor/reactor-core/pull/3638)

##### :sparkles: New features and improvements

- Hardening automatic context propagation by
[@&#8203;chemicL](https://togithub.com/chemicL) in
[https://github.com/reactor/reactor-core/pull/3549](https://togithub.com/reactor/reactor-core/pull/3549)
- InternalOperator automatic context propagation by
[@&#8203;chemicL](https://togithub.com/chemicL) in
[https://github.com/reactor/reactor-core/pull/3625](https://togithub.com/reactor/reactor-core/pull/3625)
- adds support for gradle 8.1.1 by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3521](https://togithub.com/reactor/reactor-core/pull/3521)
- adds support for multi-release-jar | rework `Traces` by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3523](https://togithub.com/reactor/reactor-core/pull/3523)
- introduces automatic loom support by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3524](https://togithub.com/reactor/reactor-core/pull/3524)
- provides minimal troubleshooting for mrj by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3532](https://togithub.com/reactor/reactor-core/pull/3532)
- fix
[#&#8203;3539](https://togithub.com/reactor/reactor-core/issues/3539)
takeUntil Predicate test before emit by
[@&#8203;AramMessdaghi9001](https://togithub.com/AramMessdaghi9001) in
[https://github.com/reactor/reactor-core/pull/3544](https://togithub.com/reactor/reactor-core/pull/3544)
- Reworks FluxPublish internals to relay on predictable state machine by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3538](https://togithub.com/reactor/reactor-core/pull/3538)
- dedicated loom oriented boundeElasticScheduler implementation by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3566](https://togithub.com/reactor/reactor-core/pull/3566)
- Handling 1.0.0 of context-propagation by
[@&#8203;chemicL](https://togithub.com/chemicL) in
[https://github.com/reactor/reactor-core/pull/3609](https://togithub.com/reactor/reactor-core/pull/3609)
- provides extra check for contextualName presence by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3611](https://togithub.com/reactor/reactor-core/pull/3611)
- JCStress: Await Scheduler dispose and increase timeouts by
[@&#8203;chemicL](https://togithub.com/chemicL) in
[https://github.com/reactor/reactor-core/pull/3630](https://togithub.com/reactor/reactor-core/pull/3630)

##### :lady_beetle: Bug fixes

- fixes `MonoDelayElement` to properly handle race between delay `run`
and `onNext` signal by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3546](https://togithub.com/reactor/reactor-core/pull/3546)
- ensures `GroupedFlux` delivers subscription for the second subscriber
by [@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3555](https://togithub.com/reactor/reactor-core/pull/3555)
- ensures late `onRequest` consumer observes demand by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3557](https://togithub.com/reactor/reactor-core/pull/3557)
- ensures that proper index is used during onNext check by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3614](https://togithub.com/reactor/reactor-core/pull/3614)
- ensures SchedulerTask uses isShutdown instead of isDisposed by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3623](https://togithub.com/reactor/reactor-core/pull/3623)

##### :book: Documentation, Tests and Build

- Fix return type for Mono.tap in javadoc by
[@&#8203;ajax-surovskyi-y](https://togithub.com/ajax-surovskyi-y) in
[https://github.com/reactor/reactor-core/pull/3564](https://togithub.com/reactor/reactor-core/pull/3564)
- fixes CI.yml by [@&#8203;OlegDokuka](https://togithub.com/OlegDokuka)
in
[https://github.com/reactor/reactor-core/pull/3575](https://togithub.com/reactor/reactor-core/pull/3575)
- adds CI nightly builds by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3581](https://togithub.com/reactor/reactor-core/pull/3581)
- disables temporarily java 21 tests by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3590](https://togithub.com/reactor/reactor-core/pull/3590)
- Bump actions/setup-java from 3.12.0 to 3.13.0 in /.github/workflows by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3585](https://togithub.com/reactor/reactor-core/pull/3585)
- Bump actions/checkout from 3.1.0 to 4.1.0 in /.github/workflows by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3586](https://togithub.com/reactor/reactor-core/pull/3586)
- Bump gradle/gradle-build-action from 2.7.0 to 2.9.0 in
/.github/workflows by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3594](https://togithub.com/reactor/reactor-core/pull/3594)
- improves build speed by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3597](https://togithub.com/reactor/reactor-core/pull/3597)
- Revised documentation about context propagation by
[@&#8203;chemicL](https://togithub.com/chemicL) in
[https://github.com/reactor/reactor-core/pull/3617](https://togithub.com/reactor/reactor-core/pull/3617)
- updates to java 21 GA temurin by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3631](https://togithub.com/reactor/reactor-core/pull/3631)
- Gradle 8.4 upgrade by [@&#8203;chemicL](https://togithub.com/chemicL)
in
[https://github.com/reactor/reactor-core/pull/3632](https://togithub.com/reactor/reactor-core/pull/3632)

##### :up: Dependency Upgrades

- Bump gradle/wrapper-validation-action from 1.0.5 to 1.1.0 in
/.github/workflows by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3542](https://togithub.com/reactor/reactor-core/pull/3542)
- Bump com.gradle.enterprise from 3.12.4 to 3.14.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3548](https://togithub.com/reactor/reactor-core/pull/3548)
- Bump actions/setup-java from 3.6.0 to 3.12.0 in /.github/workflows by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3550](https://togithub.com/reactor/reactor-core/pull/3550)
- Bump gradle/gradle-build-action from 2.3.3 to 2.7.0 in
/.github/workflows by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3551](https://togithub.com/reactor/reactor-core/pull/3551)
- Update `Micrometer` version to `1.10.10` by
[@&#8203;violetagg](https://togithub.com/violetagg) in
[https://github.com/reactor/reactor-core/pull/3560](https://togithub.com/reactor/reactor-core/pull/3560)
- upgrades to latest micrometer versions by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3561](https://togithub.com/reactor/reactor-core/pull/3561)
- Bump io.spring.nohttp from 0.0.10 to 0.0.11 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3497](https://togithub.com/reactor/reactor-core/pull/3497)
- Bump org.junit:junit-bom from 5.9.2 to 5.10.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3556](https://togithub.com/reactor/reactor-core/pull/3556)
- Bump me.champeau.gradle.japicmp from 0.4.1 to 0.4.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3595](https://togithub.com/reactor/reactor-core/pull/3595)
- Bump jmhVersion from 1.36 to 1.37 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3596](https://togithub.com/reactor/reactor-core/pull/3596)
- Bump byteBuddyVersion from 1.14.5 to 1.14.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3601](https://togithub.com/reactor/reactor-core/pull/3601)
- Bump com.gradle.enterprise from 3.14.1 to 3.15 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3602](https://togithub.com/reactor/reactor-core/pull/3602)
- Bump ch.qos.logback:logback-classic from 1.2.11 to 1.2.12 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3476](https://togithub.com/reactor/reactor-core/pull/3476)
- Bump de.undercouch.download from 5.4.0 to 5.5.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3608](https://togithub.com/reactor/reactor-core/pull/3608)
- Bump com.gradle.enterprise from 3.15 to 3.15.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3613](https://togithub.com/reactor/reactor-core/pull/3613)
- Update micrometer and micrometerTracing by
[@&#8203;pderop](https://togithub.com/pderop) in
[https://github.com/reactor/reactor-core/pull/3636](https://togithub.com/reactor/reactor-core/pull/3636)
- Update micrometer, micrometerTracing, contextPropagation by
[@&#8203;pderop](https://togithub.com/pderop) in
[https://github.com/reactor/reactor-core/pull/3637](https://togithub.com/reactor/reactor-core/pull/3637)

#### New Contributors

- [@&#8203;AramMessdaghi9001](https://togithub.com/AramMessdaghi9001)
made their first contribution in
[https://github.com/reactor/reactor-core/pull/3544](https://togithub.com/reactor/reactor-core/pull/3544)
- [@&#8203;ajax-surovskyi-y](https://togithub.com/ajax-surovskyi-y) made
their first contribution in
[https://github.com/reactor/reactor-core/pull/3564](https://togithub.com/reactor/reactor-core/pull/3564)

**Full Changelog**:
https://github.com/reactor/reactor-core/compare/v3.5.8...v3.6.0

###
[`v3.5.14`](https://togithub.com/reactor/reactor-core/compare/v3.5.13...v3.5.14)

###
[`v3.5.13`](https://togithub.com/reactor/reactor-core/releases/tag/v3.5.13)

<!-- Release notes generated using configuration in .github/release.yml
at v3.5.13 -->

`Reactor Core` `3.5.13` is part of **`2022.0.14` Release Train**.

#### What's Changed

##### :lady_beetle: Bug fixes

- `SinkManyUnicast` discard support during subscription cancel by
[@&#8203;chemicL](https://togithub.com/chemicL) in
[#&#8203;3641](https://togithub.com/reactor/reactor-core/issues/3641)

##### :book: Documentation, Tests and Build

- `MemoryUtils.Tracked` used in tests releases collections by
[@&#8203;chemicL](https://togithub.com/chemicL) in
[#&#8203;3328](https://togithub.com/reactor/reactor-core/issues/3328)
- `StressSubscriber` `discardedValues` should not have downstream type
by [@&#8203;chemicL](https://togithub.com/chemicL) in
[#&#8203;3643](https://togithub.com/reactor/reactor-core/issues/3643)

##### :up: Dependency Upgrades

- Bump `byteBuddyVersion` from `1.14.8` to `1.14.9` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[#&#8203;3619](https://togithub.com/reactor/reactor-core/issues/3619)

**Full Changelog**:
https://github.com/reactor/reactor-core/compare/v3.5.12...v3.5.13

###
[`v3.5.12`](https://togithub.com/reactor/reactor-core/releases/tag/v3.5.12)

<!-- Release notes generated using configuration in .github/release.yml
at v3.5.12 -->

`Reactor Core` `3.5.12` is part of **`2022.0.13` Release Train**.

#### What's Changed

##### :warning: Update considerations and deprecations

- Make `throwable` assignment happens-before `done` assignment in
`onError` for `FluxPublish` by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[#&#8203;3638](https://togithub.com/reactor/reactor-core/issues/3638)

##### :sparkles: New features and improvements

- `JCStress`: Await `Scheduler` dispose and increase timeouts by
[@&#8203;chemicL](https://togithub.com/chemicL) in
[#&#8203;3630](https://togithub.com/reactor/reactor-core/issues/3630)

##### :up: Dependency Upgrades

- Update `Micrometer` and `Micrometer Tracing` by
[@&#8203;pderop](https://togithub.com/pderop) in
[#&#8203;3636](https://togithub.com/reactor/reactor-core/issues/3636)

**Full Changelog**:
https://github.com/reactor/reactor-core/compare/v3.5.11...v3.5.12

###
[`v3.5.11`](https://togithub.com/reactor/reactor-core/releases/tag/v3.5.11)

[Compare
Source](https://togithub.com/reactor/reactor-core/compare/v3.5.10...v3.5.11)

<!-- Release notes generated using configuration in .github/release.yml
at v3.5.11 -->

#### What's Changed

##### :warning: Update considerations and deprecations

- ensures `addCap` always returns value with flag by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3610](https://togithub.com/reactor/reactor-core/pull/3610)

##### :sparkles: New features and improvements

- provides extra check for `contextualName` presence by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3611](https://togithub.com/reactor/reactor-core/pull/3611)
- Handling 1.0.0 of context-propagation by
[@&#8203;chemicL](https://togithub.com/chemicL) in
[https://github.com/reactor/reactor-core/pull/3609](https://togithub.com/reactor/reactor-core/pull/3609)

##### :lady_beetle: Bug fixes

- ensures that `FluxBufferTime` uses proper `index` value during
`onNext` check by [@&#8203;OlegDokuka](https://togithub.com/OlegDokuka)
in
[https://github.com/reactor/reactor-core/pull/3614](https://togithub.com/reactor/reactor-core/pull/3614)

##### :book: Documentation, Tests and Build

- adds CI nightly builds by
[@&#8203;OlegDokuka](https://togithub.com/OlegDokuka) in
[https://github.com/reactor/reactor-core/pull/3581](https://togithub.com/reactor/reactor-core/pull/3581)
- Bump actions/setup-java from 3.12.0 to 3.13.0 in /.github/workflows by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3585](https://togithub.com/reactor/reactor-core/pull/3585)
- Bump actions/checkout from 3.1.0 to 4.1.0 in /.github/workflows by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3586](https://togithub.com/reactor/reactor-core/pull/3586)
- Bump gradle/gradle-build-action from 2.7.0 to 2.9.0 in
/.github/workflows by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3594](https://togithub.com/reactor/reactor-core/pull/3594)

##### :up: Dependency Upgrades

- Bump io.spring.nohttp from 0.0.10 to 0.0.11 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3497](https://togithub.com/reactor/reactor-core/pull/3497)
- Bump org.junit:junit-bom from 5.9.2 to 5.10.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3556](https://togithub.com/reactor/reactor-core/pull/3556)
- Bump me.champeau.gradle.japicmp from 0.4.1 to 0.4.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3595](https://togithub.com/reactor/reactor-core/pull/3595)
- Bump jmhVersion from 1.36 to 1.37 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3596](https://togithub.com/reactor/reactor-core/pull/3596)
- Bump byteBuddyVersion from 1.14.5 to 1.14.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3601](https://togithub.com/reactor/reactor-core/pull/3601)
- Bump com.gradle.enterprise from 3.14.1 to 3.15 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3602](https://togithub.com/reactor/reactor-core/pull/3602)
- Bump ch.qos.logback:logback-classic from 1.2.11 to 1.2.12 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3476](https://togithub.com/reactor/reactor-core/pull/3476)
- Bump de.undercouch.download from 5.4.0 to 5.5.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3608](https://togithub.com/reactor/reactor-core/pull/3608)
- Bump com.gradle.enterprise from 3.15 to 3.15.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/reactor/reactor-core/pull/3613](https://togithub.com/reactor/reactor-core/pull/3613)

**Full Changelog**:
https://github.com/reactor/reactor-core/compare/v3.5.10...v3.5.11

###
[`v3.5.10`](https://togithub.com/reactor/reactor-core/releases/tag/v3.5.10)

[Compare
Source](https://togithub.com/reactor/reactor-core/compare/v3.5.9...v3.5.10)

<!-- Release notes generated using configuration in .github/release.yml
at v3.5.10 -->

`Reactor Core` `3.5.10` is part of **`2022.0.11` Release Train**.

#### What's Changed

##### :book: Documentation, Tests and Build

- Fix return type for `Mono.tap` in javadoc by
[@&#8203;ajax-surovskyi-y](https://togithub.com/ajax-surovskyi-y) in
[#&#8203;3564](https://togithub.com/reactor/reactor-core/issues/3564)

##### :up: Dependency Upgrades

- Update `Micrometer` version to `1.10.11` by
[@&#8203;chemicL](https://togithub.com/chemicL) in
[`7f9c77e`](https://togithub.com/reactor/reactor-core/commit/7f9c77ec28dc0bdfc1eafe04062cb1195fd9b552)

#### New Contributors

- [@&#8203;ajax-surovskyi-y](https://togithub.com/ajax-surovskyi-y) made
their first contribution in
[#&#8203;3564](https://togithub.com/reactor/reactor-core/issues/3564)

**Full Changelog**:
https://github.com/reactor/reactor-core/compare/v3.5.9...v3.5.10

</details>

<details>
<summary>spring-projects/spring-graphql
(org.springframework.graphql:spring-graphql-test)</summary>

###
[`v1.2.4`](https://togithub.com/spring-projects/spring-graphql/releases/tag/v1.2.4)

#### :star: New Features

- Lenient parsing of SourceLocation's line and column in
ResponseMapGraphQlResponse
[#&#8203;849](https://togithub.com/spring-projects/spring-graphql/pull/849)
- Use isOmitted rather than isPresent in ValueExtractor to allow
validation of null arguments
[#&#8203;842](https://togithub.com/spring-projects/spring-graphql/pull/842)
- Allow use of custom DataLoaderRegistry instance
[#&#8203;836](https://togithub.com/spring-projects/spring-graphql/issues/836)
- ConnectionDataFetcher should handle data wrapped with
DataFetcherResult
[#&#8203;835](https://togithub.com/spring-projects/spring-graphql/issues/835)

#### :beetle: Bug Fixes

- Fix logic for hasPrevious/hasNext with keyset scrolling
[#&#8203;843](https://togithub.com/spring-projects/spring-graphql/issues/843)
- Offset pagination with "last N before X" should not include the item
at offset X
[#&#8203;840](https://togithub.com/spring-projects/spring-graphql/issues/840)
- ControllerAdvice order is not preserved in
AnnotatedControllerExceptionResolver
[#&#8203;830](https://togithub.com/spring-projects/spring-graphql/issues/830)
- WebSocketGraphQlClient unable to reconnect after the first reconnect
failure
[#&#8203;826](https://togithub.com/spring-projects/spring-graphql/issues/826)
- AOT: No JSON Encoder error using GraphlQL client
[#&#8203;825](https://togithub.com/spring-projects/spring-graphql/issues/825)

#### :notebook_with_decorative_cover: Documentation

- Add section on code generation to the documentation
[#&#8203;847](https://togithub.com/spring-projects/spring-graphql/issues/847)
- Use ScrollPosition.offset() to get initial scroll position
[#&#8203;839](https://togithub.com/spring-projects/spring-graphql/pull/839)
- Add Search in All Spring Docs
[#&#8203;824](https://togithub.com/spring-projects/spring-graphql/pull/824)

#### :hammer: Dependency Upgrades

- Upgrade to Context Propagation 1.0.6
[#&#8203;857](https://togithub.com/spring-projects/spring-graphql/issues/857)
- Upgrade to GraphQL Java 20.7
[#&#8203;852](https://togithub.com/spring-projects/spring-graphql/issues/852)
- Upgrade to Micrometer 1.11.6
[#&#8203;853](https://togithub.com/spring-projects/spring-graphql/issues/853)
- Upgrade to Micrometer Tracing 1.1.7
[#&#8203;854](https://togithub.com/spring-projects/spring-graphql/issues/854)
- Upgrade to Reactor 2022.0.13
[#&#8203;858](https://togithub.com/spring-projects/spring-graphql/issues/858)
- Upgrade to Spring Data 2023.0.6
[#&#8203;855](https://togithub.com/spring-projects/spring-graphql/issues/855)
- Upgrade to Spring Framework 6.0.14
[#&#8203;851](https://togithub.com/spring-projects/spring-graphql/issues/851)
- Upgrade to Spring Security 6.1.5
[#&#8203;856](https://togithub.com/spring-projects/spring-graphql/issues/856)

#### :heart: Contributors

Thank you to all the contributors who worked on this release:

[@&#8203;Stmated](https://togithub.com/Stmated),
[@&#8203;koenpunt](https://togithub.com/koenpunt),
[@&#8203;nilshartmann](https://togithub.com/nilshartmann), and
[@&#8203;rwinch](https://togithub.com/rwinch)

</details>

<details>
<summary>spring-projects/spring-boot
(org.springframework.boot:spring-boot-starter-websocket)</summary>

###
[`v3.2.2`](https://togithub.com/spring-projects/spring-boot/releases/tag/v3.2.2)

#### :lady_beetle: Bug Fixes

- SslBundle implementations do not provide useful toString() results
[#&#8203;39167](https://togithub.com/spring-projects/spring-boot/issues/39167)
- JarEntry.getComment() returns incorrect result from NestedJarFile
instances
[#&#8203;39166](https://togithub.com/spring-projects/spring-boot/issues/39166)
- Mixing PEM and JKS certificate material in server.ssl properties does
not work
[#&#8203;39158](https://togithub.com/spring-projects/spring-boot/issues/39158)
- Having AspectJ and Micrometer on the classpath is not a strong enough
signal to enable support for Micrometer observation annotations
[#&#8203;39128](https://togithub.com/spring-projects/spring-boot/issues/39128)
- Actuator endpoints with no operations that use selectors are not
accessible when mapped to /
[#&#8203;39122](https://togithub.com/spring-projects/spring-boot/issues/39122)
- Spring Boot 3.2 app that uses WebFlux, Security, and Actuator may fail
to start due to a missing authentication manager
[#&#8203;39096](https://togithub.com/spring-projects/spring-boot/issues/39096)
- management.observations.http.server.requests.name no longer has any
effect
[#&#8203;39083](https://togithub.com/spring-projects/spring-boot/issues/39083)
- spring.rabbitmq.listener.stream.auto-startup property has no effect
[#&#8203;39078](https://togithub.com/spring-projects/spring-boot/issues/39078)
- Error mark in the log message for PatternParseException is in the
wrong place
[#&#8203;39075](https://togithub.com/spring-projects/spring-boot/issues/39075)
- Configuring server.jetty.max-connections has no effect
[#&#8203;39052](https://togithub.com/spring-projects/spring-boot/pull/39052)
- `@ConfigurationPropertiesBinding` converters that rely on initial
CharSequence to String conversion no longer work
[#&#8203;39051](https://togithub.com/spring-projects/spring-boot/issues/39051)
- Manifest attributes cannot be resolved with the new loader
implementation
[#&#8203;38996](https://togithub.com/spring-projects/spring-boot/issues/38996)
- Throwable from logging system initialization may result in the
application silently failing to start
[#&#8203;38963](https://togithub.com/spring-projects/spring-boot/issues/38963)
- When using Jetty, idle timeout for IO operations and delayed dispatch
cannot be set to less than 30000ms
[#&#8203;38960](https://togithub.com/spring-projects/spring-boot/issues/38960)
- spring-boot-maven-plugin repackage uber jar execution fails when jar
is put on WSL network drive
[#&#8203;38956](https://togithub.com/spring-projects/spring-boot/issues/38956)
- Oracle OJDBC BOM version is flagged not for production use
[#&#8203;38943](https://togithub.com/spring-projects/spring-boot/issues/38943)
- Connection leak when using jOOQ and spring.jooq.sql-dialect has not
been set
[#&#8203;38924](https://togithub.com/spring-projects/spring-boot/pull/38924)
- AutoConfigurationSorter does not always respect
`@AutoConfigureOrder`(Ordered.LOWEST_PRECEDENCE)
[#&#8203;38916](https://togithub.com/spring-projects/spring-boot/issues/38916)
- Containers are not started when using `@ImportTestcontainers`
[#&#8203;38913](https://togithub.com/spring-projects/spring-boot/issues/38913)
- Even when spring.security.user.name or spring.security.user.password
has been configured, user details auto-configuration still backs off
when resource server is on the classpath
[#&#8203;38864](https://togithub.com/spring-projects/spring-boot/issues/38864)
- MockRestServiceServerAutoConfiguration with RestTemplate and
RestClient together throws incorrect exception
[#&#8203;38820](https://togithub.com/spring-projects/spring-boot/issues/38820)

#### :notebook_with_decorative_cover: Documentation

- Improve "Sanitize Sensitive Values" section in reference documentation
[#&#8203;39199](https://togithub.com/spring-projects/spring-boot/issues/39199)
- Fix link to Log4j2's JDK logging adapter documentation
[#&#8203;39171](https://togithub.com/spring-projects/spring-boot/issues/39171)
- Update CRaC support status link
[#&#8203;39170](https://togithub.com/spring-projects/spring-boot/pull/39170)
- Remove entry for OCI starter as it is no longer maintained
[#&#8203;39165](https://togithub.com/spring-projects/spring-boot/issues/39165)
- Update links to Micrometer docs in metrics section of reference docs
[#&#8203;39149](https://togithub.com/spring-projects/spring-boot/issues/39149)
- Use the term "tags" in documentation consistently
[#&#8203;39125](https://togithub.com/spring-projects/spring-boot/pull/39125)
- Correct the documentation on injecting dependencies into
FailureAnalyzer implementations
[#&#8203;39100](https://togithub.com/spring-projects/spring-boot/issues/39100)
- Polish reference documentation
[#&#8203;38942](https://togithub.com/spring-projects/spring-boot/pull/38942)
- Document virtual threads limitations
[#&#8203;38883](https://togithub.com/spring-projects/spring-boot/issues/38883)

#### :hammer: Dependency Upgrades

- Upgrade to MySQL 8.3.0
[#&#8203;39081](https://togithub.com/spring-projects/spring-boot/issues/39081)
- Upgrade to Byte Buddy 1.14.11
[#&#8203;39184](https://togithub.com/spring-projects/spring-boot/issues/39184)
- Upgrade to Groovy 4.0.17
[#&#8203;39185](https://togithub.com/spring-projects/spring-boot/issues/39185)
- Upgrade to jOOQ 3.18.9
[#&#8203;39186](https://togithub.com/spring-projects/spring-boot/issues/39186)
- Upgrade to Kotlin 1.9.22
[#&#8203;39187](https://togithub.com/spring-projects/spring-boot/issues/39187)
- Upgrade to Lettuce 6.3.1.RELEASE
[#&#8203;39188](https://togithub.com/spring-projects/spring-boot/issues/39188)
- Upgrade to MariaDB 3.3.2
[#&#8203;38901](https://togithub.com/spring-projects/spring-boot/issues/38901)
- Upgrade to Micrometer 1.12.2
[#&#8203;38978](https://togithub.com/spring-projects/spring-boot/issues/38978)
- Upgrade to Micrometer Tracing 1.2.2
[#&#8203;38979](https://togithub.com/spring-projects/spring-boot/issues/38979)
- Upgrade to Neo4j Java Driver 5.15.0
[#&#8203;39136](https://togithub.com/spring-projects/spring-boot/issues/39136)
- Upgrade to Netty 4.1.105.Final
[#&#8203;39189](https://togithub.com/spring-projects/spring-boot/issues/39189)
- Upgrade to Pulsar 3.1.2
[#&#8203;39190](https://togithub.com/spring-projects/spring-boot/issues/39190)
- Upgrade to Pulsar Reactive 0.5.2
[#&#8203;39191](https://togithub.com/spring-projects/spring-boot/issues/39191)
- Upgrade to R2DBC MySQL 1.0.6
[#&#8203;39192](https://togithub.com/spring-projects/spring-boot/issues/39192)
- Upgrade to R2DBC Postgresql 1.0.4.RELEASE
[#&#8203;39193](https://togithub.com/spring-projects/spring-boot/issues/39193)
- Upgrade to R2DBC Proxy 1.1.4.RELEASE
[#&#8203;39194](https://togithub.com/spring-projects/spring-boot/issues/39194)
- Upgrade to Reactor Bom 2023.0.2
[#&#8203;38980](https://togithub.com/spring-projects/spring-boot/issues/38980)
- Upgrade to SLF4J 2.0.11
[#&#8203;39195](https://togithub.com/spring-projects/spring-boot/issues/39195)
- Upgrade to Spring Data Bom 2023.1.2
[#&#8203;38981](https://togithub.com/spring-projects/spring-boot/issues/38981)
- Upgrade to Spring Framework 6.1.3
[#&#8203;38982](https://togithub.com/spring-projects/spring-boot/issues/38982)
- Upgrade to Spring Pulsar 1.0.2
[#&#8203;38994](https://togithub.com/spring-projects/spring-boot/issues/38994)
- Upgrade to Spring WS 4.0.10
[#&#8203;39130](https://togithub.com/spring-projects/spring-boot/issues/39130)
- Upgrade to Tomcat 10.1.18
[#&#8203;39196](https://togithub.com/spring-projects/spring-boot/issues/39196)

#### :heart: Contributors

Thank you to all the contributors who worked on this release:

[@&#8203;724thomas](https://togithub.com/724thomas),
[@&#8203;BenchmarkingBuffalo](https://togithub.com/BenchmarkingBuffalo),
[@&#8203;FBibonne](https://togithub.com/FBibonne),
[@&#8203;Wzy19930507](https://togithub.com/Wzy19930507),
[@&#8203;amparab](https://togithub.com/amparab),
[@&#8203;dependabot](https://togithub.com/dependabot)\[bot],
[@&#8203;dreis2211](https://togithub.com/dreis2211),
[@&#8203;okohub](https://togithub.com/okohub),
[@&#8203;onobc](https://togithub.com/onobc),
[@&#8203;sdeleuze](https://togithub.com/sdeleuze),
[@&#8203;skcskitano](https://togithub.com/skcskitano), and
[@&#8203;tobias-lippert](https://togithub.com/tobias-lippert)

###
[`v3.2.1`](https://togithub.com/spring-projects/spring-boot/releases/tag/v3.2.1)

#### :star: New Features

- Cleanup java sources
[#&#8203;38877](https://togithub.com/spring-projects/spring-boot/issues/38877)

#### :lady_beetle: Bug Fixes

- HibernateJpaAutoConfiguration should be applied before
DataSourceTransactionManagerAutoConfiguration
[#&#8203;38880](https://togithub.com/spring-projects/spring-boot/issues/38880)
- META-INF entries are duplicated under BOOT-INF/classes causing
"Conflicting persistence unit definitions" error
[#&#8203;38862](https://togithub.com/spring-projects/spring-boot/issues/38862)
- logging.include-application-name has no effect when using log4j2
[#&#8203;38847](https://togithub.com/spring-projects/spring-boot/pull/38847)
- Pulsar authentication param properties cause IllegalStateException
with Pulsar Client 3.1.0
[#&#8203;38839](https://togithub.com/spring-projects/spring-boot/pull/38839)
- Child context created with SpringApplicationBuilder runs parents
runners
[#&#8203;38837](https://togithub.com/spring-projects/spring-boot/issues/38837)
- getSigners() info is lost for signed jars when using the new loader
implementation with requiresUnpack
[#&#8203;38833](https://togithub.com/spring-projects/spring-boot/issues/38833)
- TestContainers parallel initialization doesn't work properly
[#&#8203;38831](https://togithub.com/spring-projects/spring-boot/issues/38831)
- Zip file closed exceptions can be thrown due to StaticResourceJars
closing jars from cached connections
[#&#8203;38770](https://togithub.com/spring-projects/spring-boot/issues/38770)
- Multi-byte filenames in zip files can cause an endless loop in
ZipString.hash
[#&#8203;38751](https://togithub.com/spring-projects/spring-boot/issues/38751)
- Gradle task "bootJar" fails with "Failed to get permissions" when
using Gradle 8.6-milestone-1
[#&#8203;38741](https://togithub.com/spring-projects/spring-boot/issues/38741)
- Custom binding converters are ignored when working with collection
types
[#&#8203;38734](https://togithub.com/spring-projects/spring-boot/issues/38734)
- WebFlux and resource server auto-configuration may fail due to null
authentication manager
[#&#8203;38713](https://togithub.com/spring-projects/spring-boot/issues/38713)
- It is unclear that Docker Compose services have not been started as
one or more is already running
[#&#8203;38661](https://togithub.com/spring-projects/spring-boot/issues/38661)
- Spring Boot jar launcher does not work in folders containing certain
chars
[#&#8203;38660](https://togithub.com/spring-projects/spring-boot/issues/38660)
- FileNotFoundException is thrown eagerly from unused SSL bundles
[#&#8203;38659](https://togithub.com/spring-projects/spring-boot/issues/38659)
- NoUniqueBeanDefinitionFailureAnalyzer does not account for the fact
that missing '-parameters' may be the cause
[#&#8203;38652](https://togithub.com/spring-projects/spring-boot/issues/38652)
- Traces are propagated if tracing is disabled
[#&#8203;38641](https://togithub.com/spring-projects/spring-boot/issues/38641)
- Missing registry auto-configuration for JMS listener observation
support
[#&#8203;38613](https://togithub.com/spring-projects/spring-boot/issues/38613)
- Class loading fails on an interrupted thread causing
com.mongodb.event.ServerClosedEvent to fail to load when Mongo detects a
cluster change
[#&#8203;38611](https://togithub.com/spring-projects/spring-boot/issues/38611)
- Failures due to code not being compiled with '-parameters' are hard to
identify
[#&#8203;38603](https://togithub.com/spring-projects/spring-boot/issues/38603)
- System SSL certificates are not used by the Apache HTTP Client in a
RestTemplate built with RestTemplateBuilder
[#&#8203;38600](https://togithub.com/spring-projects/spring-boot/issues/38600)
- ZipFileSystem throws "java.util.zip.ZipException: read CEN tables
failed" with certain nested jars
[#&#8203;38595](https://togithub.com/spring-projects/spring-boot/issues/38595)
- Nested jar URLs cannot be split and reassembled resulting in errors
with projects that use this technique (such as JobRunr)
[#&#8203;38592](https://togithub.com/spring-projects/spring-boot/issues/38592)
- NoSuchMethodError can be thrown from Session.getCookie() due to binary
incompatibilty
[#&#8203;38589](https://togithub.com/spring-projects/spring-boot/issues/38589)
- management.metrics.tags has been deprecated without a replacement
working for all metrics
[#&#8203;38583](https://togithub.com/spring-projects/spring-boot/issues/38583)
- NegativeArraySizeException can be thrown from
org.springframework.boot.loader.zip.ZipContent$Loader
[#&#8203;38572](https://togithub.com/spring-projects/spring-boot/issues/38572)
- Migration form 3.1.5 to 3.2.0 : "Default" Tracer is not provided in
test anymore
[#&#8203;38568](https://togithub.com/spring-projects/spring-boot/issues/38568)
- TomcatWebServer stop doesn't close sockets for additional connectors
[#&#8203;38564](https://togithub.com/spring-projects/spring-boot/issues/38564)
- Port is already in use when using `@SpringBootTest` with a separate
management port and a mock web environment
[#&#8203;38554](https://togithub.com/spring-projects/spring-boot/issues/38554)
-   Keep-alive property causes processAot step to never finish [#&#82

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/apollographql/federation-jvm).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi44My4wIiwidXBkYXRlZEluVmVyIjoiMzcuMTM1LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIn0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
|
[com.google.protobuf:protoc](https://developers.google.com/protocol-buffers/)
([source](https://togithub.com/protocolbuffers/protobuf)) | `3.25.1` ->
`3.25.2` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/com.google.protobuf:protoc/3.25.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/com.google.protobuf:protoc/3.25.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/com.google.protobuf:protoc/3.25.1/3.25.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/com.google.protobuf:protoc/3.25.1/3.25.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[com.google.protobuf:protobuf-java](https://developers.google.com/protocol-buffers/)
([source](https://togithub.com/protocolbuffers/protobuf)) | `3.25.1` ->
`3.25.2` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/com.google.protobuf:protobuf-java/3.25.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/com.google.protobuf:protobuf-java/3.25.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/com.google.protobuf:protobuf-java/3.25.1/3.25.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/com.google.protobuf:protobuf-java/3.25.1/3.25.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>protocolbuffers/protobuf (com.google.protobuf:protoc)</summary>

###
[`v3.25.2`](https://togithub.com/protocolbuffers/protobuf/compare/v3.25.1...v3.25.2)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/apollographql/federation-jvm).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xMjcuMCIsInVwZGF0ZWRJblZlciI6IjM3LjEyNy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

`graphql-java` added support for `@oneOf` built-in directive.

Supersedes: #358

Federation tracing should only be enabled if the Router/Gateway sends
the proper `ftv1` header and value. Currently trace data is generated
even if the header is not specified which leads to unnecessary
computations of data that will ultimately be discarded by the
Router/Gateway.... If header is not specified, we should default to
`false` to avoid those unnecessary computations.

See: https://www.apollographql.com/docs/federation/metrics/

Supersedes: #368

* federation v2.6 - new `@policy` directive, see
[docs](https://www.apollographql.com/docs/federation/federated-types/federated-directives#policy)
for details

```graphql
directive @Policy(policies: [[federation__Policy!]!]!) on
  | FIELD_DEFINITION
  | OBJECT
  | INTERFACE
  | SCALAR
  | ENUM

scalar Policy
```

* federation v2.7 - update to `@override` definition (new `label`
argument), see
[docs](https://www.apollographql.com/docs/federation/federated-types/federated-directives#progressive-override)
for details

```graphql
directive @OverRide(from: String!, label: String) on FIELD_DEFINITION
```

---------

Co-authored-by: Trevor Scheer <[email protected]>

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[release-drafter/release-drafter](https://togithub.com/release-drafter/release-drafter)
| action | major | `v5` -> `v6` |

---

### Release Notes

<details>
<summary>release-drafter/release-drafter
(release-drafter/release-drafter)</summary>

###
[`v6`](https://togithub.com/release-drafter/release-drafter/compare/v5...v6)

[Compare
Source](https://togithub.com/release-drafter/release-drafter/compare/v5...v6)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/apollographql/federation-jvm).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNTMuMiIsInVwZGF0ZWRJblZlciI6IjM3LjE1My4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Fixes #380 

This restructures the scalar transformation logic to ensure that both
the type definition and wiring are added correctly if necessary. This
allows consumers to define the scalars in their schema, but not assign
runtime wiring. This can be nice to support other tools like linters or
graphql-faker that require the schema to be a valid schema file.