From 5a2cd95ae1a1c7faa6357e0a44ef9cdb8da525e0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 4 Dec 2025 16:14:27 +0000 Subject: [PATCH] build(deps): bump org.springframework:spring-web from 6.2.12 to 7.0.0 Bumps [org.springframework:spring-web](https://github.com/spring-projects/spring-framework) from 6.2.12 to 7.0.0. - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.12...v7.0.0) --- updated-dependencies: - dependency-name: org.springframework:spring-web dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- build.gradle | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/build.gradle b/build.gradle index 33277f0..7dfa22e 100644 --- a/build.gradle +++ b/build.gradle @@ -71,10 +71,10 @@ subprojects { // Security constraints constraints { - implementation("org.springframework:spring-web:6.2.12") { + implementation("org.springframework:spring-web:7.0.1") { because("versions below 6.2.11 have security vulnerabilities including CVE-2024-38820 and CVE-2025-41249 - see dependabot #12, #24") } - implementation("org.springframework:spring-webmvc:6.2.12") { + implementation("org.springframework:spring-webmvc:7.0.1") { because("versions below 6.2.11 have security vulnerabilities including CVE-2025-41242 and CVE-2025-41249 - see dependabot #24, #247") } implementation("org.apache.tomcat.embed:tomcat-embed-core:11.0.14") {