spring-projects/spring-boot v2.6.11 on GitHub

🐞 Bug Fixes

BasicJsonParser does not protect against deeply nested maps #32029
Misleading error message when using JarMode Layertools and the source is not an archive #31997
OptionalLiveReloadServer logs the wrong port number when it is configured to use an ephemeral port #31983
Servlet WebServerStartStopLifecycle doesn't set running to false on stop #31966
UnsupportedDataSourcePropertyException is thrown when attempting to set jdbcUrl for C3P0 #31920
Jar Handler never clears PROTOCOL_HANDLER system property #31870
BasicJsonParser can fail with a timeout or stackoverflow with malformed map JSON #31869
BasicJsonParser can fail with a stackoverflow exception #31868
Dependency management for REST Assured is incomplete #31864
The hash of spring-boot-jarmode-layertools.jar that's added to a fat jar doesn't match the hash of the equivalent published artifact #31862
ClassNotFoundException can be thrown for classes in nested jars when under GC pressure #31853
HealthContributor beans managed by a CompositeHealthContributor are recreated on each call #31676
Dev Tools restart failures caused by a too short quiet period are hard to diagnose #31579
management.endpoint.health.probes.add-additional-paths has no effect when configuration properties have already created the liveness and/or readiness groups #30612
JUL-based logging performed during close of application context is lost #9457

Update Static Content reference documentation to reflect the DefaultServlet no longer being enabled by default #32004
External configuration documentation uses incorrect placeholder syntax #31941
Some properties in the Common Application Properties appendix have no description #31916
server.reactive.session.cookie properties are not listed in the application properties appendix #31912
Review Git contribution documentation #31904
Metadata for 'spring.beaninfo.ignore' has incorrect SourceType #31898
Remove documentation and metadata references to ConfigFileApplicationListener #31895
Remove reference to nitrite-spring-boot-starter #31892
Remove reference to Azure Application Insights #31889
Fix links in documentations #31887
Fix typos in code and documentation #31734
Document that Undertow's record-request-start-time server option must be enabled for %D to work in access logging #31103
Documentation for Maven Plugin classifier has an unresolved external reference #29171
Example log output is out-of-date and inconsistent #28208
Update documentation on using H2C to consider running behind a proxy that's performing TLS termination #25855

We'd like to thank all the contributors who worked on this release!