Skip to content

chore(deps): Bump spring-ws-version from 5.0.1 to 5.0.2#23897

Merged
davsclaus merged 2 commits into
mainfrom
dependabot/maven/spring-ws-version-5.0.2
Jun 10, 2026
Merged

chore(deps): Bump spring-ws-version from 5.0.1 to 5.0.2#23897
davsclaus merged 2 commits into
mainfrom
dependabot/maven/spring-ws-version-5.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 10, 2026

Copy link
Copy Markdown
Contributor

Bumps spring-ws-version from 5.0.1 to 5.0.2.
Updates org.springframework.ws:spring-ws-core from 5.0.1 to 5.0.2

Release notes

Sourced from org.springframework.ws:spring-ws-core's releases.

v5.0.2

🐞 Bug Fixes

  • Fix cache expiry enforcement in WS-Security replay detection #1844
  • Add missing DestinationPolicy for WS-Addressing out-of-band destinations #1843
  • Ensure consistent parser usage in Jaxp13XPathTemplate for Stream and SAX sources #1842
  • Standardize exception messages for account status failures #1841
  • RSA PKCS#1 v1.5 key transport should be aligned with WSS4J #1840
  • Harmonize account status checks in X509AuthenticationProvider #1839
  • BSP compliance default should be aligned with WSS4J #1838
  • Unable to migrate from XwsSecurityInterceptor due to strict action checking #1813
  • AddressingEndpointInterceptor silently returns in-band response when out-of-band delivery fails #1807

🔨 Dependency Upgrades

  • Upgrade to JAXB 4.0.9 #1825
  • Upgrade to SAAJ 3.0.5 #1827
  • Upgrade to Spring Framework 7.0.8 #1821
  • Upgrade to Spring Security 7.0.6 #1822
Commits
  • 32a5deb Release v5.0.2
  • 49cae5d Upgrade to Spring Security 7.0.6
  • 6e1f312 Merge branch '4.1.x' into 5.0.x
  • 66b64c7 Upgrade to Spring Security 6.5.11
  • e4815a7 Merge branch '4.1.x' into 5.0.x
  • bf3d30a Fix WSS4J WS-Security replay detection for validation
  • 50a593c Merge branch '4.1.x' into 5.0.x
  • 5121a4e Harden WS-Addressing out-of-band reply destinations
  • ff9d455 Merge branch '4.1.x' into 5.0.x
  • eb8d66c Harden Jaxp13XPathTemplate against XXE on Stream and SAX sources
  • Additional commits viewable in compare view

Updates org.springframework.ws:spring-ws-support from 5.0.1 to 5.0.2

Release notes

Sourced from org.springframework.ws:spring-ws-support's releases.

v5.0.2

🐞 Bug Fixes

  • Fix cache expiry enforcement in WS-Security replay detection #1844
  • Add missing DestinationPolicy for WS-Addressing out-of-band destinations #1843
  • Ensure consistent parser usage in Jaxp13XPathTemplate for Stream and SAX sources #1842
  • Standardize exception messages for account status failures #1841
  • RSA PKCS#1 v1.5 key transport should be aligned with WSS4J #1840
  • Harmonize account status checks in X509AuthenticationProvider #1839
  • BSP compliance default should be aligned with WSS4J #1838
  • Unable to migrate from XwsSecurityInterceptor due to strict action checking #1813
  • AddressingEndpointInterceptor silently returns in-band response when out-of-band delivery fails #1807

🔨 Dependency Upgrades

  • Upgrade to JAXB 4.0.9 #1825
  • Upgrade to SAAJ 3.0.5 #1827
  • Upgrade to Spring Framework 7.0.8 #1821
  • Upgrade to Spring Security 7.0.6 #1822
Commits
  • 32a5deb Release v5.0.2
  • 49cae5d Upgrade to Spring Security 7.0.6
  • 6e1f312 Merge branch '4.1.x' into 5.0.x
  • 66b64c7 Upgrade to Spring Security 6.5.11
  • e4815a7 Merge branch '4.1.x' into 5.0.x
  • bf3d30a Fix WSS4J WS-Security replay detection for validation
  • 50a593c Merge branch '4.1.x' into 5.0.x
  • 5121a4e Harden WS-Addressing out-of-band reply destinations
  • ff9d455 Merge branch '4.1.x' into 5.0.x
  • eb8d66c Harden Jaxp13XPathTemplate against XXE on Stream and SAX sources
  • Additional commits viewable in compare view

Updates org.springframework.ws:spring-ws-security from 5.0.1 to 5.0.2

Release notes

Sourced from org.springframework.ws:spring-ws-security's releases.

v5.0.2

🐞 Bug Fixes

  • Fix cache expiry enforcement in WS-Security replay detection #1844
  • Add missing DestinationPolicy for WS-Addressing out-of-band destinations #1843
  • Ensure consistent parser usage in Jaxp13XPathTemplate for Stream and SAX sources #1842
  • Standardize exception messages for account status failures #1841
  • RSA PKCS#1 v1.5 key transport should be aligned with WSS4J #1840
  • Harmonize account status checks in X509AuthenticationProvider #1839
  • BSP compliance default should be aligned with WSS4J #1838
  • Unable to migrate from XwsSecurityInterceptor due to strict action checking #1813
  • AddressingEndpointInterceptor silently returns in-band response when out-of-band delivery fails #1807

🔨 Dependency Upgrades

  • Upgrade to JAXB 4.0.9 #1825
  • Upgrade to SAAJ 3.0.5 #1827
  • Upgrade to Spring Framework 7.0.8 #1821
  • Upgrade to Spring Security 7.0.6 #1822
Commits
  • 32a5deb Release v5.0.2
  • 49cae5d Upgrade to Spring Security 7.0.6
  • 6e1f312 Merge branch '4.1.x' into 5.0.x
  • 66b64c7 Upgrade to Spring Security 6.5.11
  • e4815a7 Merge branch '4.1.x' into 5.0.x
  • bf3d30a Fix WSS4J WS-Security replay detection for validation
  • 50a593c Merge branch '4.1.x' into 5.0.x
  • 5121a4e Harden WS-Addressing out-of-band reply destinations
  • ff9d455 Merge branch '4.1.x' into 5.0.x
  • eb8d66c Harden Jaxp13XPathTemplate against XXE on Stream and SAX sources
  • Additional commits viewable in compare view

Updates org.springframework.ws:spring-ws-test from 5.0.1 to 5.0.2

Release notes

Sourced from org.springframework.ws:spring-ws-test's releases.

v5.0.2

🐞 Bug Fixes

  • Fix cache expiry enforcement in WS-Security replay detection #1844
  • Add missing DestinationPolicy for WS-Addressing out-of-band destinations #1843
  • Ensure consistent parser usage in Jaxp13XPathTemplate for Stream and SAX sources #1842
  • Standardize exception messages for account status failures #1841
  • RSA PKCS#1 v1.5 key transport should be aligned with WSS4J #1840
  • Harmonize account status checks in X509AuthenticationProvider #1839
  • BSP compliance default should be aligned with WSS4J #1838
  • Unable to migrate from XwsSecurityInterceptor due to strict action checking #1813
  • AddressingEndpointInterceptor silently returns in-band response when out-of-band delivery fails #1807

🔨 Dependency Upgrades

  • Upgrade to JAXB 4.0.9 #1825
  • Upgrade to SAAJ 3.0.5 #1827
  • Upgrade to Spring Framework 7.0.8 #1821
  • Upgrade to Spring Security 7.0.6 #1822
Commits
  • 32a5deb Release v5.0.2
  • 49cae5d Upgrade to Spring Security 7.0.6
  • 6e1f312 Merge branch '4.1.x' into 5.0.x
  • 66b64c7 Upgrade to Spring Security 6.5.11
  • e4815a7 Merge branch '4.1.x' into 5.0.x
  • bf3d30a Fix WSS4J WS-Security replay detection for validation
  • 50a593c Merge branch '4.1.x' into 5.0.x
  • 5121a4e Harden WS-Addressing out-of-band reply destinations
  • ff9d455 Merge branch '4.1.x' into 5.0.x
  • eb8d66c Harden Jaxp13XPathTemplate against XXE on Stream and SAX sources
  • Additional commits viewable in compare view

Updates org.springframework.ws:spring-xml from 5.0.1 to 5.0.2

Release notes

Sourced from org.springframework.ws:spring-xml's releases.

v5.0.2

🐞 Bug Fixes

  • Fix cache expiry enforcement in WS-Security replay detection #1844
  • Add missing DestinationPolicy for WS-Addressing out-of-band destinations #1843
  • Ensure consistent parser usage in Jaxp13XPathTemplate for Stream and SAX sources #1842
  • Standardize exception messages for account status failures #1841
  • RSA PKCS#1 v1.5 key transport should be aligned with WSS4J #1840
  • Harmonize account status checks in X509AuthenticationProvider #1839
  • BSP compliance default should be aligned with WSS4J #1838
  • Unable to migrate from XwsSecurityInterceptor due to strict action checking #1813
  • AddressingEndpointInterceptor silently returns in-band response when out-of-band delivery fails #1807

🔨 Dependency Upgrades

  • Upgrade to JAXB 4.0.9 #1825
  • Upgrade to SAAJ 3.0.5 #1827
  • Upgrade to Spring Framework 7.0.8 #1821
  • Upgrade to Spring Security 7.0.6 #1822
Commits
  • 32a5deb Release v5.0.2
  • 49cae5d Upgrade to Spring Security 7.0.6
  • 6e1f312 Merge branch '4.1.x' into 5.0.x
  • 66b64c7 Upgrade to Spring Security 6.5.11
  • e4815a7 Merge branch '4.1.x' into 5.0.x
  • bf3d30a Fix WSS4J WS-Security replay detection for validation
  • 50a593c Merge branch '4.1.x' into 5.0.x
  • 5121a4e Harden WS-Addressing out-of-band reply destinations
  • ff9d455 Merge branch '4.1.x' into 5.0.x
  • eb8d66c Harden Jaxp13XPathTemplate against XXE on Stream and SAX sources
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jun 10, 2026
@github-actions

Copy link
Copy Markdown
Contributor

🌟 Thank you for your contribution to the Apache Camel project! 🌟
🤖 CI automation will test this PR automatically.

🐫 Apache Camel Committers, please review the following items:

  • First-time contributors require MANUAL approval for the GitHub Actions to run
  • You can use the command /component-test (camel-)component-name1 (camel-)component-name2.. to request a test from the test bot although they are normally detected and executed by CI.
  • You can label PRs using skip-tests and test-dependents to fine-tune the checks executed by this PR.
  • Build and test logs are available in the summary page. Only Apache Camel committers have access to the summary.

⚠️ Be careful when sharing logs. Review their contents before sharing them publicly.

@apupier

apupier commented Jun 10, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jun 10, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

dependabot Bot and others added 2 commits June 10, 2026 11:42
Bumps `spring-ws-version` from 5.0.1 to 5.0.2.

Updates `org.springframework.ws:spring-ws-core` from 5.0.1 to 5.0.2
- [Release notes](https://github.com/spring-projects/spring-ws/releases)
- [Commits](spring-projects/spring-ws@v5.0.1...v5.0.2)

Updates `org.springframework.ws:spring-ws-support` from 5.0.1 to 5.0.2
- [Release notes](https://github.com/spring-projects/spring-ws/releases)
- [Commits](spring-projects/spring-ws@v5.0.1...v5.0.2)

Updates `org.springframework.ws:spring-ws-security` from 5.0.1 to 5.0.2
- [Release notes](https://github.com/spring-projects/spring-ws/releases)
- [Commits](spring-projects/spring-ws@v5.0.1...v5.0.2)

Updates `org.springframework.ws:spring-ws-test` from 5.0.1 to 5.0.2
- [Release notes](https://github.com/spring-projects/spring-ws/releases)
- [Commits](spring-projects/spring-ws@v5.0.1...v5.0.2)

Updates `org.springframework.ws:spring-xml` from 5.0.1 to 5.0.2
- [Release notes](https://github.com/spring-projects/spring-ws/releases)
- [Commits](spring-projects/spring-ws@v5.0.1...v5.0.2)

---
updated-dependencies:
- dependency-name: org.springframework.ws:spring-ws-core
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.ws:spring-ws-support
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.ws:spring-ws-security
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: org.springframework.ws:spring-ws-test
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: org.springframework.ws:spring-xml
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Spring WS 5.0.2 added supports(URI, UriSource) as the primary abstract
method on WebServiceMessageSender, deprecating the single-arg supports(URI).

- Implement supports(URI, UriSource) in CamelDirectSender
- Implement supports(URI, UriSource) in InMemoryWebServiceMessageSender2
- Switch test XML configs to use InMemoryWebServiceMessageSender2 since
  the third-party InMemoryWebServiceMessageSender (spring-ws-test 0.22)
  does not implement the new method

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Claus Ibsen <claus.ibsen@gmail.com>
@davsclaus davsclaus force-pushed the dependabot/maven/spring-ws-version-5.0.2 branch from ad95e40 to 9a9c8db Compare June 10, 2026 09:42
@davsclaus davsclaus merged commit ea8c4d4 into main Jun 10, 2026
5 checks passed
@dependabot dependabot Bot deleted the dependabot/maven/spring-ws-version-5.0.2 branch June 10, 2026 11:59
@github-actions

Copy link
Copy Markdown
Contributor

🧪 CI tested the following changed modules:

  • components/camel-spring-parent/camel-spring-ws
  • parent

POM dependency changes: targeted tests included

Changed properties: spring-ws-version

Modules affected by dependency changes (2)
  • :camel-spring-ws
  • :camel-spring-xml
All tested modules (230 modules)
  • Camel :: AI :: LangChain4j :: Agent
  • Camel :: AI :: LangChain4j :: Chat
  • Camel :: AI :: LangChain4j :: Embedding
  • Camel :: AI :: LangChain4j :: EmbeddingStore
  • Camel :: AI :: LangChain4j :: Tools
  • Camel :: AI :: Neo4j
  • Camel :: AI :: OpenAI
  • Camel :: AI :: Qdrant
  • Camel :: AMQP
  • Camel :: AS2 :: Component
  • Camel :: ASN.1
  • Camel :: AWS Cloutrail
  • Camel :: AWS Redshift Data
  • Camel :: AWS Rekognition
  • Camel :: AWS Security Hub
  • Camel :: AWS Step Functions
  • Camel :: AWS Timestream
  • Camel :: AWS2 Athena
  • Camel :: AWS2 Bedrock
  • Camel :: AWS2 CW
  • Camel :: AWS2 Comprehend
  • Camel :: AWS2 DDB
  • Camel :: AWS2 EC2
  • Camel :: AWS2 ECS
  • Camel :: AWS2 EKS
  • Camel :: AWS2 Eventbridge
  • Camel :: AWS2 IAM
  • Camel :: AWS2 KMS
  • Camel :: AWS2 Kinesis
  • Camel :: AWS2 Lambda
  • Camel :: AWS2 MQ
  • Camel :: AWS2 MSK
  • Camel :: AWS2 Parameter Store
  • Camel :: AWS2 Polly
  • Camel :: AWS2 S3
  • Camel :: AWS2 S3 Vectors
  • Camel :: AWS2 SES
  • Camel :: AWS2 SNS
  • Camel :: AWS2 SQS
  • Camel :: AWS2 STS
  • Camel :: AWS2 Secrets Manager
  • Camel :: AWS2 Textract
  • Camel :: AWS2 Translate
  • Camel :: ActiveMQ 5.x
  • Camel :: ActiveMQ 6.x
  • Camel :: Atmosphere WebSocket Servlet
  • Camel :: Avro
  • Camel :: Avro RPC
  • Camel :: Azure :: Files
  • Camel :: Barcode
  • Camel :: Base64
  • Camel :: BeanIO
  • Camel :: Bindy
  • Camel :: CBOR
  • Camel :: CM SMS
  • Camel :: CSV
  • Camel :: CXF :: Common :: Spring
  • Camel :: CXF :: REST
  • Camel :: CXF :: REST :: Spring
  • Camel :: CXF :: SOAP
  • Camel :: CXF :: SOAP :: Spring
  • Camel :: CXF :: Transport
  • Camel :: CXF :: Transport :: Spring
  • Camel :: Caffeine
  • Camel :: ClickUp
  • Camel :: Common Telemetry
  • Camel :: Common Tracing (deprecated)
  • Camel :: Consul
  • Camel :: Crypto
  • Camel :: Crypto PGP
  • Camel :: DHIS2
  • Camel :: DNS
  • Camel :: DataSonnet
  • Camel :: Dynamic Router
  • Camel :: Ehcache
  • Camel :: Exec
  • Camel :: FHIR
  • Camel :: FTP
  • Camel :: Fastjson
  • Camel :: File Watch
  • Camel :: FlatPack
  • Camel :: Fory
  • Camel :: Freemarker
  • Camel :: Google :: Sheets
  • Camel :: Google :: Vertex AI
  • Camel :: GraphQL
  • Camel :: Grok
  • Camel :: Groovy
  • Camel :: Gson
  • Camel :: HL7
  • Camel :: HTTP
  • Camel :: HazelCast
  • Camel :: Huawei Cloud :: FaceRecognition
  • Camel :: Huawei Cloud :: ImageRecognition
  • Camel :: Huawei Cloud :: SimpleNotification
  • Camel :: ISO-8583
  • Camel :: Infinispan :: Embedded
  • Camel :: Infinispan :: Remote
  • Camel :: IronMQ
  • Camel :: JAXB
  • Camel :: JBang :: MCP
  • Camel :: JBang :: Plugin :: Route Parser
  • Camel :: JBang :: Plugin :: TUI
  • Camel :: JBang :: Plugin :: Validate
  • Camel :: JCache
  • Camel :: JDBC
  • Camel :: JMS
  • Camel :: JOOQ
  • Camel :: JPA
  • Camel :: JQ
  • Camel :: JSON-B
  • Camel :: JSon Path
  • Camel :: JSonApi
  • Camel :: JTA
  • Camel :: Jackson
  • Camel :: Jackson 3
  • Camel :: Jackson 3 Avro
  • Camel :: Jackson 3 Protobuf
  • Camel :: Jackson 3 XML
  • Camel :: Jackson Avro
  • Camel :: Jackson Protobuf
  • Camel :: Jackson XML
  • Camel :: Jasypt
  • Camel :: Java DSL with jOOR
  • Camel :: Jetty
  • Camel :: Jetty :: Common
  • Camel :: Jsch
  • Camel :: Kafka
  • Camel :: Kamelet
  • Camel :: Keycloak
  • Camel :: Knative HTTP
  • Camel :: Kubernetes
  • Camel :: LZF
  • Camel :: Launcher :: Container
  • Camel :: LevelDB (deprecated)
  • Camel :: Long-Running-Action
  • Camel :: MDC
  • Camel :: MINA
  • Camel :: Mail
  • Camel :: Mail :: Microsoft OAuth
  • Camel :: Maven Plugins :: Camel Maven Plugin
  • Camel :: Maven Plugins :: OpenApi REST DSL Generator
  • Camel :: Maven Plugins :: OpenApi REST DSL Generator SUCCESS
  • Camel :: Metrics
  • Camel :: MicroProfile :: Fault Tolerance
  • Camel :: Micrometer
  • Camel :: Micrometer :: Observability 2
  • Camel :: Micrometer :: Observation (deprecated)
  • Camel :: Micrometer :: Prometheus
  • Camel :: MinIO
  • Camel :: MongoDB
  • Camel :: MongoDB GridFS
  • Camel :: Netty
  • Camel :: Netty HTTP
  • Camel :: OAIPMH
  • Camel :: OAuth
  • Camel :: Observability Services
  • Camel :: Once
  • Camel :: OpenAPI :: Validator
  • Camel :: OpenApi Java
  • Camel :: OpenTelemetry (deprecated)
  • Camel :: Opentelemetry 2
  • Camel :: Opentelemetry Metrics
  • Camel :: OptaPlanner
  • Camel :: PQC
  • Camel :: Platform HTTP
  • Camel :: Platform HTTP :: Jolokia
  • Camel :: Platform HTTP :: Main
  • Camel :: Platform HTTP :: Vert.x
  • Camel :: Protobuf
  • Camel :: Quartz
  • Camel :: QuickFIX/J
  • Camel :: REST OpenApi
  • Camel :: Resilience4j
  • Camel :: Resilience4j :: Micrometer
  • Camel :: SAP NetWeaver
  • Camel :: SMPP
  • Camel :: SOAP
  • Camel :: SQL
  • Camel :: SWIFT
  • Camel :: Salesforce
  • Camel :: Salesforce :: CodeGen
  • Camel :: Salesforce :: Maven Plugin
  • Camel :: Saxon
  • Camel :: Servlet
  • Camel :: Slack
  • Camel :: SnakeYAML
  • Camel :: Spring AI :: Chat
  • Camel :: Spring AI :: Tools
  • Camel :: Spring Batch
  • Camel :: Spring Cloud Config
  • Camel :: Spring JDBC
  • Camel :: Spring LDAP
  • Camel :: Spring Main
  • Camel :: Spring RabbitMQ
  • Camel :: Spring Redis
  • Camel :: Spring Security
  • Camel :: Spring Web Services
  • Camel :: Spring XML
  • Camel :: StAX
  • Camel :: Syslog
  • Camel :: Tar File
  • Camel :: Telegram
  • Camel :: Telemetry :: Dev
  • Camel :: Test :: Main :: JUnit5
  • Camel :: Test :: Main :: JUnit6
  • Camel :: Test :: Spring :: JUnit5
  • Camel :: Thrift
  • Camel :: Thymeleaf
  • Camel :: Tika
  • Camel :: Undertow
  • Camel :: Undertow Spring Security
  • Camel :: UniVocity Parsers
  • Camel :: Velocity
  • Camel :: Vert.x :: HTTP
  • Camel :: Webhook
  • Camel :: Whatsapp
  • Camel :: XJ
  • Camel :: XML DSL Jaxb :: Test :: Definition
  • Camel :: XML DSL Jaxb :: Test :: Spring
  • Camel :: XML DSL with camel-xml-io
  • Camel :: XML DSL with camel-xml-jaxb
  • Camel :: XML Security
  • Camel :: XSLT Saxon
  • Camel :: YAML DSL :: Validator
  • Camel :: YAML DSL :: Validator Maven Plugin
  • Camel :: Zip File
  • Camel :: Zookeeper
  • Camel :: Zookeeper Master
  • Camel :: csimple jOOR (deprecated)

⚙️ View full build and test results

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

components core-build-and-dependencies dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants