Skip to content

Bump org.springframework.cloud:spring-cloud-gateway-server-webflux from 4.3.2 to 5.0.3 in /service - #1546

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/service/org.springframework.cloud-spring-cloud-gateway-server-webflux-5.0.3
Open

Bump org.springframework.cloud:spring-cloud-gateway-server-webflux from 4.3.2 to 5.0.3 in /service#1546
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/service/org.springframework.cloud-spring-cloud-gateway-server-webflux-5.0.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 28, 2026

Copy link
Copy Markdown
Contributor

Bumps org.springframework.cloud:spring-cloud-gateway-server-webflux from 4.3.2 to 5.0.3.

Release notes

Sourced from org.springframework.cloud:spring-cloud-gateway-server-webflux's releases.

5.0.3

Security

  • CVE-2026-47879 — Spring Cloud Gateway SSRF and native file access with gRPC

What's Changed

New Contributors

Full Changelog: spring-cloud/spring-cloud-gateway@v5.0.2...v5.0.3

5.0.2

🔒 CVEs

⭐ New Features

  • Enable body filter codec encoding customization via CodecCustomizer #4151
  • Adds StripContextPath filter #4089

🐞 Bug Fixes

  • RewriteFunction nullability in Spring Boot 4 #4061
  • AbstractProxyExchange takes into account MediaType parameters #3948

📔 Documentation

  • docs(server-webflux): updating gateway actuator documentation as per … #4163

... (truncated)

Commits
  • dd7de54 Release 5.0.3
  • 78eaf2b Formatting
  • 6c53fd1 Require a property to be set for file grpc proto files
  • 3b739d5 Update versions for 2025.1.3-INTERNAL-SNAPSHOT
  • c73b370 Add commercial release CI files [skip actions]
  • b0d6a52 Merge branch 'main' of github.com:spring-cloud/spring-cloud-gateway
  • 57e4815 Use Schedulers.boundedElastic() in test so BlockHound does not complain, and ...
  • 100f429 Avoid draining failed streaming proxy responses (#4217)
  • 254bffc Add warn logging when WebSocket message receive fails (#4134)
  • bf968ab Add missing test scope to spring-boot-resttestclient (#4257)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.springframework.cloud:spring-cloud-gateway-server-webflux](https://github.com/spring-cloud/spring-cloud-gateway) from 4.3.2 to 5.0.3.
- [Release notes](https://github.com/spring-cloud/spring-cloud-gateway/releases)
- [Changelog](https://github.com/spring-cloud/spring-cloud-gateway/blob/main/release-train-settings.xml)
- [Commits](spring-cloud/spring-cloud-gateway@v4.3.2...v5.0.3)

---
updated-dependencies:
- dependency-name: org.springframework.cloud:spring-cloud-gateway-server-webflux
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 28, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 28, 2026 00:44
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants