Spring Integration6.3.15

🐞 Bug Fixes

• CVE-2026-40987: Remote-file synchronizer writes server-supplied filename under localDirectory without canonicalization

🔨 Dependency Upgrades

• Bump org.springframework.retry:spring-retry from 2.0.12 to 2.0.12.1
• Bump org.springframework.data:spring-data-bom from 2024.0.16 to 2024.0.17
• Bump io.micrometer:micrometer-tracing-bom from 1.3.16 to 1.3.17
• Bump org.springframework.kafka:spring-kafka-bom from 3.2.13 to 3.2.14
• Bump org.springframework.ws:spring-ws-bom from 4.0.19-SNAPSHOT to 4.0.19
• Bump org.springframework.amqp:spring-amqp-bom from 3.1.15 to 3.1.16
• Bump io.projectreactor:reactor-bom from 2023.0.23 to 2023.0.24
• Bump org.springframework.graphql:spring-graphql from 1.3.8 to 1.3.9
• Bump org.springframework:spring-framework-bom from 6.1.27 to 6.1.28
• Bump io.micrometer:micrometer-bom from 1.13.18 to 1.13.19
• Bump com.sun.xml.bind:jaxb-impl from 4.0.7 to 4.0.8
• Bump gradle-wrapper from 8.14.4 to 8.14.5
• Bump org.apache.groovy:groovy-bom from 4.0.31 to 4.0.32
• Bump graalvmVersion from 23.1.10 to 23.1.11
• Bump org.springframework:spring-framework-bom from 6.1.26 to 6.1.27
• Bump com.sun.xml.bind:jaxb-impl from 4.0.6 to 4.0.7
• Bump org.apache.groovy:groovy-bom from 4.0.30 to 4.0.31
• Bump org.springframework:spring-framework-bom from 6.1.25 to 6.1.26