Merge branch 'master' of https://gitbox.apache.org/repos/asf/commons-configuration
diff --git a/pom.xml b/pom.xml
index cb3c918..b92e169 100644
--- a/pom.xml
+++ b/pom.xml
@@ -566,7 +566,7 @@
<log4j.version>2.23.1</log4j.version>
<slf4j.version>2.0.12</slf4j.version>
<!-- Spring 6 requires Java 17 -->
- <spring.version>5.3.32</spring.version>
+ <spring.version>5.3.33</spring.version>
<japicmp.skip>false</japicmp.skip>
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index ae5c6cc..83aca3f 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -31,6 +31,7 @@
<!-- UPDATE -->
<action type="update" dev="ggregory" due-to="Dependabot">Bump jackson-databind from 2.16.1 to 2.17.0 #297, #303, #326, #331, #340, #378.</action>
<action type="update" dev="ggregory" due-to="Dependabot">Bump log4j.version from 2.23.0 to 2.23.1 #379.</action>
+ <action type="update" dev="ggregory" due-to="Dependabot, Gary Gregory">Bump spring.version from 5.3.32 to 5.3.33 #380.</action>
</release>
<release version="2.10.0" date="2024-03-06" description="Minor release with new features and updated dependencies; requires Java 8 or above.">
<!-- FIX -->
