Skip to content

Update dependency org.springframework.security:spring-security-config to v7 - #46

Closed
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/major-spring-security
Closed

Update dependency org.springframework.security:spring-security-config to v7#46
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/major-spring-security

Conversation

@renovate

@renovate renovate Bot commented Nov 21, 2022 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
org.springframework.security:spring-security-config (source) 5.6.12 → 7.0.4 age confidence

Release Notes

spring-projects/spring-security (org.springframework.security:spring-security-config)

v7.0.4

Compare Source

⭐ New Features

  • Update RestTemplateBuilder usage in opaque-token.adoc #​18836

🪲 Bug Fixes

  • Fix GrantedAuthority.authority null in AuthoritiesAuthorizationManager #​18784
  • Add Jackson Mixin for WebAuthnAuthentication #​18878
  • Add Missing OnCommitedResponseWrapper Header Overrides #​18799
  • Document the change in dependency coordinates with Spring Security 7 #​18773
  • Ensure tests clear AuthorizationServerContextHolder #​18768
  • Fix CookieRequestCache parameters #​18864
  • Fix Flaky Crypto Tests #​18842
  • Fix Jackson Deserializer for AuthenticationExtensionsClientOutputs #​18897
  • HttpMessageConverterAuthenticationSuccessHandler Supports Jackson 3 #​18834
  • OAuth2DeviceVerificationEndpointFilter should be applied after AuthorizationFilter #​18873
  • Restore upgradeEncoding condition in DaoAuthenticationProvider #​18788
  • saveAuthenticationRequest should read relayState from authenticationRequest #​18884
  • SecurityExpressionRoot#hasAuthority should delegate to AuthorizationManagerFactory#hasAuthority #​18487
  • ServerHttpSecurityConfiguration should not set userDetailsPasswordService to a null value #​18276
  • TokenBasedRememberMeServices documentation snippets should compile #​18642
  • Update request-matcher XML property to support PathPatternRequestMatcher #​18737

🔨 Dependency Upgrades

  • Bump @antora/collector-extension from 1.0.2 to 1.0.3 in /docs #​18853
  • Bump actions/upload-artifact from 6.0.0 to 7.0.0 #​18810
  • Bump ch.qos.logback:logback-classic from 1.5.29 to 1.5.32 #​18752
  • Bump com.webauthn4j:webauthn4j-core from 0.31.0.RELEASE to 0.31.1.RELEASE #​18830
  • Bump io.projectreactor:reactor-bom from 2025.0.3 to 2025.0.4 #​18877
  • Bump org-apache-maven-resolver from 1.9.25 to 1.9.26 #​18751
  • Bump org-apache-maven-resolver from 1.9.26 to 1.9.27 #​18792
  • Bump org.apache.maven:maven-resolver-provider from 3.9.12 to 3.9.13 #​18861
  • Bump org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14 #​18887
  • Bump org.junit:junit-bom from 6.0.2 to 6.0.3 #​18743
  • Bump org.springframework.data:spring-data-bom from 2025.1.3 to 2025.1.4 #​18904
  • Bump org.springframework:spring-framework-bom from 7.0.4 to 7.0.5 #​18764
  • Bump org.springframework:spring-framework-bom from 7.0.5 to 7.0.6 #​18905
  • Update Antora UI Spring to v0.4.26 #​18893
  • Update to spring-security-release-tools 1.0.15 #​18909

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​busoco-sjb, @​making, @​meliezer, @​ngocnhan-tran1996, @​rwinch, @​sephiroth-j, @​therepanic, @​thuri, and @​ziqin

v7.0.3

Compare Source

⭐ New Features

  • Fix Javadoc warnings in spring-security-web #​18473
  • Fix/gradle 9 deprecations #​18485
  • Fix/gradle 9 deprecations #​18477
  • Replace method call with 'Builder.configureMessageConverters()' #​18378
  • Replacing use of deprecated 'check' in authorization documentation #​18390
  • Use DefaultParameterNameDiscoverer#getSharedInstance #​18481

🪲 Bug Fixes

  • Authorization Server fails to start with multiple PasswordEncoder beans #​18645
  • BearerTokenAuthenticationEntryPoint uses context path #​18528
  • Create SHA-1 MessageDigest for every new check request in Compromised Password Checker #​18594
  • Document Client PKCE settings #​18304
  • Fix docs typo X-Requested-By -> X-Requested-With #​18123
  • Fix Formatting in mfa.adoc #​18134
  • Fix typo in documentation #​18344
  • Fix typos #​18121

🔨 Dependency Upgrades

  • Bump ch.qos.logback:logback-classic from 1.5.22 to 1.5.24 #​18384
  • Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.28 #​18684
  • Bump ch.qos.logback:logback-classic from 1.5.28 to 1.5.29 #​18711
  • Bump com.fasterxml.jackson:jackson-bom from 2.20.1 to 2.20.2 #​18660
  • Bump com.webauthn4j:webauthn4j-core from 0.29.7.RELEASE to 0.31.0.RELEASE #​18687
  • Bump gradle-wrapper from 8.14 to 8.14.4 #​18705
  • Bump io.mockk:mockk from 1.14.7 to 1.14.9 #​18681
  • Bump io.projectreactor:reactor-bom from 2025.0.1 to 2025.0.2 #​18658
  • Bump io.projectreactor:reactor-bom from 2025.0.2 to 2025.0.3 #​18717
  • Bump io.spring.develocity.conventions from 0.0.24 to 0.0.25 #​18683
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.13 to 1.0.14 #​18725
  • Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.4 to 4.0.5 #​18706
  • Bump org-apache-maven-resolver from 1.9.24 to 1.9.25 #​18309
  • Bump org-aspectj from 1.9.25 to 1.9.25.1 #​18326
  • Bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.5.2 #​18346
  • Bump org.apache.maven:maven-resolver-provider from 3.9.11 to 3.9.12 #​18327
  • Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 #​18682
  • Bump org.junit:junit-bom from 6.0.1 to 6.0.2 #​18385
  • Bump org.springframework.data:spring-data-bom from 2025.1.1 to 2025.1.2 #​18655
  • Bump org.springframework.ldap:spring-ldap-core from 4.0.0 to 4.0.1 #​18316
  • Bump org.springframework.ldap:spring-ldap-core from 4.0.1 to 4.0.2 #​18733
  • Bump org.springframework:spring-framework-bom from 7.0.3 to 7.0.4 #​18732
  • Bump org.springframework:spring-framework-bom from 7.0.3-SNAPSHOT to 7.0.4-SNAPSHOT #​18657
  • Bump spring-io/spring-doc-actions from 0.0.20 to 0.0.22 #​18651
  • Bump tools.jackson:jackson-bom from 3.0.3 to 3.0.4 #​18659
  • Update Antora UI Spring to v0.4.25 #​18249
  • Update to Spring Framework 7.0.3 #​18667
  • Update to spring-data-bom 2025.1.3 #​18735

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Been24, @​Fr05ty-hub, @​Kehrlann, @​Rigu1, @​bloomsei, @​martinboulais, @​ngocnhan-tran1996, @​paulvas, @​rwinch, @​therepanic, and @​vincentstradiot

v7.0.2

Compare Source

🪲 Bug Fixes

  • AuthorizationWebProxyConfiguration should only be active when both spring-security-web and spring-webmvc are on the classpath #​18315

v7.0.1

Compare Source

⭐ New Features

  • Stop deploying JavaDoc outside of Antora #​18200

🪲 Bug Fixes

  • An unexpected dependency appeared for spring-security-config of spring-security-web #​18307
  • Fix "typ" header value in NimbusJwtEncoder-encoded JWT #​18270
  • Fix broken link to Spring Boot docs #​18236
  • Fix documentation resource server sample title #​18231
  • Fix MyCustomDsl to use csrf(Customizer) instead of removed csrf().disabled() #​18223
  • Fix typo in AnnotationTemplateExpressionDefaults documentation #​18255
  • Fix typos in documentation depenendencies->dependencies #​18209
  • NimbusJwtEncoder produces JWT with wrong "typ" header value #​18269
  • OAuth2AuthorizationEndpointFilter should be applied after AuthorizationFilter #​18251
  • Remove requireProofKey warning for non-auth-code flows #​18221
  • Remove throws from MyCustomDsl in docs #​18224

🔨 Dependency Upgrades

  • Bump ch.qos.logback:logback-classic from 1.5.20 to 1.5.21 #​18214
  • Bump ch.qos.logback:logback-classic from 1.5.21 to 1.5.22 #​18311
  • Bump com.fasterxml.jackson:jackson-bom from 2.20.0 to 2.20.1 #​18245
  • Bump com.unboundid:unboundid-ldapsdk from 7.0.3 to 7.0.4 #​18262
  • Bump io.micrometer:micrometer-observation from 1.14.12 to 1.14.13 #​18189
  • Bump io.micrometer:micrometer-observation from 1.14.13 to 1.14.14 #​18277
  • Bump io.mockk:mockk from 1.14.6 to 1.14.7 #​18274
  • Bump io.projectreactor:reactor-bom from 2025.0.0 to 2025.0.1 #​18289
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.10 to 1.0.13 #​18187
  • Bump org-aspectj from 1.9.24 to 1.9.25 #​18186
  • Bump org.apache.kerby:kerb-simplekdc from 2.1.0 to 2.1.1 #​18215
  • Bump org.junit:junit-bom from 6.0.0 to 6.0.1 #​18188
  • Bump org.springframework.data:spring-data-bom from 2025.1.0 to 2025.1.1 #​18312
  • Bump org.springframework:spring-framework-bom from 7.0.0 to 7.0.1 #​18213
  • Bump org.springframework:spring-framework-bom from 7.0.1 to 7.0.2 #​18310
  • Bump tools.jackson:jackson-bom from 3.0.1 to 3.0.2 #​18212
  • Bump tools.jackson:jackson-bom from 3.0.2 to 3.0.3 #​18244

🔩 Build Updates

  • Add Test for ServletRequestPathUtils.parseAndCache(method=null) #​18166
  • Bump antora from 3.2.0-alpha.10 to 3.2.0-alpha.11 in /docs #​18238

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​L33gn21, @​ghusta, @​ronodhirSoumik, @​rwinch, @​sach429, and @​ziqin

v7.0.0

Compare Source

⭐ New Features

  • Add a minimal authorization server configuration #​18153
  • Mark GrantedAuthority#getAuthority as @Nullable #​18014
  • Polish SimpleGrantedAuthority #​18062

🪲 Bug Fixes

  • Correct the org.springframework.security.config.annotation.web.LogoutDsl's property description #​18026
  • Fix webauthn multifactor authentication #​18163

🔨 Dependency Upgrades

  • Bump org.jetbrains.kotlin:kotlin-bom from 2.2.20 to 2.2.21 #​18099
  • Bump org.jetbrains.kotlin:kotlin-gradle-plugin from 2.2.20 to 2.2.21 #​18100
  • Bump tools.jackson:jackson-bom from 3.0.0 to 3.0.1 #​18097
  • Update to Reactor 2025.0.0 #​18173
  • Update to Spring Data 2025.1.0 #​18174
  • Update to Spring Framework 7.0.0 #​18172
  • Update to Spring LDAP 4.0.0 #​18175

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Kehrlann, @​SimonVonXCVII, @​quaff, and @​therepanic

v6.5.9

Compare Source

⭐ New Features

🪲 Bug Fixes

  • Fix GrantedAuthority.authority null in AuthoritiesAuthorizationManager #​18544
  • saveAuthenticationRequest should read relayState from authenticationRequest #​18872
  • Add Missing OnCommitedResponseWrapper Header Overrides #​18798
  • Clarify Resource Server startup expectations #​18518
  • Correct Reference to Clear-Site-Data Directive enum #​18273
  • Fix CookieRequestCache parameters #​18857
  • Fix Flaky Crypto Tests #​18841
  • Fix Jackson Deserializer for AuthenticationExtensionsClientOutputs #​18896

🔨 Dependency Upgrades

  • Bump @antora/collector-extension from 1.0.2 to 1.0.3 in /docs #​18854
  • Bump actions/upload-artifact from 6.0.0 to 7.0.0 #​18809
  • Bump ch.qos.logback:logback-classic from 1.5.29 to 1.5.32 #​18749
  • Bump com.fasterxml.jackson:jackson-bom from 2.18.5 to 2.18.6 #​18779
  • Bump io.projectreactor:reactor-bom from 2024.0.15 to 2024.0.16 #​18876
  • Bump org-apache-maven-resolver from 1.9.25 to 1.9.26 #​18750
  • Bump org-apache-maven-resolver from 1.9.26 to 1.9.27 #​18791
  • Bump org.apache.maven:maven-resolver-provider from 3.9.12 to 3.9.13 #​18860
  • Bump org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14 #​18886
  • Bump org.hibernate.orm:hibernate-core from 6.6.42.Final to 6.6.43.Final #​18780
  • Bump org.hibernate.orm:hibernate-core from 6.6.43.Final to 6.6.44.Final #​18829
  • Bump org.springframework:spring-framework-bom from 6.2.16 to 6.2.17 #​18903

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Hann244, @​Khyojae, @​ghusta, @​itsmevichu, @​qihaiyan, @​rwinch, @​therepanic, and @​ziqin

v6.5.8

Compare Source

⭐ New Features

  • Add @FunctionalInterface to RequestMatcher #​18337
  • Spring Security 7 should provide migration path from request-matcher="ant" #​18211
  • Stop deploying JavaDoc outside of Antora #​18199

🪲 Bug Fixes

  • Add Missing Migration Pages to Navigation #​18313
  • Create SHA-1 MessageDigest for every new check request in Compromised Password Checker #​18235
  • Fix typo in "Preparing for 7.0" in reference to PathPatternRequestMatcher #​18336
  • Fix typo in AnnotationTemplateExpressionDefaults documentation #​18176
  • Fix typos in documentation depenendencies->dependencies #​18208

🔨 Dependency Upgrades

  • Bump @antora/atlas-extension from 1.0.0-alpha.2 to 1.0.0-alpha.5 in /docs #​18675
  • Bump @antora/collector-extension from 1.0.1 to 1.0.2 in /docs #​18677
  • Bump @springio/antora-extensions from 1.14.4 to 1.14.7 in /docs #​18676
  • Bump antora from 3.2.0-alpha.8 to 3.2.0-alpha.11 in /docs #​18679
  • Bump ch.qos.logback:logback-classic from 1.5.20 to 1.5.21 #​18192
  • Bump ch.qos.logback:logback-classic from 1.5.21 to 1.5.22 #​18321
  • Bump ch.qos.logback:logback-classic from 1.5.22 to 1.5.24 #​18387
  • Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.25 #​18525
  • Bump ch.qos.logback:logback-classic from 1.5.25 to 1.5.26 #​18591
  • Bump ch.qos.logback:logback-classic from 1.5.26 to 1.5.27 #​18631
  • Bump ch.qos.logback:logback-classic from 1.5.27 to 1.5.28 #​18678
  • Bump ch.qos.logback:logback-classic from 1.5.28 to 1.5.29 #​18710
  • Bump gradle-wrapper from 8.14 to 8.14.4 #​18704
  • Bump io.micrometer:context-propagation from 1.1.3 to 1.1.4 #​18703
  • Bump io.micrometer:micrometer-observation from 1.14.13 to 1.14.14 #​18279
  • Bump io.mockk:mockk from 1.14.6 to 1.14.7 #​18275
  • Bump io.projectreactor:reactor-bom from 2024.0.12 to 2024.0.13 #​18293
  • Bump io.projectreactor:reactor-bom from 2024.0.13 to 2024.0.14 #​18495
  • Bump io.projectreactor:reactor-bom from 2024.0.14 to 2024.0.15 #​18716
  • Bump io.spring.develocity.conventions from 0.0.24 to 0.0.25 #​18535
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.13 to 1.0.14 #​18724
  • Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.4 to 4.0.5 #​18670
  • Bump org-apache-maven-resolver from 1.9.24 to 1.9.25 #​18292
  • Bump org-aspectj from 1.9.25 to 1.9.25.1 #​18329
  • Bump org.apache.maven:maven-resolver-provider from 3.9.11 to 3.9.12 #​18352
  • Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 #​18590
  • Bump org.hibernate.orm:hibernate-core from 6.6.34.Final to 6.6.36.Final #​18193
  • Bump org.hibernate.orm:hibernate-core from 6.6.36.Final to 6.6.38.Final #​18241
  • Bump org.hibernate.orm:hibernate-core from 6.6.38.Final to 6.6.39.Final #​18308
  • Bump org.hibernate.orm:hibernate-core from 6.6.39.Final to 6.6.40.Final #​18351
  • Bump org.hibernate.orm:hibernate-core from 6.6.40.Final to 6.6.41.Final #​18524
  • Bump org.hibernate.orm:hibernate-core from 6.6.41.Final to 6.6.42.Final #​18632
  • Bump org.springframework.data:spring-data-bom from 2024.1.12 to 2024.1.13 #​18320
  • Bump org.springframework.ldap:spring-ldap-core from 3.2.15 to 3.2.16 #​18322
  • Bump org.springframework:spring-framework-bom from 6.2.13 to 6.2.14 #​18206
  • Bump org.springframework:spring-framework-bom from 6.2.14 to 6.2.15 #​18323
  • Bump org.springframework:spring-framework-bom from 6.2.15 to 6.2.16 #​18731
  • Bump spring-io/spring-doc-actions from 0.0.20 to 0.0.22 #​18649
  • Update Antora UI Spring to v0.4.25 #​18402

🔩 Build Updates

  • Remove unnecessary Gradle wrapper from buildSrc #​18692

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​garvit-joshi, @​ghusta, @​kucoll, and @​rwinch

v6.5.7

Compare Source

⭐ New Features

  • Add Include-Code for the Password Storage page #​18054
  • Default WebAuthnConfigurer#rpName to rpId #​18131
  • Document effects of disabling CORS #​18129

🪲 Bug Fixes

  • typ values should not be case-sensitive in JwtTypeValidator #​18101
  • BCryptPasswordEncoderTests should password limit of 72 bytes #​18136
  • Fix GenerateOneTimeTokenRequestResolver ignored if username param not present #​18074
  • GenerateOneTimeTokenFilter should not attempt to generate a token with a null token request #​18088

🔨 Dependency Upgrades

  • Bump com.fasterxml.jackson:jackson-bom from 2.18.4.1 to 2.18.5 #​18110
  • Bump io.micrometer:micrometer-observation from 1.14.12 to 1.14.13 #​18149
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.11 to 1.0.13 #​18141
  • Bump org-aspectj from 1.9.24 to 1.9.25 #​18142
  • Bump org.hibernate.orm:hibernate-core from 6.6.33.Final to 6.6.34.Final #​18111
  • Update to Reactor 2024.0.12 #​18181
  • Update to Spring Data 2024.1.12 #​18182
  • Update to Spring Framework 6.2.13 #​18180

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​himanshu-pareek, @​marcusdacoregio, and @​namest504

v6.5.6

Compare Source

🔨 Dependency Upgrades

  • Bump ch.qos.logback:logback-classic from 1.5.19 to 1.5.20 #​18082
  • Bump com.google.code.gson:gson from 2.13.1 to 2.13.2 #​17930
  • Bump com.webauthn4j:webauthn4j-core from 0.29.5.RELEASE to 0.29.6.RELEASE #​17929
  • Bump io.micrometer:micrometer-observation from 1.14.11 to 1.14.12 #​18045
  • Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 #​17950
  • Bump org.gretty:gretty from 4.1.7 to 4.1.10 #​17945
  • Bump org.hibernate.orm:hibernate-core from 6.6.31.Final to 6.6.33.Final #​18039
  • Bump org.springframework.data:spring-data-bom from 2024.1.10 to 2024.1.11 #​18083
  • Bump org.springframework.ldap:spring-ldap-core from 3.2.14 to 3.2.15 #​18067
  • Bump org.springframework:spring-framework-bom from 6.2.11 to 6.2.12 #​18068

v6.5.5

Compare Source

🔨 Dependency Upgrades

  • Bump io.micrometer:micrometer-observation from 1.14.10 to 1.14.11 #​17922
  • Bump io.micrometer:micrometer-observation from 1.14.10 to 1.14.11 #​17911
  • Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.2 to 4.0.4 #​17923
  • Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.2 to 4.0.4 #​17910
  • Bump org.hibernate.orm:hibernate-core from 6.6.26.Final to 6.6.29.Final #​17924
  • Bump org.hibernate.orm:hibernate-core from 6.6.26.Final to 6.6.29.Final #​17913
  • Bump org.springframework.data:spring-data-bom from 2024.1.8 to 2024.1.10 #​17925
  • Bump org.springframework.data:spring-data-bom from 2024.1.8 to 2024.1.10 #​17912
  • Bump org.springframework:spring-framework-bom from 6.2.10 to 6.2.11 #​17926
  • Bump org.springframework:spring-framework-bom from 6.2.10 to 6.2.11 #​17914

v6.5.4

Compare Source

⭐ New Features

  • Update servlet test method docs to use include-code #​17749

🪲 Bug Fixes

  • Annonation Scanning Should Fallback to Object when Parameter Matching #​17899
  • Fix double-slash when basePath is root #​17841
  • Fix traceId discrepancy in case error in servlet web #​17796
  • Reference should advise avoiding post-authorization on writes #​17798

🔨 Dependency Upgrades

  • Bump com.google.code.gson:gson from 2.13.1 to 2.13.2 #​17893
  • Bump com.google.code.gson:gson from 2.13.1 to 2.13.2 #​17874
  • Bump com.webauthn4j:webauthn4j-core from 0.29.5.RELEASE to 0.29.6.RELEASE #​17895
  • Bump com.webauthn4j:webauthn4j-core from 0.29.5.RELEASE to 0.29.6.RELEASE #​17854
  • Bump com.webauthn4j:webauthn4j-core from 0.29.5.RELEASE to 0.29.6.RELEASE #​17836
  • Bump io.micrometer:micrometer-observation from 1.14.10 to 1.14.11 #​17894
  • Bump io.micrometer:micrometer-observation from 1.14.10 to 1.14.11 #​17858
  • Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 #​17767
  • Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.26.Final #​17766
  • Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.26.Final #​17759
  • Bump org.hibernate.orm:hibernate-core from 6.6.26.Final to 6.6.28.Final #​17853
  • Bump org.hibernate.orm:hibernate-core from 6.6.26.Final to 6.6.28.Final #​17837
  • Bump org.hibernate.orm:hibernate-core from 6.6.26.Final to 6.6.29.Final #​17896
  • Bump org.springframework.data:spring-data-bom from 2024.1.8 to 2024.1.10 #​17897
  • Bump org.springframework.data:spring-data-bom from 2024.1.8 to 2024.1.9 #​17855
  • Bump org.springframework.data:spring-data-bom from 2024.1.8 to 2024.1.9 #​17791
  • Bump org.springframework.data:spring-data-bom from 2024.1.8 to 2024.1.9 #​17771
  • Bump org.springframework.data:spring-data-bom from 2024.1.8 to 2024.1.9 #​17758
  • Bump org.springframework.ldap:spring-ldap-core from 3.2.13 to 3.2.14 #​17773

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​jkuhel and @​therepanic

v6.5.3

Compare Source

⭐ New Features

  • Add META-INF/LICENSE.txt to published jars #​17639
  • Update Angular documentation links in csrf.adoc #​17653
  • Update Shibboleth Repository URL #​17637
  • Use 2004-present Copyright #​17634

🪲 Bug Fixes

  • Add Missing Navigation in Preparing for 7.0 Guide #​17731
  • DPoP authentication throws JwtDecoderFactory ClassNotFoundException #​17249
  • OpenSamlAssertingPartyDetails Should Be Serializable #​17727
  • Use final values in equals and hashCode #​17621

🔨 Dependency Upgrades

  • Bump com.webauthn4j:webauthn4j-core from 0.29.4.RELEASE to 0.29.5.RELEASE #​17739
  • Bump com.webauthn4j:webauthn4j-core from 0.29.4.RELEASE to 0.29.5.RELEASE #​17690
  • Bump com.webauthn4j:webauthn4j-core from 0.29.4.RELEASE to 0.29.5.RELEASE #​17684
  • Bump com.webauthn4j:webauthn4j-core from 0.29.4.RELEASE to 0.29.5.RELEASE #​17661
  • Bump io.micrometer:micrometer-observation from 1.14.8 to 1.14.9 #​17615
  • Bump io.micrometer:micrometer-observation from 1.14.8 to 1.14.9 #​17599
  • Bump io.micrometer:micrometer-observation from 1.14.9 to 1.14.10 #​17737
  • Bump io.micrometer:micrometer-observation from 1.14.9 to 1.14.10 #​17701
  • Bump io.mockk:mockk from 1.14.4 to 1.14.5 #​17614
  • Bump io.spring.develocity.conventions from 0.0.23 to 0.0.24 #​17647
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.10 to 1.0.11 #​17733
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.10 to 1.0.11 #​17711
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.6 to 1.0.10 #​17612
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.6 to 1.0.10 #​17598
  • Bump org-eclipse-jetty from 11.0.25 to 11.0.26 #​17742
  • Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11 #​17613
  • Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11 #​17595
  • Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 #​17760
  • Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 #​17692
  • Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 #​17683
  • Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 #​17671
  • Bump org.gretty:gretty from 4.1.6 to 4.1.7 #​17616
  • Bump org.gretty:gretty from 4.1.6 to 4.1.7 #​17597
  • Bump org.hibernate.orm:hibernate-core from 6.6.20.Final to 6.6.23.Final #​17646
  • Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.24.Final #​17660
  • Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.25.Final #​17694
  • Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.25.Final #​17685
  • Bump org.jfrog.buildinfo:build-info-extractor-gradle from 4.34.1 to 4.34.2 #​17650
  • Bump org.springframework.data:spring-data-bom from 2024.1.7 to 2024.1.8 #​17645
  • Bump org.springframework.ldap:spring-ldap-core from 3.2.13 to 3.2.14 #​17757
  • Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.9 #​17651
  • Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.9 #​17596
  • Bump org.springframework:spring-framework-bom from 6.2.9 to 6.2.10 #​17735

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​codingtim

v6.5.2

Compare Source

🪲 Bug Fixes

  • <websocket-message-broker> should pick up a bean named csrfChannelInterceptor #​17495
  • Add 7.0 Migration Steps for Messaging PathPattern Usage #​17509
  • EnableReactiveMethodSecurity should not import Servlet configuration #​17545
  • Fix equals and hashCode in PathPatternRequestMatcher to include HTTP method #​17337
  • Fix securityContextRepository() initialization in oauth2Login() DSL #​17557
  • OAuth2Login DSL should support post-processing AuthenticationProvider implementations #​17176
  • Websocket XML config should pick up PathPatternMessageMatcher.Builder #​17508

🔨 Dependency Upgrades

  • Bump com.webauthn4j:webauthn4j-core from 0.29.3.RELEASE to 0.29.4.RELEASE #​17444
  • Bump io-spring-javaformat from 0.0.46 to 0.0.47 [#​17470](#​17470
  • Bump io.micrometer:micrometer-observation from 1.14.8 to 1.14.9 [#​17570](#​17570
  • Bump io.mockk:mockk from 1.14.2 to 1.14.4 #​17467
  • Bump io.mockk:mockk from 1.14.4 to 1.14.5 #​17572
  • Bump org-apache-maven-resolver from 1.9.23 to 1.9.24 #​17469
  • Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11 #​17555
  • Bump org.hibernate.orm:hibernate-core from 6.6.17.Final to 6.6.20.Final #​17491
  • Bump org.hibernate.orm:hibernate-core from 6.6.20.Final to 6.6.22.Final #​17571
  • Bump org.springframework.data:spring-data-bom from 2024.1.6 to 2024.1.7 #​17466
  • Bump org.springframework.data:spring-data-bom from 2024.1.7 to 2024.1.8 #​17569
  • Bump org.springframework.ldap:spring-ldap-core from 3.2.12 to 3.2.13 #​17468
  • Bump org.springframework:spring-framework-bom from 6.2.7 to 6.2.8 #​17481
  • Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.9 #​17568

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​fkowal and @​therepanic

v6.5.1

Compare Source

⭐ New Features

  • Create demonstration of include-code usage #​17161
  • Setup include-code extension for docs #​17160

🪲 Bug Fixes

  • ClearSiteDataHeaderWriter log is misleading #​17166
  • Fix to allow multiple AuthenticationFilter instances to process each request #​17216
  • Inconsistent constructor declaration on bean with name '_reactiveMethodSecurityConfiguration' #​17210
  • OAuth2ResourceServer using authenticationManagerResolver results in tokenAuthenticationManager cannot be null while startup #​17172
  • Publishing a default TargetVisitor should not override Spring MVC support #​17189
  • Use HttpStatus in back-channel logout filters #​17157

🔨 Dependency Upgrades

  • Bump com.fasterxml.jackson:jackson-bom from 2.18.4 to 2.18.4.1 #​17233
  • Bump com.webauthn4j:webauthn4j-core from 0.29.2.RELEASE to 0.29.3.RELEASE #​17192
  • Bump io-spring-javaformat from 0.0.43 to 0.0.45 #​17152
  • Bump io.micrometer:micrometer-observation from 1.14.7 to 1.14.8 #​17220
  • Bump io.projectreactor:reactor-bom from 2023.0.18 to 2023.0.19 #​17232
  • Bump io.spring.develocity.conventions from 0.0.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner November 21, 2022 17:38
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from f10c94f to eb813d6 Compare December 7, 2022 17:12
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from eb813d6 to bdabc1d Compare December 19, 2022 19:09
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from bdabc1d to 92a339d Compare March 12, 2023 17:58
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from 92a339d to 437af7b Compare May 29, 2023 21:47
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from 437af7b to 3dc2acb Compare June 19, 2023 18:25
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from 3dc2acb to c36dfa3 Compare July 17, 2023 23:05
@renovate renovate Bot changed the title Update spring security to v6 (major) Update dependency org.springframework.security:spring-security-web to v6 Jul 31, 2023
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from c36dfa3 to aea0e78 Compare August 21, 2023 19:14
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from aea0e78 to cdd3777 Compare September 18, 2023 17:09
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch 2 times, most recently from d43a6f2 to ec42645 Compare October 16, 2023 16:17
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from ec42645 to c439cf1 Compare October 26, 2023 14:51
@renovate renovate Bot changed the title Update dependency org.springframework.security:spring-security-web to v6 Update spring security to v6 (major) Oct 26, 2023
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from c439cf1 to b0c8d11 Compare October 27, 2023 07:08
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from b0c8d11 to 6c27e05 Compare November 20, 2023 17:21
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from 6c27e05 to 795ec8b Compare December 18, 2023 19:15
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from 795ec8b to aaf1788 Compare February 8, 2024 08:17
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from aaf1788 to 2d2a544 Compare February 16, 2024 22:25
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from 2d2a544 to 0e76cbb Compare March 18, 2024 14:25
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from 0e76cbb to e1e363f Compare April 15, 2024 18:33
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from e1e363f to 4185aed Compare May 20, 2024 19:21
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from 4185aed to b356966 Compare June 17, 2024 20:08
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch 2 times, most recently from 5f919fb to c698059 Compare August 21, 2024 20:55
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from c698059 to 597b9ba Compare October 21, 2024 20:27
@renovate renovate Bot changed the title Update spring security to v6 (major) Update dependency org.springframework.security:spring-security-config to v6 Oct 28, 2024
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch 2 times, most recently from bcfd480 to 1f49e4e Compare November 21, 2024 05:17
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from 1f49e4e to c7ca2ad Compare December 16, 2024 19:46
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from c7ca2ad to 25d274f Compare February 18, 2025 18:44
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from 25d274f to c24fb12 Compare March 17, 2025 23:12
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from c24fb12 to fb919cf Compare April 21, 2025 18:29
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from fb919cf to e2140ce Compare May 19, 2025 17:08
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from e2140ce to a9534e1 Compare June 16, 2025 23:40
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from a9534e1 to 600d3db Compare July 22, 2025 01:27
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from 600d3db to d83cf19 Compare August 18, 2025 21:47
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch 2 times, most recently from 685f1d5 to 5e04b45 Compare September 17, 2025 18:03
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from 5e04b45 to 900f44f Compare October 20, 2025 22:33
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from 900f44f to b04d6e7 Compare November 17, 2025 23:38
@renovate renovate Bot changed the title Update dependency org.springframework.security:spring-security-config to v6 Update dependency org.springframework.security:spring-security-config to v7 Nov 17, 2025
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from b04d6e7 to ec153da Compare December 15, 2025 21:12
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from ec153da to 5f4bca9 Compare February 13, 2026 18:09
@renovate
renovate Bot force-pushed the renovate/major-spring-security branch from 5f4bca9 to 1c205f4 Compare March 16, 2026 20:38
@Ayd-Nr Ayd-Nr closed this Mar 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Ayd-Nr