spring-projects/spring-security 6.1.8

on GitHub

🪲 Bug Fixes

• Check for null Authentication #14665
• Fix Package Tangle in CAS #14627
• Fix Package Tangle in SAML 2.0 #14628
• LogoutConfigurer#createLogoutFilter sets the SecurityContextHolderStrategy twice #14647
• ObservationTextHandler class is not defined in a reactive context #14651
• PostAuthorize Method Interceptors Should Use Order from AuthorizationInterceptorsOrder #14722
• Spring security's ServerLogoutHandler order problem. #14681

🔨 Dependency Upgrades

• Bump io.mockk:mockk from 1.13.9 to 1.13.10 #14660
• Bump io.projectreactor:reactor-bom from 2022.0.16 to 2022.0.17 #14728
• Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.1 to 4.0.2 #14703
• Bump org-aspectj from 1.9.21.1 to 1.9.21.2 #14733
• Bump org.springframework:spring-framework-bom from 6.0.17 to 6.0.18 #14762

❤️ Contributors

Thank you to all the contributors who worked on this release:

@dependabot[bot]