github spring-projects/spring-security 6.2.6

latest releases: 6.4.0-M4, 6.4.0-M3, 6.3.3...
one month ago

⭐ New Features

  • ActiveDirectoryLdapAuthenticationProvider does not implement support for multiple urls #15494
  • Document the role of CredentialsContainer #15320
  • OIDC Backchannel Logout should allow logout tokens having typ header of logout+jwt #15277

🪲 Bug Fixes

  • A broken link in Spring Security reference #15288
  • Correct HttpSessionCsrfTokenRepository Documentation #15392
  • Documentation for ServletBearerExchangeFilterFunction incomplete or incorrect #15459
  • Restrict automatic CORS configuration to UrlBasedCorsConfigurationSource #15444
  • Update prerequisites documentation with Java 17 #15323
  • Using sec:authorize in JSPX causes 'java.lang.NullPointerException: Cannot invoke "jakarta.servlet.ServletRegistration.getClassName()" because "registration" is null' #15439

🔨 Dependency Upgrades

  • Bump com.github.spullara.mustache.java:compiler from 0.9.13 to 0.9.14 #15376
  • Bump io.micrometer:micrometer-observation from 1.12.7 to 1.12.8 #15381
  • Bump io.micrometer:micrometer-observation from 1.12.8 to 1.12.9 #15588
  • Bump io.mockk:mockk from 1.13.11 to 1.13.12 #15427
  • Bump io.projectreactor:reactor-bom from 2023.0.7 to 2023.0.8 #15389
  • Bump io.projectreactor:reactor-bom from 2023.0.8 to 2023.0.9 #15599
  • Bump jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api from 3.0.0 to 3.0.1 #15589
  • Bump org-apache-maven-resolver from 1.9.20 to 1.9.21 #15377
  • Bump org-apache-maven-resolver from 1.9.21 to 1.9.22 #15543
  • Bump org-eclipse-jetty from 11.0.21 to 11.0.22 #15358
  • Bump org.apache.maven:maven-resolver-provider from 3.9.7 to 3.9.8 #15271
  • Bump org.apache.maven:maven-resolver-provider from 3.9.8 to 3.9.9 #15645
  • Bump org.jetbrains.kotlin:kotlin-bom from 1.9.24 to 1.9.25 #15452
  • Bump org.jetbrains.kotlin:kotlin-gradle-plugin from 1.9.24 to 1.9.25 #15451
  • Bump org.junit:junit-bom from 5.10.2 to 5.10.3 #15314
  • Bump org.skyscreamer:jsonassert from 1.5.1 to 1.5.3 #15333
  • Bump org.slf4j:slf4j-api from 2.0.13 to 2.0.14 #15528
  • Bump org.slf4j:slf4j-api from 2.0.14 to 2.0.15 #15544
  • Bump org.slf4j:slf4j-api from 2.0.15 to 2.0.16 #15570
  • Bump org.springframework.data:spring-data-bom from 2023.1.7 to 2023.1.8 #15422
  • Bump org.springframework.data:spring-data-bom from 2023.1.8 to 2023.1.9 #15644
  • Bump org.springframework.ldap:spring-ldap-core from 3.2.4 to 3.2.6 #15618
  • Bump org.springframework:spring-framework-bom from 6.1.10 to 6.1.11 #15404
  • Bump org.springframework:spring-framework-bom from 6.1.11 to 6.1.12 #15614
  • Bump org.springframework:spring-framework-bom from 6.1.9 to 6.1.10 #15280

🔩 Build Updates

  • Automate check of expected branch version #15309
  • Bump @antora/collector-extension from 1.0.0-alpha.4 to 1.0.0-alpha.6 in /docs #15445
  • Bump @antora/collector-extension from 1.0.0-alpha.6 to 1.0.0-alpha.7 in /docs #15488
  • Bump @antora/collector-extension from 1.0.0-alpha.7 to 1.0.0-beta.1 in /docs #15563
  • Bump @antora/collector-extension from 1.0.0-beta.1 to 1.0.0-beta.2 in /docs #15639
  • Bump @springio/antora-extensions from 1.11.1 to 1.12.0 in /docs #15415
  • Bump @springio/antora-extensions from 1.12.0 to 1.13.0 in /docs #15516
  • Bump @springio/antora-extensions from 1.13.0 to 1.13.1 in /docs #15562
  • Bump @springio/antora-extensions from 1.13.1 to 1.14.2 in /docs #15638
  • Bump @springio/asciidoctor-extensions from 1.0.0-alpha.10 to 1.0.0-alpha.11 in /docs #15414
  • Bump @springio/asciidoctor-extensions from 1.0.0-alpha.11 to 1.0.0-alpha.12 in /docs #15518
  • Bump antora from 3.2.0-alpha.4 to 3.2.0-alpha.5 in /docs #15328
  • Bump antora from 3.2.0-alpha.5 to 3.2.0-alpha.6 in /docs #15489
  • Bump com.gradle.develocity from 3.17.5 to 3.17.6 #15465
  • Bump io-spring-javaformat from 0.0.42 to 0.0.43 #15649
  • Migrate slack notifications to GChat #15504

❤️ Contributors

Thank you to all the contributors who worked on this release:

@Junhyunny, @Kehrlann, @OLibutzki, @arey, @baezzys, and @dependabot[bot]

Don't miss a new spring-security release

NewReleases is sending notifications on new releases.