spring-projects/spring-security 6.2.8

on GitHub

⭐ New Features

• Support ServerExchangeRejectedHandler @Bean #16061
• Support ServerWebExchangeFirewall @Bean #15987

🪲 Bug Fixes

• Fix error when Bearer token is requested with empty string #15940
• Make RequestMatcherDelegatingAuthorizationManager post-processable #15978
• RequestMatcherDelegatingAuthorizationManager should be post-processable #15948
• Unhandled exception in CookieRequestCache results in 500 Internal Server Error #15985

🔨 Dependency Upgrades

• Bump io.micrometer:micrometer-observation from 1.12.12 to 1.12.13 #16128
• Bump io.projectreactor:reactor-bom from 2023.0.11 to 2023.0.12 #16081
• Bump org.hsqldb:hsqldb from 2.7.3 to 2.7.4 #16031
• Bump org.springframework.data:spring-data-bom from 2023.1.11 to 2023.1.12 #16127
• Bump org.springframework.ldap:spring-ldap-core from 3.2.7 to 3.2.8 #16100
• Bump org.springframework:spring-framework-bom from 6.1.14 to 6.1.15 #16099

🔩 Build Updates

• Bump @antora/collector-extension from 1.0.0-beta.4 to 1.0.0-beta.5 in /docs #16120
• Update Antora UI Spring to v0.4.17 #15931

❤️ Contributors

Thank you to all the contributors who worked on this release:

@codeconsole, @dependabot[bot], @github-actions[bot], and @jacknie84