github spring-projects/spring-security 6.5.8

latest release: 7.1.0-M2
one day ago

⭐ New Features

  • Add @FunctionalInterface to RequestMatcher #18337
  • Spring Security 7 should provide migration path from request-matcher="ant" #18211
  • Stop deploying JavaDoc outside of Antora #18199

🪲 Bug Fixes

  • Add Missing Migration Pages to Navigation #18313
  • Create SHA-1 MessageDigest for every new check request in Compromised Password Checker #18235
  • Fix typo in "Preparing for 7.0" in reference to PathPatternRequestMatcher #18336
  • Fix typo in AnnotationTemplateExpressionDefaults documentation #18176
  • Fix typos in documentation depenendencies->dependencies #18208

🔨 Dependency Upgrades

  • Bump @antora/atlas-extension from 1.0.0-alpha.2 to 1.0.0-alpha.5 in /docs #18675
  • Bump @antora/collector-extension from 1.0.1 to 1.0.2 in /docs #18677
  • Bump @springio/antora-extensions from 1.14.4 to 1.14.7 in /docs #18676
  • Bump antora from 3.2.0-alpha.8 to 3.2.0-alpha.11 in /docs #18679
  • Bump ch.qos.logback:logback-classic from 1.5.20 to 1.5.21 #18192
  • Bump ch.qos.logback:logback-classic from 1.5.21 to 1.5.22 #18321
  • Bump ch.qos.logback:logback-classic from 1.5.22 to 1.5.24 #18387
  • Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.25 #18525
  • Bump ch.qos.logback:logback-classic from 1.5.25 to 1.5.26 #18591
  • Bump ch.qos.logback:logback-classic from 1.5.26 to 1.5.27 #18631
  • Bump ch.qos.logback:logback-classic from 1.5.27 to 1.5.28 #18678
  • Bump ch.qos.logback:logback-classic from 1.5.28 to 1.5.29 #18710
  • Bump gradle-wrapper from 8.14 to 8.14.4 #18704
  • Bump io.micrometer:context-propagation from 1.1.3 to 1.1.4 #18703
  • Bump io.micrometer:micrometer-observation from 1.14.13 to 1.14.14 #18279
  • Bump io.mockk:mockk from 1.14.6 to 1.14.7 #18275
  • Bump io.projectreactor:reactor-bom from 2024.0.12 to 2024.0.13 #18293
  • Bump io.projectreactor:reactor-bom from 2024.0.13 to 2024.0.14 #18495
  • Bump io.projectreactor:reactor-bom from 2024.0.14 to 2024.0.15 #18716
  • Bump io.spring.develocity.conventions from 0.0.24 to 0.0.25 #18535
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.13 to 1.0.14 #18724
  • Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.4 to 4.0.5 #18670
  • Bump org-apache-maven-resolver from 1.9.24 to 1.9.25 #18292
  • Bump org-aspectj from 1.9.25 to 1.9.25.1 #18329
  • Bump org.apache.maven:maven-resolver-provider from 3.9.11 to 3.9.12 #18352
  • Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 #18590
  • Bump org.hibernate.orm:hibernate-core from 6.6.34.Final to 6.6.36.Final #18193
  • Bump org.hibernate.orm:hibernate-core from 6.6.36.Final to 6.6.38.Final #18241
  • Bump org.hibernate.orm:hibernate-core from 6.6.38.Final to 6.6.39.Final #18308
  • Bump org.hibernate.orm:hibernate-core from 6.6.39.Final to 6.6.40.Final #18351
  • Bump org.hibernate.orm:hibernate-core from 6.6.40.Final to 6.6.41.Final #18524
  • Bump org.hibernate.orm:hibernate-core from 6.6.41.Final to 6.6.42.Final #18632
  • Bump org.springframework.data:spring-data-bom from 2024.1.12 to 2024.1.13 #18320
  • Bump org.springframework.ldap:spring-ldap-core from 3.2.15 to 3.2.16 #18322
  • Bump org.springframework:spring-framework-bom from 6.2.13 to 6.2.14 #18206
  • Bump org.springframework:spring-framework-bom from 6.2.14 to 6.2.15 #18323
  • Bump org.springframework:spring-framework-bom from 6.2.15 to 6.2.16 #18731
  • Bump spring-io/spring-doc-actions from 0.0.20 to 0.0.22 #18649
  • Update Antora UI Spring to v0.4.25 #18402

🔩 Build Updates

  • Remove unnecessary Gradle wrapper from buildSrc #18692

❤️ Contributors

Thank you to all the contributors who worked on this release:

@garvit-joshi, @ghusta, @kucoll, and @rwinch

Don't miss a new spring-security release

NewReleases is sending notifications on new releases.