spring-projects/spring-security 6.5.9

on GitHub

⭐ New Features

• Update Link to CSRF Docs in FAQ #18616

🪲 Bug Fixes

• Fix GrantedAuthority.authority null in AuthoritiesAuthorizationManager #18544
• saveAuthenticationRequest should read relayState from authenticationRequest #18872
• Add Missing OnCommitedResponseWrapper Header Overrides #18798
• Clarify Resource Server startup expectations #18518
• Correct Reference to Clear-Site-Data Directive enum #18273
• Fix CookieRequestCache parameters #18857
• Fix Flaky Crypto Tests #18841
• Fix Jackson Deserializer for AuthenticationExtensionsClientOutputs #18896

🔨 Dependency Upgrades

• Bump @antora/collector-extension from 1.0.2 to 1.0.3 in /docs #18854
• Bump actions/upload-artifact from 6.0.0 to 7.0.0 #18809
• Bump ch.qos.logback:logback-classic from 1.5.29 to 1.5.32 #18749
• Bump com.fasterxml.jackson:jackson-bom from 2.18.5 to 2.18.6 #18779
• Bump io.projectreactor:reactor-bom from 2024.0.15 to 2024.0.16 #18876
• Bump org-apache-maven-resolver from 1.9.25 to 1.9.26 #18750
• Bump org-apache-maven-resolver from 1.9.26 to 1.9.27 #18791
• Bump org.apache.maven:maven-resolver-provider from 3.9.12 to 3.9.13 #18860
• Bump org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14 #18886
• Bump org.hibernate.orm:hibernate-core from 6.6.42.Final to 6.6.43.Final #18780
• Bump org.hibernate.orm:hibernate-core from 6.6.43.Final to 6.6.44.Final #18829
• Bump org.springframework:spring-framework-bom from 6.2.16 to 6.2.17 #18903

❤️ Contributors

Thank you to all the contributors who worked on this release:

@Hann244, @Khyojae, @ghusta, @itsmevichu, @qihaiyan, @rwinch, @therepanic, and @ziqin